Project overview: qpdf

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 44.2%

gold [1:9] 0 0.0%

yellow [10:29] 5 8.19%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 29 47.5%

All colors 61 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	44.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	8.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	47.5%
All colors	61	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: future_tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 49 57.6%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 36 42.3%

All colors 85 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: future_lzw_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 31 36.0%

gold [1:9] 5 5.81%

yellow [10:29] 5 5.81%

greenyellow [30:49] 5 5.81%

lawngreen 50+ 40 46.5%

All colors 86 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	36.0%
gold	[1:9]	5	5.81%
yellow	[10:29]	5	5.81%
greenyellow	[30:49]	5	5.81%
lawngreen	50+	40	46.5%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: lzw_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	36.0%
gold	[1:9]	5	5.81%
yellow	[10:29]	5	5.81%
greenyellow	[30:49]	5	5.81%
lawngreen	50+	40	46.5%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	Pl_LZWDecoder::getFirstChar(unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:86
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	Pl_LZWDecoder::addToTable(unsignedchar)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:111
0	0	None	0	0	Buffer::Members::Members(unsignedlong,unsignedchar*,bool)	call site: 00000	/src/qpdf/libqpdf/Buffer.cc:30
0	0	None	0	0	Pl_LZWDecoder::Pl_LZWDecoder(charconst,Pipeline,bool)	call site: 00000	/src/qpdf/libqpdf/Pl_LZWDecoder.cc:13

Runtime coverage analysis

68.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/lzw_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_LZWDecoder.cc	7
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/qpdf/Pl_LZWDecoder.hh	1

Fuzzer: future_flate_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 142 62.8%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 84 37.1%

All colors 226 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	142	62.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	84	37.1%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['inflateEnd', 'deflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['__cxa_guard_acquire', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', '__cxa_guard_release', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '__cxa_guard_abort']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '__cxa_free_exception', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(int)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const*)']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_stored_block', '_tr_align']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: flate_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	142	62.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	84	37.1%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
38	38	1 : View List ['inflateInit_']	370	935	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
21	21	1 : View List ['crc32']	579	630	deflate	call site: 00098	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 00106	/src/zlib/deflate.c:227
14	35	3 : View List ['inflateEnd', 'deflateEnd', '__clang_call_terminate']	14	35	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:55
12	12	1 : View List ['inflateEnd']	30	81	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
12	12	8 : View List ['__cxa_guard_acquire', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', '__cxa_guard_release', 'QUtil::get_env(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >)', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', '__cxa_guard_abort']	12	12	Pl_Flate::zopfli_enabled()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:352
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	8	Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:34
8	8	13 : View List ['std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', '__cxa_free_exception', '__cxa_throw', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_allocate_exception', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::to_string(int)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const*)']	8	8	Pl_Flate::checkError(charconst*,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:272
7	14	2 : View List ['_tr_stored_block', '_tr_align']	7	38	deflate	call site: 00143	/src/zlib/deflate.c:1211
2	2	1 : View List ['Pl_Flate::finish_zopfli()']	20	24	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:231
0	21	1 : View List ['deflateEnd']	0	21	deflateInit2_	call site: 00038	/src/zlib/deflate.c:499
0	0	None	747	869	deflate	call site: 00079	/src/zlib/deflate.c:1009

Runtime coverage analysis

130

57.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/flate_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	8
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1

Fuzzer: tiffpredictor_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	49	57.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	36	42.3%
All colors	85	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	10	10	read_bits(unsignedcharconst*&,unsignedlong&,unsignedlong&,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:34
10	10	4 : View List ['std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	10	10	write_bits(unsignedchar&,unsignedlong&,unsignedlonglong,unsignedlong,Pipeline*)	call site: 00000	/src/qpdf/libqpdf/qpdf/bits_functions.hh:89
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	8	BitStream::reset()	call site: 00000	/src/qpdf/libqpdf/BitStream.cc:21
0	0	None	32	34	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:28
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:31
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:34
0	0	None	8	10	Pl_TIFFPredictor::Pl_TIFFPredictor(charconst,Pipeline,Pl_TIFFPredictor::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:38
0	0	None	0	86	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:85
0	0	None	0	2	Pl_TIFFPredictor::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_TIFFPredictor.cc:107

Runtime coverage analysis

64.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/BitStream.cc	3
/src/qpdf/include/qpdf/QIntC.hh	3
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/qpdf/bits_functions.hh	2
/src/qpdf/libqpdf/qpdf/Pl_TIFFPredictor.hh	1

Fuzzer: future_runlength_fuzzer

Call tree

Call tree overview bitmap:

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	44.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	8.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	47.5%
All colors	61	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
0	0	None	0	0	Pl_RunLength::Pl_RunLength(charconst,Pipeline,Pl_RunLength::action_e)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:32

Runtime coverage analysis

62.26%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/runlength_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_RunLength.cc	8
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	3
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1

Fuzzer: future_ascii85_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 12.5%

gold [1:9] 6 12.5%

yellow [10:29] 10 20.8%

greenyellow [30:49] 2 4.16%

lawngreen 50+ 24 50.0%

All colors 48 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	12.5%
gold	[1:9]	6	12.5%
yellow	[10:29]	10	20.8%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	24	50.0%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: dct_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 179 55.0%

gold [1:9] 18 5.53%

yellow [10:29] 6 1.84%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 122 37.5%

All colors 325 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	179	55.0%
gold	[1:9]	18	5.53%
yellow	[10:29]	6	1.84%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	122	37.5%
All colors	325	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:288
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:209
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00032	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	834	1 : View List ['Pl_DCT::compress(void*)']	25	864	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:194
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00028	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	2	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:172
0	0	None	221	728	master_selection	call site: 00228	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00229	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

