The followings are the branches where fuzzer fails to bypass.
Unique non-covered Complexity | Unique Reachable Complexities | Unique Reachable Functions | All non-covered Complexity | All Reachable Complexity | Function Name | Function Callsite | Blocked Branch |
---|---|---|---|---|---|---|---|
3678 | 3707 |
4 :
['chip::app::reporting::Engine::ScheduleBufferPressureEventDelivery(unsigned int)', 'chip::Logging::IsCategoryEnabled(unsigned char)', 'chip::Logging::Log(unsigned char, unsigned char, char const*, ...)', 'chip::Loop chip::HeapObjectPool
|
3678 | 3709 | chip::app::reporting::Engine::ScheduleEventDelivery(chip::app::ConcreteEventPath&,unsignedint) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/app/reporting/Engine.cpp:1137 |
1979 | 1979 |
5 :
['unsigned char* std::__1::copy[abi:nn180100]
|
2035 | 5561 | chip::CASESession::HandleSigma1(chip::System::PacketBufferHandle&&) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/protocols/secure_channel/CASESession.cpp:1003 |
1951 | 1985 |
11 :
['chip::CASESession::GetState()', 'chip::ChipError::Format() const', 'chip::PairingSession::GetRemoteMRPConfig() const', 'bool std::__1::chrono::operator<[abi:nn180100]
|
1951 | 2202 | chip::CASEServer::OnMessageReceived(chip::Messaging::ExchangeContext*,chip::PayloadHeaderconst&,chip::System::PacketBufferHandle&&) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/protocols/secure_channel/CASEServer.cpp:86 |
1718 | 1718 |
2 :
['chip::Messaging::ExchangeContext::SetResponseExpected(bool)', 'chip::Messaging::ExchangeContext::CancelResponseTimer()'] |
1800 | 1952 |
chip::Messaging::ExchangeContext::SendMessage(chip::Protocols::Id,unsignedchar,chip::System::PacketBufferHandle&&,chip::BitFlags
|
call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/messaging/ExchangeContext.cpp:182 |
1718 | 1718 |
2 :
['chip::Messaging::ExchangeContext::SetResponseExpected(bool)', 'chip::Messaging::ExchangeContext::CancelResponseTimer()'] |
1760 | 3543 |
chip::Messaging::ExchangeContext::HandleMessage(unsignedint,chip::PayloadHeaderconst&,chip::BitFlags
|
call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/messaging/ExchangeContext.cpp:605 |
1706 | 1708 |
2 :
['chip::Messaging::ExchangeManager::GetReliableMessageMgr()', 'chip::Messaging::ReliableMessageMgr::ClearRetransTable(chip::Messaging::ReliableMessageContext*)'] |
3413 | 3419 | chip::Messaging::ExchangeContext::DoClose(bool) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/messaging/ExchangeContext.cpp:241 |
1428 | 1451 |
4 :
['chip::FabricTable::ReadFabricInfo(chip::TLV::ContiguousBufferTLVReader&)', 'chip::TLV::ContiguousBufferTLVReader::Init(unsigned char const*, unsigned long)', 'chip::TLV::ContiguousBufferTLVReader::ContiguousBufferTLVReader()', 'chip::ChipError::IsSuccess(chip::ChipError)'] |
2047 | 2485 | chip::FabricTable::Init(chip::FabricTable::InitParamsconst&) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/credentials/FabricTable.cpp:1103 |
619 | 619 |
1 :
['chip::FabricTable::Delete(unsigned char)'] |
619 | 650 | chip::FabricTable::Init(chip::FabricTable::InitParamsconst&) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/credentials/FabricTable.cpp:1126 |
559 | 559 |
1 :
['chip::app::Clusters::TimeSynchronization::TimeSynchronizationServer::AttemptToGetTimeFromTrustedNode()'] |
