Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
None	8	885	woff2::ConvertWOFF2ToTTF(unsignedcharconst,unsignedlong,woff2::WOFF2Out)	call site: 00000	/src/woff2/src/woff2_dec.cc:1364
None	3	1393	BrotliDecoderDecompressStream	call site: 00128	/src/woff2/brotli/c/dec/decode.c:2087
None	0	2	BrotliDecoderDecompressStream	call site: 00128	/src/woff2/brotli/c/dec/decode.c:2019
None	0	0	BrotliEnsureRingBuffer	call site: 00082	/src/woff2/brotli/c/dec/decode.c:1315
None	0	0	woff2::Buffer::Read(unsignedchar*,unsignedlong)	call site: 00000	/src/woff2/./src/./buffer.h:70
None	0	0	unsignedlongwoff2::Round4 (unsignedlong)	call site: 00000	/src/woff2/./src/./round.h:19
None	0	0	unsignedintwoff2::Round4 (unsignedint)	call site: 00000	/src/woff2/./src/./round.h:19
None	0	0	woff2::WOFF2StringOut::Write(voidconst*,unsignedlong,unsignedlong)	call site: 00000	/src/woff2/src/woff2_out.cc:21
2 : View List ['std::__1::basic_string , std::__1::allocator >::append(unsigned long, char)', 'std::__1::basic_string , std::__1::allocator >::size() const']	0	0	woff2::WOFF2StringOut::Write(voidconst*,unsignedlong,unsignedlong)	call site: 00000	/src/woff2/src/woff2_out.cc:27

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           woff2::WOFF2StringOut::WOFF2StringOut(std::__1::basic_string
           
            , std::__1::allocator
            
             >*)

[function] [call site] 00001


             woff2::WOFF2Out::WOFF2Out()

[function] [call site] 00002


           woff2::WOFF2StringOut::SetMaxSize(unsigned long)

[function] [call site] 00003


           woff2::ConvertWOFF2ToTTF(unsigned char const*, unsigned long, woff2::WOFF2Out*)

[function] [call site] 00004


             woff2::(anonymous namespace)::RebuildMetadata::RebuildMetadata()

[function] [call site] 00005


             woff2::(anonymous namespace)::WOFF2Header::WOFF2Header()

[function] [call site] 00006


             woff2::(anonymous namespace)::ReadWOFF2Header(unsigned char const*, unsigned long, woff2::(anonymous namespace)::WOFF2Header*)

[function] [call site] 00007


               woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00008


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00009


                 ntohl

[call site] 00010


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00011


               woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00012


                 ntohs

[call site] 00013


               woff2::Buffer::Skip(unsigned long)

[function] [call site] 00014


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00015


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00016


               woff2::Buffer::Skip(unsigned long)

[function] [call site] 00017


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00018


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00019


               woff2::(anonymous namespace)::ReadTableDirectory(woff2::Buffer*, std::__1::vector
               
                >*, unsigned long)

[function] [call site] 00020


                 woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00021


                 woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00022


                 woff2::ReadBase128(woff2::Buffer*, unsigned int*)

[function] [call site] 00023


                   woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00024


                 woff2::ReadBase128(woff2::Buffer*, unsigned int*)

[function] [call site] 00025


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00026


               woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00027


                 woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00028


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00029


                 woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00030


                 woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00031


               woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00032


               woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00033


               woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00034


               woff2::(anonymous namespace)::ComputeOffsetToFirstTable(woff2::(anonymous namespace)::WOFF2Header const&)

[function] [call site] 00035


                 woff2::CollectionHeaderSize(unsigned int, unsigned int)

[function] [call site] 00036


               woff2::Buffer::offset() const

[function] [call site] 00037


               unsigned long woff2::Round4
               
                (unsigned long)

[function] [call site] 00038


               unsigned int woff2::Round4
               
                (unsigned int)

[function] [call site] 00039


               unsigned int woff2::Round4
               
                (unsigned int)

