Fuzz introspector: augeas_escape_name_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
5440 5440 2 :

['ns_remove', 'eval_pred']

5440 5440 ns_filter call site: 00392 /src/augeas/src/pathx.c:1268
1009 1019 3 :

['regexp_check', 'make_base_type', 'syntax_error']

1009 1019 check_value call site: 01792 /src/augeas/src/syntax.c:1150
309 309 1 :

['parse_function_call']

309 309 parse_primary_expr call site: 00137 /src/augeas/src/pathx.c:2341
168 168 2 :

['tree_fpath', 'tree_unlink']

168 168 tree_rm_dirty_files call site: 04782 /src/augeas/src/augeas.c:701
66 66 2 :

['push_boolean_value', 'coerce_to_bool']

66 66 eval_else call site: 00705 /src/augeas/src/pathx.c:1009
58 2917 5 :

['mem_alloc_n', 'rpl_free', 'path_of_tree', 'pathx_next', 'pathx_first']

58 3335 aug_match call site: 04835 /src/augeas/src/augeas.c:1428
15 15 1 :

['free_span']

15 27 free_tree_node call site: 00026 /src/augeas/src/augeas.c:650
4 16 3 :

['strlen', 'mem_realloc_n', 'strcat']

4 16 init_root call site: 00047 /src/augeas/src/augeas.c:472
2 2 1 :

['argz_add_sep']

12 16 init_loadpath call site: 00058 /src/augeas/src/augeas.c:492
2 2 1 :

['__ctype_b_loc']

2 2 step_matches call site: 00375 /src/augeas/src/pathx.c:2720
0 5431 3 :

['eval_expr', 'ns_filter', 'pop_value_ind']

0 8183 eval_filter call site: 00352 /src/augeas/src/pathx.c:1442
0 630 3 :

['make_step', 'match', 'parse_relative_location_path']

