Project overview: qpdf

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 12.5%

gold [1:9] 6 12.5%

yellow [10:29] 10 20.8%

greenyellow [30:49] 2 4.16%

lawngreen 50+ 24 50.0%

All colors 48 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	12.5%
gold	[1:9]	6	12.5%
yellow	[10:29]	10	20.8%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	24	50.0%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 49 57.6%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 36 42.3%

All colors 85 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: runlength_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 44.2%

gold [1:9] 0 0.0%

yellow [10:29] 5 8.19%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 29 47.5%

All colors 61 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	44.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	8.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	47.5%
All colors	61	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: future_ascii85_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	12.5%
gold	[1:9]	6	12.5%
yellow	[10:29]	10	20.8%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	24	50.0%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: future_runlength_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	44.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	8.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	47.5%
All colors	61	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: flate_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 142 62.8%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 84 37.1%

All colors 226 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	142	62.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	84	37.1%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['deflateEnd', 'inflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['__cxa_guard_acquire', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_guard_abort', '__cxa_guard_release']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::to_string(int)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '__cxa_free_exception', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const*)']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_align', '_tr_stored_block']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: future_tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: lzw_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 31 36.0%

gold [1:9] 10 11.6%

yellow [10:29] 0 0.0%

greenyellow [30:49] 7 8.13%

lawngreen 50+ 38 44.1%

All colors 86 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	36.0%
gold	[1:9]	10	11.6%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	7	8.13%
lawngreen	50+	38	44.1%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: future_hex_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 16.6%

gold [1:9] 1 2.77%

yellow [10:29] 0 0.0%

greenyellow [30:49] 6 16.6%

lawngreen 50+ 23 63.8%

All colors 36 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	16.6%
gold	[1:9]	1	2.77%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	6	16.6%
lawngreen	50+	23	63.8%
All colors	36	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: future_pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 43.5%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 35 56.4%

All colors 62 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	43.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	35	56.4%
All colors	62	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: dct_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 190 54.7%

gold [1:9] 18 5.18%

yellow [10:29] 6 1.72%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 133 38.3%

All colors 347 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	190	54.7%
gold	[1:9]	18	5.18%
yellow	[10:29]	6	1.72%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	133	38.3%
All colors	347	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:295
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:216
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00048	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	838	1 : View List ['Pl_DCT::compress(void, Buffer)']	25	870	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:200
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00044	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	4	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:177
0	0	None	221	728	master_selection	call site: 00249	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00250	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

218

126

249

49.4%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Buffer.cc	5
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: hex_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	16.6%
gold	[1:9]	1	2.77%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	6	16.6%
lawngreen	50+	23	63.8%
All colors	36	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: future_flate_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['deflateEnd', 'inflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['__cxa_guard_acquire', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_guard_abort', '__cxa_guard_release']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::to_string(int)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '__cxa_free_exception', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const*)']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_align', '_tr_stored_block']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: future_lzw_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 31 36.0%

gold [1:9] 10 11.6%

yellow [10:29] 0 0.0%

greenyellow [30:49] 5 5.81%

lawngreen 50+ 40 46.5%

All colors 86 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: future_dct_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:295
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:216
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00048	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	838	1 : View List ['Pl_DCT::compress(void, Buffer)']	25	870	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:200
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00044	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	4	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:177
0	0	None	221	728	master_selection	call site: 00249	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00250	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

218

126

249

49.4%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Buffer.cc	5
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: future_json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2367 75.5%

