Fuzz introspector: fuzz_model
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
17 17 2 :

['cpuinfo_log_error', 'calloc']

17 51 cpuinfo_x86_linux_init call site: 00240 /src/xnnpack/build/cpuinfo-source/src/x86/linux/init.c:333
10 30 7 :

['is_model_number', 'move_token', 'is_number', 'is_frequency', 'memcmp', 'erase_matching', 'is_zero_number']

10 30 transform_token call site: 00163 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:314
8 53 7 :

['is_model_number', 'move_token', 'is_number', 'is_frequency', 'memcmp', 'erase_matching', 'is_zero_number']

8 53 transform_token call site: 00152 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:233
6 8 2 :

['is_number', 'move_token']

6 18 transform_token call site: 00186 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:494
4 4 1 :

['memcmp']

10 25 transform_token call site: 00174 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:406
2 2 1 :

['memcmp']

8 23 transform_token call site: 00161 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:299
2 2 1 :

['strncpy']

2 2 cpuinfo_x86_format_package_name call site: 00000 /src/xnnpack/build/cpuinfo-source/src/x86/name.c:699
0 134 2 :

['cpuid.4999', 'cpuinfo_x86_decode_cache_descriptor']

35 214 cpuinfo_x86_detect_cache call site: 00105 /src/xnnpack/build/cpuinfo-source/src/x86/cache/init.c:62
0 0 None 1897 1901 xnn_create_convolution2d_nhwc_qs8 call site: 00272 /src/xnnpack/src/operators/convolution-nhwc.c:900
0 0 None 1897 1897 xnn_create_convolution2d_nhwc_qs8 call site: 00273 /src/xnnpack/src/operators/convolution-nhwc.c:908
0 0 None 221 1006 cpuinfo_x86_linux_init call site: 00061 /src/xnnpack/build/cpuinfo-source/src/x86/linux/init.c:170
0 0 None 189 802 cpuinfo_x86_linux_init call site: 00074 /src/xnnpack/build/cpuinfo-source/src/x86/linux/init.c:204