0 730 parse_path_expr call site: 00172 /src/augeas/src/pathx.c:2387

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 escape_match(unsigned char const*, unsigned long) [function] [call site] 00001
2 aug_init [function] [call site] 00002
3 make_tree [function] [call site] 00003
4 mem_alloc_n [function] [call site] 00004
5 calloc [call site] 00005
4 tree_mark_dirty [function] [call site] 00006
3 mem_alloc_n [function] [call site] 00007
3 mem_alloc_n [function] [call site] 00008
3 ref_make_ref [function] [call site] 00009
4 calloc [call site] 00010
3 dup_string [function] [call site] 00011
4 ref_make_ref [function] [call site] 00012
4 strdup [call site] 00013
4 strdup [call site] 00014
4 __assert_fail [call site] 00015
4 free_string [function] [call site] 00016
5 __assert_fail [call site] 00017
5 rpl_free [function] [call site] 00018
6 __errno_location [call site] 00019
6 __errno_location [call site] 00020
3 make_tree_origin [function] [call site] 00022
4 make_tree [function] [call site] 00023
3 free_tree [function] [call site] 00024
4 free_tree [function] [call site] 00025
5 free_tree_node [function] [call site] 00026
6 free_span [function] [call site] 00027
7 __assert_fail [call site] 00028
7 free_string [function] [call site] 00029
3 api_entry [function] [call site] 00034
4 reset_error [function] [call site] 00035
4 save_locale [function] [call site] 00037
5 newlocale [call site] 00038
5 report_error [function] [call site] 00039
6 vreport_error [function] [call site] 00040
7 __assert_fail [call site] 00041
7 vasprintf [call site] 00042
5 uselocale [call site] 00043
3 init_root [function] [call site] 00044
4 getenv [call site] 00045
4 strdup [call site] 00046
4 strlen [call site] 00047
4 strlen [call site] 00048
4 mem_realloc_n [function] [call site] 00049
5 __errno_location [call site] 00051
5 realloc [call site] 00052
4 strcat [call site] 00053
3 report_error [function] [call site] 00054
3 strdup [call site] 00055
3 init_loadpath [function] [call site] 00056
4 argz_add_sep [call site] 00057
4 getenv [call site] 00058
4 argz_add_sep [call site] 00059
4 argz_add [call site] 00060
4 argz_add [call site] 00061
4 argz_stringify [call site] 00062
4 strlen [call site] 00063
4 argz_create_sep [call site] 00064
3 report_error [function] [call site] 00066
3 aug_set [function] [call site] 00067
4 api_entry [function] [call site] 00068
4 strcmp [call site] 00069
4 tree_root_ctx [function] [call site] 00070
5 pathx_aug_parse [function] [call site] 00071
6 err_of_aug [function] [call site] 00072
6 pathx_parse [function] [call site] 00073
7 mem_alloc_n [function] [call site] 00074
7 mem_alloc_n [function] [call site] 00075
7 mem_alloc_n [function] [call site] 00076
7 parse_expr [function] [call site] 00077
8 skipws [function] [call site] 00078
9 __ctype_b_loc [call site] 00079
8 parse_else_expr [function] [call site] 00080
9 parse_or_expr [function] [call site] 00081
10 parse_and_expr [function] [call site] 00082
11 parse_equality_expr [function] [call site] 00083
12 parse_relational_expr [function] [call site] 00084
13 parse_additive_expr [function] [call site] 00085
14 parse_multiplicative_expr [function] [call site] 00086
15 parse_union_expr [function] [call site] 00087
16 parse_path_expr [function] [call site] 00088
17 looking_at_primary_expr [function] [call site] 00089
18 peek [function] [call site] 00090
19 strchr [call site] 00091
18 __ctype_b_loc [call site] 00092
18 __ctype_b_loc [call site] 00093
17 parse_primary_expr [function] [call site] 00094
18 parse_literal [function] [call site] 00096
19 mem_alloc_n [function] [call site] 00097
19 make_value [function] [call site] 00098
20 __assert_fail [call site] 00099
19 strndup [call site] 00100
19 expr_value [function] [call site] 00101
19 expr_value [function] [call site] 00102
19 push_expr [function] [call site] 00103
20 mem_realloc_n [function] [call site] 00104
19 free_expr [function] [call site] 00105
20 free_expr [function] [call site] 00106
21 free_pred [function] [call site] 00107
22 free_expr [function] [call site] 00108
23 free_locpath [function] [call site] 00109
23 free_expr [function] [call site] 00116
24 free_expr [function] [call site] 00117
25 rpl_free [function] [call site] 00118
25 free_expr [function] [call site] 00119
