Project: flatbuffers

Language c++
OSS-Fuzz project link
Project repository link
Build status: Fuzzers succeeding: Build log
Build status: Code coverage succeeding: Build log
Build status: Fuzz Introspector succeeding: Build log
Fuzzer count 7
Lines of code 14505
Lines covered 7432
Code coverage 51.24%
Code coverage report Report link
Static reachability 83.86%
Fuzz Introspector report Report link (from 2025-03-27)
Fuzzer Code coverage (lines) Latest Report Comments
64bit_fuzzer 18.23% (avg: 18.23%, max: 18.23%) 2025-03-27
annotator_fuzzer 36.35% (avg: 36.35%, max: 36.35%) 2025-03-27
flexverifier_fuzzer 15.1% (avg: 15.1%, max: 15.1%) 2025-03-27
monster_fuzzer 37.92% (avg: 37.91%, max: 37.92%) 2025-03-27
parser_fuzzer 45.6% (avg: 45.54%, max: 45.6%) 2025-03-27
scalar_fuzzer 23.76% (avg: 23.76%, max: 23.76%) 2025-03-27
verifier_fuzzer 13.0% (avg: 13.0%, max: 13.0%) 2025-03-27

Historical Progression

Per Fuzzer Progression

Functions of interest to fuzz

This section outlines functions that may be of interest to fuzz. They are based on ranking functions that have a lot of complexity but currently exhibit low code coverage. The complexity is calculated based on the function itself as well as the functions called by the given function, i.e. the tree of code that the function triggers.


This is only a minor amount of introspection information available for this project. Please consult the Fuzz Introspector report for more information, e.g. the introspection table of all functions in the target project available here.

Function name Function source file Accumulated cyclomatic complexity Code coverage
flatbuffers::Parser::ParseProtoDecl() /src/flatbuffers/src/idl_parser.cpp 3972 0.0%
flatbuffers::Parser::ParseProtoFields(flatbuffers::StructDef*,bool,bool) /src/flatbuffers/src/idl_parser.cpp 3972 0.0%
flatbuffers::Parser::Serialize() /src/flatbuffers/src/idl_parser.cpp 1113 0.0%
LLVMFuzzerInitialize /src/flatbuffers/tests/fuzzer/flatbuffers_64bit_fuzzer.cc 640 0.0%
flatbuffers::StructDef::Serialize(flatbuffers::FlatBufferBuilderImpl<false>*,flatbuffers::Parserconst&)const /src/flatbuffers/src/idl_parser.cpp 607 0.0%
boolflatbuffers::VerifierTemplate<false>::VerifySizePrefixedBuffer<reflection::Schema,unsignedint>(charconst*) /src/flatbuffers/tests/fuzzer/../../include/flatbuffers/verifier.h 589 0.0%
flatbuffers::CopyTable(flatbuffers::FlatBufferBuilderImpl<false>&,reflection::Schemaconst&,reflection::Objectconst&,flatbuffers::Tableconst&,bool) /src/flatbuffers/src/reflection.cpp 534 0.0%
flatbuffers::EnumDef::Serialize(flatbuffers::FlatBufferBuilderImpl<false>*,flatbuffers::Parserconst&)const /src/flatbuffers/src/idl_parser.cpp 514 0.0%
flatbuffers::FieldDef::Serialize(flatbuffers::FlatBufferBuilderImpl<false>*,unsignedshort,flatbuffers::Parserconst&)const /src/flatbuffers/src/idl_parser.cpp 491 0.0%
flatbuffers::VerifySizePrefixed(reflection::Schemaconst&,reflection::Objectconst&,unsignedcharconst*,unsignedlong,unsignedint,unsignedint) /src/flatbuffers/src/reflection.cpp 474 0.0%