Fuzz introspector: fuzz_utils.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
21 200 substring_conf call site: {node_id} substring_conf
6 38 ap_normalize_path call site: {node_id} x2c
2 118 ap_escape_html2 call site: {node_id}
2 175 ap_parse_token_list_strict call site: {node_id} ap_strchr_c
2 253 cfg_trim_line call site: {node_id} ap_log_error
1 46 ap_normalize_path call site: {node_id}
1 62 unescape_url call site: {node_id}
1 89 ap_make_dirstr_parent call site: {node_id}
1 109 LLVMFuzzerTestOneInput call site: {node_id}
1 144 ap_pbase64decode_strict call site: {node_id}

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 af_gb_init [function] [call site] 00001
1 af_gb_get_null_terminated [function] [call site] 00002
2 af_get_null_terminated [function] [call site] 00003
3 malloc [call site] 00004
3 memcpy [call site] 00005
1 af_gb_get_null_terminated [function] [call site] 00006
1 strlen [call site] 00007
1 ap_cstr_casecmp [function] [call site] 00008
1 ap_cstr_casecmpn [function] [call site] 00009
1 ap_strcmp_match [function] [call site] 00010
2 ap_strcmp_match [function] [call site] 00011
1 ap_strcasecmp_match [function] [call site] 00012
2 ap_strcasecmp_match [function] [call site] 00013
2 apr_tolower [call site] 00014
2 apr_tolower [call site] 00015
1 ap_strcasestr [function] [call site] 00016
2 apr_tolower [call site] 00017
2 apr_tolower [call site] 00018
2 apr_tolower [call site] 00019
2 apr_tolower [call site] 00020
1 ap_timeout_parameter_parse [function] [call site] 00021
2 apr_strtoi64 [call site] 00022
2 CHECK_OVERFLOW [call site] 00023
2 apr_time_sec [call site] 00024
2 apr_time_from_sec [call site] 00025
2 CHECK_OVERFLOW [call site] 00026
2 apr_time_sec [call site] 00027
2 apr_time_from_sec [call site] 00028
2 CHECK_OVERFLOW [call site] 00029
2 apr_time_as_msec [call site] 00030
2 apr_time_from_msec [call site] 00031
2 CHECK_OVERFLOW [call site] 00032
2 apr_time_sec [call site] 00033
2 apr_time_from_sec [call site] 00034
1 af_gb_get_null_terminated [function] [call site] 00035
1 ap_getparents [function] [call site] 00036
2 ap_normalize_path [function] [call site] 00037
3 AP_IS_SLASH [call site] 00038
3 apr_isxdigit [call site] 00039
3 apr_isxdigit [call site] 00040
3 x2c [function] [call site] 00041
4 apr_xlate_conv_byte [call site] 00042
4 strtol [call site] 00043
3 TEST_CHAR [call site] 00044
3 AP_IS_SLASH [call site] 00045
3 AP_IS_SLASH [call site] 00046
3 AP_IS_SLASH [call site] 00047
3 IS_SLASH_OR_NUL [call site] 00048
3 IS_SLASH_OR_NUL [call site] 00049
3 AP_IS_SLASH [call site] 00050
1 af_gb_get_null_terminated [function] [call site] 00051
1 ap_no2slash [function] [call site] 00052
2 ap_no2slash_ex [function] [call site] 00053
1 af_gb_get_null_terminated [function] [call site] 00054
1 ap_unescape_url [function] [call site] 00055
2 unescape_url [function] [call site] 00056
3 strchr [call site] 00057
3 apr_isxdigit [call site] 00058
3 apr_isxdigit [call site] 00059
3 x2c [function] [call site] 00060
3 AP_IS_SLASH [call site] 00061
3 ap_strchr_c [function] [call site] 00062
4 strchr [call site] 00063
3 TEST_CHAR [call site] 00064
3 AP_IS_SLASH [call site] 00065
3 ap_strchr_c [function] [call site] 00066
1 af_gb_get_null_terminated [function] [call site] 00067
1 ap_unescape_urlencoded [function] [call site] 00068
2 unescape_url [function] [call site] 00069
1 af_gb_get_null_terminated [function] [call site] 00070
1 ap_content_type_tolower [function] [call site] 00071
