Fuzz introspector: example_flush_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
21 21 1 :

['crc32']

578 629 deflate call site: 00056 /src/zlib/deflate.c:1156
21 21 1 :

['crc32']

21 21 read_buf call site: 00064 /src/zlib/deflate.c:227
10 10 1 :

['updatewindow']

31 46 inflate call site: 00152 /src/zlib/inflate.c:1244
7 7 1 :

['_tr_align']

7 31 deflate call site: 00101 /src/zlib/deflate.c:1208
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00008 /src/zlib/deflate.c:503
0 0 None 746 878 deflate call site: 00036 /src/zlib/deflate.c:970
0 0 None 746 868 deflate call site: 00037 /src/zlib/deflate.c:1005
0 0 None 746 868 deflate call site: 00037 /src/zlib/deflate.c:1007
0 0 None 746 868 deflate call site: 00037 /src/zlib/deflate.c:1009
0 0 None 746 866 deflate call site: 00040 /src/zlib/deflate.c:1020
0 0 None 746 837 deflate call site: 00044 /src/zlib/deflate.c:1035
0 0 None 704 785 deflate call site: 00047 /src/zlib/deflate.c:1086

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 compressBound [function] [call site] 00001
1 calloc [call site] 00002
1 calloc [call site] 00003
1 test_flush [function] [call site] 00004
2 deflateInit_ [function] [call site] 00005
3 deflateInit2_ [function] [call site] 00006
4 deflateEnd [function] [call site] 00009
5 deflateStateCheck [function] [call site] 00010
4 deflateReset [function] [call site] 00011
5 deflateResetKeep [function] [call site] 00012
6 deflateStateCheck [function] [call site] 00013
6 _tr_init [function] [call site] 00030
7 tr_static_init [function] [call site] 00031
7 init_block [function] [call site] 00032
2 fprintf [call site] 00034
2 deflate [function] [call site] 00035
3 deflateStateCheck [function] [call site] 00036
3 flush_pending [function] [call site] 00037
4 _tr_flush_bits [function] [call site] 00038
3 putShortMSB [function] [call site] 00040
3 putShortMSB [function] [call site] 00041
3 putShortMSB [function] [call site] 00042
3 flush_pending [function] [call site] 00044
3 flush_pending [function] [call site] 00046
3 flush_pending [function] [call site] 00049
3 flush_pending [function] [call site] 00052
3 flush_pending [function] [call site] 00055
3 flush_pending [function] [call site] 00057
3 flush_pending [function] [call site] 00059
3 deflate_stored [function] [call site] 00060
4 _tr_stored_block [function] [call site] 00061
5 bi_windup [function] [call site] 00062
4 flush_pending [function] [call site] 00063
4 _tr_stored_block [function] [call site] 00068
4 flush_pending [function] [call site] 00069
3 deflate_huff [function] [call site] 00070
4 fill_window [function] [call site] 00071
4 _tr_flush_block [function] [call site] 00074
5 detect_data_type [function] [call site] 00075
5 build_tree [function] [call site] 00076
6 pqdownheap [function] [call site] 00077
6 pqdownheap [function] [call site] 00078
6 pqdownheap [function] [call site] 00079
6 gen_bitlen [function] [call site] 00080
6 gen_codes [function] [call site] 00081
7 bi_reverse [function] [call site] 00082
5 build_tree [function] [call site] 00083
5 build_bl_tree [function] [call site] 00084
6 scan_tree [function] [call site] 00085
6 scan_tree [function] [call site] 00086
6 build_tree [function] [call site] 00087
5 _tr_stored_block [function] [call site] 00088
5 compress_block [function] [call site] 00089
5 send_all_trees [function] [call site] 00090
5 compress_block [function] [call site] 00093
5 init_block [function] [call site] 00094
5 bi_windup [function] [call site] 00095
4 flush_pending [function] [call site] 00096
4 _tr_flush_block [function] [call site] 00097
4 flush_pending [function] [call site] 00098
4 _tr_flush_block [function] [call site] 00099
4 flush_pending [function] [call site] 00100
3 deflate_rle [function] [call site] 00101
4 fill_window [function] [call site] 00102
4 _tr_flush_block [function] [call site] 00103
4 flush_pending [function] [call site] 00104
4 _tr_flush_block [function] [call site] 00105
4 flush_pending [function] [call site] 00106
4 _tr_flush_block [function] [call site] 00107
4 flush_pending [function] [call site] 00108
3 _tr_stored_block [function] [call site] 00111
3 flush_pending [function] [call site] 00112
3 putShortMSB [function] [call site] 00113
3 putShortMSB [function] [call site] 00114
3 flush_pending [function] [call site] 00115
2 fprintf [call site] 00116
2 fprintf [call site] 00118
2 deflateEnd [function] [call site] 00119
2 fprintf [call site] 00120
1 test_sync [function] [call site] 00121
2 inflateInit_ [function] [call site] 00122
3 inflateInit2_ [function] [call site] 00123
4 inflateReset2 [function] [call site] 00126
5 inflateStateCheck [function] [call site] 00127
5 inflateReset [function] [call site] 00128
6 inflateStateCheck [function] [call site] 00129
6 inflateResetKeep [function] [call site] 00130
7 inflateStateCheck [function] [call site] 00131
2 fprintf [call site] 00132
2 fprintf [call site] 00156
2 inflateSync [function] [call site] 00157
3 inflateStateCheck [function] [call site] 00158
3 syncsearch [function] [call site] 00159
3 syncsearch [function] [call site] 00160
3 inflateReset [function] [call site] 00161
2 fprintf [call site] 00162
2 fprintf [call site] 00164
2 inflateEnd [function] [call site] 00165
3 inflateStateCheck [function] [call site] 00166
2 fprintf [call site] 00167