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 xnn_initialize [function] [call site] 00001
2 xnn_init_hardware_config [function] [call site] 00002
3 cpuinfo_initialize [function] [call site] 00003
4 pthread_once [call site] 00004
4 cpuinfo_x86_linux_init [function] [call site] 00005
5 cpuinfo_linux_get_max_processors_count [function] [call site] 00006
6 cpuinfo_linux_parse_small_file [function] [call site] 00007
7 open [call site] 00008
7 __errno_location [call site] 00009
7 cpuinfo_log_info [function] [call site] 00010
7 read [call site] 00011
7 __errno_location [call site] 00012
7 cpuinfo_log_info [function] [call site] 00013
7 cpuinfo_log_error [function] [call site] 00014
8 cpuinfo_vlog_error [function] [call site] 00015
9 cpuinfo_vlog [function] [call site] 00016
10 __assert_fail [call site] 00017
10 vsnprintf [call site] 00018
10 vsnprintf [call site] 00019
10 write [call site] 00020
7 close [call site] 00021
6 uint32_parser [function] [call site] 00022
7 cpuinfo_log_error [function] [call site] 00023
7 parse_number [function] [call site] 00024
7 cpuinfo_log_error [function] [call site] 00025
7 is_whitespace [function] [call site] 00026
7 cpuinfo_log_warning [function] [call site] 00027
6 cpuinfo_log_debug [function] [call site] 00028
6 cpuinfo_log_warning [function] [call site] 00029
6 cpuinfo_log_warning [function] [call site] 00030
5 cpuinfo_log_debug [function] [call site] 00031
5 cpuinfo_linux_get_max_possible_processor [function] [call site] 00032
6 cpuinfo_linux_parse_cpulist [function] [call site] 00033
7 open [call site] 00034
7 __errno_location [call site] 00035
7 cpuinfo_log_info [function] [call site] 00036
7 read [call site] 00037
7 __errno_location [call site] 00038
7 cpuinfo_log_info [function] [call site] 00039
7 parse_entry [function] [call site] 00040
8 is_whitespace [function] [call site] 00041
8 is_whitespace [function] [call site] 00042
8 cpuinfo_log_warning [function] [call site] 00043
8 parse_number [function] [call site] 00044
8 cpuinfo_log_warning [function] [call site] 00045
8 cpuinfo_log_warning [function] [call site] 00046
8 parse_number [function] [call site] 00047
8 cpuinfo_log_warning [function] [call site] 00048
8 cpuinfo_log_warning [function] [call site] 00049
7 parse_entry [function] [call site] 00050
7 close [call site] 00051
6 max_processor_number_parser [function] [call site] 00052
6 cpuinfo_log_warning [function] [call site] 00053
6 cpuinfo_log_warning [function] [call site] 00054
5 cpuinfo_log_debug [function] [call site] 00055
5 cpuinfo_linux_get_max_present_processor [function] [call site] 00056
6 cpuinfo_linux_parse_cpulist [function] [call site] 00057
6 max_processor_number_parser [function] [call site] 00058
6 cpuinfo_log_warning [function] [call site] 00059
6 cpuinfo_log_warning [function] [call site] 00060
5 cpuinfo_log_debug [function] [call site] 00061
5 min [function] [call site] 00062
5 min [function] [call site] 00063
5 calloc [call site] 00064
5 cpuinfo_log_error [function] [call site] 00065
5 cpuinfo_linux_detect_possible_processors [function] [call site] 00066
6 cpuinfo_linux_parse_cpulist [function] [call site] 00067
6 detect_processor_parser [function] [call site] 00068
6 cpuinfo_log_warning [function] [call site] 00069
5 cpuinfo_linux_detect_present_processors [function] [call site] 00070
6 cpuinfo_linux_parse_cpulist [function] [call site] 00071
6 detect_processor_parser [function] [call site] 00072
6 cpuinfo_log_warning [function] [call site] 00073
5 cpuinfo_x86_linux_parse_proc_cpuinfo [function] [call site] 00074
6 cpuinfo_linux_parse_multiline_file [function] [call site] 00075
7 cpuinfo_log_info [function] [call site] 00076
7 read [call site] 00077
7 __errno_location [call site] 00078
7 cpuinfo_log_info [function] [call site] 00079
7 close [call site] 00080
6 parse_line [function] [call site] 00081
7 cpuinfo_log_info [function] [call site] 00082
7 cpuinfo_log_info [function] [call site] 00083
7 memcmp [call site] 00084
7 parse_apic_id [function] [call site] 00085
8 cpuinfo_log_warning [function] [call site] 00086
7 parse_processor_number [function] [call site] 00087
8 cpuinfo_log_warning [function] [call site] 00088
8 cpuinfo_log_warning [function] [call site] 00089
7 cpuinfo_log_info [function] [call site] 00090
7 cpuinfo_log_warning [function] [call site] 00091
7 cpuinfo_log_debug [function] [call site] 00092
5 cpuinfo_log_error [function] [call site] 00093
5 bitmask_all [function] [call site] 00094
5 cpuinfo_x86_init_processor [function] [call site] 00095
