Fuzz introspector: fuzz_request.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
2 167 ap_assign_request_line call site: {node_id} ap_strchr_c
1 5 af_get_null_terminated call site: {node_id} af_gb_get_null_terminated
1 11 LLVMFuzzerTestOneInput call site: {node_id}
1 67 LLVMFuzzerTestOneInput call site: {node_id} af_get_short
1 102 tokenize_request_line call site: {node_id}
1 115 rrl_log_error call site: {node_id}
1 159 ap_parse_uri call site: {node_id}
1 186 ap_assign_request_line call site: {node_id}

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 af_gb_init [function] [call site] 00001
1 af_gb_get_null_terminated [function] [call site] 00002
2 af_get_null_terminated [function] [call site] 00003
3 malloc [call site] 00004
3 memcpy [call site] 00005
1 af_gb_get_null_terminated [function] [call site] 00006
1 af_gb_get_null_terminated [function] [call site] 00007
1 af_gb_get_null_terminated [function] [call site] 00008
1 af_gb_get_null_terminated [function] [call site] 00009
1 apr_pool_initialize [call site] 00010
1 apr_pool_create [call site] 00011
1 apr_bucket_alloc_create [call site] 00012
1 ap_method_registry_init [function] [call site] 00013
2 apr_hash_make [call site] 00014
2 apr_pool_cleanup_register [call site] 00015
2 register_one_method [function] [call site] 00016
3 apr_palloc [call site] 00017
3 apr_hash_set [call site] 00018
2 register_one_method [function] [call site] 00019
2 register_one_method [function] [call site] 00020
2 register_one_method [function] [call site] 00021
2 register_one_method [function] [call site] 00022
2 register_one_method [function] [call site] 00023
2 register_one_method [function] [call site] 00024
2 register_one_method [function] [call site] 00025
2 register_one_method [function] [call site] 00026
2 register_one_method [function] [call site] 00027
2 register_one_method [function] [call site] 00028
2 register_one_method [function] [call site] 00029
2 register_one_method [function] [call site] 00030
2 register_one_method [function] [call site] 00031
2 register_one_method [function] [call site] 00032
2 register_one_method [function] [call site] 00033
2 register_one_method [function] [call site] 00034
2 register_one_method [function] [call site] 00035
2 register_one_method [function] [call site] 00036
2 register_one_method [function] [call site] 00037
2 register_one_method [function] [call site] 00038
2 register_one_method [function] [call site] 00039
2 register_one_method [function] [call site] 00040
2 register_one_method [function] [call site] 00041
2 register_one_method [function] [call site] 00042
2 register_one_method [function] [call site] 00043
2 register_one_method [function] [call site] 00044
1 ap_create_request [function] [call site] 00045
2 apr_pool_create [call site] 00046
2 apr_pool_tag [call site] 00047
2 apr_pcalloc [call site] 00048
2 AP_READ_REQUEST_ENTRY [call site] 00049
2 ap_make_method_list [function] [call site] 00050
3 apr_palloc [call site] 00051
3 apr_array_make [call site] 00052
2 apr_table_make [call site] 00053
2 apr_table_make [call site] 00054
2 apr_table_make [call site] 00055
2 apr_table_make [call site] 00056
2 apr_table_make [call site] 00057
2 apr_table_make [call site] 00058
2 apr_table_make [call site] 00059
2 ap_create_request_config [function] [call site] 00060
3 create_empty_config [function] [call site] 00061
4 apr_pcalloc [call site] 00062
2 ap_run_create_request [call site] 00063
1 calloc [call site] 00064
1 memset [call site] 00065
1 apr_brigade_create [call site] 00066
1 ap_run_pre_read_request [call site] 00067
1 af_get_short [function] [call site] 00068
1 af_get_short [function] [call site] 00069
1 af_get_short [function] [call site] 00070
1 malloc [call site] 00071
1 ap_set_core_module_config [function] [call site] 00072
1 ap_parse_request_line [function] [call site] 00073
2 ap_h1_tokenize_request_line [function] [call site] 00074
3 ap_get_core_module_config [function] [call site] 00075
3 ap_log_rerror [call site] 00076
