Fuzz introspector: example_large_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
21 21 1 :

['crc32']

472 629 deflate call site: 00055 /src/zlib/deflate.c:1156
21 21 1 :

['crc32']

21 21 read_buf call site: 00063 /src/zlib/deflate.c:227
7 7 1 :

['_tr_align']

7 31 deflate call site: 00100 /src/zlib/deflate.c:1208
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00007 /src/zlib/deflate.c:503
0 17 2 :

['_tr_stored_block', 'flush_pending']

0 17 deflate_stored call site: 00066 /src/zlib/deflate.c:1785
0 7 1 :

['_tr_stored_block']

0 14 _tr_flush_block call site: 00083 /src/zlib/trees.c:1045
0 0 None 640 878 deflate call site: 00035 /src/zlib/deflate.c:970
0 0 None 640 868 deflate call site: 00036 /src/zlib/deflate.c:1005
0 0 None 640 868 deflate call site: 00036 /src/zlib/deflate.c:1007
0 0 None 640 868 deflate call site: 00036 /src/zlib/deflate.c:1009
0 0 None 640 866 deflate call site: 00039 /src/zlib/deflate.c:1020
0 0 None 640 837 deflate call site: 00043 /src/zlib/deflate.c:1035

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 calloc [call site] 00001
1 calloc [call site] 00002
1 test_large_deflate [function] [call site] 00003
2 deflateInit_ [function] [call site] 00004
3 deflateInit2_ [function] [call site] 00005
4 deflateEnd [function] [call site] 00008
5 deflateStateCheck [function] [call site] 00009
4 deflateReset [function] [call site] 00010
5 deflateResetKeep [function] [call site] 00011
6 deflateStateCheck [function] [call site] 00012
6 _tr_init [function] [call site] 00029
7 tr_static_init [function] [call site] 00030
7 init_block [function] [call site] 00031
2 fprintf [call site] 00033
2 deflate [function] [call site] 00034
3 deflateStateCheck [function] [call site] 00035
3 flush_pending [function] [call site] 00036
4 _tr_flush_bits [function] [call site] 00037
3 putShortMSB [function] [call site] 00039
3 putShortMSB [function] [call site] 00040
3 putShortMSB [function] [call site] 00041
3 flush_pending [function] [call site] 00043
3 flush_pending [function] [call site] 00045
3 flush_pending [function] [call site] 00048
3 flush_pending [function] [call site] 00051
3 flush_pending [function] [call site] 00054
3 flush_pending [function] [call site] 00056
3 flush_pending [function] [call site] 00058
3 deflate_stored [function] [call site] 00059
4 _tr_stored_block [function] [call site] 00060
5 bi_windup [function] [call site] 00061
4 flush_pending [function] [call site] 00062
4 _tr_stored_block [function] [call site] 00067
4 flush_pending [function] [call site] 00068
3 deflate_huff [function] [call site] 00069
4 fill_window [function] [call site] 00070
4 _tr_flush_block [function] [call site] 00073
5 detect_data_type [function] [call site] 00074
5 build_tree [function] [call site] 00075
6 pqdownheap [function] [call site] 00076
6 pqdownheap [function] [call site] 00077
6 pqdownheap [function] [call site] 00078
6 gen_bitlen [function] [call site] 00079
6 gen_codes [function] [call site] 00080
7 bi_reverse [function] [call site] 00081
5 build_tree [function] [call site] 00082
5 build_bl_tree [function] [call site] 00083
6 scan_tree [function] [call site] 00084
6 scan_tree [function] [call site] 00085
6 build_tree [function] [call site] 00086
5 _tr_stored_block [function] [call site] 00087
5 compress_block [function] [call site] 00088
5 send_all_trees [function] [call site] 00089
5 compress_block [function] [call site] 00092
5 init_block [function] [call site] 00093
5 bi_windup [function] [call site] 00094
4 flush_pending [function] [call site] 00095
4 _tr_flush_block [function] [call site] 00096
4 flush_pending [function] [call site] 00097
4 _tr_flush_block [function] [call site] 00098
4 flush_pending [function] [call site] 00099
3 deflate_rle [function] [call site] 00100
4 fill_window [function] [call site] 00101
4 _tr_flush_block [function] [call site] 00102
4 flush_pending [function] [call site] 00103
4 _tr_flush_block [function] [call site] 00104
4 flush_pending [function] [call site] 00105
4 _tr_flush_block [function] [call site] 00106
4 flush_pending [function] [call site] 00107
3 _tr_stored_block [function] [call site] 00110
3 flush_pending [function] [call site] 00111
3 putShortMSB [function] [call site] 00112
3 putShortMSB [function] [call site] 00113
3 flush_pending [function] [call site] 00114
2 fprintf [call site] 00115
2 fprintf [call site] 00116
2 deflateParams [function] [call site] 00117
3 deflateStateCheck [function] [call site] 00118
3 slide_hash [function] [call site] 00120
2 fprintf [call site] 00122
2 deflateParams [function] [call site] 00123
2 fprintf [call site] 00125
2 fprintf [call site] 00127
2 deflateEnd [function] [call site] 00128
2 fprintf [call site] 00129
1 test_large_inflate [function] [call site] 00130
2 inflateInit_ [function] [call site] 00131
3 inflateInit2_ [function] [call site] 00132
4 inflateReset2 [function] [call site] 00135
5 inflateStateCheck [function] [call site] 00136
5 inflateReset [function] [call site] 00137
6 inflateStateCheck [function] [call site] 00138
6 inflateResetKeep [function] [call site] 00139
7 inflateStateCheck [function] [call site] 00140
2 fprintf [call site] 00141
2 fprintf [call site] 00165
2 inflateEnd [function] [call site] 00166
3 inflateStateCheck [function] [call site] 00167
2 fprintf [call site] 00168
2 fprintf [call site] 00169