Fuzz introspector: example_dict_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
21 21 1 :

['crc32']

134 629 deflate call site: 00065 /src/zlib/deflate.c:1156
7 14 2 :

['_tr_stored_block', '_tr_align']

7 38 deflate call site: 00106 /src/zlib/deflate.c:1207
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00004 /src/zlib/deflate.c:503
0 0 None 302 878 deflate call site: 00045 /src/zlib/deflate.c:970
0 0 None 302 837 deflate call site: 00053 /src/zlib/deflate.c:1035
0 0 None 260 785 deflate call site: 00056 /src/zlib/deflate.c:1086
0 0 None 252 474 inflate call site: 00138 /src/zlib/inflate.c:623
0 0 None 252 474 inflate call site: 00138 /src/zlib/inflate.c:629
0 0 None 252 474 inflate call site: 00140 /src/zlib/inflate.c:638
0 0 None 252 474 inflate call site: 00140 /src/zlib/inflate.c:640
0 0 None 252 474 inflate call site: 00140 /src/zlib/inflate.c:649
0 0 None 252 474 inflate call site: 00140 /src/zlib/inflate.c:656

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 test_dict_deflate [function] [call site] 00001
2 deflateInit2_ [function] [call site] 00002
3 deflateEnd [function] [call site] 00005
4 deflateStateCheck [function] [call site] 00006
3 deflateReset [function] [call site] 00007
4 deflateResetKeep [function] [call site] 00008
5 deflateStateCheck [function] [call site] 00009
5 _tr_init [function] [call site] 00026
6 tr_static_init [function] [call site] 00027
6 init_block [function] [call site] 00028
2 fprintf [call site] 00030
2 deflateSetDictionary [function] [call site] 00031
2 fprintf [call site] 00040
2 deflateBound [function] [call site] 00041
3 deflateStateCheck [function] [call site] 00042
2 calloc [call site] 00043
2 deflate [function] [call site] 00044
3 deflateStateCheck [function] [call site] 00045
3 flush_pending [function] [call site] 00046
4 _tr_flush_bits [function] [call site] 00047
3 putShortMSB [function] [call site] 00049
3 putShortMSB [function] [call site] 00050
3 putShortMSB [function] [call site] 00051
3 flush_pending [function] [call site] 00053
3 flush_pending [function] [call site] 00055
3 flush_pending [function] [call site] 00058
3 flush_pending [function] [call site] 00061
3 flush_pending [function] [call site] 00064
3 flush_pending [function] [call site] 00066
3 flush_pending [function] [call site] 00068
3 deflate_stored [function] [call site] 00069
4 _tr_stored_block [function] [call site] 00070
5 bi_windup [function] [call site] 00071
4 flush_pending [function] [call site] 00072
4 _tr_stored_block [function] [call site] 00075
4 flush_pending [function] [call site] 00076
3 deflate_huff [function] [call site] 00077
4 fill_window [function] [call site] 00078
4 _tr_flush_block [function] [call site] 00079
5 detect_data_type [function] [call site] 00080
5 build_tree [function] [call site] 00081
6 pqdownheap [function] [call site] 00082
6 pqdownheap [function] [call site] 00083
6 pqdownheap [function] [call site] 00084
6 gen_bitlen [function] [call site] 00085
6 gen_codes [function] [call site] 00086
7 bi_reverse [function] [call site] 00087
5 build_tree [function] [call site] 00088
5 build_bl_tree [function] [call site] 00089
6 scan_tree [function] [call site] 00090
6 scan_tree [function] [call site] 00091
6 build_tree [function] [call site] 00092
5 _tr_stored_block [function] [call site] 00093
5 compress_block [function] [call site] 00094
5 send_all_trees [function] [call site] 00095
5 compress_block [function] [call site] 00098
5 init_block [function] [call site] 00099
5 bi_windup [function] [call site] 00100
4 flush_pending [function] [call site] 00101
4 _tr_flush_block [function] [call site] 00102
4 flush_pending [function] [call site] 00103
4 _tr_flush_block [function] [call site] 00104
4 flush_pending [function] [call site] 00105
3 deflate_rle [function] [call site] 00106
4 fill_window [function] [call site] 00107
4 _tr_flush_block [function] [call site] 00108
4 flush_pending [function] [call site] 00109
4 _tr_flush_block [function] [call site] 00110
4 flush_pending [function] [call site] 00111
4 _tr_flush_block [function] [call site] 00112
4 flush_pending [function] [call site] 00113
3 _tr_stored_block [function] [call site] 00116
3 flush_pending [function] [call site] 00117
3 putShortMSB [function] [call site] 00118
3 putShortMSB [function] [call site] 00119
3 flush_pending [function] [call site] 00120
2 fprintf [call site] 00121
2 deflateEnd [function] [call site] 00122
2 fprintf [call site] 00123
1 test_dict_inflate [function] [call site] 00124
2 inflateInit_ [function] [call site] 00125
3 inflateInit2_ [function] [call site] 00126
4 inflateReset2 [function] [call site] 00129
5 inflateStateCheck [function] [call site] 00130
5 inflateReset [function] [call site] 00131
6 inflateStateCheck [function] [call site] 00132
6 inflateResetKeep [function] [call site] 00133
7 inflateStateCheck [function] [call site] 00134
2 fprintf [call site] 00135
2 calloc [call site] 00136
2 fprintf [call site] 00160
2 inflateSetDictionary [function] [call site] 00161
3 inflateStateCheck [function] [call site] 00162
3 updatewindow [function] [call site] 00165
2 fprintf [call site] 00166
2 inflateEnd [function] [call site] 00167
3 inflateStateCheck [function] [call site] 00168
2 fprintf [call site] 00169
2 memcmp [call site] 00170
2 fprintf [call site] 00171