gold [1:9] 35 1.11%

yellow [10:29] 46 1.46%

greenyellow [30:49] 19 0.60%

lawngreen 50+ 664 21.2%

All colors 3131 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
109504	502127	63 : View List ['QPDF::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&, bool&)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::begin[abi:ne180100]()', 'QPDFObjectHandle::isArray() const', 'QPDF::EncryptionData::~EncryptionData()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDF::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::end[abi:ne180100]()', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::getBoolValue() const', 'std::__1::operator!=[abi:ne180100](std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long> const&, std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long> const&)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'QPDFObjectHandle::QPDFObjectHandle(QPDFObjectHandle const&)', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDF::getTrimmedUserPassword() const', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::warn(QPDFExc const&)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::shared_ptr[abi:ne180100](std::__1::shared_ptr const&)', 'check_user_password(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', 'std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long>::operator[abi:ne180100]() const', 'QPDFObjectHandle::isNull() const', 'std::__1::shared_ptr ::~shared_ptr[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDFObjectHandle::isBool() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDFObjectHandle::isName() const', '__cxa_throw', 'QPDFObjectHandle::getStringValue() const', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::~set[abi:ne180100]()', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::getIntValue() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'InputSource::getLastOffset() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'std::__1::to_string(int)', 'QTC::TC(char const, char const, int)', 'std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long>::operator++[abi:ne180100]()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::isInteger() const', 'QPDF::warn(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', '__cxa_free_exception', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getKeys() const', 'QPDFObjectHandle::getName() const', 'QPDFObjectHandle::~QPDFObjectHandle()']	109504	502127	QPDF::initializeEncryption()	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:730
7117	7117	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7117	7117	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:521
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Dictionary qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Stream qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Integer qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Array qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	7198	3 : View List ['std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'QPDF::read_xrefStream(long long, bool)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)']	7167	71378	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:737
7115	7119	2 : View List ['QPDFObjectHandle::getDict() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle&&)']	7151	43088	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:667
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7115	7117	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:393
7115	7115	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7115	7117	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:433
7115	7115	1 : View List ['QPDF::getAllPages()']	7115	7115	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:531

Runtime coverage analysis

413

713

1382

48.41%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/BufferInputSource.cc	4
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/Buffer.cc	9
/src/qpdf/include/qpdf/QIntC.hh	43
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	13
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	43
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	56
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	12
/src/qpdf/libqpdf/QPDFObjectHandle.cc	67
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 602 17.5%

gold [1:9] 109 3.16%

yellow [10:29] 65 1.88%

greenyellow [30:49] 41 1.19%

lawngreen 50+ 2623 76.2%

All colors 3440 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
36	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	60	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception', 'QPDFExc::QPDFExc(QPDFExc const&)']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:649
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191

Runtime coverage analysis

891

206

1493

86.2%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	43
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	26
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	18
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	57
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	21
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_qpdf_page_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 925 17.7%

gold [1:9] 179 3.43%

yellow [10:29] 54 1.03%

greenyellow [30:49] 73 1.40%

lawngreen 50+ 3975 76.3%

All colors 5206 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7117	7128	3 : View List ['QPDFObjectHandle::QPDFObjectHandle(QPDFObjectHandle const&)', 'QPDFObjectHandle::getObjGen() const', 'QPDF::replaceObject(QPDFObjGen, QPDFObjectHandle)']	7173	35996	QPDFPageDocumentHelper::flattenAnnotationsForPage(QPDFPageObjectHelper&,QPDFObjectHandle&,QPDFAcroFormDocumentHelper&,int,int)	call site: 00000	/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc:148
1924	2139	12 : View List ['(anonymous namespace)::JSONParser::tokenError()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::ignore()', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', 'qpdf::util::hex_decode_char(char)', 'std::logic_error::logic_error(char const)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', '(anonymous namespace)::JSONParser::append()', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception', 'QPDFExc::QPDFExc(QPDFExc const&)']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:649
14	7129	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7145	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:383
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:315