26 rpl_free [function] [call site] 00120
26 __assert_fail [call site] 00121
26 rpl_free [function] [call site] 00122
18 parse_number [function] [call site] 00124
19 __errno_location [call site] 00125
19 strtoul [call site] 00126
19 __errno_location [call site] 00127
19 mem_alloc_n [function] [call site] 00128
19 make_value [function] [call site] 00129
19 expr_value [function] [call site] 00130
19 push_expr [function] [call site] 00131
19 free_expr [function] [call site] 00132
18 parse_expr [function] [call site] 00135
18 parse_var [function] [call site] 00138
19 __ctype_b_loc [call site] 00139
19 __ctype_b_loc [call site] 00140
19 mem_alloc_n [function] [call site] 00141
19 strndup [call site] 00142
19 push_expr [function] [call site] 00143
19 free_expr [function] [call site] 00144
18 parse_function_call [function] [call site] 00145
19 looking_at [function] [call site] 00146
20 strlen [call site] 00147
20 strlen [call site] 00148
20 __ctype_b_loc [call site] 00149
20 strlen [call site] 00150
20 strlen [call site] 00151
19 parse_expr [function] [call site] 00153
19 strcmp [call site] 00156
19 mem_alloc_n [function] [call site] 00157
19 mem_alloc_n [function] [call site] 00158
19 free_expr [function] [call site] 00159
19 pop_expr [function] [call site] 00160
20 __assert_fail [call site] 00161
19 push_expr [function] [call site] 00162
17 parse_predicates [function] [call site] 00163
17 parse_relative_location_path [function] [call site] 00174
18 parse_step [function] [call site] 00175
19 mem_alloc_n [function] [call site] 00176
19 looking_at [function] [call site] 00177
19 parse_name [function] [call site] 00179
20 strchr [call site] 00180
20 strncmp [call site] 00181
20 strncmp [call site] 00182
20 strncmp [call site] 00183
20 __ctype_b_loc [call site] 00184
20 backslash_escaped [function] [call site] 00185
20 strndup [call site] 00186
19 strcmp [call site] 00187
19 strcmp [call site] 00188
19 rpl_free [function] [call site] 00189
19 parse_predicates [function] [call site] 00190
19 free_step [function] [call site] 00191
20 rpl_free [function] [call site] 00192
20 free_pred [function] [call site] 00193
20 rpl_free [function] [call site] 00194
18 mem_alloc_n [function] [call site] 00195
18 make_step [function] [call site] 00197
19 mem_alloc_n [function] [call site] 00198
18 parse_step [function] [call site] 00199
18 free_step [function] [call site] 00200
18 free_locpath [function] [call site] 00201
17 make_step [function] [call site] 00202
17 parse_relative_location_path [function] [call site] 00203
17 mem_alloc_n [function] [call site] 00204
17 mem_alloc_n [function] [call site] 00205
17 mem_alloc_n [function] [call site] 00206
17 pop_expr [function] [call site] 00207
17 push_expr [function] [call site] 00208
17 parse_location_path [function] [call site] 00209
18 parse_relative_location_path [function] [call site] 00211
18 make_step [function] [call site] 00212
18 parse_relative_location_path [function] [call site] 00213
18 mem_alloc_n [function] [call site] 00214
18 make_step [function] [call site] 00215
18 free_step [function] [call site] 00216
18 parse_relative_location_path [function] [call site] 00217
18 mem_alloc_n [function] [call site] 00218
18 push_expr [function] [call site] 00219
18 free_expr [function] [call site] 00220
18 free_locpath [function] [call site] 00221
17 free_expr [function] [call site] 00222
17 free_pred [function] [call site] 00223
17 free_locpath [function] [call site] 00224
16 parse_path_expr [function] [call site] 00226
16 push_new_binary_op [function] [call site] 00227
17 mem_alloc_n [function] [call site] 00228
17 pop_expr [function] [call site] 00229
17 pop_expr [function] [call site] 00230
17 push_expr [function] [call site] 00231
15 parse_union_expr [function] [call site] 00233
15 push_new_binary_op [function] [call site] 00234
14 parse_multiplicative_expr [function] [call site] 00236
14 push_new_binary_op [function] [call site] 00237
13 parse_additive_expr [function] [call site] 00239
13 push_new_binary_op [function] [call site] 00240
12 parse_relational_expr [function] [call site] 00242
12 push_new_binary_op [function] [call site] 00243
12 parse_relational_expr [function] [call site] 00245
12 push_new_binary_op [function] [call site] 00246
