Project overview: qpdf

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 44.2%

gold [1:9] 0 0.0%

yellow [10:29] 5 8.19%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 29 47.5%

All colors 61 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	44.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	8.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	47.5%
All colors	61	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: future_lzw_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 31 36.0%

gold [1:9] 5 5.81%

yellow [10:29] 5 5.81%

greenyellow [30:49] 5 5.81%

lawngreen 50+ 40 46.5%

All colors 86 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	36.0%
gold	[1:9]	5	5.81%
yellow	[10:29]	5	5.81%
greenyellow	[30:49]	5	5.81%
lawngreen	50+	40	46.5%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: future_pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 43.5%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 35 56.4%

All colors 62 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	43.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	35	56.4%
All colors	62	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: future_flate_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 142 62.8%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 84 37.1%

All colors 226 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	142	62.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	84	37.1%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['inflateEnd', 'deflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '__cxa_guard_abort', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_guard_acquire', '__cxa_guard_release', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::to_string(int)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const*)', '__cxa_free_exception']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_stored_block', '_tr_align']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	43.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	35	56.4%
All colors	62	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: future_ascii85_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 12.5%

gold [1:9] 6 12.5%

yellow [10:29] 10 20.8%

greenyellow [30:49] 2 4.16%

lawngreen 50+ 24 50.0%

All colors 48 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	12.5%
gold	[1:9]	6	12.5%
yellow	[10:29]	10	20.8%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	24	50.0%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: future_hex_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 16.6%

gold [1:9] 1 2.77%

yellow [10:29] 0 0.0%

greenyellow [30:49] 6 16.6%

lawngreen 50+ 23 63.8%

All colors 36 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	16.6%
gold	[1:9]	1	2.77%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	6	16.6%
lawngreen	50+	23	63.8%
All colors	36	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: future_tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 49 57.6%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 36 42.3%

All colors 85 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_free_exception']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_free_exception']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: lzw_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 31 36.0%

gold [1:9] 5 5.81%

yellow [10:29] 5 5.81%

greenyellow [30:49] 7 8.13%

lawngreen 50+ 38 44.1%

All colors 86 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	36.0%
gold	[1:9]	5	5.81%
yellow	[10:29]	5	5.81%
greenyellow	[30:49]	7	8.13%
lawngreen	50+	38	44.1%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_free_exception']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_free_exception']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: future_dct_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 179 55.0%

gold [1:9] 18 5.53%

yellow [10:29] 6 1.84%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 122 37.5%

All colors 325 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	179	55.0%
gold	[1:9]	18	5.53%
yellow	[10:29]	6	1.84%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	122	37.5%
All colors	325	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:288
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:209
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00032	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	834	1 : View List ['Pl_DCT::compress(void*)']	25	864	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:194
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00028	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	2	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:172
0	0	None	221	728	master_selection	call site: 00228	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00229	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

206

124

231

46.32%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: ascii85_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	12.5%
gold	[1:9]	6	12.5%
yellow	[10:29]	10	20.8%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	24	50.0%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: hex_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: flate_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['inflateEnd', 'deflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '__cxa_guard_abort', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_guard_acquire', '__cxa_guard_release', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::to_string(int)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const*)', '__cxa_free_exception']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_stored_block', '_tr_align']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: dct_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:288
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:209
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00032	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	834	1 : View List ['Pl_DCT::compress(void*)']	25	864	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:194
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00028	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	2	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:172
0	0	None	221	728	master_selection	call site: 00228	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00229	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

206

124

231

46.32%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: future_qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 699 20.5%