206

124

231

46.32%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 27 43.5%

gold [1:9] 0 0.0%

yellow [10:29] 0 0.0%

greenyellow [30:49] 0 0.0%

lawngreen 50+ 35 56.4%

All colors 62 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	27	43.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	35	56.4%
All colors	62	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: hex_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 6 16.6%

gold [1:9] 1 2.77%

yellow [10:29] 0 0.0%

greenyellow [30:49] 6 16.6%

lawngreen 50+ 23 63.8%

All colors 36 100

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	16.6%
gold	[1:9]	1	2.77%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	6	16.6%
lawngreen	50+	23	63.8%
All colors	36	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: future_pngpredictor_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	4 : View List ['__cxa_throw', 'std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception']	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:47
6	6	1 : View List ['Pl_PNGFilter::encodeRow()']	6	6	Pl_PNGFilter::processRow()	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:98
0	0	None	32	38	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:31
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:34
0	0	None	8	10	Pl_PNGFilter::Pl_PNGFilter(charconst,Pipeline,Pl_PNGFilter::action_e,unsignedint,unsignedint,unsignedint)	call site: 00000	/src/qpdf/libqpdf/Pl_PNGFilter.cc:44

Runtime coverage analysis

78.95%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/pngpredictor_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_PNGFilter.cc	12
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1

Fuzzer: ascii85_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	Function Name	Function Callsite	Blocked Branch
None	Pl_ASCII85Decoder::Pl_ASCII85Decoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:10
None	Pl_ASCII85Decoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:18
None	Pl_ASCII85Decoder::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc:107

Runtime coverage analysis

65.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/ascii85_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCII85Decoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCII85Decoder.hh	1

Fuzzer: future_hex_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	Pl_ASCIIHexDecoder::Pl_ASCIIHexDecoder(charconst,Pipeline)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:12
0	0	None	0	0	Pl_ASCIIHexDecoder::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc:20

Runtime coverage analysis

67.5%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/hex_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/libqpdf/Pl_ASCIIHexDecoder.cc	4
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Pl_ASCIIHexDecoder.hh	1

Fuzzer: future_dct_fuzzer

Call tree

Call tree overview bitmap:

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
8	8	4 : View List ['std::runtime_error::runtime_error(char const*)', '__cxa_allocate_exception', '__cxa_free_exception', '__cxa_throw']	8	8	skip_buffer_input_data(jpeg_decompress_struct*,long)	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:288
5	5	1 : View List ['jpeg_destroy_compress']	17	22	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:209
2	2	1 : View List ['out_of_memory']	2	106	alloc_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:462
2	2	1 : View List ['__isoc99_sscanf']	2	2	jinit_memory_mgr	call site: 00032	/src/libjpeg-turbo/src/jmemmgr.c:1274
2	2	1 : View List ['out_of_memory']	2	2	alloc_large	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:395
0	834	1 : View List ['Pl_DCT::compress(void*)']	25	864	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:194
0	2	1 : View List ['jpeg_mem_term']	8	10	jinit_memory_mgr	call site: 00028	/src/libjpeg-turbo/src/jmemmgr.c:1228
0	2	1 : View List ['Pipeline::next() const']	0	2	Pl_DCT::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_DCT.cc:172
0	0	None	221	728	master_selection	call site: 00228	/src/libjpeg-turbo/src/jdmaster.c:539
0	0	None	221	699	master_selection	call site: 00229	/src/libjpeg-turbo/src/jdmaster.c:550

Runtime coverage analysis

206

124

231

46.32%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/dct_fuzzer.cc	4
/src/qpdf/libqpdf/Pl_DCT.cc	13
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/libjpeg-turbo/src/jerror.c	1
/src/libjpeg-turbo/src/jcapimin.c	4
/src/libjpeg-turbo/src/jmemmgr.c	1
/src/libjpeg-turbo/src/jmemnobs.c	3
/src/libjpeg-turbo/src/jcparam.c	7
/src/libjpeg-turbo/src/jcomapi.c	4
/src/libjpeg-turbo/src/jstdhuff.c	2
/src/libjpeg-turbo/src/wrapper/../jcapistd.c	2
/src/libjpeg-turbo/src/jcinit.c	1
/src/libjpeg-turbo/src/jcmaster.c	4
/src/libjpeg-turbo/src/wrapper/../jutils.c	2
/src/libjpeg-turbo/src/wrapper/../jccolor.c	3
/src/libjpeg-turbo/simd/x86_64/jsimd.c	20
/src/libjpeg-turbo/src/wrapper/../jcsample.c	3
/src/libjpeg-turbo/src/wrapper/../jcprepct.c	4
/src/libjpeg-turbo/src/wrapper/../jclossls.c	3
/src/libjpeg-turbo/src/jclhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jcdiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jcdctmgr.c	2
/src/libjpeg-turbo/src/jcarith.c	1
/src/libjpeg-turbo/src/jcphuff.c	1
/src/libjpeg-turbo/src/jchuff.c	1
/src/libjpeg-turbo/src/wrapper/../jccoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jcmainct.c	3
/src/libjpeg-turbo/src/jcmarker.c	1
/src/qpdf/include/qpdf/QIntC.hh	9
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	1
/src/libjpeg-turbo/src/jdapimin.c	6
/src/libjpeg-turbo/src/jdmarker.c	2
/src/libjpeg-turbo/src/jdinput.c	1
/src/libjpeg-turbo/src/jdmaster.c	6
/src/libjpeg-turbo/src/wrapper/../jdapistd.c	3
/src/libjpeg-turbo/src/wrapper/../jquant1.c	8
/src/libjpeg-turbo/src/wrapper/../jquant2.c	3
/src/libjpeg-turbo/src/wrapper/../jdmerge.c	3
/src/libjpeg-turbo/src/wrapper/../jdcolor.c	5
/src/libjpeg-turbo/src/wrapper/../jdsample.c	3
/src/libjpeg-turbo/src/wrapper/../jdpostct.c	3
/src/libjpeg-turbo/src/wrapper/../jdlossls.c	3
/src/libjpeg-turbo/src/jdlhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jddiffct.c	3
/src/libjpeg-turbo/src/wrapper/../jddctmgr.c	2
/src/libjpeg-turbo/src/jdarith.c	1
/src/libjpeg-turbo/src/jdphuff.c	1
/src/libjpeg-turbo/src/jdhuff.c	1
/src/libjpeg-turbo/src/wrapper/../jdcoefct.c	2
/src/libjpeg-turbo/src/wrapper/../jdmainct.c	4