11 parse_equality_expr [function] [call site] 00248
11 push_new_binary_op [function] [call site] 00249
10 parse_and_expr [function] [call site] 00251
10 push_new_binary_op [function] [call site] 00252
9 parse_or_expr [function] [call site] 00254
9 push_new_binary_op [function] [call site] 00255
7 strlen [call site] 00256
7 check_expr [function] [call site] 00257
8 check_filter [function] [call site] 00258
9 __assert_fail [call site] 00259
9 check_expr [function] [call site] 00260
10 check_binary [function] [call site] 00261
11 check_expr [function] [call site] 00262
12 expr_value [function] [call site] 00263
12 check_var [function] [call site] 00264
13 lookup_var [function] [call site] 00265
14 strcmp [call site] 00266
12 check_app [function] [call site] 00267
13 __assert_fail [call site] 00268
13 check_expr [function] [call site] 00269
14 __assert_fail [call site] 00270
13 strcmp [call site] 00271
11 check_expr [function] [call site] 00272
11 __assert_fail [call site] 00273
9 check_preds [function] [call site] 00274
10 check_expr [function] [call site] 00275
9 check_preds [function] [call site] 00276
7 store_error [function] [call site] 00277
8 pathx_error [function] [call site] 00278
8 strlen [call site] 00279
8 strlen [call site] 00280
8 mem_realloc_n [function] [call site] 00281
8 strcat [call site] 00282
8 strncat [call site] 00283
8 strncat [call site] 00284
8 strcat [call site] 00285
8 strcat [call site] 00286
7 free_pathx [function] [call site] 00287
8 free_state [function] [call site] 00288
9 free_expr [function] [call site] 00289
9 release_value [function] [call site] 00291
10 free_nodeset [function] [call site] 00292
10 rpl_free [function] [call site] 00295
10 free_regexp [function] [call site] 00296
11 __assert_fail [call site] 00297
11 __assert_fail [call site] 00298
11 free_info [function] [call site] 00299
12 __assert_fail [call site] 00300
12 __assert_fail [call site] 00301
12 free_string [function] [call site] 00302
12 rpl_free [function] [call site] 00303
11 __assert_fail [call site] 00304
11 free_string [function] [call site] 00305
11 rpl_regfree [function] [call site] 00306
12 pthread_mutex_destroy [call site] 00307
12 rpl_free [function] [call site] 00339
12 rpl_free [function] [call site] 00340
11 rpl_free [function] [call site] 00341
11 rpl_free [function] [call site] 00342
10 __assert_fail [call site] 00343
5 pathx_find_one [function] [call site] 00348
6 pathx_first [function] [call site] 00349
7 pathx_eval [function] [call site] 00350
8 eval_expr [function] [call site] 00351
9 eval_filter [function] [call site] 00352
10 ns_from_locpath [function] [call site] 00353
11 bug_on [function] [call site] 00354
12 vreport_error [function] [call site] 00355
12 xasprintf [function] [call site] 00356
13 vasprintf [call site] 00357
12 xasprintf [function] [call site] 00358
12 rpl_free [function] [call site] 00359
11 mem_alloc_n [function] [call site] 00360
11 make_nodeset [function] [call site] 00361
12 mem_alloc_n [function] [call site] 00362
11 step_root [function] [call site] 00363
12 __assert_fail [call site] 00364
11 ns_add [function] [call site] 00365
12 mem_realloc_n [function] [call site] 00366
11 ns_clear_added [function] [call site] 00367
11 ns_clear_added [function] [call site] 00369
11 position_pred [function] [call site] 00370
11 position_filter [function] [call site] 00371
12 step_first [function] [call site] 00372
13 tree_prev [function] [call site] 00373
13 __assert_fail [call site] 00374
13 step_matches [function] [call site] 00375
14 __ctype_b_loc [call site] 00376
14 streqx [function] [call site] 00377
15 strlen [call site] 00378
15 strlen [call site] 00379
15 strcmp [call site] 00380
13 step_next [function] [call site] 00381
14 tree_prev [function] [call site] 00382
14 __assert_fail [call site] 00383
14 step_matches [function] [call site] 00384
12 step_next [function] [call site] 00385
11 ns_clear_added [function] [call site] 00387
11 step_first [function] [call site] 00388
11 step_next [function] [call site] 00390
11 ns_clear_added [function] [call site] 00391
11 ns_filter [function] [call site] 00392
12 eval_pred [function] [call site] 00393
13 eval_expr [function] [call site] 00394
14 eval_binary [function] [call site] 00395