gold [1:9] 90 2.65%

yellow [10:29] 82 2.41%

greenyellow [30:49] 26 0.76%

lawngreen 50+ 2498 73.5%

All colors 3395 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
21415	136685	25 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::operator==[abi:ne180100](std::__1::__list_iterator const&, std::__1::__list_iterator const&)', 'std::__1::list >::end[abi:ne180100]()', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle const&)', 'QPDF::makeIndirectObject(QPDFObjectHandle)', 'NNTreeIterator::setItemNumber(QPDFObjectHandle const&, int)', 'NNTreeIterator::resetLimits(QPDFObjectHandle, std::__1::__list_iterator )', 'std::__1::list >::begin[abi:ne180100]()', 'QPDFObjectHandle::removeKey(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'NNTreeIterator::PathElement& std::__1::list >::emplace_front (QPDFObjectHandle&, int&&)', 'QPDFObjectHandle::eraseItem(int)', 'QPDFObjectHandle::QPDFObjectHandle(QPDFObjectHandle const&)', 'NNTreeIterator::split(QPDFObjectHandle, std::__1::__list_iterator )', 'QPDFObjectHandle::insertItem(int, QPDFObjectHandle const&)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QTC::TC(char const, char const, int)', 'QPDFObjectHandle::newDictionary()', 'QPDFObjectHandle::appendItem(QPDFObjectHandle const&)', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::newArray()', 'std::__1::__list_iterator ::operator++[abi:ne180100]()', 'std::__1::__list_iterator ::operator->[abi:ne180100]() const', 'std::__1::__list_iterator ::operator--[abi:ne180100]()']	21543	136813	NNTreeIterator::split(QPDFObjectHandle,std::__1::__list_iterator )	call site: 00000	/src/qpdf/libqpdf/NNTree.cc:282
14444	199616	21 : View List ['NNTreeImpl::warn(QPDFObjectHandle&, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::operator==[abi:ne180100](std::__1::__list_iterator const&, std::__1::__list_iterator const&)', 'std::__1::list >::end[abi:ne180100]()', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle const&)', 'std::__1::list >::begin[abi:ne180100]()', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::QPDFObjectHandle(QPDFObjectHandle const&)', 'QPDFObjectHandle::isSameObjectAs(QPDFObjectHandle const&) const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::operator=(QPDFObjectHandle&&)', 'QPDFObjectHandle::appendItem(QPDFObjectHandle const&)', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::QPDFObjectHandle()', 'QPDFObjectHandle::newArray()', 'qpdf::BaseHandle::operator bool() const', 'std::__1::__list_iterator ::operator->[abi:ne180100]() const', 'std::__1::__list_iterator ::operator--[abi:ne180100]()']	14444	206731	NNTreeIterator::resetLimits(QPDFObjectHandle,std::__1::__list_iterator )	call site: 00000	/src/qpdf/libqpdf/NNTree.cc:160
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
88	163595	11 : View List ['QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::isName() const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	88	163987	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
36	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	60	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57

Runtime coverage analysis

895

212

1486

85.73%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	45
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	13
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	40
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	25
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	18
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	59
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	21
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2322 75.5%

gold [1:9] 25 0.81%

yellow [10:29] 59 1.91%

greenyellow [30:49] 8 0.26%

lawngreen 50+ 661 21.4%

All colors 3075 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
107419	508526	62 : View List ['std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::tuple_element<0ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<0ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDF::EncryptionData::check_user_password(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::tuple_element<1ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<1ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::isString() const', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_1::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::isArray() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::getTrimmedUserPassword() const', 'QPDFObjectHandle::isInteger() const', '__cxa_free_exception', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'QPDFObjectHandle::getArrayItem(int) const', '__cxa_throw', 'qpdf::BaseDictionary::begin()', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_2::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_0::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionData::check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::getName() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::getArrayNItems() const', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionData::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, bool&) const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isDictionary() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::isName() const', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionData::~EncryptionData()', 'QTC::TC(char const, char const, int)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::BaseDictionary::end()', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::to_string(int)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDF::warn(QPDFExc const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getBoolValue() const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::isNull() const', 'QPDFObjectHandle::isBool() const', 'std::__1::bitset<32ul>::bitset[abi:ne180100](unsigned long long)', 'QPDFObjectHandle::getStringValue() const']	107419	508526	QPDF::EncryptionParameters::initialize(QPDF&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:657
7111	7111	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7111	7111	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:512
7109	21315	7 : View List ['QPDF_Dictionary* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Stream* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'QPDF_Integer* qpdf::BaseHandle::as () const', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Array* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	7192	3 : View List ['QPDF::read_xrefStream(long long, bool)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const']	7161	71318	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:730
7109	7113	2 : View List ['QPDFObjectHandle::getDict() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle&&)']	7145	43052	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:655
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7109	7111	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:393
7109	7109	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7109	7111	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:433
7109	7109	1 : View List ['QPDF::getAllPages()']	7109	7109	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:522

Runtime coverage analysis

415

687

1368

49.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	12
/src/qpdf/include/qpdf/QIntC.hh	34
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	45
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	12
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	58
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	12
/src/qpdf/libqpdf/QPDFObjectHandle.cc	67
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: runlength_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 586 17.2%

gold [1:9] 93 2.73%

yellow [10:29] 70 2.06%

greenyellow [30:49] 17 0.50%

lawngreen 50+ 2631 77.4%

All colors 3397 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
36	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	60	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_free_exception']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191

