Fuzz introspector: inspector/source-codecompress_fuzzer.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
14 14 2 :

['byte_swap', 'crc_word_big']

14 14 crc32_z call site: 00014 /src/zlib/crc32.c:731
7 7 1 :

['_tr_align']

7 31 deflate call site: 00099 /src/zlib/deflate.c:1212
0 474 6 :

['updatewindow', 'crc32', 'inflate_table', 'fixedtables', 'inflate_fast', 'adler32']

0 474 inflate call site: 00137 /src/zlib/inflate.c:817
0 21 1 :

['crc32']

451 630 deflate call site: 00054 /src/zlib/deflate.c:1160
0 21 1 :

['deflateEnd']

0 21 deflateInit2_ call site: 00007 /src/zlib/deflate.c:499
0 21 1 :

['crc32']

0 21 read_buf call site: 00062 /src/zlib/deflate.c:227
0 17 2 :

['_tr_stored_block', 'flush_pending']

0 17 deflate_stored call site: 00065 /src/zlib/deflate.c:1800
0 7 1 :

['_tr_stored_block']

0 14 _tr_flush_block call site: 00082 /src/zlib/trees.c:1047
0 0 None 451 879 deflate call site: 00034 /src/zlib/deflate.c:974
0 0 None 451 869 deflate call site: 00035 /src/zlib/deflate.c:1009
0 0 None 451 869 deflate call site: 00035 /src/zlib/deflate.c:1011
0 0 None 451 869 deflate call site: 00035 /src/zlib/deflate.c:1013

