Fuzz introspector: compress_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
21 21 1 :

['crc32']

472 629 deflate call site: 00056 /src/zlib/deflate.c:1156
21 21 1 :

['crc32']

21 21 read_buf call site: 00064 /src/zlib/deflate.c:227
7 14 2 :

['_tr_stored_block', '_tr_align']

7 38 deflate call site: 00101 /src/zlib/deflate.c:1207
0 59 3 :

['_tr_stored_block', 'read_buf', 'flush_pending']

0 59 deflate_stored call site: 00064 /src/zlib/deflate.c:1744
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00009 /src/zlib/deflate.c:503
0 0 None 640 878 deflate call site: 00036 /src/zlib/deflate.c:970
0 0 None 640 866 deflate call site: 00040 /src/zlib/deflate.c:1020
0 0 None 640 837 deflate call site: 00044 /src/zlib/deflate.c:1035
0 0 None 598 785 deflate call site: 00047 /src/zlib/deflate.c:1086
0 0 None 556 733 deflate call site: 00050 /src/zlib/deflate.c:1113
0 0 None 514 681 deflate call site: 00053 /src/zlib/deflate.c:1135
0 0 None 252 474 inflate call site: 00130 /src/zlib/inflate.c:623

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 compressBound [function] [call site] 00001
1 calloc [call site] 00002
1 calloc [call site] 00003
1 check_compress_level [function] [call site] 00004
2 compress2 [function] [call site] 00005
3 deflateInit_ [function] [call site] 00006
4 deflateInit2_ [function] [call site] 00007
5 deflateEnd [function] [call site] 00010
6 deflateStateCheck [function] [call site] 00011
5 deflateReset [function] [call site] 00012
6 deflateResetKeep [function] [call site] 00013
7 deflateStateCheck [function] [call site] 00014
7 _tr_init [function] [call site] 00031
8 tr_static_init [function] [call site] 00032
8 init_block [function] [call site] 00033
3 deflate [function] [call site] 00035
4 deflateStateCheck [function] [call site] 00036
4 flush_pending [function] [call site] 00037
5 _tr_flush_bits [function] [call site] 00038
4 putShortMSB [function] [call site] 00040
4 putShortMSB [function] [call site] 00041
4 putShortMSB [function] [call site] 00042
4 flush_pending [function] [call site] 00044
4 flush_pending [function] [call site] 00046
4 flush_pending [function] [call site] 00049
4 flush_pending [function] [call site] 00052
4 flush_pending [function] [call site] 00055
4 flush_pending [function] [call site] 00057
4 flush_pending [function] [call site] 00059
4 deflate_stored [function] [call site] 00060
5 _tr_stored_block [function] [call site] 00061
6 bi_windup [function] [call site] 00062
5 flush_pending [function] [call site] 00063
5 _tr_stored_block [function] [call site] 00068
5 flush_pending [function] [call site] 00069
4 deflate_huff [function] [call site] 00070
5 fill_window [function] [call site] 00071
5 _tr_flush_block [function] [call site] 00074
6 detect_data_type [function] [call site] 00075
6 build_tree [function] [call site] 00076
7 pqdownheap [function] [call site] 00077
7 pqdownheap [function] [call site] 00078
7 pqdownheap [function] [call site] 00079
7 gen_bitlen [function] [call site] 00080
7 gen_codes [function] [call site] 00081
8 bi_reverse [function] [call site] 00082
6 build_tree [function] [call site] 00083
6 build_bl_tree [function] [call site] 00084
7 scan_tree [function] [call site] 00085
7 scan_tree [function] [call site] 00086
7 build_tree [function] [call site] 00087
6 _tr_stored_block [function] [call site] 00088
6 compress_block [function] [call site] 00089
6 send_all_trees [function] [call site] 00090
6 compress_block [function] [call site] 00093
6 init_block [function] [call site] 00094
6 bi_windup [function] [call site] 00095
5 flush_pending [function] [call site] 00096
5 _tr_flush_block [function] [call site] 00097
5 flush_pending [function] [call site] 00098
5 _tr_flush_block [function] [call site] 00099
5 flush_pending [function] [call site] 00100
4 deflate_rle [function] [call site] 00101
5 fill_window [function] [call site] 00102
5 _tr_flush_block [function] [call site] 00103
5 flush_pending [function] [call site] 00104
5 _tr_flush_block [function] [call site] 00105
5 flush_pending [function] [call site] 00106
5 _tr_flush_block [function] [call site] 00107
5 flush_pending [function] [call site] 00108
4 _tr_stored_block [function] [call site] 00111
4 flush_pending [function] [call site] 00112
4 putShortMSB [function] [call site] 00113
4 putShortMSB [function] [call site] 00114
4 flush_pending [function] [call site] 00115
3 deflateEnd [function] [call site] 00116
2 uncompress [function] [call site] 00117
3 uncompress2 [function] [call site] 00118
2 __assert_fail [call site] 00154
2 memcmp [call site] 00155
1 check_decompress [function] [call site] 00156
2 write_zlib_header [function] [call site] 00157
2 uncompress [function] [call site] 00158