Fuzz introspector: fuzz_decode_stream_mt
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
2 10 stream_decoder_mt_init call site: 00010 lzma_free
2 18 mythread_cond_init call site: 00018 mythread_mutex_destroy
2 61 lzma_end call site: 00061 fprintf
2 66 lzma_code call site: 00066 fprintf
1 22 mythread_mutex_destroy call site: 00022 lzma_free
1 24 stream_decoder_mt_init call site: 00024 __assert_fail
1 37 threads_end call site: 00037 pthread_join
1 51 move_head_to_cache call site: 00051 free_one_cached_buffer

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 prepare_stream [function] [call site] 00001
1 lzma_stream_decoder_mt [function] [call site] 00002
2 lzma_strm_init [function] [call site] 00003
3 lzma_alloc [function] [call site] 00004
2 stream_decoder_mt_init [function] [call site] 00005
3 stream_decoder_mt_init [function] [call site] 00006
4 lzma_next_end [function] [call site] 00007
5 lzma_free [function] [call site] 00008
4 lzma_alloc [function] [call site] 00009
4 mythread_mutex_init [function] [call site] 00010
5 pthread_mutex_init [call site] 00011
4 lzma_free [function] [call site] 00012
4 mythread_cond_init [function] [call site] 00013
5 clock_gettime [call site] 00014
5 pthread_condattr_init [call site] 00015
5 pthread_condattr_setclock [call site] 00016
5 pthread_cond_init [call site] 00017
5 pthread_condattr_destroy [call site] 00018
5 pthread_cond_init [call site] 00019
4 mythread_mutex_destroy [function] [call site] 00020
5 pthread_mutex_destroy [call site] 00021
5 __assert_fail [call site] 00022
4 lzma_free [function] [call site] 00023
4 lzma_filters_free [function] [call site] 00024
5 __assert_fail [call site] 00025
5 lzma_free [function] [call site] 00026
4 threads_end [function] [call site] 00027
5 mythread_mutex_unlock [function] [call site] 00028
6 pthread_mutex_unlock [call site] 00029
6 __assert_fail [call site] 00030
5 mythread_mutex_lock [function] [call site] 00031
6 pthread_mutex_lock [call site] 00032
6 __assert_fail [call site] 00033
5 mythread_cond_signal [function] [call site] 00034
6 pthread_cond_signal [call site] 00035
6 __assert_fail [call site] 00036
5 mythread_join [function] [call site] 00037
6 pthread_join [call site] 00038
5 lzma_free [function] [call site] 00039
4 lzma_outq_init [function] [call site] 00040
5 move_head_to_cache [function] [call site] 00041
6 __assert_fail [call site] 00042
6 __assert_fail [call site] 00043
6 __assert_fail [call site] 00044
6 lzma_outq_clear_cache [function] [call site] 00045
7 free_one_cached_buffer [function] [call site] 00046
8 __assert_fail [call site] 00047
8 lzma_outq_outbuf_memusage [function] [call site] 00048
9 __assert_fail [call site] 00049
8 lzma_free [function] [call site] 00050
6 lzma_outq_outbuf_memusage [function] [call site] 00051
5 free_one_cached_buffer [function] [call site] 00052
4 stream_decoder_reset [function] [call site] 00053
5 lzma_index_hash_init [function] [call site] 00054
6 lzma_alloc [function] [call site] 00055
6 lzma_check_init [function] [call site] 00056
7 lzma_sha256_init [function] [call site] 00057
6 lzma_check_init [function] [call site] 00058
2 lzma_end [function] [call site] 00059
3 lzma_next_end [function] [call site] 00060
3 lzma_free [function] [call site] 00061
1 fprintf [call site] 00062
1 abort [call site] 00063
1 fuzz_code [function] [call site] 00064
2 lzma_code [function] [call site] 00065
3 __assert_fail [call site] 00066
2 fprintf [call site] 00067
2 abort [call site] 00068
1 lzma_end [function] [call site] 00069