Fuzzer: json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2363 75.8%

gold [1:9] 31 0.99%

yellow [10:29] 48 1.53%

greenyellow [30:49] 18 0.57%

lawngreen 50+ 657 21.0%

All colors 3117 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
108859	508137	61 : View List ['std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_1::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::BaseDictionary::begin()', 'qpdf::BaseDictionary::end()', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QPDFObjectHandle::isDictionary() const', 'std::__1::to_string(int)', 'std::__1::tuple_element<0ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<0ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::isInteger() const', 'QPDFObjectHandle::isBool() const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDF::EncryptionData::~EncryptionData()', 'QPDFObjectHandle::isName() const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getIntValue() const', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'std::__1::bitset<32ul>::bitset[abi:ne180100](unsigned long long)', 'QTC::TC(char const, char const, int)', 'QPDFObjectHandle::getBoolValue() const', 'QPDF::warn(QPDFExc const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_0::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', 'QPDF::EncryptionData::check_user_password(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::~QPDFObjectHandle()', 'qpdf::BaseHandle::size() const', 'QPDFObjectHandle::isNull() const', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDF::EncryptionData::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, bool&) const', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::EncryptionData::check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', '__cxa_free_exception', '__cxa_throw', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', '__cxa_allocate_exception', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'std::__1::tuple_element<1ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<1ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDF::getTrimmedUserPassword() const', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_2::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getName() const', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::getStringValue() const']	108859	508137	QPDF::EncryptionParameters::initialize(QPDF&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:657
7207	7207	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7207	7207	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:512
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Dictionary qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::~BaseHandle()', 'QPDF_Stream qpdf::BaseHandle::as () const']	7205	21603	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Integer qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Array qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	7288	3 : View List ['QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'QPDF::read_xrefStream(long long, bool)']	7257	72278	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:748
7205	7209	2 : View List ['QPDFObjectHandle::operator=(QPDFObjectHandle&&)', 'QPDFObjectHandle::getDict() const']	7241	43628	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:655
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7205	7207	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:476
7205	7205	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7205	7207	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:516
7205	7205	1 : View List ['QPDF::getAllPages()']	7205	7205	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:522

Runtime coverage analysis

415

715

1396

48.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	12
/src/qpdf/include/qpdf/QIntC.hh	37
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	47
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	10
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	61
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	18
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: future_qpdf_pages_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 911 17.6%

gold [1:9] 133 2.56%

yellow [10:29] 81 1.56%

greenyellow [30:49] 44 0.85%

lawngreen 50+ 4007 77.4%

All colors 5176 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1924	2139	12 : View List ['std::logic_error::logic_error(char const)', '(anonymous namespace)::JSONParser::tokenError()', 'qpdf::util::hex_decode_char(char)', '(anonymous namespace)::JSONParser::append()', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::ignore()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_free_exception', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_throw']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	7219	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7235	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:386
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
13	13	1 : View List ['QPDFMatrix::rotatex90(int)']	53	7356	QPDFAnnotationObjectHelper::getPageContentForAppearance(std::__1::basic_string ,std::__1::allocator >const&,int,int,int)	call site: 00000	/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc:220
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:272

Runtime coverage analysis

1223

209

2007

89.59%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_pages_fuzzer.cc	8
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	48
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	48
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	28
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	22
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	71
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	32
/src/qpdf/libqpdf/QPDFObjectHandle.cc	111
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	29
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 592 17.2%

gold [1:9] 94 2.73%

yellow [10:29] 72 2.09%

greenyellow [30:49] 38 1.10%

lawngreen 50+ 2637 76.8%

All colors 3433 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
88	173008	18 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'qpdf::Array::~Array()', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::isDictionary() const', 'qpdf::Array::begin()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'qpdf::BaseHandle::size() const', 'QPDFObjectHandle::as_array(qpdf::typed) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const)', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'qpdf::Array::end()', 'QPDFObjectHandle::isName() const']	88	173398	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
36	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	60	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_free_exception', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_throw']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657

Runtime coverage analysis

919

207

1528

86.45%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	47
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	43
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	25
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	68
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	28
/src/qpdf/libqpdf/QPDFObjectHandle.cc	70
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	29
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: qpdf_outlines_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 579 16.8%

gold [1:9] 93 2.70%

yellow [10:29] 51 1.48%

greenyellow [30:49] 48 1.39%

lawngreen 50+ 2664 77.5%

All colors 3435 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
36	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	60	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_free_exception', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_throw']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191

Runtime coverage analysis

919

207

1528

86.45%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_outlines_fuzzer.cc	7
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	43
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	18
/src/qpdf/libqpdf/QPDF_objects.cc	47
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	25
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	68
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	28
/src/qpdf/libqpdf/QPDFObjectHandle.cc	70
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDF_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	29
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: qpdf_pages_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 921 17.7%