Runtime coverage analysis

1199

209

1983

89.46%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_page_fuzzer.cc	8
/src/qpdf/libqpdf/Buffer.cc	9
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	6
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/include/qpdf/QIntC.hh	54
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	44
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	29
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	24
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	62
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	24
/src/qpdf/libqpdf/QPDFObjectHandle.cc	112
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/Pl_Buffer.cc	6
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: qpdf_page_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 916 17.5%

gold [1:9] 107 2.05%

yellow [10:29] 98 1.88%

greenyellow [30:49] 37 0.71%

lawngreen 50+ 4048 77.7%

All colors 5206 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1924	2139	12 : View List ['(anonymous namespace)::JSONParser::tokenError()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::ignore()', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', 'qpdf::util::hex_decode_char(char)', 'std::logic_error::logic_error(char const)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', '(anonymous namespace)::JSONParser::append()', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
88	163733	11 : View List ['QPDFObjectHandle::isName() const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::isDictionary() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayItem(int) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const']	88	164188	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1068
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception', 'QPDFExc::QPDFExc(QPDFExc const&)']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:649
14	7129	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7145	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:383
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:315

Runtime coverage analysis

1210

199

1983

89.96%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_page_fuzzer.cc	8
/src/qpdf/libqpdf/Buffer.cc	9
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	6
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/include/qpdf/QIntC.hh	54
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	44
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	29
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	24
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	62
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	24
/src/qpdf/libqpdf/QPDFObjectHandle.cc	112
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/Pl_Buffer.cc	6
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1587 34.9%

gold [1:9] 142 3.12%

yellow [10:29] 100 2.20%

greenyellow [30:49] 56 1.23%

lawngreen 50+ 2652 58.4%

All colors 4537 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
9639	9639	1 : View List ['QPDFWriter::writeLinearized()']	9641	9683	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2265
8176	8176	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	8184	8188	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1799
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22388	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
7289	7289	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7305	32249	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3049
7132	7134	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDF::getAllObjects()', 'QTC::TC(char const, char const*, int)', 'std::__1::vector >::end[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7176	71338	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2951
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
36	49948	28 : View List ['std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QUtil::get_current_time()', 'MD5::MD5()', 'qpdf::BaseDictionary::begin()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::runtime_error::runtime_error(char const)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isString() const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'std::__1::to_string(long)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getStringValue() const', '__cxa_throw', 'QTC::TC(char const, char const, int)', 'MD5::encodeString(char const)', '__cxa_free_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	52	57098	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1870
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531

Runtime coverage analysis

1129

420

76.44%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_insecure_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	52
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	65
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1351 30.0%

gold [1:9] 119 2.64%

yellow [10:29] 89 1.98%

greenyellow [30:49] 54 1.20%

lawngreen 50+ 2878 64.0%

All colors 4491 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
9639	9639	1 : View List ['QPDFWriter::writeLinearized()']	9641	9683	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2265
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15017	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
7289	7289	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7371	32249	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3049
7132	7134	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDF::getAllObjects()', 'QTC::TC(char const, char const*, int)', 'std::__1::vector >::end[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7176	71338	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2951
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
66	66	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	66	16760	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3063
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	56	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240

Runtime coverage analysis

1155

347

1759

80.27%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	62
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1348 30.0%

gold [1:9] 134 2.98%

yellow [10:29] 132 2.93%

greenyellow [30:49] 47 1.04%

lawngreen 50+ 2830 63.0%

All colors 4491 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
9639	9639	1 : View List ['QPDFWriter::writeLinearized()']	9641	9683	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2265
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15017	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
7289	7289	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7371	32249	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3049
7132	7134	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDF::getAllObjects()', 'QTC::TC(char const, char const*, int)', 'std::__1::vector >::end[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7176	71338	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2951
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
66	66	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	66	16760	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3063
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	56	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240

Runtime coverage analysis

1156

345

1759

80.39%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	62
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 983 21.6%

gold [1:9] 134 2.95%

yellow [10:29] 81 1.78%

greenyellow [30:49] 81 1.78%

lawngreen 50+ 3256 71.7%

All colors 4535 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15017	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
7215	14332	5 : View List ['QPDFObjectHandle::makeDirect(bool)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QTC::TC(char const, char const, int)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc']	7239	14356	QPDFWriter::prepareFileForWrite()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2101
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
47	47	1 : View List ['QPDFWriter::computeDeterministicIDData()']	63	7667	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1224
36	49948	28 : View List ['std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QUtil::get_current_time()', 'MD5::MD5()', 'qpdf::BaseDictionary::begin()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::runtime_error::runtime_error(char const)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isString() const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'std::__1::to_string(long)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getStringValue() const', '__cxa_throw', 'QTC::TC(char const, char const, int)', 'MD5::encodeString(char const)', '__cxa_free_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	52	57098	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1870
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00000	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00000	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1210