[function] [call site] 00040


               unsigned long woff2::Round4
               
                (unsigned long)

[function] [call site] 00041


             woff2::(anonymous namespace)::WriteHeaders(unsigned char const*, unsigned long, woff2::(anonymous namespace)::RebuildMetadata*, woff2::(anonymous namespace)::WOFF2Header*, woff2::WOFF2Out*)

[function] [call site] 00042


               woff2::(anonymous namespace)::ComputeOffsetToFirstTable(woff2::(anonymous namespace)::WOFF2Header const&)

[function] [call site] 00043


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00044


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00045


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00046


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00047


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00048


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00049


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00050


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00051


               woff2::(anonymous namespace)::StoreOffsetTable(unsigned char*, unsigned long, unsigned int, unsigned short)

[function] [call site] 00052


                 woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00053


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00054


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00055


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00056


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00057


               woff2::(anonymous namespace)::StoreTableEntry(unsigned char*, unsigned int, unsigned int)

[function] [call site] 00058


                 woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00059


                 woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00060


                 woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00061


                 woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00062


               woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00063


               woff2::(anonymous namespace)::StoreOffsetTable(unsigned char*, unsigned long, unsigned int, unsigned short)

[function] [call site] 00064


               woff2::(anonymous namespace)::StoreTableEntry(unsigned char*, unsigned int, unsigned int)

[function] [call site] 00065


               woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00066


             woff2::(anonymous namespace)::Woff2Uncompress(unsigned char*, unsigned long, unsigned char const*, unsigned long)

