The followings are the branches where fuzzer fails to bypass.
Unique non-covered Complexity | Unique Reachable Complexities | Unique Reachable Functions | All non-covered Complexity | All Reachable Complexity | Function Name | Function Callsite | Blocked Branch |
---|---|---|---|---|---|---|---|
18 | 18 |
1 :
['g_obex_packet_set_data'] |
18 | 100 | g_obex_packet_decode | call site: 00000 | /src/bluez/gobex/gobex-packet.c:357 |
8 | 8 |
1 :
['get_body'] |
8 | 8 | g_obex_packet_encode | call site: 00000 | /src/bluez/gobex/gobex-packet.c:438 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_data_alloc_with_length | call site: 00000 | /src/bluez/lib/sdp.c:424 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_uuid_extract | call site: 00000 | /src/bluez/lib/sdp.c:1008 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_uuid_extract | call site: 00000 | /src/bluez/lib/sdp.c:1015 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_extract_seqtype | call site: 00000 | /src/bluez/lib/sdp.c:1230 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_extract_seqtype | call site: 00000 | /src/bluez/lib/sdp.c:1239 |
2 | 2 |
1 :
['syslog'] |
2 | 2 | sdp_extract_seqtype | call site: 00000 | /src/bluez/lib/sdp.c:1248 |
2 | 2 |
2 :
['free', 'syslog'] |
2 | 2 | extract_int | call site: 00000 | /src/bluez/lib/sdp.c:1057 |
2 | 2 |
2 :
['free', 'syslog'] |
2 | 2 | extract_int | call site: 00000 | /src/bluez/lib/sdp.c:1067 |
2 | 2 |
2 :
['free', 'syslog'] |
2 | 2 | extract_int | call site: 00000 | /src/bluez/lib/sdp.c:1077 |
2 | 2 |
2 :
['free', 'syslog'] |
2 | 2 | extract_int | call site: 00000 | /src/bluez/lib/sdp.c:1087 |
LLVMFuzzerTestOneInput
[function]
[call site]
00000
sdp_xml_parse_record
[function]
[call site]
00001
sdp_record_alloc
[function]
[call site]
00002
bt_malloc0
[function]
[call site]
00003
calloc
[call site]
00004
g_markup_parse_context_new
[call site]
00005
g_markup_parse_context_parse
[call site]
00006
g_markup_parse_context_free
[call site]
00007
sdp_record_free
[function]
[call site]
00008
sdp_list_free
[function]
[call site]
00009
sdp_list_free
[function]
[call site]
00010
g_markup_parse_context_free
[call site]
00011
convert_sdp_record_to_xml
[function]
[call site]
00012
sdp_list_foreach
[function]
[call site]
00013
convert_raw_attr_to_xml_func
[function]
[call site]
00014
snprintf
[call site]
00015
convert_raw_data_to_xml
[function]
[call site]
00016
snprintf
[call site]
00017
snprintf
[call site]
00018
snprintf
[call site]
00019
snprintf
[call site]
00020
sprintf
[call site]
00021
snprintf
[call site]
00022
snprintf
[call site]
00023
snprintf
[call site]
00024
snprintf
[call site]
00025
sprintf
[call site]
00026
snprintf
[call site]
00027
snprintf
[call site]
00028
snprintf
[call site]
00029
__ctype_b_loc
[call site]
00030
sprintf
[call site]
00031
strndup
[call site]
00032
convert_raw_data_to_xml
[function]
[call site]
00033
convert_raw_data_to_xml
[function]
[call site]
00034
convert_raw_data_to_xml
[function]
[call site]
00035
empty_func
[function]
[call site]
00036
sdp_record_free
[function]
[call site]
00037