gold [1:9] 142 2.74%

yellow [10:29] 91 1.75%

greenyellow [30:49] 34 0.65%

lawngreen 50+ 3990 77.0%

All colors 5178 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1924	2139	12 : View List ['std::logic_error::logic_error(char const)', '(anonymous namespace)::JSONParser::tokenError()', 'qpdf::util::hex_decode_char(char)', '(anonymous namespace)::JSONParser::append()', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char)', '(anonymous namespace)::JSONParser::ignore((anonymous namespace)::JSONParser::lex_state_e)', 'std::__1::basic_string , std::__1::allocator >::empty[abi:ne180100]() const', '(anonymous namespace)::JSONParser::append((anonymous namespace)::JSONParser::lex_state_e)', '(anonymous namespace)::JSONParser::ignore()', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', '(anonymous namespace)::JSONParser::handle_u_code(unsigned long, long long, unsigned long&, long long&, std::__1::basic_string , std::__1::allocator >&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)']	1966	2201	(anonymousnamespace)::JSONParser::getToken()	call site: 00000	/src/qpdf/libqpdf/JSON.cc:949
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 00000	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
21	21	1 : View List ['deflateEnd']	39	90	Pl_Flate::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:240
21	21	1 : View List ['deflateEnd']	23	23	Pl_Flate::Members::~Members()	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:57
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166
20	20	4 : View List ['__cxa_free_exception', '__cxa_allocate_exception', 'QPDFExc::QPDFExc(QPDFExc const&)', '__cxa_throw']	20	20	QPDFParser::warn(QPDFExcconst&)const	call site: 00000	/src/qpdf/libqpdf/QPDFParser.cc:657
14	7219	2 : View List ['QPDFObjectHandle::newBool(bool)', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)']	30	7235	QPDFAcroFormDocumentHelper::setNeedAppearances(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc:386
14	14	1 : View List ['sha384_short']	14	23	sph_sha384	call site: 00000	/src/qpdf/libqpdf/sph/md_helper.c:191
11	11	1 : View List ['std::__1::shared_ptr QPDFObject::create (QPDF_Array const&)']	11	11	qpdf::BaseHandle::copy(bool)const	call site: 00000	/src/qpdf/libqpdf/QPDFObjectHandle.cc:272
10	7338	8 : View List ['std::__1::shared_ptr ::~shared_ptr[abi:ne180100]()', 'isspace', 'QPDFObjectHandle::getObj()', 'QPDFObjectHandle::~QPDFObjectHandle()', 'QPDF::damagedPDF(long long, std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::readObject(std::__1::basic_string , std::__1::allocator > const&, QPDFObjGen)', 'QPDF::updateCache(QPDFObjGen, std::__1::shared_ptr const&, long long, long long, bool)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const']	26	22201	QPDF::readObjectAtOffset(bool,longlong,std::__1::basic_string ,std::__1::allocator >const&,QPDFObjGen)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:1488

Runtime coverage analysis

1217

214

2007

89.34%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_pages_fuzzer.cc	8
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	1
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	2
/src/qpdf/libqpdf/BufferInputSource.cc	3
/src/qpdf/include/qpdf/InputSource.hh	4
/src/qpdf/include/qpdf/QIntC.hh	48
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/libqpdf/QPDF.cc	20
/src/qpdf/libqpdf/QPDF_objects.cc	48
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	11
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	44
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	4
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	28
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	30
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	22
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	71
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	32
/src/qpdf/libqpdf/QPDFObjectHandle.cc	111
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	14
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	19
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2
/src/qpdf/libqpdf/QPDFPageDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFDocumentHelper.hh	1
/src/qpdf/libqpdf/QPDFPageLabelDocumentHelper.cc	3
/src/qpdf/include/qpdf/QPDFPageLabelDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFDocumentHelper.cc	1
/src/qpdf/libqpdf/QPDFOutlineDocumentHelper.cc	4
/src/qpdf/include/qpdf/QPDFOutlineDocumentHelper.hh	3
/src/qpdf/include/qpdf/QPDFOutlineObjectHelper.hh	3
/src/qpdf/libqpdf/QPDFOutlineObjectHelper.cc	5
/src/qpdf/include/qpdf/QPDFObjectHelper.hh	6
/src/qpdf/libqpdf/QPDFObjectHelper.cc	1
/src/qpdf/libqpdf/QPDFAcroFormDocumentHelper.cc	8
/src/qpdf/include/qpdf/QPDFAcroFormDocumentHelper.hh	2
/src/qpdf/libqpdf/QPDFFormFieldObjectHelper.cc	30
/src/qpdf/include/qpdf/QPDFFormFieldObjectHelper.hh	2
/src/qpdf/libqpdf/QPDF_String.cc	6
/src/qpdf/include/qpdf/QPDFPageDocumentHelper.hh	1
/src/qpdf/include/qpdf/QPDFPageObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFPageObjectHelper.cc	9
/src/qpdf/include/qpdf/QPDFAnnotationObjectHelper.hh	2
/src/qpdf/libqpdf/QPDFAnnotationObjectHelper.cc	7
/src/qpdf/libqpdf/Pl_QPDFTokenizer.cc	3
/src/qpdf/libqpdf/QPDFMatrix.cc	11
/src/qpdf/libqpdf/QPDFNumberTreeObjectHelper.cc	7
/src/qpdf/libqpdf/NNTree.cc	29
/src/qpdf/libqpdf/qpdf/NNTree.hh	4
/src/qpdf/include/qpdf/QPDFNumberTreeObjectHelper.hh	1
/src/qpdf/libqpdf/JSON.cc	29
/src/qpdf/libqpdf/qpdf/JSON_writer.hh	8
/src/qpdf/include/qpdf/JSON.hh	5
/src/qpdf/libqpdf/Pl_String.cc	2
/src/qpdf/libqpdf/QPDFNameTreeObjectHelper.cc	7
/src/qpdf/include/qpdf/QPDFNameTreeObjectHelper.hh	1

Fuzzer: future_json_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 2363 75.8%