6 cpuid [function] [call site] 00096
6 cpuinfo_x86_decode_vendor [function] [call site] 00097
6 cpuid [function] [call site] 00098
6 cpuid [function] [call site] 00099
6 cpuid [function] [call site] 00100
6 cpuinfo_x86_decode_model_info [function] [call site] 00101
6 cpuinfo_x86_decode_uarch [function] [call site] 00102
6 cpuinfo_x86_detect_cache [function] [call site] 00103
7 cpuid [function] [call site] 00104
7 cpuinfo_x86_decode_cache_descriptor [function] [call site] 00105
7 cpuid [function] [call site] 00106
7 cpuidex [function] [call site] 00107
7 cpuinfo_x86_decode_deterministic_cache_parameters [function] [call site] 00108
8 bit_length [function] [call site] 00109
8 cpuinfo_log_warning [function] [call site] 00110
8 cpuinfo_log_warning [function] [call site] 00111
8 cpuinfo_log_warning [function] [call site] 00112
7 bit_length [function] [call site] 00113
7 cpuidex [function] [call site] 00114
7 cpuinfo_x86_decode_cache_properties [function] [call site] 00115
8 bit_length [function] [call site] 00116
8 cpuinfo_log_warning [function] [call site] 00117
8 cpuinfo_log_warning [function] [call site] 00118
8 cpuinfo_log_warning [function] [call site] 00119
6 cpuinfo_x86_detect_topology [function] [call site] 00120
7 cpuid [function] [call site] 00121
7 cpuid [function] [call site] 00122
7 bit_length [function] [call site] 00123
7 cpuinfo_log_debug [function] [call site] 00124
7 bit_length [function] [call site] 00125
7 cpuinfo_log_debug [function] [call site] 00126
7 bit_length [function] [call site] 00127
7 cpuinfo_log_debug [function] [call site] 00128
7 cpuidex [function] [call site] 00129
7 cpuinfo_log_warning [function] [call site] 00130
7 cpuinfo_log_debug [function] [call site] 00131
6 cpuinfo_x86_detect_isa [function] [call site] 00132
7 cpuidex [function] [call site] 00133
7 cpuidex [function] [call site] 00134
7 cpuid [function] [call site] 00135
7 cpuidex [function] [call site] 00136
7 xgetbv [function] [call site] 00137
7 cpuid [function] [call site] 00138
7 cpuid [function] [call site] 00139
6 cpuid [function] [call site] 00140
6 cpuinfo_log_debug [function] [call site] 00141
5 cpuinfo_x86_normalize_brand_string [function] [call site] 00142
6 transform_token [function] [call site] 00143
7 reset_context [function] [call site] 00144
7 is_digit [function] [call site] 00145
7 erase_matching [function] [call site] 00146
8 memcmp [call site] 00147
7 erase_matching [function] [call site] 00148
7 is_upper_letter [function] [call site] 00149
7 erase_matching [function] [call site] 00150
7 is_digit [function] [call site] 00151
7 erase_matching [function] [call site] 00152
7 erase_matching [function] [call site] 00153
7 erase_matching [function] [call site] 00154
7 erase_matching [function] [call site] 00155
7 erase_matching [function] [call site] 00156
7 erase_matching [function] [call site] 00157
7 erase_matching [function] [call site] 00158
7 memcmp [call site] 00159
7 memcmp [call site] 00160
7 memcmp [call site] 00161
7 memcmp [call site] 00162
7 erase_matching [function] [call site] 00163
7 erase_matching [function] [call site] 00164
7 memcmp [call site] 00165
7 memcmp [call site] 00166
7 erase_matching [function] [call site] 00167
7 erase_matching [function] [call site] 00168
7 erase_matching [function] [call site] 00169
7 memcmp [call site] 00170
7 erase_matching [function] [call site] 00171
7 erase_matching [function] [call site] 00172
7 erase_matching [function] [call site] 00173
7 memcmp [call site] 00174
7 memcmp [call site] 00175
7 erase_matching [function] [call site] 00176
7 erase_matching [function] [call site] 00177
7 erase_matching [function] [call site] 00178
7 erase_matching [function] [call site] 00179
7 erase_matching [function] [call site] 00180
7 erase_matching [function] [call site] 00181
7 erase_matching [function] [call site] 00182
7 erase_matching [function] [call site] 00183
7 erase_matching [function] [call site] 00184
7 memcmp [call site] 00185
7 is_zero_number [function] [call site] 00186
7 is_number [function] [call site] 00187
8 is_digit [function] [call site] 00188
7 move_token [function] [call site] 00189
7 is_model_number [function] [call site] 00190
8 is_digit [function] [call site] 00191
7 is_frequency [function] [call site] 00192
6 transform_token [function] [call site] 00193
6 is_space [function] [call site] 00194
6 move_token [function] [call site] 00195
6 move_token [function] [call site] 00196
5 bitmask_all [function] [call site] 00197
5 qsort [call site] 00198