[function] [call site] 00067


               BrotliDecoderDecompress

[function] [call site] 00068


                 BrotliDecoderStateInit

[function] [call site] 00069


                   BrotliInitBitReader

[function] [call site] 00070


                   BrotliGetDictionary

[function] [call site] 00071


                   BrotliGetTransforms

[function] [call site] 00072


                 BrotliDecoderDecompressStream

[function] [call site] 00073


                   WriteRingBuffer

[function] [call site] 00074


                     UnwrittenBytes

[function] [call site] 00075


                   BrotliWarmupBitReader

[function] [call site] 00076


                   DecodeWindowBits

[function] [call site] 00077


                   BrotliDecoderStateMetablockBegin

[function] [call site] 00078


                   DecodeMetaBlockLength

[function] [call site] 00079


                   BrotliCalculateRingBufferSize

[function] [call site] 00080


                   CopyUncompressedBlockToOutput

[function] [call site] 00081


                     BrotliEnsureRingBuffer

[function] [call site] 00082


                     WriteRingBuffer

[function] [call site] 00083


                   DecodeVarLenUint8

[function] [call site] 00084


                   ReadHuffmanCode

[function] [call site] 00085


                     ReadSimpleHuffmanSymbols

[function] [call site] 00086


                     BrotliBuildSimpleHuffmanTable

[function] [call site] 00087


                     ReadCodeLengthCodeLengths

[function] [call site] 00088


                     BrotliBuildCodeLengthsHuffmanTable

[function] [call site] 00089


                     ReadSymbolCodeLengths

[function] [call site] 00090


                       BrotliWarmupBitReader

[function] [call site] 00091


                     SafeReadSymbolCodeLengths

[function] [call site] 00092


                     BrotliBuildHuffmanTable

[function] [call site] 00093


                   ReadHuffmanCode

[function] [call site] 00094


                   SafeDecodeSymbol

[function] [call site] 00095


                   ReadContextModes

[function] [call site] 00096


                   DecodeContextMap

[function] [call site] 00097


                     DecodeVarLenUint8

[function] [call site] 00098


                     ReadHuffmanCode

[function] [call site] 00099


                     SafeDecodeSymbol

[function] [call site] 00100


                     InverseMoveToFrontTransform

[function] [call site] 00101


                   BrotliMaxDistanceSymbol

[function] [call site] 00102


                   DecodeContextMap

[function] [call site] 00103


                   BrotliDecoderHuffmanTreeGroupInit

[function] [call site] 00104


                   BrotliDecoderHuffmanTreeGroupInit

[function] [call site] 00105


                   BrotliDecoderHuffmanTreeGroupInit

[function] [call site] 00106


                   HuffmanTreeGroupDecode

[function] [call site] 00107


                     ReadHuffmanCode

[function] [call site] 00108


                   BrotliEnsureRingBuffer

[function] [call site] 00109


                   ProcessCommands

[function] [call site] 00110


                     BrotliWarmupBitReader

[function] [call site] 00111


                     DecodeCommandBlockSwitch

[function] [call site] 00112


                     BrotliTransformDictionaryWord

[function] [call site] 00113


                       ToUpperCase

[function] [call site] 00114


                       ToUpperCase

[function] [call site] 00115


                   SafeProcessCommands

[function] [call site] 00116


                     SafeDecodeCommandBlockSwitch

[function] [call site] 00117


                       SafeDecodeSymbol

[function] [call site] 00118


                     SafeDecodeSymbol

[function] [call site] 00119


                     SafeDecodeSymbol

[function] [call site] 00120


                     SafeDecodeSymbol

[function] [call site] 00121


                     SafeDecodeSymbol

[function] [call site] 00122


                     BrotliTransformDictionaryWord

[function] [call site] 00123


                   WriteRingBuffer

[function] [call site] 00124


                   WrapRingBuffer

[function] [call site] 00125


                   BrotliDecoderStateCleanupAfterMetablock

[function] [call site] 00126


                   WriteRingBuffer

[function] [call site] 00127


                   SaveErrorCode

[function] [call site] 00128


                 BrotliDecoderStateCleanup

[function] [call site] 00129


                   BrotliDecoderStateCleanupAfterMetablock

[function] [call site] 00130


             woff2::(anonymous namespace)::ReconstructFont(unsigned char*, unsigned int, woff2::(anonymous namespace)::RebuildMetadata*, woff2::(anonymous namespace)::WOFF2Header*, unsigned long, woff2::WOFF2Out*)

[function] [call site] 00131


               woff2::(anonymous namespace)::Tables(woff2::(anonymous namespace)::WOFF2Header*, unsigned long)

[function] [call site] 00132


               woff2::(anonymous namespace)::FindTable(std::__1::vector
               
                >*, unsigned int)

[function] [call site] 00133


               woff2::(anonymous namespace)::FindTable(std::__1::vector
               
                >*, unsigned int)

[function] [call site] 00134


               woff2::(anonymous namespace)::ReadNumHMetrics(unsigned char const*, unsigned long, unsigned short*)

[function] [call site] 00135


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00136


                 woff2::Buffer::Skip(unsigned long)

[function] [call site] 00137


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00138


               woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00139


               woff2::(anonymous namespace)::FindTable(std::__1::vector
               
                >*, unsigned int)

[function] [call site] 00140


               woff2::(anonymous namespace)::ReconstructGlyf(unsigned char const*, woff2::Table*, unsigned int*, woff2::Table*, unsigned int*, woff2::(anonymous namespace)::WOFF2FontInfo*, woff2::WOFF2Out*)

[function] [call site] 00141


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00142


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00143


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00144


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00145


                 woff2::Buffer::ReadU32(unsigned int*)

[function] [call site] 00146


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00147


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00148


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00149


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00150


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00151


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00152


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00153


                 woff2::Buffer::buffer() const

[function] [call site] 00154


                 woff2::Buffer::Skip(unsigned long)

[function] [call site] 00155


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00156


                 woff2::(anonymous namespace)::SizeOfComposite(woff2::Buffer, unsigned long*, bool*)

[function] [call site] 00157


                   woff2::Buffer::offset() const

[function] [call site] 00158


                   woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00159


                   woff2::Buffer::Skip(unsigned long)