gold [1:9] 25 0.80%

yellow [10:29] 54 1.73%

greenyellow [30:49] 17 0.54%

lawngreen 50+ 658 21.1%

All colors 3117 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
108859	508137	61 : View List ['std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_1::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::BaseDictionary::begin()', 'qpdf::BaseDictionary::end()', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'QPDFObjectHandle::isDictionary() const', 'std::__1::to_string(int)', 'std::__1::tuple_element<0ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<0ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDFObjectHandle::isInteger() const', 'QPDFObjectHandle::isBool() const', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDF::EncryptionData::~EncryptionData()', 'QPDFObjectHandle::isName() const', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::getIntValue() const', 'QUtil::hex_decode(std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'std::__1::bitset<32ul>::bitset[abi:ne180100](unsigned long long)', 'QTC::TC(char const, char const, int)', 'QPDFObjectHandle::getBoolValue() const', 'QPDF::warn(QPDFExc const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'QPDFExc::~QPDFExc()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::getIntValueAsInt() const', 'QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_0::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDF::EncryptionData::EncryptionData(int, int, int, int, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, bool)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'bool std::__1::operator==[abi:ne180100] >(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::isString() const', 'QPDF::EncryptionData::check_user_password(std::__1::basic_string , std::__1::allocator > const&) const', 'qpdf::Dictionary::~Dictionary()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDFObjectHandle::~QPDFObjectHandle()', 'qpdf::BaseHandle::size() const', 'QPDFObjectHandle::isNull() const', 'bool std::__1::operator==[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator > const&, char const)', 'QPDF::EncryptionData::recover_encryption_key_with_password(std::__1::basic_string , std::__1::allocator > const&, bool&) const', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'QPDF::EncryptionData::check_owner_password(std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', '__cxa_free_exception', '__cxa_throw', 'std::__1::map , std::__1::allocator >, QPDF::encryption_method_e, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, QPDF::encryption_method_e> > >::operator[](std::__1::basic_string , std::__1::allocator > const&)', '__cxa_allocate_exception', 'pad_short_parameter(std::__1::basic_string , std::__1::allocator >&, unsigned long)', 'std::__1::tuple_element<1ul, std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> >::type const& std::__1::get[abi:ne180100]<1ul, std::__1::basic_string , std::__1::allocator > const, QPDFObjectHandle>(std::__1::pair , std::__1::allocator > const, QPDFObjectHandle> const&)', 'QPDF::getTrimmedUserPassword() const', 'QPDFExc::QPDFExc(qpdf_error_code_e, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'QPDF::EncryptionParameters::initialize(QPDF&)::$_2::operator()(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::operator=(std::__1::basic_string , std::__1::allocator > const&)', 'QPDFObjectHandle::getName() const', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator[abi:ne180100]() const', 'QPDFObjectHandle::getStringValue() const']	108859	508137	QPDF::EncryptionParameters::initialize(QPDF&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:657
7207	7207	1 : View List ['QPDF::pushInheritedAttributesToPage()']	7207	7207	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:512
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Dictionary qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Dictionary*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'qpdf::BaseHandle::~BaseHandle()', 'QPDF_Stream qpdf::BaseHandle::as () const']	7205	21603	QPDF_Stream*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Integer qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Integer*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	21603	7 : View List ['bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Reference& std::__1::get[abi:ne180100] (std::__1::variant &)', 'QPDF::Resolver::resolved(QPDF, QPDFObjGen)', 'qpdf::BaseHandle::BaseHandle(std::__1::shared_ptr const&)', 'bool std::__1::holds_alternative[abi:ne180100] (std::__1::variant const&)', 'QPDF_Array qpdf::BaseHandle::as () const', 'qpdf::BaseHandle::~BaseHandle()']	7205	21603	QPDF_Array*qpdf::BaseHandle::as ()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:389
7205	7288	3 : View List ['QPDF::damagedPDF(std::__1::basic_string , std::__1::allocator > const&, long long, std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::unique_ptr >::operator->[abi:ne180100]() const', 'QPDF::read_xrefStream(long long, bool)']	7257	72278	QPDF::read_xrefTable(longlong)	call site: 00000	/src/qpdf/libqpdf/QPDF_objects.cc:748
7205	7209	2 : View List ['QPDFObjectHandle::operator=(QPDFObjectHandle&&)', 'QPDFObjectHandle::getDict() const']	7241	43628	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:655
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7205	7207	qpdf::BaseHandle::type_code()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:476
7205	7205	1 : View List ['QPDF::Resolver::resolved(QPDF*, QPDFObjGen)']	7205	7207	QPDFObject::getResolvedTypeCode()const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:516
7205	7205	1 : View List ['QPDF::getAllPages()']	7205	7205	QPDF::JSONReactor::dictionaryItem(std::__1::basic_string ,std::__1::allocator >const&,JSONconst&)	call site: 00000	/src/qpdf/libqpdf/QPDF_json.cc:522

Runtime coverage analysis

417

715

1396

48.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/json_fuzzer.cc	4
/src/qpdf/libqpdf/JSON.cc	28
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/qpdf/Util.hh	3
/src/qpdf/libqpdf/QUtil.cc	12
/src/qpdf/include/qpdf/QIntC.hh	37
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	2
/src/qpdf/include/qpdf/JSON.hh	7
/src/qpdf/libqpdf/QPDF.cc	23
/src/qpdf/libqpdf/QPDFTokenizer.cc	34
/src/qpdf/libqpdf/Buffer.cc	5
/src/qpdf/libqpdf/QPDF_json.cc	5
/src/qpdf/libqpdf/QPDF_objects.cc	47
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	10
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/include/qpdf/QPDF.hh	9
/src/qpdf/include/qpdf/QPDFObjGen.hh	11
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	8
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	61
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	48
/src/qpdf/libqpdf/QPDF_Array.cc	18
/src/qpdf/libqpdf/QPDFObjectHandle.cc	69
/src/qpdf/libqpdf/QPDFXRefEntry.cc	3
/src/qpdf/libqpdf/QPDF_Dictionary.cc	12
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_Discard.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	12
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	2
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Flate.cc	1
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	43
/src/qpdf/libqpdf/MD5.cc	5
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	3
/src/qpdf/libqpdf/Pl_AES_PDF.cc	7
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	2

Fuzzer: qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1021 21.5%

gold [1:9] 137 2.88%

yellow [10:29] 105 2.21%

greenyellow [30:49] 46 0.96%

lawngreen 50+ 3434 72.4%

All colors 4743 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22246	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7239	7239	1 : View List ['QPDFWriter::initializeSpecialStreams()']	14680	37316	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2182
607	1113	4 : View List ['std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDF::EncryptionData::compute_encryption_O_U(char const, char const)']	607	1113	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1117
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03798	/src/zlib/inflate.c:817
71	71	1 : View List ['QPDFWriter::computeDeterministicIDData()']	79	7801	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1301
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
42	50576	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'QUtil::get_current_time()', 'qpdf::BaseDictionary::begin()', 'qpdf::BaseDictionary::end()', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'MD5::encodeString(char const)', 'qpdf::Dictionary::~Dictionary()', 'QPDFObjectHandle::isString() const', 'MD5::MD5()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::runtime_error::runtime_error(char const)', 'std::__1::to_string(long)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'std::logic_error::logic_error(char const)', '__cxa_free_exception', '__cxa_throw', '__cxa_allocate_exception', 'MD5::digest(unsigned char)', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator*[abi:ne180100]() const', 'QPDFObjectHandle::getStringValue() const']	58	57816	QPDFWriter::generateID(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1876
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	58	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03726	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03734	/src/zlib/deflate.c:227