15 eval_expr [function] [call site] 00396
16 push_value [function] [call site] 00397
17 mem_realloc_n [function] [call site] 00398
16 eval_var [function] [call site] 00399
17 lookup_var [function] [call site] 00400
17 clone_value [function] [call site] 00401
18 make_value [function] [call site] 00402
18 clone_nodeset [function] [call site] 00403
19 mem_alloc_n [function] [call site] 00404
19 mem_alloc_n [function] [call site] 00405
19 rpl_free [function] [call site] 00406
18 strdup [call site] 00407
18 __assert_fail [call site] 00408
17 push_value [function] [call site] 00409
16 eval_app [function] [call site] 00410
17 __assert_fail [call site] 00411
17 eval_expr [function] [call site] 00412
18 free_expr [function] [call site] 00413
18 rpl_free [function] [call site] 00414
18 __assert_fail [call site] 00415
15 eval_expr [function] [call site] 00416
15 eval_eq [function] [call site] 00417
16 pop_value [function] [call site] 00418
17 pop_value_ind [function] [call site] 00419
18 __assert_fail [call site] 00420
16 pop_value [function] [call site] 00421
16 calc_eq_nodeset_nodeset [function] [call site] 00422
16 calc_eq_nodeset_string [function] [call site] 00425
16 calc_eq_nodeset_string [function] [call site] 00428
16 __assert_fail [call site] 00429
16 __assert_fail [call site] 00430
16 push_boolean_value [function] [call site] 00432
17 push_value [function] [call site] 00433
15 eval_rel [function] [call site] 00435
16 pop_value [function] [call site] 00436
16 pop_value [function] [call site] 00437
16 pop_value [function] [call site] 00438
16 pop_value [function] [call site] 00439
16 strcmp [call site] 00440
16 __assert_fail [call site] 00441
16 push_boolean_value [function] [call site] 00442
15 eval_rel [function] [call site] 00443
15 eval_rel [function] [call site] 00444
15 eval_rel [function] [call site] 00445
15 eval_arith [function] [call site] 00446
16 make_value [function] [call site] 00447
16 pop_value [function] [call site] 00448
16 pop_value [function] [call site] 00449
16 __assert_fail [call site] 00450
16 __assert_fail [call site] 00451
16 __assert_fail [call site] 00452
16 push_value [function] [call site] 00453
15 eval_concat_string [function] [call site] 00454
16 make_value [function] [call site] 00455
16 pop_value [function] [call site] 00456
16 pop_value [function] [call site] 00457
16 strlen [call site] 00458
16 mem_alloc_n [function] [call site] 00459
16 strcpy [call site] 00460
16 strcat [call site] 00461
16 push_value [function] [call site] 00462
15 eval_concat_regexp [function] [call site] 00463
16 make_value [function] [call site] 00464
16 pop_value [function] [call site] 00465
16 pop_value [function] [call site] 00466
16 regexp_concat [function] [call site] 00467
17 regexp_concat_n [function] [call site] 00468
18 strlen [call site] 00469
18 mem_alloc_n [function] [call site] 00470
18 append_expanded [function] [call site] 00471
19 regexp_expand_nocase [function] [call site] 00472
20 strdup [call site] 00473
20 strlen [call site] 00474
20 fa_expand_nocase [function] [call site] 00475
21 parse_regexp [function] [call site] 00476
22 peek [function] [call site] 00477
23 strchr [call site] 00478
22 make_re [function] [call site] 00479
23 ref_make_ref [function] [call site] 00480
22 parse_concat_exp [function] [call site] 00481
23 parse_repeated_exp [function] [call site] 00482
24 parse_simple_exp [function] [call site] 00483
25 make_re_char_set [function] [call site] 00487
26 bitset_init [function] [call site] 00489
27 mem_alloc_n [function] [call site] 00490
26 __assert_fail [call site] 00491
26 free_re [function] [call site] 00492
27 __assert_fail [call site] 00493
27 __assert_fail [call site] 00494
27 free_re [function] [call site] 00495
28 __assert_fail [call site] 00496
28 free_re [function] [call site] 00497
29 __assert_fail [call site] 00498
29 free_re [function] [call site] 00499
30 bitset_free [function] [call site] 00500
31 rpl_free [function] [call site] 00501
30 rpl_free [function] [call site] 00502
25 parse_char_class [function] [call site] 00520
25 parse_regexp [function] [call site] 00525
26 parse_regexp [function] [call site] 00529
27 make_re_binop [function] [call site] 00530
28 __assert_fail [call site] 00532
28 __assert_fail [call site] 00534
27 __assert_fail [call site] 00536