3 tokenize_request_line [function] [call site] 00077
4 apr_isspace [call site] 00078
4 RRL_ERROR [call site] 00079
4 apr_isspace [call site] 00080
4 ap_scan_http_token [function] [call site] 00081
5 TEST_CHAR [call site] 00082
4 ap_scan_vchar_obstext [function] [call site] 00083
5 TEST_CHAR [call site] 00084
4 apr_isspace [call site] 00085
4 RRL_ERROR [call site] 00086
4 strpbrk [call site] 00087
4 RRL_ERROR [call site] 00088
4 apr_isspace [call site] 00089
4 RRL_ERROR [call site] 00090
4 apr_isspace [call site] 00091
4 RRL_ERROR [call site] 00092
4 RRL_ERROR [call site] 00093
4 ap_scan_vchar_obstext [function] [call site] 00094
4 apr_isspace [call site] 00095
4 RRL_ERROR [call site] 00096
4 strpbrk [call site] 00097
4 apr_isspace [call site] 00098
4 RRL_ERROR [call site] 00099
4 apr_isspace [call site] 00100
4 RRL_ERROR [call site] 00101
4 ap_scan_vchar_obstext [function] [call site] 00102
4 strlen [call site] 00103
4 apr_isspace [call site] 00104
4 RRL_ERROR [call site] 00105
4 RRL_ERROR [call site] 00106
4 apr_isspace [call site] 00107
4 RRL_ERROR [call site] 00108
4 RRL_ERROR [call site] 00109
3 apr_pstrdup [call site] 00110
3 ap_log_rerror [call site] 00111
3 rrl_log_error [function] [call site] 00112
4 ap_log_rerror [call site] 00113
4 APLOGNO [call site] 00114
4 log_name_len [function] [call site] 00115
5 strlen [call site] 00116
4 ap_log_rerror [call site] 00117
4 APLOGNO [call site] 00118
4 log_name_len [function] [call site] 00119
4 ap_log_rerror [call site] 00120
4 APLOGNO [call site] 00121
4 ap_log_rerror [call site] 00122
4 APLOGNO [call site] 00123
4 ap_log_rerror [call site] 00124
4 APLOGNO [call site] 00125
4 ap_log_rerror [call site] 00126
4 APLOGNO [call site] 00127
4 log_name_len [function] [call site] 00128
4 ap_log_rerror [call site] 00129
4 APLOGNO [call site] 00130
4 log_name_len [function] [call site] 00131
2 ap_assign_request_line [function] [call site] 00132
3 ap_get_core_module_config [function] [call site] 00133
3 r_assign_protocol [function] [call site] 00134
4 apr_isdigit [call site] 00135
4 apr_isdigit [call site] 00136
4 HTTP_VERSION [call site] 00137
4 apr_isdigit [call site] 00138
4 apr_isdigit [call site] 00139
4 HTTP_VERSION [call site] 00140
4 apr_psprintf [call site] 00141
4 HTTP_VERSION_MAJOR [call site] 00142
4 HTTP_VERSION_MINOR [call site] 00143
4 HTTP_VERSION [call site] 00144
4 HTTP_VERSION [call site] 00145
3 ap_log_rerror [call site] 00146
3 ap_method_number_of [function] [call site] 00147
4 strlen [call site] 00148
4 apr_hash_get [call site] 00149
3 apr_pstrcat [call site] 00150
3 ap_log_rerror [call site] 00151
3 ap_parse_uri [function] [call site] 00152
4 apr_pstrdup [call site] 00153
4 apr_uri_parse_hostinfo [call site] 00154
4 apr_uri_parse [call site] 00155
4 ap_cstr_casecmp [function] [call site] 00156
4 ap_http_scheme [call site] 00157
4 apr_pstrdup [call site] 00158
4 apr_pstrdup [call site] 00159
4 strchr [call site] 00160
4 apr_pstrdup [call site] 00161
3 strcmp [call site] 00162
3 ap_log_rerror [call site] 00163
3 HTTP_VERSION [call site] 00164
3 ap_log_rerror [call site] 00165
3 APLOGNO [call site] 00166
3 field_name_len [function] [call site] 00167
4 ap_strchr_c [function] [call site] 00168
5 strchr [call site] 00169
3 ap_log_rerror [call site] 00170
3 APLOGNO [call site] 00171
3 ap_log_rerror [call site] 00172
3 APLOGNO [call site] 00173
3 field_name_len [function] [call site] 00174
3 ap_log_rerror [call site] 00175
3 APLOGNO [call site] 00176
3 field_name_len [function] [call site] 00177
3 ap_log_rerror [call site] 00178
3 APLOGNO [call site] 00179
3 field_name_len [function] [call site] 00180
3 ap_log_rerror [call site] 00181
3 APLOGNO [call site] 00182
3 ap_log_rerror [call site] 00183
3 APLOGNO [call site] 00184
3 HTTP_VERSION [call site] 00185
3 HTTP_VERSION [call site] 00186
1 free [call site] 00187
1 free [call site] 00188
1 apr_pool_terminate [call site] 00189
1 af_gb_cleanup [function] [call site] 00190
2 free [call site] 00191