Runtime coverage analysis

1248

297

84.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1486 31.6%

gold [1:9] 122 2.60%

yellow [10:29] 66 1.40%

greenyellow [30:49] 65 1.38%

lawngreen 50+ 2953 62.9%

All colors 4692 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10758	10758	1 : View List ['QPDFWriter::writeLinearized()']	10760	10802	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2273
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15007	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7373	7373	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7648	34927	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3038
7222	7224	9 : View List ['std::__1::vector >::begin[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'QPDF::getAllObjects()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7266	72214	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2940
1117	1117	3 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_PNGFilter::action_e&&, unsigned int&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1117	9915	QPDFWriter::writeXRefStream(int,int,longlong,QPDFWriter::trailer_e,int,int,int,longlong,int,longlong,longlong,bool,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2543
991	991	2 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1007	31566	QPDFWriter::writeObjectStream(QPDFObjectHandle)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1769
259	259	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	259	18316	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3052
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03746	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	56	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51

Runtime coverage analysis

1195

391

1932

79.76%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	78
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_crypt_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1022 21.5%

gold [1:9] 139 2.93%

yellow [10:29] 98 2.06%

greenyellow [30:49] 61 1.28%

lawngreen 50+ 3421 72.1%

All colors 4741 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	22246	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7239	7239	1 : View List ['QPDFWriter::initializeSpecialStreams()']	14680	37316	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2182
607	1113	4 : View List ['std::__1::basic_string , std::__1::allocator >::~basic_string()', 'QPDF::EncryptionData::compute_encryption_key(std::__1::basic_string , std::__1::allocator > const&) const', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'QPDF::EncryptionData::compute_encryption_O_U(char const, char const)']	607	1113	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1117
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03796	/src/zlib/inflate.c:817
71	71	1 : View List ['QPDFWriter::computeDeterministicIDData()']	79	7801	QPDFWriter::writeTrailer(QPDFWriter::trailer_e,int,bool,longlong,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1301
42	50576	28 : View List ['std::__1::basic_string , std::__1::allocator >::c_str[abi:ne180100]() const', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](char const)', 'QUtil::get_current_time()', 'qpdf::BaseDictionary::begin()', 'qpdf::BaseDictionary::end()', 'std::__1::operator!=[abi:ne180100](std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&, std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> > const&)', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100](char const, unsigned long)', 'QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'std::__1::basic_string , std::__1::allocator >::operator+=[abi:ne180100](std::__1::basic_string , std::__1::allocator > const&)', 'MD5::~MD5()', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator++[abi:ne180100]()', 'MD5::encodeString(char const)', 'qpdf::Dictionary::~Dictionary()', 'QPDFObjectHandle::isString() const', 'MD5::MD5()', '_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', 'std::runtime_error::runtime_error(char const)', 'std::__1::to_string(long)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::as_dictionary(qpdf::typed) const', 'std::logic_error::logic_error(char const)', '__cxa_free_exception', '__cxa_throw', '__cxa_allocate_exception', 'MD5::digest(unsigned char)', 'std::__1::__map_iterator , std::__1::allocator >, QPDFObjectHandle>, std::__1::__tree_node , std::__1::allocator >, QPDFObjectHandle>, void>, long> >::operator*[abi:ne180100]() const', 'QPDFObjectHandle::getStringValue() const']	58	57816	QPDFWriter::generateID(bool)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1876
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	58	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03724	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03732	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1250

297

84.78%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1081 23.0%

gold [1:9] 123 2.62%

yellow [10:29] 85 1.81%

greenyellow [30:49] 66 1.40%

lawngreen 50+ 3336 71.1%

All colors 4691 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03745	/src/zlib/inflate.c:817
88	173008	18 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'qpdf::Array::~Array()', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::isDictionary() const', 'qpdf::Array::begin()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'qpdf::BaseHandle::size() const', 'QPDFObjectHandle::as_array(qpdf::typed) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const)', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'qpdf::Array::end()', 'QPDFObjectHandle::isName() const']	88	173398	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	58	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03673	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03681	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1248

293

1934

84.85%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_lin_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	79
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1491 31.7%

gold [1:9] 124 2.64%

yellow [10:29] 106 2.26%

greenyellow [30:49] 56 1.19%

lawngreen 50+ 2913 62.1%

All colors 4690 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10758	10758	1 : View List ['QPDFWriter::writeLinearized()']	10760	10802	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2273
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	15007	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7373	7373	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7648	34927	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3038
7222	7224	9 : View List ['std::__1::vector >::begin[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'QPDF::getAllObjects()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7266	72214	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2940
1117	1117	3 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_PNGFilter::action_e&&, unsigned int&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1117	9915	QPDFWriter::writeXRefStream(int,int,longlong,QPDFWriter::trailer_e,int,int,int,longlong,int,longlong,longlong,bool,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2543
991	991	2 : View List ['std::__1::basic_string , std::__1::allocator > qpdf::pl::pipe (std::__1::basic_string_view >, Pl_Flate::action_e&&)', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](std::__1::basic_string , std::__1::allocator >&&)']	1007	31566	QPDFWriter::writeObjectStream(QPDFObjectHandle)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1769
259	259	1 : View List ['QPDFWriter::writeEncryptionDictionary()']	259	18316	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3052
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03744	/src/zlib/inflate.c:817
108	108	1 : View List ['deflateInit_']	521	1005	Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int)	call site: 00000	/src/qpdf/libqpdf/Pl_Flate.cc:151
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	56	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51

Runtime coverage analysis

1198

395

1932

79.55%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	78
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: future_qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1689 35.6%

gold [1:9] 137 2.88%

yellow [10:29] 95 2.00%

greenyellow [30:49] 56 1.18%

lawngreen 50+ 2764 58.2%

All colors 4741 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10758	10758	1 : View List ['QPDFWriter::writeLinearized()']	10760	10802	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2273
9214	9214	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	9222	9226	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1809
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	29707	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7373	7373	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7389	34927	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3038
7239	7239	1 : View List ['QPDFWriter::initializeSpecialStreams()']	22141	37316	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2182
7222	7224	9 : View List ['std::__1::vector >::begin[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'QPDF::getAllObjects()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7266	72214	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2940
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
407	407	1 : View List ['QPDF::EncryptionData::compute_encryption_parameters_V5(char const, char const)']	407	407	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1117
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03796	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941

