Fuzz introspector: inspector/source-codeminigzip_fuzzer.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
14 14 2 :

['byte_swap', 'crc_word_big']

14 14 crc32_z call site: 00044 /src/zlib/crc32.c:731
7 7 1 :

['_tr_align']

7 31 deflate call site: 00142 /src/zlib/deflate.c:1212
0 474 6 :

['updatewindow', 'crc32', 'inflate_table', 'fixedtables', 'inflate_fast', 'adler32']

0 474 inflate call site: 00227 /src/zlib/inflate.c:817
0 21 1 :

['crc32']

451 630 deflate call site: 00097 /src/zlib/deflate.c:1160
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00037 /src/zlib/deflate.c:499
0 21 1 :

['crc32']

0 21 read_buf call site: 00105 /src/zlib/deflate.c:227
0 17 2 :

['_tr_stored_block', 'flush_pending']

0 17 deflate_stored call site: 00108 /src/zlib/deflate.c:1800
0 7 1 :

['_tr_stored_block']

0 14 _tr_flush_block call site: 00125 /src/zlib/trees.c:1047
0 0 None 451 879 deflate call site: 00077 /src/zlib/deflate.c:974
0 0 None 451 869 deflate call site: 00078 /src/zlib/deflate.c:1009
0 0 None 451 869 deflate call site: 00078 /src/zlib/deflate.c:1011
0 0 None 451 869 deflate call site: 00078 /src/zlib/deflate.c:1013