286

83.96%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	52
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	65
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1566 34.5%

gold [1:9] 148 3.26%

yellow [10:29] 107 2.35%

greenyellow [30:49] 48 1.05%

lawngreen 50+ 2668 58.8%

All colors 4537 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
9639	9639	1 : View List ['QPDFWriter::writeLinearized()']	9641	9683	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2265
8176	8176	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	8184	8188	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1799
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22388	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
7289	7289	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7305	32249	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3049
7132	7134	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDF::getAllObjects()', 'QTC::TC(char const, char const*, int)', 'std::__1::vector >::end[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7176	71338	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2951
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
36	49948	28 : View List ['std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QUtil::get_current_time()', 'MD5::MD5()', 'qpdf::BaseDictionary::begin()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::runtime_error::runtime_error(char const)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isString() const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'std::__1::to_string(long)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getStringValue() const', '__cxa_throw', 'QTC::TC(char const, char const, int)', 'MD5::encodeString(char const)', '__cxa_free_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	52	57098	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1870
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531

Runtime coverage analysis

1133

414

76.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_insecure_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	52
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	65
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 990 22.0%

gold [1:9] 137 3.05%

yellow [10:29] 133 2.96%

greenyellow [30:49] 78 1.73%

lawngreen 50+ 3153 70.2%

All colors 4491 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
88	163733	11 : View List ['QPDFObjectHandle::isName() const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::isDictionary() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayItem(int) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const']	88	164188	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1068
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00000	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00000	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1208

275

1761

84.38%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_lin_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	63
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 626 18.1%

gold [1:9] 103 2.99%

yellow [10:29] 84 2.44%

greenyellow [30:49] 40 1.16%

lawngreen 50+ 2587 75.2%

All colors 3440 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
88	163733	11 : View List ['QPDFObjectHandle::isName() const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::isDictionary() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayItem(int) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const']	88	164188	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1068
36	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	60	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception', 'QPDFExc::QPDFExc(QPDFExc const&)']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:649

Runtime coverage analysis

885

208

1493

86.07%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	43
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	26
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	18
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	57
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	21
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2367 75.5%

gold [1:9] 30 0.95%

yellow [10:29] 39 1.24%

greenyellow [30:49] 23 0.73%

lawngreen 50+ 672 21.4%

All colors 3131 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
109504	502127	63 : View List ['QPDF::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&, bool&)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::begin[abi:ne180100]()', 'QPDFObjectHandle::isArray() const', 'QPDF::EncryptionData::~EncryptionData()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDF::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::end[abi:ne180100]()', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::getBoolValue() const', 'std::__1::operator!=[abi:ne180100](std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long> const&, std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long> const&)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'QPDFObjectHandle::QPDFObjectHandle(QPDFObjectHandle const&)', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDF::getTrimmedUserPassword() const', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::warn(QPDFExc const&)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::shared_ptr[abi:ne180100](std::__1::shared_ptr const&)', 'check_user_password(std::__1::basic_string , std::__1::allocator > const&, QPDF::EncryptionData const&)', 'std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long>::operator[abi:ne180100]() const', 'QPDFObjectHandle::isNull() const', 'std::__1::shared_ptr ::~shared_ptr[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDFObjectHandle::isBool() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDFObjectHandle::isName() const', '__cxa_throw', 'QPDFObjectHandle::getStringValue() const', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'std::__1::set , std::__1::allocator >, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > > >::~set[abi:ne180100]()', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::getIntValue() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'InputSource::getLastOffset() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'std::__1::to_string(int)', 'QTC::TC(char const, char const, int)', 'std::__1::__tree_const_iterator , std::__1::allocator >, std::__1::__tree_node , std::__1::allocator >, void>, long>::operator++[abi:ne180100]()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::isInteger() const', 'QPDF::warn(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', '__cxa_free_exception', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getKeys() const', 'QPDFObjectHandle::getName() const', 'QPDFObjectHandle::~QPDFObjectHandle()']	109504	502127	QPDF::initializeEncryption()	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:730
7117	7117	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7117	7117	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:521
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Dictionary qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Stream qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Integer qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	21333	7 : View List ['QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF_Array qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7115	21333	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7115	7198	3 : View List ['std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'QPDF::read_xrefStream(long long, bool)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)']	7167	71378	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:737
7115	7119	2 : View List ['QPDFObjectHandle::getDict() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle&&)']	7151	43088	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:667
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7115	7117	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:393
7115	7115	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7115	7117	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:433
7115	7115	1 : View List ['QPDF::getAllPages()']	7115	7115	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:531