Runtime coverage analysis

898

206

1486

86.14%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	40
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	45
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	13
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	25
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	18
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	59
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	21
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_qpdf_page_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 885 17.1%

gold [1:9] 108 2.09%

yellow [10:29] 96 1.86%

greenyellow [30:49] 46 0.89%

lawngreen 50+ 4017 77.9%

All colors 5152 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1924	2139	12 : View List ['std::logic_error::logic_error(char const)', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', 'qpdf::util::hex_decode_char(char)', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', '(anonymous namespace)::JSONParser::tokenError()', '(anonymous namespace)::JSONParser::ignore()', '(anonymous namespace)::JSONParser::append()']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_free_exception']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	7123	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7139	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:383
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:272
10	7242	8 : View List ['QPDF::updateCache(QPDFObjGen, std::__1::shared_ptr const&, long long, long long, bool)', 'QPDF::readObject(std::__1::basic_string , std::__1::allocator > const&, QPDFObjGen)', 'isspace', 'std::__1::shared_ptr ::~shared_ptr[abi:ne180100]()', 'QPDFObjectHandle::getObj()', 'QPDFObjectHandle::~QPDFObjectHandle()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::damagedPDF(long long, std::__1::basic_string , std::__1::allocator > const&)']	26	21913	QPDF::readObjectAtOffset(bool,longlong,std::__1::basic_string ,std::__1::allocator >const&,QPDFObjGen)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:1470

Runtime coverage analysis

1210

203

1963

89.66%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_page_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	46
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	13
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	45
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	28
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	24
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	62
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	24
/src/qpdf/libqpdf/QPDFObjectHandle.cc	108
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 995 21.0%

gold [1:9] 135 2.86%

yellow [10:29] 105 2.22%

greenyellow [30:49] 75 1.59%

lawngreen 50+ 3406 72.2%

All colors 4716 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	14831	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
607	1113	4 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::compute_encryption_O_U(char const, char const)', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const']	607	1113	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1115
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03752	/src/zlib/inflate.c:817
71	71	1 : View List ['QPDFWriter::computeDeterministicIDData()']	79	7702	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1301
34	49898	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', '__cxa_free_exception', 'qpdf::Dictionary::~Dictionary()', 'qpdf::BaseDictionary::begin()', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'MD5::encodeString(char const)', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'MD5::~MD5()', 'QUtil::get_current_time()', 'std::runtime_error::runtime_error(char const)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QTC::TC(char const, char const, int)', 'MD5::MD5()', 'std::__1::to_string(long)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFObjectHandle::getStringValue() const']	50	57042	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1884
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	58	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03680	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03688	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_free_exception']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657

Runtime coverage analysis

1238

294

84.72%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1660 35.1%

gold [1:9] 133 2.81%

yellow [10:29] 119 2.52%

greenyellow [30:49] 60 1.27%

lawngreen 50+ 2745 58.1%

All colors 4717 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10689	10689	1 : View List ['QPDFWriter::writeLinearized()']	10691	10733	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2279
9167	9167	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	9175	9179	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1817
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22196	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
7277	7277	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7293	34667	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3044
7126	7128	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'QPDF::getAllObjects()']	7170	71254	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2946
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
407	407	1 : View List ['QPDF::EncryptionData::compute_encryption_parameters_V5(char const, char const)']	407	407	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1115
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03753	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	49898	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', '__cxa_free_exception', 'qpdf::Dictionary::~Dictionary()', 'qpdf::BaseDictionary::begin()', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'MD5::encodeString(char const)', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'MD5::~MD5()', 'QUtil::get_current_time()', 'std::runtime_error::runtime_error(char const)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QTC::TC(char const, char const, int)', 'MD5::MD5()', 'std::__1::to_string(long)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFObjectHandle::getStringValue() const']	50	57042	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1884

Runtime coverage analysis

1160

435

77.39%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_insecure_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1056 22.6%

gold [1:9] 114 2.44%

yellow [10:29] 136 2.91%

greenyellow [30:49] 62 1.32%

lawngreen 50+ 3300 70.6%

All colors 4668 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03704	/src/zlib/inflate.c:817
88	163595	11 : View List ['QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::isName() const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	88	163987	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	58	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03632	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03640	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1235