2 strchr [call site] 00072
2 ap_str_tolower [function] [call site] 00073
3 apr_tolower [call site] 00074
1 malloc [call site] 00075
1 ap_escape_path_segment_buffer [function] [call site] 00076
2 TEST_CHAR [call site] 00077
2 c2x [call site] 00078
1 free [call site] 00079
1 malloc [call site] 00080
1 ap_escape_errorlog_item [function] [call site] 00081
2 TEST_CHAR [call site] 00082
2 c2x [call site] 00083
1 free [call site] 00084
1 apr_pool_initialize [call site] 00085
1 apr_pool_create [call site] 00086
1 af_gb_get_null_terminated [function] [call site] 00087
1 ap_make_dirstr_parent [function] [call site] 00088
2 ap_strrchr_c [function] [call site] 00089
3 strrchr [call site] 00090
2 apr_pstrdup [call site] 00091
2 apr_pstrmemdup [call site] 00092
1 ap_field_noparam [function] [call site] 00093
2 ap_strchr_c [function] [call site] 00094
2 apr_pstrdup [call site] 00095
2 apr_isspace [call site] 00096
2 apr_pstrmemdup [call site] 00097
1 ap_escape_shell_cmd [function] [call site] 00098
2 apr_palloc [call site] 00099
2 strlen [call site] 00100
2 TEST_CHAR [call site] 00101
1 ap_os_escape_path [function] [call site] 00102
2 apr_palloc [call site] 00103
2 strlen [call site] 00104
2 ap_strchr_c [function] [call site] 00105
2 ap_strchr_c [function] [call site] 00106
2 TEST_CHAR [call site] 00107
2 c2x [call site] 00108
1 ap_escape_html2 [function] [call site] 00109
2 abort [call site] 00110
2 apr_isascii [call site] 00111
2 apr_pstrmemdup [call site] 00112
2 apr_palloc [call site] 00113
2 memcpy [call site] 00114
2 memcpy [call site] 00115
2 memcpy [call site] 00116
2 memcpy [call site] 00117
2 apr_isascii [call site] 00118
2 apr_psprintf [call site] 00119
2 memcpy [call site] 00120
1 ap_escape_logitem [function] [call site] 00121
2 TEST_CHAR [call site] 00122
2 apr_pmemdup [call site] 00123
2 apr_palloc [call site] 00124
2 TEST_CHAR [call site] 00125
2 c2x [call site] 00126
1 ap_escape_quotes [function] [call site] 00127
2 apr_pstrdup [call site] 00128
2 ap_assert [call site] 00129
2 ap_assert [call site] 00130
2 apr_palloc [call site] 00131
1 ap_pbase64decode [function] [call site] 00132
2 apr_palloc [call site] 00133
2 apr_base64_decode_len [call site] 00134
2 apr_base64_decode [call site] 00135
1 ap_pbase64encode [function] [call site] 00136
2 strlen [call site] 00137
2 apr_palloc [call site] 00138
2 apr_base64_encode_len [call site] 00139
2 apr_base64_encode [call site] 00140
1 af_gb_get_null_terminated [function] [call site] 00141
1 ap_pbase64decode_strict [function] [call site] 00142
2 strspn [call site] 00143
2 ap_strchr [function] [call site] 00144
3 strchr [call site] 00145
2 ap_strchr [function] [call site] 00146
2 apr_palloc [call site] 00147
2 apr_base64_decode_len [call site] 00148
2 apr_base64_decode [call site] 00149
1 ap_get_list_item [function] [call site] 00150
2 ap_size_list_item [function] [call site] 00151
3 apr_isspace [call site] 00152
3 apr_isspace [call site] 00153
2 apr_palloc [call site] 00154
2 apr_tolower [call site] 00155
1 ap_find_list_item [function] [call site] 00156
2 find_list_item [function] [call site] 00157
3 apr_isspace [call site] 00158
3 apr_tolower [call site] 00159
3 apr_tolower [call site] 00160
1 ap_find_token [function] [call site] 00161
2 TEST_CHAR [call site] 00162
2 TEST_CHAR [call site] 00163
2 ap_cstr_casecmpn [function] [call site] 00164
1 ap_find_last_token [function] [call site] 00165
2 find_last_token [function] [call site] 00166