Runtime coverage analysis

413

713

1382

48.41%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/BufferInputSource.cc	4
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/Buffer.cc	9
/src/qpdf/include/qpdf/QIntC.hh	43
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	13
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	43
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	10
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	56
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	12
/src/qpdf/libqpdf/QPDFObjectHandle.cc	67
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	41
/src/qpdf/libqpdf/MD5.cc	4
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: future_qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 922 20.3%

gold [1:9] 144 3.17%

yellow [10:29] 91 2.00%

greenyellow [30:49] 62 1.36%

lawngreen 50+ 3316 73.1%

All colors 4535 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7569	7569	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15017	44619	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2159
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
47	47	1 : View List ['QPDFWriter::computeDeterministicIDData()']	63	7667	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1224
36	49948	28 : View List ['std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QUtil::get_current_time()', 'MD5::MD5()', 'qpdf::BaseDictionary::begin()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::runtime_error::runtime_error(char const)', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isString() const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'std::__1::to_string(long)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getStringValue() const', '__cxa_throw', 'QTC::TC(char const, char const, int)', 'MD5::encodeString(char const)', '__cxa_free_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	52	57098	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1870
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00000	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00000	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', '__cxa_free_exception', 'QPDFExc::QPDFExc(QPDFExc const&)']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:649
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191

Runtime coverage analysis

1213

277

84.46%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	49
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	49
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	29
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	8
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	12
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/Pl_Buffer.cc	5
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	52
/src/qpdf/libqpdf/MD5.cc	6
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	1
/src/qpdf/libqpdf/RC4.cc	2
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	65
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	9
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_StdioFile.cc	1
/src/qpdf/libqpdf/Pl_MD5.cc	4
/src/qpdf/include/qpdf/QPDFWriter.hh	1
/src/qpdf/libqpdf/Pl_RC4.cc	1
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 984 21.9%

gold [1:9] 147 3.27%

yellow [10:29] 99 2.20%

greenyellow [30:49] 87 1.93%

lawngreen 50+ 3174 70.6%

All colors 4491 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	21353	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7121	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7115	7115	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7115	7119	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_table', 'crc32', 'fixedtables', 'inflate_fast', 'updatewindow', 'adler32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
116	135	5 : View List ['BitStream::BitStream(unsigned char const, unsigned long)', 'BitStream::getBitsSigned(unsigned long)', 'BitWriter::BitWriter(Pipeline)', 'BitWriter::writeBitsSigned(long long, unsigned long)', 'BitWriter::flush()']	116	137	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:78
88	163733	11 : View List ['QPDFObjectHandle::isName() const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::isDictionary() const', 'QPDF::interpretCF(std::__1::shared_ptr , QPDFObjectHandle)', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayItem(int) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const']	88	164188	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1068
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28522	16 : View List ['Pl_Count::~Pl_Count()', 'QPDFObjectHandle::newInteger(long long)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjGen::unparse(char) const', 'QPDFObjectHandle::getIntValue() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'Pl_Count::getCount() const']	58	29151	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:531
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00000	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00000	/src/zlib/deflate.c:227

Runtime coverage analysis

1205

269

1761