284

1906

85.1%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_lin_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	79
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1666 35.3%

gold [1:9] 99 2.09%

yellow [10:29] 119 2.52%

greenyellow [30:49] 63 1.33%

lawngreen 50+ 2772 58.7%

All colors 4719 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10689	10689	1 : View List ['QPDFWriter::writeLinearized()']	10691	10733	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2279
9167	9167	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	9175	9179	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1817
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22196	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
7277	7277	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7293	34667	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3044
7126	7128	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'QPDF::getAllObjects()']	7170	71254	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2946
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
407	407	1 : View List ['QPDF::EncryptionData::compute_encryption_parameters_V5(char const, char const)']	407	407	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1115
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03755	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	49898	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', '__cxa_free_exception', 'qpdf::Dictionary::~Dictionary()', 'qpdf::BaseDictionary::begin()', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'MD5::encodeString(char const)', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'MD5::~MD5()', 'QUtil::get_current_time()', 'std::runtime_error::runtime_error(char const)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QTC::TC(char const, char const, int)', 'MD5::MD5()', 'std::__1::to_string(long)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFObjectHandle::getStringValue() const']	50	57042	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1884

Runtime coverage analysis

1155

435

77.39%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_insecure_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1489 31.9%

gold [1:9] 129 2.76%

yellow [10:29] 66 1.41%

greenyellow [30:49] 72 1.54%

lawngreen 50+ 2907 62.3%

All colors 4663 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10689	10689	1 : View List ['QPDFWriter::writeLinearized()']	10691	10733	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2279
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	14831	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
7277	7277	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7552	34667	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3044
7126	7128	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'QPDF::getAllObjects()']	7170	71254	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2946
1117	1117	3 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_PNGFilter::action_e&&, unsigned int&)']	1117	9848	QPDFWriter::writeXRefStream(int,int,longlong,QPDFWriter::trailer_e,int,int,int,longlong,int,longlong,longlong,bool,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2549
991	991	2 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1015	31224	QPDFWriter::writeObjectStream(QPDFObjectHandle)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1777
259	259	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	259	18199	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3058
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03703	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	56	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51

Runtime coverage analysis

1182

392

1904

79.41%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	78
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1061 22.7%

gold [1:9] 113 2.42%

yellow [10:29] 104 2.22%

greenyellow [30:49] 61 1.30%

lawngreen 50+ 3327 71.3%

All colors 4666 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7115	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:462
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	7113	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:475
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03702	/src/zlib/inflate.c:817
88	163595	11 : View List ['QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getArrayNItems() const', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'QPDFObjectHandle::isDictionary() const', 'QPDFObjectHandle::isName() const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	88	163987	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	58	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03630	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03638	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1235

290

1906

84.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_lin_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	79
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2322 75.5%

gold [1:9] 25 0.81%

yellow [10:29] 39 1.26%

greenyellow [30:49] 32 1.04%

lawngreen 50+ 657 21.3%

All colors 3075 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
107419	508526	62 : View List ['std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::tuple_element<0ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<0ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDF::EncryptionData::check_user_password(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::tuple_element<1ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<1ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::isString() const', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_1::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::isArray() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::getTrimmedUserPassword() const', 'QPDFObjectHandle::isInteger() const', '__cxa_free_exception', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', 'QPDFObjectHandle::getArrayItem(int) const', '__cxa_throw', 'qpdf::BaseDictionary::begin()', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_2::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_0::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionData::check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::getName() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'QPDFObjectHandle::getArrayNItems() const', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionData::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, bool&) const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'QPDFObjectHandle::isDictionary() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::isName() const', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionData::~EncryptionData()', 'QTC::TC(char const, char const, int)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::BaseDictionary::end()', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::to_string(int)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDF::warn(QPDFExc const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getBoolValue() const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDFObjectHandle::isNull() const', 'QPDFObjectHandle::isBool() const', 'std::__1::bitset<32ul>::bitset[abi:ne180100](unsigned long long)', 'QPDFObjectHandle::getStringValue() const']	107419	508526	QPDF::EncryptionParameters::initialize(QPDF&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:657
7111	7111	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7111	7111	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:512
7109	21315	7 : View List ['QPDF_Dictionary* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Stream* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'QPDF_Integer* qpdf::BaseHandle::as () const', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	21315	7 : View List ['QPDF_Array* qpdf::BaseHandle::as () const', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'qpdf::BaseHandle::~BaseHandle()', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'QPDF::Resolver::resolved(QPDF*, QPDFObjGen)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)']	7109	21315	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:332
7109	7192	3 : View List ['QPDF::read_xrefStream(long long, bool)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const']	7161	71318	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:730
7109	7113	2 : View List ['QPDFObjectHandle::getDict() const', 'QPDFObjectHandle::operator=(QPDFObjectHandle&&)']	7145	43052	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:655
7109	7109	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7109	21335	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:445
7109	7109	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7109	7111	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:393
7109	7109	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7109	7111	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:433
7109	7109	1 : View List ['QPDF::getAllPages()']	7109	7109	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:522