[function] [call site] 00160


                   woff2::Buffer::offset() const

[function] [call site] 00161


                 woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00162


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00163


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00164


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00165


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00166


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00167


                 woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00168


                 woff2::Buffer::length() const

[function] [call site] 00169


                 woff2::Buffer::buffer() const

[function] [call site] 00170


                 woff2::Buffer::buffer() const

[function] [call site] 00171


                 woff2::Buffer::offset() const

[function] [call site] 00172


                 woff2::Buffer::length() const

[function] [call site] 00173


                 woff2::(anonymous namespace)::TripletDecode(unsigned char const*, unsigned char const*, unsigned long, unsigned int, woff2::Point*, unsigned long*)

[function] [call site] 00174


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00175


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00176


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00177


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00178


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00179


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00180


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00181


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00182


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00183


                   woff2::(anonymous namespace)::WithSign(int, int)

[function] [call site] 00184


                   woff2::(anonymous namespace)::_SafeIntAddition(int, int, int*)

[function] [call site] 00185


                   woff2::(anonymous namespace)::_SafeIntAddition(int, int, int*)

[function] [call site] 00186


                 woff2::Buffer::Skip(unsigned long)

[function] [call site] 00187


                 woff2::Buffer::Skip(unsigned long)

[function] [call site] 00188


                 woff2::Read255UShort(woff2::Buffer*, unsigned int*)

[function] [call site] 00189


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00190


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00191


                 woff2::(anonymous namespace)::ComputeBbox(unsigned int, woff2::Point const*, unsigned char*)

[function] [call site] 00192


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00193


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00194


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00195


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00196


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00197


                 woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00198


                 woff2::Buffer::Read(unsigned char*, unsigned long)

[function] [call site] 00199


                 woff2::(anonymous namespace)::StorePoints(unsigned int, woff2::Point const*, unsigned int, unsigned int, bool, unsigned char*, unsigned long, unsigned long*)

[function] [call site] 00200

abs

[call site] 00201


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00202

abs

[call site] 00203


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00204


                 woff2::(anonymous namespace)::Pad4(woff2::WOFF2Out*)

[function] [call site] 00205


                   unsigned long woff2::Round4
                   
                    (unsigned long)

[function] [call site] 00206


                 woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00207


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00208


                 woff2::Buffer::ReadS16(short*)

[function] [call site] 00209


                   woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00210


                 woff2::(anonymous namespace)::StoreLoca(std::__1::vector
                 
                  > const&, int, unsigned int*, woff2::WOFF2Out*)

[function] [call site] 00211


                   woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00212


                   woff2::Store16(unsigned char*, unsigned long, int)

[function] [call site] 00213


                   woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00214


               woff2::(anonymous namespace)::ReconstructTransformedHmtx(unsigned char const*, unsigned long, unsigned short, unsigned short, std::__1::vector
               
                > const&, unsigned int*, woff2::WOFF2Out*)

[function] [call site] 00215


                 woff2::Buffer::Buffer(unsigned char const*, unsigned long)

[function] [call site] 00216


                 woff2::Buffer::ReadU8(unsigned char*)

[function] [call site] 00217


                 __assert_fail

[call site] 00218


                 woff2::Buffer::ReadU16(unsigned short*)

[function] [call site] 00219


                 woff2::Buffer::ReadS16(short*)

[function] [call site] 00220


                 woff2::Buffer::ReadS16(short*)

[function] [call site] 00221


                 woff2::Store16(int, unsigned long*, unsigned char*)

[function] [call site] 00222


                 woff2::Store16(int, unsigned long*, unsigned char*)

[function] [call site] 00223


                 woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00224


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00225


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00226


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00227


               woff2::ComputeULongSum(unsigned char const*, unsigned long)

[function] [call site] 00228


               woff2::(anonymous namespace)::Pad4(woff2::WOFF2Out*)

[function] [call site] 00229


               woff2::(anonymous namespace)::FindTable(std::__1::vector
               
                >*, unsigned int)

[function] [call site] 00230


               woff2::StoreU32(unsigned char*, unsigned long, unsigned int)

[function] [call site] 00231


             woff2::(anonymous namespace)::WOFF2Header::~WOFF2Header()

[function] [call site] 00232