Fuzz introspector: speex_decode_fuzzer_fixed
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
108 0 EP call site: 00000 ogg_stream_pagein

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 ogg_sync_init [function] [call site] 00001
1 speex_bits_init [function] [call site] 00002
2 speex_alloc [function] [call site] 00003
3 calloc [call site] 00004
2 speex_bits_reset [function] [call site] 00005
1 ogg_sync_buffer [function] [call site] 00006
2 ogg_sync_check [function] [call site] 00007
2 ogg_sync_clear [function] [call site] 00008
2 realloc [call site] 00009
2 ogg_sync_clear [function] [call site] 00010
1 ogg_sync_wrote [function] [call site] 00011
2 ogg_sync_check [function] [call site] 00012
1 ogg_sync_pageout [function] [call site] 00013
2 ogg_sync_check [function] [call site] 00014
2 ogg_sync_pageseek [function] [call site] 00015
3 ogg_sync_check [function] [call site] 00016
3 memcmp [call site] 00017
3 ogg_page_checksum_set [function] [call site] 00018
4 _os_update_crc [function] [call site] 00019
4 _os_update_crc [function] [call site] 00020
3 memcmp [call site] 00021
3 memchr [call site] 00022
1 ogg_page_serialno [function] [call site] 00023
1 ogg_stream_init [function] [call site] 00024
2 ogg_stream_clear [function] [call site] 00025
1 ogg_page_serialno [function] [call site] 00026
1 ogg_page_serialno [function] [call site] 00027
1 ogg_stream_reset_serialno [function] [call site] 00028
2 ogg_stream_check [function] [call site] 00029
2 ogg_stream_reset [function] [call site] 00030
3 ogg_stream_check [function] [call site] 00031
1 ogg_stream_pagein [function] [call site] 00032
2 ogg_page_version [function] [call site] 00033
2 ogg_page_continued [function] [call site] 00034
2 ogg_page_bos [function] [call site] 00035
2 ogg_page_eos [function] [call site] 00036
2 ogg_page_granulepos [function] [call site] 00037
2 ogg_page_serialno [function] [call site] 00038
2 ogg_page_pageno [function] [call site] 00039
2 ogg_stream_check [function] [call site] 00040
2 _os_lacing_expand [function] [call site] 00041
3 ogg_stream_clear [function] [call site] 00042
3 realloc [call site] 00043
3 ogg_stream_clear [function] [call site] 00044
3 realloc [call site] 00045
3 ogg_stream_clear [function] [call site] 00046
2 _os_body_expand [function] [call site] 00047
3 ogg_stream_clear [function] [call site] 00048
3 realloc [call site] 00049
3 ogg_stream_clear [function] [call site] 00050
1 ogg_page_granulepos [function] [call site] 00051
1 ogg_page_packets [function] [call site] 00052
1 cleanup(void*, SpeexBits*, int, ogg_stream_state*, ogg_sync_state*) [function] [call site] 00053
2 speex_decoder_destroy [function] [call site] 00054
2 speex_bits_destroy [function] [call site] 00055
3 speex_free [function] [call site] 00056
2 ogg_stream_clear [function] [call site] 00057
2 ogg_sync_clear [function] [call site] 00058
1 cleanup(void*, SpeexBits*, int, ogg_stream_state*, ogg_sync_state*) [function] [call site] 00059
1 ogg_page_eos [function] [call site] 00060
1 cleanup(void*, SpeexBits*, int, ogg_stream_state*, ogg_sync_state*) [function] [call site] 00061
1 ogg_stream_packetout [function] [call site] 00062
2 ogg_stream_check [function] [call site] 00063
2 _packetout [function] [call site] 00064
1 memcmp [call site] 00065
1 process_header(ogg_packet*, int, int*, int*, int*, int*, int*, SpeexStereoState*, int*) [function] [call site] 00066
2 speex_packet_to_header [function] [call site] 00067
3 speex_notify [function] [call site] 00068
3 speex_alloc [function] [call site] 00069
3 le_int [function] [call site] 00070
3 le_int [function] [call site] 00071
3 le_int [function] [call site] 00072
3 le_int [function] [call site] 00073
3 le_int [function] [call site] 00074
3 le_int [function] [call site] 00075
3 le_int [function] [call site] 00076
3 le_int [function] [call site] 00077
3 le_int [function] [call site] 00078
3 le_int [function] [call site] 00079
3 le_int [function] [call site] 00080
3 speex_notify [function] [call site] 00081
3 speex_free [function] [call site] 00082
2 speex_lib_get_mode [function] [call site] 00083
2 speex_decoder_init [function] [call site] 00084
2 speex_decoder_ctl [function] [call site] 00085
2 speex_decoder_ctl [function] [call site] 00086
2 speex_decoder_destroy [function] [call site] 00087
2 speex_decoder_ctl [function] [call site] 00088
2 speex_decoder_destroy [function] [call site] 00089
2 speex_decoder_ctl [function] [call site] 00090
2 speex_decoder_destroy [function] [call site] 00091
1 cleanup(void*, SpeexBits*, int, ogg_stream_state*, ogg_sync_state*) [function] [call site] 00092
1 speex_decoder_ctl [function] [call site] 00093
1 speex_bits_read_from [function] [call site] 00094
2 speex_notify [function] [call site] 00095
2 speex_realloc [function] [call site] 00096
3 realloc [call site] 00097
2 speex_warning [function] [call site] 00098
2 speex_warning [function] [call site] 00099
1 speex_decode [function] [call site] 00100
2 speex_decoder_ctl [function] [call site] 00101
1 speex_bits_remaining [function] [call site] 00102
1 speex_decode_stereo [function] [call site] 00103
2 speex_stereo_state_reset [function] [call site] 00104
2 spx_sqrt [function] [call site] 00105
3 spx_ilog4 [function] [call site] 00106
2 spx_sqrt [function] [call site] 00107
1 cleanup(void*, SpeexBits*, int, ogg_stream_state*, ogg_sync_state*) [function] [call site] 00108