3 strlen [call site] 00167
3 strlen [call site] 00168
3 apr_isspace [call site] 00169
3 ap_cstr_casecmpn [function] [call site] 00170
1 ap_parse_token_list_strict [function] [call site] 00171
2 TEST_CHAR [call site] 00172
2 apr_array_make [call site] 00173
2 APR_ARRAY_PUSH [call site] 00174
2 apr_pstrmemdup [call site] 00175
2 ap_strchr_c [function] [call site] 00176
2 ap_strchr_c [function] [call site] 00177
2 apr_psprintf [call site] 00178
1 ap_get_token [function] [call site] 00179
2 apr_isspace [call site] 00180
2 apr_isspace [call site] 00181
2 apr_pstrmemdup [call site] 00182
2 apr_isspace [call site] 00183
1 ap_pstr2_alnum [function] [call site] 00184
2 apr_palloc [call site] 00185
2 strlen [call site] 00186
2 ap_str2_alnum [function] [call site] 00187
3 apr_isprint [call site] 00188
3 apr_isalnum [call site] 00189
1 ap_is_chunked [function] [call site] 00190
2 ap_cstr_casecmp [function] [call site] 00191
2 find_last_token [function] [call site] 00192
1 ap_getword [function] [call site] 00193
2 apr_pstrmemdup [call site] 00194
1 ap_getword_conf2 [function] [call site] 00195
2 apr_isspace [call site] 00196
2 ap_getword_conf [function] [call site] 00197
3 apr_isspace [call site] 00198
3 substring_conf [function] [call site] 00199
4 apr_palloc [call site] 00200
4 ap_resolve_env [function] [call site] 00201
5 ap_strchr_c [function] [call site] 00202
5 strlen [call site] 00203
5 apr_palloc [call site] 00204
5 ap_strchr_c [function] [call site] 00205
5 apr_pstrmemdup [call site] 00206
5 ap_strstr [function] [call site] 00207
6 strstr [call site] 00208
5 apr_table_get [call site] 00209
5 apr_pstrdup [call site] 00210
5 getenv [call site] 00211
5 strlen [call site] 00212
5 strlen [call site] 00213
5 ap_strchr [function] [call site] 00214
5 ap_log_error [call site] 00215
5 APLOGNO [call site] 00216
5 ap_strchr_c [function] [call site] 00217
5 apr_palloc [call site] 00218
5 memcpy [call site] 00219
3 apr_isspace [call site] 00220
3 substring_conf [function] [call site] 00221
3 apr_isspace [call site] 00222
2 substring_conf [function] [call site] 00223
2 apr_isspace [call site] 00224
2 substring_conf [function] [call site] 00225
2 apr_isspace [call site] 00226
1 af_gb_get_null_terminated [function] [call site] 00227
1 ap_getword_white_nc [function] [call site] 00228
2 ap_getword_white [function] [call site] 00229
3 apr_isspace [call site] 00230
3 apr_pstrmemdup [call site] 00231
3 apr_isspace [call site] 00232
1 ap_escape_urlencoded [function] [call site] 00233
2 ap_escape_urlencoded_buffer [function] [call site] 00234
3 TEST_CHAR [call site] 00235
3 c2x [call site] 00236
2 apr_palloc [call site] 00237
2 strlen [call site] 00238
1 sprintf [call site] 00239
1 getpid [call site] 00240
1 fopen [call site] 00241
1 fwrite [call site] 00242
1 fclose [call site] 00243
1 ap_pcfg_openfile [call site] 00244
1 af_get_short [function] [call site] 00245
1 ap_cfg_getline [function] [call site] 00246
2 ap_cfg_getline_core [function] [call site] 00247
3 strlen [call site] 00248
2 cfg_trim_line [function] [call site] 00249
3 apr_isspace [call site] 00250
3 strlen [call site] 00251
3 apr_isspace [call site] 00252
3 memmove [call site] 00253
3 ap_log_error [call site] 00254
3 APLOGNO [call site] 00255
1 ap_cfg_getline [function] [call site] 00256
1 unlink [call site] 00257
1 apr_pool_terminate [call site] 00258
1 af_gb_cleanup [function] [call site] 00259
2 free [call site] 00260