Fuzz introspector: tmux/fuzz/sixel-fuzzer.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
33 78 recallocarray call site: 00078 sixel_parse_repeat
17 16 xmalloc call site: 00016 fatal
17 59 options_get_number call site: 00059 sixel_parse_attributes
15 112 strtonum call site: 00112 sixel_parse_write
13 34 vis call site: 00034 xcalloc
10 5 log_debug call site: 00005 log_vwrite
2 2 LLVMFuzzerTestOneInput call site: 00002 sixel_parse
2 48 xcalloc call site: 00048 options_get_number
1 0 EP call site: 00000
1 57 options_get call site: 00057 fatalx
1 128 LLVMFuzzerTestOneInput call site: 00128 image_size_in_cells

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 sixel_parse [function] [call site] 00003
2 log_debug [function] [call site] 00004
2 options_get_number [function] [call site] 00050
3 options_get [function] [call site] 00051
4 options_get_only [function] [call site] 00052
4 options_get_only [function] [call site] 00057
3 OPTIONS_IS_NUMBER [function] [call site] 00059
2 sixel_parse_attributes [function] [call site] 00061
2 sixel_parse_colour [function] [call site] 00090
3 sixel_parse_number [function] [call site] 00091
3 log_debug [function] [call site] 00092
3 log_debug [function] [call site] 00093
3 sixel_parse_number [function] [call site] 00094
3 log_debug [function] [call site] 00095
3 log_debug [function] [call site] 00096
3 sixel_parse_number [function] [call site] 00097
3 log_debug [function] [call site] 00098
3 log_debug [function] [call site] 00099
3 sixel_parse_number [function] [call site] 00100
3 log_debug [function] [call site] 00101
3 log_debug [function] [call site] 00102
3 sixel_parse_number [function] [call site] 00103
3 log_debug [function] [call site] 00104
3 log_debug [function] [call site] 00105
3 log_debug [function] [call site] 00106
3 xrecallocarray [function] [call site] 00107
2 sixel_parse_repeat [function] [call site] 00108
3 log_debug [function] [call site] 00109
3 log_debug [function] [call site] 00110
3 log_debug [function] [call site] 00113
3 sixel_parse_write [function] [call site] 00114
4 sixel_set_pixel [function] [call site] 00115
5 sixel_parse_expand_lines [function] [call site] 00116
5 sixel_parse_expand_line [function] [call site] 00117
6 xrecallocarray [function] [call site] 00118
3 log_debug [function] [call site] 00119
2 sixel_parse_write [function] [call site] 00120
2 log_debug [function] [call site] 00121
1 sixel_size_in_cells [function] [call site] 00128
2 image_size_in_cells [function] [call site] 00129
1 sixel_free [function] [call site] 00130