Fuzz introspector: fuzz_parse.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
56 27 ap_expr_parse call site: {node_id} expr_dump_tree
5 0 EP call site: {node_id} ap_expr_parse
3 20 ap_expr_yylex_destroy call site: {node_id} ap_expr_yy_delete_buffer
1 18 ap_expr_yyfree call site: {node_id} ap_expr_yyfree

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 malloc [call site] 00001
1 memcpy [call site] 00002
1 apr_pool_initialize [call site] 00003
1 apr_pool_create [call site] 00004
1 ap_expr_parse [function] [call site] 00005
2 memset [call site] 00006
2 strlen [call site] 00007
2 ap_expr_yylex_init [function] [call site] 00008
3 ap_expr_yyalloc [function] [call site] 00009
4 malloc [call site] 00010
3 memset [call site] 00011
3 yy_init_globals [function] [call site] 00012
2 ap_expr_yyset_extra [function] [call site] 00013
2 ap_expr_yyparse [call site] 00014
2 ap_expr_yylex_destroy [function] [call site] 00015
3 ap_expr_yy_delete_buffer [function] [call site] 00016
4 ap_expr_yyfree [function] [call site] 00017
5 free [call site] 00018
4 ap_expr_yyfree [function] [call site] 00019
3 ap_expr_yypop_buffer_state [function] [call site] 00020
4 ap_expr_yy_delete_buffer [function] [call site] 00021
4 ap_expr_yy_load_buffer_state [function] [call site] 00022
3 ap_expr_yyfree [function] [call site] 00023
3 ap_expr_yyfree [function] [call site] 00024
3 yy_init_globals [function] [call site] 00025
3 ap_expr_yyfree [function] [call site] 00026
2 apr_psprintf [call site] 00027
2 expr_dump_tree [function] [call site] 00028
3 CASE_OP [call site] 00029
3 CASE_OP [call site] 00030
3 CASE_OP [call site] 00031
3 ap_assert [call site] 00032
3 ap_log_error [call site] 00033
3 CASE_OP [call site] 00034
3 CASE_OP [call site] 00035
3 CASE_OP [call site] 00036
3 ap_assert [call site] 00037
3 DUMP_S_E [call site] 00038
3 CASE_OP [call site] 00039
3 CASE_OP [call site] 00040
3 CASE_OP [call site] 00041
3 CASE_OP [call site] 00042
3 CASE_OP [call site] 00043
3 CASE_OP [call site] 00044
3 CASE_OP [call site] 00045
3 CASE_OP [call site] 00046
3 CASE_OP [call site] 00047
3 CASE_OP [call site] 00048
3 CASE_OP [call site] 00049
3 CASE_OP [call site] 00050
3 CASE_OP [call site] 00051
3 CASE_OP [call site] 00052
3 CASE_OP [call site] 00053
3 CASE_OP [call site] 00054
3 CASE_OP [call site] 00055
3 CASE_OP [call site] 00056
3 CASE_OP [call site] 00057
3 CASE_OP [call site] 00058
3 CASE_OP [call site] 00059
3 CASE_OP [call site] 00060
3 CASE_OP [call site] 00061
3 CASE_OP [call site] 00062
3 CASE_OP [call site] 00063
3 CASE_OP [call site] 00064
3 CASE_OP [call site] 00065
3 CASE_OP [call site] 00066
3 ap_assert [call site] 00067
3 DUMP_E_E [call site] 00068
3 CASE_OP [call site] 00069
3 CASE_OP [call site] 00070
3 ap_assert [call site] 00071
3 DUMP_S [call site] 00072
3 CASE_OP [call site] 00073
3 CASE_OP [call site] 00074
3 CASE_OP [call site] 00075
3 CASE_OP [call site] 00076
3 CASE_OP [call site] 00077
3 ap_assert [call site] 00078
3 DUMP_P_P [call site] 00079
3 DUMP_P [call site] 00080
3 DUMP_IP [call site] 00081
3 ap_log_error [call site] 00082
1 apr_pool_terminate [call site] 00083
1 free [call site] 00084