Runtime coverage analysis

417

687

1368

49.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	12
/src/qpdf/include/qpdf/QIntC.hh	34
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	45
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	12
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	58
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	12
/src/qpdf/libqpdf/QPDFObjectHandle.cc	67
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: qpdf_page_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 896 17.3%

gold [1:9] 105 2.03%

yellow [10:29] 104 2.01%

greenyellow [30:49] 43 0.83%

lawngreen 50+ 4006 77.7%

All colors 5154 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1924	2139	12 : View List ['std::logic_error::logic_error(char const)', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', 'qpdf::util::hex_decode_char(char)', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', '(anonymous namespace)::JSONParser::tokenError()', '(anonymous namespace)::JSONParser::ignore()', '(anonymous namespace)::JSONParser::append()']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_throw', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_free_exception']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	7123	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7139	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:383
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:272
10	7242	8 : View List ['QPDF::updateCache(QPDFObjGen, std::__1::shared_ptr const&, long long, long long, bool)', 'QPDF::readObject(std::__1::basic_string , std::__1::allocator > const&, QPDFObjGen)', 'isspace', 'std::__1::shared_ptr ::~shared_ptr[abi:ne180100]()', 'QPDFObjectHandle::getObj()', 'QPDFObjectHandle::~QPDFObjectHandle()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::damagedPDF(long long, std::__1::basic_string , std::__1::allocator > const&)']	26	21913	QPDF::readObjectAtOffset(bool,longlong,std::__1::basic_string ,std::__1::allocator >const&,QPDFObjGen)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:1470

Runtime coverage analysis

1208

201

1963

89.76%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_page_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/include/qpdf/QIntC.hh	45
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	46
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	13
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	28
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	24
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	62
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	24
/src/qpdf/libqpdf/QPDFObjectHandle.cc	108
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	28
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1496 32.0%

gold [1:9] 128 2.74%

yellow [10:29] 105 2.25%

greenyellow [30:49] 54 1.15%

lawngreen 50+ 2878 61.7%

All colors 4661 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10689	10689	1 : View List ['QPDFWriter::writeLinearized()']	10691	10733	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2279
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	14831	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
7277	7277	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7552	34667	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3044
7126	7128	9 : View List ['std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::begin[abi:ne180100]()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'QPDF::getAllObjects()']	7170	71254	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2946
1117	1117	3 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_PNGFilter::action_e&&, unsigned int&)']	1117	9848	QPDFWriter::writeXRefStream(int,int,longlong,QPDFWriter::trailer_e,int,int,int,longlong,int,longlong,longlong,bool,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2549
991	991	2 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1015	31224	QPDFWriter::writeObjectStream(QPDFObjectHandle)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1777
259	259	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	259	18199	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3058
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03701	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	56	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51

Runtime coverage analysis

1183

400

1904

78.99%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	51
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	30
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	64
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	16
/src/qpdf/libqpdf/QPDFObjectHandle.cc	76
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	78
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1001 21.2%

gold [1:9] 148 3.13%

yellow [10:29] 98 2.07%

greenyellow [30:49] 66 1.39%

lawngreen 50+ 3405 72.1%

All colors 4718 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7438	7438	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	14831	44409	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2173
607	1113	4 : View List ['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::compute_encryption_O_U(char const, char const)', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const']	607	1113	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1115
252	474	6 : View List ['inflate_fast', 'fixedtables', 'inflate_table', 'updatewindow', 'adler32', 'crc32']	252	474	inflate	call site: 03754	/src/zlib/inflate.c:817
71	71	1 : View List ['QPDFWriter::computeDeterministicIDData()']	79	7702	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1301
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	49898	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', '__cxa_free_exception', 'qpdf::Dictionary::~Dictionary()', 'qpdf::BaseDictionary::begin()', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'MD5::encodeString(char const)', '__cxa_allocate_exception', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'MD5::~MD5()', 'QUtil::get_current_time()', 'std::runtime_error::runtime_error(char const)', 'MD5::digest(unsigned char)', 'qpdf::BaseDictionary::end()', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QTC::TC(char const, char const, int)', 'MD5::MD5()', 'std::__1::to_string(long)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFObjectHandle::getStringValue() const']	50	57042	QPDFWriter::generateID()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1884
34	28498	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'Pl_Count::getCount() const', 'QPDFObjectHandle::getIntValue() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::newInteger(long long)', 'std::__1::to_string(long long)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'QPDFObjGen::unparse(char) const', 'Pl_Count::Pl_Count(char const, Pipeline)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'Pl_Count::~Pl_Count()', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const']	58	29127	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03682	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03690	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1235

294