5 cmp_x86_linux_processor [function] [call site] 00199
6 bitmask_all [function] [call site] 00200
6 bitmask_all [function] [call site] 00201
6 cmp [function] [call site] 00202
5 calloc [call site] 00203
5 cpuinfo_log_error [function] [call site] 00204
5 cpuinfo_x86_count_objects [function] [call site] 00205
6 bit_mask [function] [call site] 00206
6 bit_mask [function] [call site] 00207
6 bit_mask [function] [call site] 00208
6 bitmask_all [function] [call site] 00209
6 cpuinfo_log_debug [function] [call site] 00210
6 bit_mask [function] [call site] 00211
6 bit_mask [function] [call site] 00212
6 bit_mask [function] [call site] 00213
6 bit_mask [function] [call site] 00214
6 bit_mask [function] [call site] 00215
5 cpuinfo_log_debug [function] [call site] 00216
5 cpuinfo_log_debug [function] [call site] 00217
5 cpuinfo_log_debug [function] [call site] 00218
5 cpuinfo_log_debug [function] [call site] 00219
5 cpuinfo_log_debug [function] [call site] 00220
5 cpuinfo_log_debug [function] [call site] 00221
5 cpuinfo_log_debug [function] [call site] 00222
5 calloc [call site] 00223
5 cpuinfo_log_error [function] [call site] 00224
5 calloc [call site] 00225
5 cpuinfo_log_error [function] [call site] 00226
5 calloc [call site] 00227
5 cpuinfo_log_error [function] [call site] 00228
5 calloc [call site] 00229
5 cpuinfo_log_error [function] [call site] 00230
5 calloc [call site] 00231
5 cpuinfo_log_error [function] [call site] 00232
5 calloc [call site] 00233
5 cpuinfo_log_error [function] [call site] 00234
5 calloc [call site] 00235
5 cpuinfo_log_error [function] [call site] 00236
5 calloc [call site] 00237
5 cpuinfo_log_error [function] [call site] 00238
5 calloc [call site] 00239
5 cpuinfo_log_error [function] [call site] 00240
5 calloc [call site] 00241
5 cpuinfo_log_error [function] [call site] 00242
5 bit_mask [function] [call site] 00243
5 bit_mask [function] [call site] 00244
5 bit_mask [function] [call site] 00245
5 bitmask_all [function] [call site] 00246
5 bit_mask [function] [call site] 00247
5 bit_mask [function] [call site] 00248
5 bit_mask [function] [call site] 00249
5 bit_mask [function] [call site] 00250
5 bit_mask [function] [call site] 00251
5 cpuinfo_compute_max_cache_size [function] [call site] 00252
3 pthread_once [call site] 00253
3 init_hardware_config [function] [call site] 00254
4 cpuinfo_has_x86_ssse3 [function] [call site] 00255
4 cpuinfo_has_x86_sse4_1 [function] [call site] 00256
4 cpuinfo_has_x86_avx [function] [call site] 00257
4 cpuinfo_has_x86_f16c [function] [call site] 00258
4 cpuinfo_has_x86_fma3 [function] [call site] 00259
4 cpuinfo_has_x86_xop [function] [call site] 00260
4 cpuinfo_has_x86_avx2 [function] [call site] 00261
4 cpuinfo_has_x86_avx512f [function] [call site] 00262
4 cpuinfo_has_x86_avx512bw [function] [call site] 00263
4 cpuinfo_has_x86_avx512vbmi [function] [call site] 00264
2 pthread_once [call site] 00265
2 init [function] [call site] 00266
1 xnn_create_convolution2d_nhwc_qs8 [function] [call site] 00267
2 xnn_operator_type_to_string [function] [call site] 00268
3 __assert_fail [call site] 00269
3 __assert_fail [call site] 00270
2 xnn_operator_type_to_string [function] [call site] 00271
2 xnn_operator_type_to_string [function] [call site] 00272
2 xnn_operator_type_to_string [function] [call site] 00273
2 xnn_operator_type_to_string [function] [call site] 00274
2 xnn_init_qs8_gemm_config [function] [call site] 00275
3 xnn_init_hardware_config [function] [call site] 00276
3 pthread_once [call site] 00277
3 init_qs8_gemm_config [function] [call site] 00278
4 xnn_init_hardware_config [function] [call site] 00279
4 __assert_fail [call site] 00280
4 xnn_init_hmp_gemm_ukernel [function] [call site] 00281
2 __assert_fail [call site] 00282
2 xnn_init_qs8_dwconv_config [function] [call site] 00283
3 xnn_init_hardware_config [function] [call site] 00284
3 pthread_once [call site] 00285
3 init_qs8_dwconv_config [function] [call site] 00286
4 xnn_init_hardware_config [function] [call site] 00287
4 __assert_fail [call site] 00288
2 __assert_fail [call site] 00289
2 find_dwconv_ukernel [function] [call site] 00290
2 create_convolution2d_nhwc [function] [call site] 00291
3 xnn_allocate_zero_simd_memory [function] [call site] 00292
3 create_vmulcaddc_path [function] [call site] 00293
4 __assert_fail [call site] 00294
4 __assert_fail [call site] 00295
4 __assert_fail [call site] 00296
4 xnn_get_pointer_to_write_weights [function] [call site] 00297
5 __assert_fail [call site] 00298
5 use_weights_cache [function] [call site] 00299