Runtime coverage analysis

1171

438

77.56%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_crypt_insecure_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	22
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	51
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	81
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_lin_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1083 23.0%

gold [1:9] 114 2.42%

yellow [10:29] 122 2.59%

greenyellow [30:49] 56 1.19%

lawngreen 50+ 3318 70.7%

All colors 4693 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03747	/src/zlib/inflate.c:817
88	173008	18 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator[abi:ne180100]() const', 'QPDFObjectHandle::~QPDFObjectHandle()', 'qpdf::Array::~Array()', 'QPDFObjectHandle::isNameAndEquals(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'QPDFObjectHandle::getArrayItem(int) const', 'QPDFObjectHandle::isDictionaryOfType(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&) const', 'QPDFObjectHandle::isDictionary() const', 'qpdf::Array::begin()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)', 'qpdf::BaseHandle::size() const', 'QPDFObjectHandle::as_array(qpdf::typed) const', 'std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const)', 'QPDF::EncryptionParameters::interpretCF(QPDFObjectHandle const&) const', 'QPDFObjectHandle::isArray() const', 'qpdf::Array::end()', 'QPDFObjectHandle::isName() const']	88	173398	QPDF::decryptStream(std::__1::shared_ptr ,std::__1::shared_ptr ,QPDF&,Pipeline*&,QPDFObjGen,QPDFObjectHandle&,bool,std::__1::unique_ptr >&)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:953
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941
34	28882	16 : View List ['QPDFObjectHandle::getKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(char const, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::newInteger(long long)', 'Pl_Count::~Pl_Count()', 'QPDFObjGen::unparse(char) const', 'std::__1::to_string(long long)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, std::__1::basic_string , std::__1::allocator >&&)', 'QPDFObjectHandle::StreamDataProvider::supportsRetry()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'Pl_Count::getCount() const', 'QPDFObjectHandle::replaceKey(std::__1::basic_string , std::__1::allocator > const&, QPDFObjectHandle const&)', 'QPDFObjectHandle::hasKey(std::__1::basic_string , std::__1::allocator > const&) const', 'std::runtime_error::runtime_error(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const)', 'Pl_Count::Pl_Count(char const, Pipeline)', 'QPDFObjectHandle::getIntValue() const']	58	29511	qpdf::Stream::pipeStreamData(Pipeline,bool,int,qpdf_stream_decode_level_e,bool,bool)	call site: 00000	/src/qpdf/libqpdf/QPDF_Stream.cc:534
29	29	1 : View List ['Pl_RunLength::encode(unsigned char const*, unsigned long)']	29	29	Pl_RunLength::write(unsignedcharconst*,unsignedlong)	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:51
28	28	1 : View List ['do_barray_io']	28	30	access_virt_barray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:1025
21	21	1 : View List ['crc32']	579	630	deflate	call site: 03675	/src/zlib/deflate.c:1160
21	21	1 : View List ['crc32']	21	21	read_buf	call site: 03683	/src/zlib/deflate.c:227
20	20	1 : View List ['Pl_RunLength::flush_encode()']	20	24	Pl_RunLength::finish()	call site: 00000	/src/qpdf/libqpdf/Pl_RunLength.cc:166