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fopen [call site] 00001
1 fwrite [call site] 00002
1 error [function] [call site] 00003
2 fprintf [call site] 00004
1 fclose [call site] 00005
1 snprintf [call site] 00007
1 file_compress [function] [call site] 00008
2 strlen [call site] 00009
2 fprintf [call site] 00010
2 snprintf [call site] 00011
2 fopen [call site] 00012
2 perror [call site] 00013
2 gzopen [function] [call site] 00014
3 gz_open [function] [call site] 00015
4 strlen [call site] 00016
4 snprintf [call site] 00017
4 open [call site] 00018
4 lseek64 [call site] 00019
4 lseek64 [call site] 00020
4 gz_reset [function] [call site] 00021
5 gz_error [function] [call site] 00022
6 strlen [call site] 00023
6 strlen [call site] 00024
6 snprintf [call site] 00025
2 fprintf [call site] 00026
2 gz_compress [function] [call site] 00027
3 fread [call site] 00028
3 ferror [call site] 00029
3 perror [call site] 00030
3 gzwrite [function] [call site] 00031
4 gz_write [function] [call site] 00033
5 gz_init [function] [call site] 00034
6 deflateInit2_ [function] [call site] 00037
7 deflateEnd [function] [call site] 00038
8 deflateStateCheck [function] [call site] 00039
7 deflateReset [function] [call site] 00040
8 deflateResetKeep [function] [call site] 00041
9 deflateStateCheck [function] [call site] 00042
9 crc32 [function] [call site] 00043
10 crc32_z [function] [call site] 00044
11 crc_word [function] [call site] 00045
11 crc_word [function] [call site] 00046
11 crc_word [function] [call site] 00047
11 crc_word [function] [call site] 00048
11 crc_word [function] [call site] 00049
11 byte_swap [function] [call site] 00050
11 crc_word_big [function] [call site] 00051
11 crc_word_big [function] [call site] 00052
11 crc_word_big [function] [call site] 00053
11 crc_word_big [function] [call site] 00054
11 crc_word_big [function] [call site] 00055
11 byte_swap [function] [call site] 00056
9 _tr_init [function] [call site] 00059
10 tr_static_init [function] [call site] 00060
10 init_block [function] [call site] 00061
5 gz_zero [function] [call site] 00064
6 gz_comp [function] [call site] 00065
7 write [call site] 00067
7 __errno_location [call site] 00068
7 strerror [call site] 00069
7 deflateReset [function] [call site] 00071
7 write [call site] 00072
7 __errno_location [call site] 00073
7 strerror [call site] 00074
7 deflate [function] [call site] 00076
8 deflateStateCheck [function] [call site] 00077
8 flush_pending [function] [call site] 00078
9 _tr_flush_bits [function] [call site] 00079
10 bi_flush [function] [call site] 00080
8 putShortMSB [function] [call site] 00081
8 putShortMSB [function] [call site] 00082
8 putShortMSB [function] [call site] 00083
8 flush_pending [function] [call site] 00085
8 flush_pending [function] [call site] 00087
8 flush_pending [function] [call site] 00090
8 flush_pending [function] [call site] 00093
8 flush_pending [function] [call site] 00096
8 flush_pending [function] [call site] 00098
8 flush_pending [function] [call site] 00100
8 deflate_stored [function] [call site] 00101
9 _tr_stored_block [function] [call site] 00102
10 bi_windup [function] [call site] 00103
9 flush_pending [function] [call site] 00104
9 _tr_stored_block [function] [call site] 00109
9 flush_pending [function] [call site] 00110
8 deflate_huff [function] [call site] 00111
9 fill_window [function] [call site] 00112
10 slide_hash [function] [call site] 00113
10 read_buf [function] [call site] 00114
9 _tr_flush_block [function] [call site] 00115
10 detect_data_type [function] [call site] 00116
10 build_tree [function] [call site] 00117
11 pqdownheap [function] [call site] 00118
11 pqdownheap [function] [call site] 00119
11 pqdownheap [function] [call site] 00120
11 gen_bitlen [function] [call site] 00121
11 gen_codes [function] [call site] 00122
12 bi_reverse [function] [call site] 00123
10 build_tree [function] [call site] 00124
10 build_bl_tree [function] [call site] 00125
11 scan_tree [function] [call site] 00126
11 scan_tree [function] [call site] 00127
11 build_tree [function] [call site] 00128
10 _tr_stored_block [function] [call site] 00129
10 compress_block [function] [call site] 00130
10 send_all_trees [function] [call site] 00131
11 send_tree [function] [call site] 00132
11 send_tree [function] [call site] 00133
10 compress_block [function] [call site] 00134
10 init_block [function] [call site] 00135
10 bi_windup [function] [call site] 00136
9 flush_pending [function] [call site] 00137
9 _tr_flush_block [function] [call site] 00138
9 flush_pending [function] [call site] 00139
9 _tr_flush_block [function] [call site] 00140
9 flush_pending [function] [call site] 00141
8 deflate_rle [function] [call site] 00142
9 fill_window [function] [call site] 00143
9 _tr_flush_block [function] [call site] 00144
9 flush_pending [function] [call site] 00145
9 _tr_flush_block [function] [call site] 00146
9 flush_pending [function] [call site] 00147
9 _tr_flush_block [function] [call site] 00148
9 flush_pending [function] [call site] 00149
8 _tr_stored_block [function] [call site] 00152
8 flush_pending [function] [call site] 00153
8 putShortMSB [function] [call site] 00154
8 putShortMSB [function] [call site] 00155
8 flush_pending [function] [call site] 00156
3 fclose [call site] 00164
3 gzclose [function] [call site] 00165
4 gzclose_r [function] [call site] 00166
5 inflateEnd [function] [call site] 00167
6 inflateStateCheck [function] [call site] 00168
5 close [call site] 00170
2 unlink [call site] 00178
1 file_uncompress [function] [call site] 00179
2 strlen [call site] 00180
2 fprintf [call site] 00181
2 snprintf [call site] 00182
2 strcmp [call site] 00183
2 snprintf [call site] 00184
2 fprintf [call site] 00186
2 fopen [call site] 00187
2 perror [call site] 00188
2 gz_uncompress [function] [call site] 00189
3 gzread [function] [call site] 00190
4 gz_read [function] [call site] 00192
5 gz_skip [function] [call site] 00193
6 gz_fetch [function] [call site] 00194
7 gz_look [function] [call site] 00195
8 inflateInit2_ [function] [call site] 00197
9 inflateReset2 [function] [call site] 00198
10 inflateStateCheck [function] [call site] 00199
10 inflateReset [function] [call site] 00200
11 inflateStateCheck [function] [call site] 00201
11 inflateResetKeep [function] [call site] 00202
12 inflateStateCheck [function] [call site] 00203
8 gz_avail [function] [call site] 00205
9 gz_load [function] [call site] 00206
10 read [call site] 00207
10 __errno_location [call site] 00208
10 strerror [call site] 00209
8 inflateReset [function] [call site] 00210
5 gz_decomp [function] [call site] 00244
3 fwrite [call site] 00247
3 fclose [call site] 00249
2 unlink [call site] 00253
1 fopen [call site] 00254
1 perror [call site] 00255
1 fread [call site] 00256
1 ferror [call site] 00257
1 perror [call site] 00258
1 memcmp [call site] 00259
1 __assert_fail [call site] 00260
1 fclose [call site] 00261