5 xnn_reserve_space_in_weights_cache [function] [call site] 00300
6 cache_has_space [function] [call site] 00301
6 xnn_mutex_lock [function] [call site] 00302
7 pthread_mutex_lock [call site] 00303
6 xnn_reserve_weights_memory [function] [call site] 00304
7 xnn_log_debug [function] [call site] 00305
7 resize_buffer [function] [call site] 00306
8 get_page_size [function] [call site] 00307
9 sysconf [call site] 00308
9 __errno_location [call site] 00309
9 xnn_log_fatal [function] [call site] 00310
10 abort [call site] 00311
9 __assert_fail [call site] 00312
9 __assert_fail [call site] 00313
8 mremap [call site] 00314
8 __errno_location [call site] 00315
8 xnn_log_error [function] [call site] 00316
8 xnn_log_debug [function] [call site] 00317
7 xnn_log_error [function] [call site] 00318
6 xnn_mutex_unlock [function] [call site] 00319
7 pthread_mutex_unlock [call site] 00320
5 xnn_allocate_simd_memory [function] [call site] 00321
4 xnn_operator_type_to_string [function] [call site] 00322
4 xnn_operator_type_to_string [function] [call site] 00323
4 use_weights_cache [function] [call site] 00324
4 xnn_get_or_insert_weights_cache [function] [call site] 00325
5 cache_has_space [function] [call site] 00326
5 lookup_cache [function] [call site] 00327
6 murmur_hash3 [function] [call site] 00328
7 fmix32 [function] [call site] 00329
6 lookup [function] [call site] 00330
7 __assert_fail [call site] 00331
7 bytes_equal [function] [call site] 00332
8 cache_start [function] [call site] 00333
8 memcmp [call site] 00334
5 xnn_get_or_insert_cache [function] [call site] 00335
6 lookup_cache [function] [call site] 00336
6 cache_start [function] [call site] 00337
6 insert [function] [call site] 00338
7 murmur_hash3 [function] [call site] 00339
7 lookup [function] [call site] 00340
7 cache_buckets_grow [function] [call site] 00341
8 __assert_fail [call site] 00342
8 xnn_init_cache_with_size [function] [call site] 00343
9 xnn_allocate_zero_memory [function] [call site] 00344
8 xnn_release_memory [function] [call site] 00345
7 lookup [function] [call site] 00346
7 cache_start [function] [call site] 00347
7 __assert_fail [call site] 00348
7 cache_size [function] [call site] 00349
7 __assert_fail [call site] 00350
5 xnn_mutex_unlock [function] [call site] 00351
5 __assert_fail [call site] 00352
3 create_dwconv_path [function] [call site] 00353
4 __assert_fail [call site] 00354
4 __assert_fail [call site] 00355
4 __assert_fail [call site] 00356
4 xnn_dwconv_multipass_tile_size [function] [call site] 00357
5 __assert_fail [call site] 00358
4 xnn_dwconv_multipass_weights_size [function] [call site] 00359
5 __assert_fail [call site] 00360
4 xnn_get_pointer_to_write_weights [function] [call site] 00361
4 xnn_operator_type_to_string [function] [call site] 00362
4 xnn_operator_type_to_string [function] [call site] 00363
4 __assert_fail [call site] 00364
4 use_weights_cache [function] [call site] 00365
4 xnn_get_or_insert_weights_cache [function] [call site] 00366
3 create_gemm_or_igemm [function] [call site] 00367
4 xnn_get_pointer_to_write_weights [function] [call site] 00368
4 xnn_operator_type_to_string [function] [call site] 00369
4 xnn_operator_type_to_string [function] [call site] 00370
4 __assert_fail [call site] 00371
4 __assert_fail [call site] 00372
4 __assert_fail [call site] 00373
4 use_weights_cache [function] [call site] 00374
3 xnn_allocate_simd_memory [function] [call site] 00375
3 xnn_operator_type_to_string [function] [call site] 00376
3 xnn_delete_operator [function] [call site] 00377
4 xnn_release_memory [function] [call site] 00378
4 xnn_release_simd_memory [function] [call site] 00379
4 xnn_release_memory [function] [call site] 00380
4 xnn_release_simd_memory [function] [call site] 00381
4 xnn_release_memory [function] [call site] 00382
4 xnn_release_memory [function] [call site] 00383
4 xnn_release_simd_memory [function] [call site] 00384
4 xnn_release_simd_memory [function] [call site] 00385
2 xnn_pack_qs8_dwconv_hwg_w [function] [call site] 00386
3 __assert_fail [call site] 00387
3 __assert_fail [call site] 00388
3 __assert_fail [call site] 00389
3 __assert_fail [call site] 00390
3 __assert_fail [call site] 00391
3 advance_x_y [function] [call site] 00392
3 advance_x_y [function] [call site] 00393
3 __assert_fail [call site] 00394
3 advance_x_y [function] [call site] 00395
3 advance_x_y [function] [call site] 00396
3 advance_x_y [function] [call site] 00397
3 advance_x_y [function] [call site] 00398
1 xnn_deinitialize [function] [call site] 00399