25 make_re_char_set [function] [call site] 00540
25 add_re_char [function] [call site] 00541
25 parse_char [function] [call site] 00543
25 make_re_char [function] [call site] 00544
25 __assert_fail [call site] 00547
24 make_re_rep [function] [call site] 00550
25 __assert_fail [call site] 00552
24 make_re_rep [function] [call site] 00555
24 make_re_rep [function] [call site] 00557
24 parse_int [function] [call site] 00559
25 strtoul [call site] 00560
25 strndup [call site] 00561
25 strtoul [call site] 00562
25 rpl_free [function] [call site] 00563
24 parse_int [function] [call site] 00565
24 make_re_rep [function] [call site] 00568
24 __assert_fail [call site] 00569
23 parse_concat_exp [function] [call site] 00572
24 make_re_binop [function] [call site] 00573
24 __assert_fail [call site] 00574
21 re_case_expand [function] [call site] 00576
22 re_case_expand [function] [call site] 00577
23 re_case_expand [function] [call site] 00578
24 bitset_get [function] [call site] 00579
24 tolower [call site] 00580
24 bitset_set [function] [call site] 00581
24 bitset_get [function] [call site] 00582
24 toupper [call site] 00583
24 bitset_set [function] [call site] 00584
24 __ctype_b_loc [call site] 00585
24 bitset_init [function] [call site] 00586
24 tolower [call site] 00587
24 bitset_set [function] [call site] 00588
24 toupper [call site] 00589
24 bitset_set [function] [call site] 00590
24 re_case_expand [function] [call site] 00591
25 __assert_fail [call site] 00592
21 __assert_fail [call site] 00593
21 re_as_string [function] [call site] 00595
22 re_union_as_string [function] [call site] 00596
23 __assert_fail [call site] 00597
23 re_binop_count [function] [call site] 00598
24 __assert_fail [call site] 00599
24 re_binop_count [function] [call site] 00600
23 mem_alloc_n [function] [call site] 00601
23 re_binop_store [function] [call site] 00602
24 re_binop_store [function] [call site] 00603
25 re_binop_store [function] [call site] 00604
23 mem_alloc_n [function] [call site] 00605
23 re_as_string [function] [call site] 00606
24 re_concat_as_string [function] [call site] 00607
25 __assert_fail [call site] 00608
25 re_binop_count [function] [call site] 00609
25 mem_alloc_n [function] [call site] 00610
25 re_binop_store [function] [call site] 00611
25 mem_alloc_n [function] [call site] 00612
25 re_as_string [function] [call site] 00613
26 re_cset_as_string [function] [call site] 00614
27 cset_contains [function] [call site] 00615
28 bitset_get [function] [call site] 00616
27 cset_contains [function] [call site] 00617
27 strdup [call site] 00618
27 cset_contains [function] [call site] 00619
27 strdup [call site] 00620
27 cset_contains [function] [call site] 00621
27 cset_contains [function] [call site] 00622
27 cset_contains [function] [call site] 00623
27 cset_contains [function] [call site] 00624
27 cset_contains [function] [call site] 00625
27 re_str_alloc [function] [call site] 00626
28 mem_alloc_n [function] [call site] 00627
27 cset_contains [function] [call site] 00628
27 cset_contains [function] [call site] 00629
27 cset_contains [function] [call site] 00630
27 strlen [call site] 00631
27 release_re_str [function] [call site] 00632
28 rpl_free [function] [call site] 00633
26 strchr [call site] 00634
26 mem_alloc_n [function] [call site] 00635
26 mem_alloc_n [function] [call site] 00636
26 strlen [call site] 00637
26 re_iter_as_string [function] [call site] 00638
27 re_as_string [function] [call site] 00639
28 mem_alloc_n [function] [call site] 00640
28 strcpy [call site] 00641
28 strlen [call site] 00642
28 __assert_fail [call site] 00643
28 release_re_str [function] [call site] 00644
27 asprintf [call site] 00645
27 asprintf [call site] 00646
27 strlen [call site] 00647
27 mem_realloc_n [function] [call site] 00648
27 strcpy [call site] 00649
27 strlen [call site] 00650
27 strlen [call site] 00651
27 mem_realloc_n [function] [call site] 00652
27 strcpy [call site] 00653
27 strlen [call site] 00654
27 rpl_free [function] [call site] 00655
27 release_re_str [function] [call site] 00656
25 re_needs_parens_in_concat [function] [call site] 00657
25 re_str_alloc [function] [call site] 00658
25 re_needs_parens_in_concat [function] [call site] 00659
25 re_needs_parens_in_concat