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 compressBound [function] [call site] 00001
1 calloc [call site] 00002
1 calloc [call site] 00003
1 check_compress_level [function] [call site] 00004
2 compress2 [function] [call site] 00005
3 deflateInit_ [function] [call site] 00006
4 deflateInit2_ [function] [call site] 00007
5 deflateEnd [function] [call site] 00008
6 deflateStateCheck [function] [call site] 00009
5 deflateReset [function] [call site] 00010
6 deflateResetKeep [function] [call site] 00011
7 deflateStateCheck [function] [call site] 00012
7 crc32 [function] [call site] 00013
8 crc32_z [function] [call site] 00014
9 crc_word [function] [call site] 00015
9 crc_word [function] [call site] 00016
9 crc_word [function] [call site] 00017
9 crc_word [function] [call site] 00018
9 crc_word [function] [call site] 00019
9 byte_swap [function] [call site] 00020
9 crc_word_big [function] [call site] 00021
9 crc_word_big [function] [call site] 00022
9 crc_word_big [function] [call site] 00023
9 crc_word_big [function] [call site] 00024
9 crc_word_big [function] [call site] 00025
9 byte_swap [function] [call site] 00026
7 adler32 [function] [call site] 00027
8 adler32_z [function] [call site] 00028
7 _tr_init [function] [call site] 00029
8 tr_static_init [function] [call site] 00030
8 init_block [function] [call site] 00031
6 lm_init [function] [call site] 00032
3 deflate [function] [call site] 00033
4 deflateStateCheck [function] [call site] 00034
4 flush_pending [function] [call site] 00035
5 _tr_flush_bits [function] [call site] 00036
6 bi_flush [function] [call site] 00037
4 putShortMSB [function] [call site] 00038
4 putShortMSB [function] [call site] 00039
4 putShortMSB [function] [call site] 00040
4 adler32 [function] [call site] 00041
4 flush_pending [function] [call site] 00042
4 crc32 [function] [call site] 00043
4 flush_pending [function] [call site] 00044
4 crc32 [function] [call site] 00045
4 crc32 [function] [call site] 00046
4 flush_pending [function] [call site] 00047
4 crc32 [function] [call site] 00048
4 crc32 [function] [call site] 00049
4 flush_pending [function] [call site] 00050
4 crc32 [function] [call site] 00051
4 crc32 [function] [call site] 00052
4 flush_pending [function] [call site] 00053
4 crc32 [function] [call site] 00054
4 flush_pending [function] [call site] 00055
4 crc32 [function] [call site] 00056
4 flush_pending [function] [call site] 00057
4 deflate_stored [function] [call site] 00058
5 _tr_stored_block [function] [call site] 00059
6 bi_windup [function] [call site] 00060
5 flush_pending [function] [call site] 00061
5 read_buf [function] [call site] 00062
6 adler32 [function] [call site] 00063
6 crc32 [function] [call site] 00064
5 read_buf [function] [call site] 00065
5 _tr_stored_block [function] [call site] 00066
5 flush_pending [function] [call site] 00067
4 deflate_huff [function] [call site] 00068
5 fill_window [function] [call site] 00069
6 slide_hash [function] [call site] 00070
6 read_buf [function] [call site] 00071
5 _tr_flush_block [function] [call site] 00072
6 detect_data_type [function] [call site] 00073
6 build_tree [function] [call site] 00074
7 pqdownheap [function] [call site] 00075
7 pqdownheap [function] [call site] 00076
7 pqdownheap [function] [call site] 00077
7 gen_bitlen [function] [call site] 00078
7 gen_codes [function] [call site] 00079
8 bi_reverse [function] [call site] 00080
6 build_tree [function] [call site] 00081
6 build_bl_tree [function] [call site] 00082
7 scan_tree [function] [call site] 00083
7 scan_tree [function] [call site] 00084
7 build_tree [function] [call site] 00085
6 _tr_stored_block [function] [call site] 00086
6 compress_block [function] [call site] 00087
6 send_all_trees [function] [call site] 00088
7 send_tree [function] [call site] 00089
7 send_tree [function] [call site] 00090
6 compress_block [function] [call site] 00091
6 init_block [function] [call site] 00092
6 bi_windup [function] [call site] 00093
5 flush_pending [function] [call site] 00094
5 _tr_flush_block [function] [call site] 00095
5 flush_pending [function] [call site] 00096
5 _tr_flush_block [function] [call site] 00097
5 flush_pending [function] [call site] 00098
4 deflate_rle [function] [call site] 00099
5 fill_window [function] [call site] 00100
5 _tr_flush_block [function] [call site] 00101
5 flush_pending [function] [call site] 00102
5 _tr_flush_block [function] [call site] 00103
5 flush_pending [function] [call site] 00104
5 _tr_flush_block [function] [call site] 00105
5 flush_pending [function] [call site] 00106
4 _tr_align [function] [call site] 00107
5 bi_flush [function] [call site] 00108
4 _tr_stored_block [function] [call site] 00109
4 flush_pending [function] [call site] 00110
4 putShortMSB [function] [call site] 00111
4 putShortMSB [function] [call site] 00112
4 flush_pending [function] [call site] 00113
3 deflateEnd [function] [call site] 00114
2 uncompress [function] [call site] 00115
3 uncompress2 [function] [call site] 00116
4 inflateInit_ [function] [call site] 00117
5 inflateInit2_ [function] [call site] 00118
6 inflateReset2 [function] [call site] 00119
7 inflateStateCheck [function] [call site] 00120
7 inflateReset [function] [call site] 00121
8 inflateStateCheck [function] [call site] 00122
8 inflateResetKeep [function] [call site] 00123
9 inflateStateCheck [function] [call site] 00124
4 inflate [function] [call site] 00125
5 inflateStateCheck [function] [call site] 00126
5 crc32 [function] [call site] 00127
5 crc32 [function] [call site] 00128
5 adler32 [function] [call site] 00129
5 crc32 [function] [call site] 00130
5 crc32 [function] [call site] 00131
5 crc32 [function] [call site] 00132
5 crc32 [function] [call site] 00133
5 crc32 [function] [call site] 00134
5 crc32 [function] [call site] 00135
5 crc32 [function] [call site] 00136
5 crc32 [function] [call site] 00137
5 adler32 [function] [call site] 00138
5 fixedtables [function] [call site] 00139
5 inflate_table [function] [call site] 00140
5 inflate_table [function] [call site] 00141
5 inflate_table [function] [call site] 00142
5 inflate_fast [function] [call site] 00143
5 crc32 [function] [call site] 00144
5 adler32 [function] [call site] 00145
5 updatewindow [function] [call site] 00146
5 crc32 [function] [call site] 00147
5 adler32 [function] [call site] 00148
4 inflateEnd [function] [call site] 00149
5 inflateStateCheck [function] [call site] 00150
2 __assert_fail [call site] 00151
2 memcmp [call site] 00152
2 __assert_fail [call site] 00153
1 check_decompress [function] [call site] 00154
2 write_zlib_header [function] [call site] 00155
2 uncompress [function] [call site] 00156