Runtime coverage analysis

1246

289

1934

85.06%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/qpdf/fuzz/qpdf_lin_fuzzer.cc	9
/src/qpdf/libqpdf/Buffer.cc	7
/src/qpdf/libqpdf/Pl_Discard.cc	2
/src/qpdf/libqpdf/Pipeline.cc	6
/src/qpdf/libqpdf/Pl_DCT.cc	3
/src/qpdf/libqpdf/Pl_PNGFilter.cc	13
/src/qpdf/libqpdf/Pl_RunLength.cc	1
/src/qpdf/libqpdf/Pl_TIFFPredictor.cc	1
/src/qpdf/libqpdf/Pl_Flate.cc	10
/src/qpdf/libqpdf/BufferInputSource.cc	1
/src/qpdf/include/qpdf/InputSource.hh	3
/src/qpdf/include/qpdf/QIntC.hh	47
/usr/local/bin/../include/c++/v1/sstream	2
/usr/local/bin/../include/c++/v1/stdexcept	3
/src/qpdf/libqpdf/QPDF.cc	25
/src/qpdf/libqpdf/QPDF_objects.cc	53
/src/qpdf/libqpdf/qpdf/QPDF_private.hh	28
/src/qpdf/libqpdf/InputSource.cc	7
/src/qpdf/include/qpdf/QTC.hh	1
/src/qpdf/libqpdf/QPDFExc.cc	3
/src/qpdf/libqpdf/QPDFLogger.cc	8
/src/qpdf/include/qpdf/QPDFExc.hh	2
/src/qpdf/libqpdf/QPDFTokenizer.cc	33
/src/qpdf/libqpdf/qpdf/InputSource_private.hh	9
/src/qpdf/libqpdf/qpdf/Util.hh	5
/src/qpdf/include/qpdf/QPDFTokenizer.hh	9
/src/qpdf/libqpdf/QUtil.cc	21
/src/qpdf/include/qpdf/QPDF.hh	11
/src/qpdf/include/qpdf/QPDFObjGen.hh	12
/src/qpdf/include/qpdf/QPDFXRefEntry.hh	2
/src/qpdf/libqpdf/QPDFParser.cc	29
/src/qpdf/libqpdf/qpdf/QPDFParser.hh	3
/src/qpdf/libqpdf/qpdf/QPDFTokenizer_private.hh	4
/src/qpdf/include/qpdf/QPDFObjectHandle.hh	17
/src/qpdf/include/qpdf/ObjectHandle.hh	9
/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh	67
/src/qpdf/libqpdf/qpdf/QPDFObject_private.hh	47
/src/qpdf/libqpdf/QPDF_Array.cc	23
/src/qpdf/libqpdf/QPDFObjectHandle.cc	79
/src/qpdf/libqpdf/QPDFXRefEntry.cc	4
/src/qpdf/libqpdf/QPDF_Dictionary.cc	13
/src/qpdf/libqpdf/QPDFObject.cc	1
/src/qpdf/libqpdf/Pl_OStream.cc	1
/src/qpdf/include/qpdf/Pipeline.hh	2
/src/qpdf/libqpdf/QPDF_Stream.cc	20
/src/qpdf/libqpdf/qpdf/Pipeline_private.hh	15
/src/qpdf/libqpdf/qpdf/SF_FlateLzwDecode.hh	2
/src/qpdf/libqpdf/qpdf/SF_RunLengthDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_DCTDecode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCII85Decode.hh	1
/src/qpdf/libqpdf/qpdf/SF_ASCIIHexDecode.hh	1
/src/qpdf/libqpdf/qpdf/ContentNormalizer.hh	3
/src/qpdf/libqpdf/Pl_Count.cc	3
/src/qpdf/libqpdf/QPDF_encryption.cc	45
/src/qpdf/libqpdf/MD5.cc	7
/src/qpdf/libqpdf/QPDFCryptoProvider.cc	6
/src/qpdf/include/qpdf/QPDFCryptoProvider.hh	1
/src/qpdf/libqpdf/qpdf/MD5.hh	3
/src/qpdf/libqpdf/RC4.cc	3
/src/qpdf/libqpdf/qpdf/RC4.hh	1
/src/qpdf/libqpdf/Pl_SHA2.cc	4
/src/qpdf/libqpdf/Pl_Buffer.cc	4
/src/qpdf/libqpdf/Pl_AES_PDF.cc	8
/src/qpdf/libqpdf/CryptoRandomDataProvider.cc	1
/src/qpdf/libqpdf/qpdf/Pl_AES_PDF.hh	1
/src/qpdf/libqpdf/qpdf/Pl_SHA2.hh	1
/src/qpdf/libqpdf/QPDF_pages.cc	4
/src/qpdf/libqpdf/QPDF_optimization.cc	9
/src/qpdf/libqpdf/QPDFWriter.cc	79
/src/qpdf/libqpdf/qpdf/ObjTable.hh	19
/src/qpdf/libqpdf/qpdf/QPDFWriter_private.hh	1
/src/qpdf/libqpdf/QPDF_linearization.cc	17
/src/qpdf/libqpdf/QPDFSystemError.cc	2
/src/qpdf/include/qpdf/QPDFSystemError.hh	1
/src/qpdf/libqpdf/Pl_MD5.cc	3
/src/qpdf/include/qpdf/QUtil.hh	1
/src/qpdf/libqpdf/qpdf/Pl_PNGFilter.hh	1
/src/zlib/deflate.c	16
/src/zlib/crc32.c	5
/src/zlib/adler32.c	2
/src/zlib/trees.c	20
/src/zlib/inflate.c	10
/src/zlib/inftrees.c	1
/src/zlib/inffast.c	1
/src/qpdf/libqpdf/QPDF_String.cc	3
/src/qpdf/libqpdf/Pl_RC4.cc	3
/src/qpdf/libqpdf/qpdf/Pl_RC4.hh	1
/src/qpdf/libqpdf/BitWriter.cc	4
/src/qpdf/libqpdf/qpdf/bits_functions.hh	1

Fuzzer: qpdf_crypt_insecure_fuzzer

Call tree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color Runtime hitcount Callsite count Percentage

red 0 1695 35.7%

gold [1:9] 97 2.04%

yellow [10:29] 99 2.08%

greenyellow [30:49] 55 1.15%

lawngreen 50+ 2797 58.9%

All colors 4743 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
10758	10758	1 : View List ['QPDFWriter::writeLinearized()']	10760	10802	QPDFWriter::write()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2273
9214	9214	1 : View List ['QPDFWriter::writeObjectStream(QPDFObjectHandle)']	9222	9226	QPDFWriter::writeObject(QPDFObjectHandle,int)	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:1809
7537	7537	1 : View List ['QPDFWriter::copyEncryptionParameters(QPDF&)']	29707	44969	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2167
7373	7373	1 : View List ['QPDFWriter::enqueueObjectsPCLm()']	7389	34927	QPDFWriter::writeStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:3038
7239	7239	1 : View List ['QPDFWriter::initializeSpecialStreams()']	22141	37316	QPDFWriter::doWriteSetup()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2182
7222	7224	9 : View List ['std::__1::vector >::begin[abi:ne180100]()', 'std::__1::shared_ptr ::operator->[abi:ne180100]() const', 'std::__1::vector >::end[abi:ne180100]()', 'std::__1::vector >::~vector[abi:ne180100]()', 'QTC::TC(char const, char const, int)', 'std::__1::__wrap_iter ::operator*[abi:ne180100]() const', 'QPDF::getAllObjects()', 'std::__1::__wrap_iter ::operator++[abi:ne180100]()', 'bool std::__1::operator!=[abi:ne180100] (std::__1::__wrap_iter const&, std::__1::__wrap_iter const&)']	7266	72214	QPDFWriter::enqueueObjectsStandard()	call site: 00000	/src/qpdf/libqpdf/QPDFWriter.cc:2940
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	21623	QPDFObjectHandle::as_array(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:528
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7211	QPDFObjectHandle::as_dictionary(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:545
7205	7205	1 : View List ['QPDFObjectHandle::assertType(char const*, bool) const']	7205	7209	QPDFObjectHandle::as_stream(qpdf::typed)const	call site: 00000	/src/qpdf/libqpdf/qpdf/QPDFObjectHandle_private.hh:558
407	407	1 : View List ['QPDF::EncryptionData::compute_encryption_parameters_V5(char const, char const)']	407	407	QPDF::EncryptionData::compute_parameters(charconst,charconst)	call site: 00000	/src/qpdf/libqpdf/QPDF_encryption.cc:1117
252	474	6 : View List ['inflate_fast', 'adler32', 'fixedtables', 'crc32', 'inflate_table', 'updatewindow']	252	474	inflate	call site: 03798	/src/zlib/inflate.c:817
60	60	1 : View List ['do_sarray_io']	60	62	access_virt_sarray	call site: 00000	/src/libjpeg-turbo/src/jmemmgr.c:941

Runtime coverage analysis

1166

438