4381 | 4385 | chip::app::Clusters::TimeSynchronization::TimeSynchronizationServer::AttemptToGetTime() | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/app/clusters/time-synchronization-server/time-synchronization-server.cpp:431 |
405 | 641 |
7 :
['chip::app::DataModel::Nullable
|
405 | 643 | OnOffServer::initOnOffServer(unsignedshort) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/app/clusters/on-off-server/on-off-server.cpp:531 |
402 | 402 |
1 :
['chip::app::Clusters::LevelControl::Attributes::CurrentLevel::SetNull(unsigned short, chip::app::MarkAttributeDirty)'] |
402 | 402 |
chip::app::Clusters::LevelControl::Attributes::CurrentLevel::Set(unsignedshort,chip::app::DataModel::Nullable
|
call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../zzz_generated/app-common/app-common/zap-generated/attributes/Accessors.cpp:824 |
318 | 318 |
1 :
['chip::Transport::SecureSessionTable::EvictAndAllocate(unsigned short, chip::Transport::SecureSession::Type, chip::ScopedNodeId const&)'] |
318 | 490 | chip::Transport::SecureSessionTable::CreateNewSecureSession(chip::Transport::SecureSession::Type,chip::ScopedNodeId) | call site: 00000 | /src/connectedhomeip/out/fuzz_targets/../../src/transport/SecureSessionTable.cpp:74 |
LLVMFuzzerTestOneInput
[function]
[call site]
00000
mdns::Minimal::BytesRange::BytesRange(unsigned char const*, unsigned char const*)
[function]
[call site]
00001
(anonymous namespace)::FuzzDelegate::FuzzDelegate(mdns::Minimal::BytesRange const&)
[function]
[call site]
00002
mdns::Minimal::ParserDelegate::ParserDelegate()
[function]
[call site]
00003
mdns::Minimal::ParsePacket(mdns::Minimal::BytesRange const&, mdns::Minimal::ParserDelegate*)
[function]
[call site]
00004
mdns::Minimal::BytesRange::Size() const
[function]
[call site]
00005
mdns::Minimal::BytesRange::Start() const
[function]
[call site]
00006
mdns::Minimal::ConstHeaderRef::ConstHeaderRef(unsigned char const*)
[function]
[call site]
00007
mdns::Minimal::ConstHeaderRef::GetFlags() const
[function]
[call site]
00008
mdns::Minimal::ConstHeaderRef::Get16At(unsigned long) const
[function]
[call site]
00009
chip::Encoding::BigEndian::Get16(unsigned char const*)
[function]
[call site]
00010
nl::IO::BigEndian::GetUnaligned16(void const*)
[function]
[call site]
00011
nl::IO::GetUnaligned16(void const*)
[function]
[call site]
00012
nlIOGetUnaligned16(void const*)
[function]
[call site]
00013
nl::ByteOrder::Swap16BigToHost(unsigned short)
[function]
[call site]
00014
nlByteOrderSwap16BigToHost(unsigned short)
[function]
[call site]
00015
nlByteOrderValueSwap16(unsigned short)
[function]
[call site]
00016
mdns::Minimal::BitPackedFlags::BitPackedFlags(unsigned short)
[function]
[call site]
00017
mdns::Minimal::BitPackedFlags::IsValidMdns() const
[function]
[call site]
00018
mdns::Minimal::BytesRange::Start() const
[function]
[call site]
00019
mdns::Minimal::QueryData::QueryData()
[function]
[call site]
00020
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator()
[function]
[call site]
00021
mdns::Minimal::BytesRange::BytesRange()
[function]
[call site]
00022
mdns::Minimal::ConstHeaderRef::GetQueryCount() const
[function]
[call site]
00023
mdns::Minimal::ConstHeaderRef::Get16At(unsigned long) const
[function]
[call site]
00024
mdns::Minimal::QueryData::Parse(mdns::Minimal::BytesRange const&, unsigned char const**)
[function]
[call site]
00025
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00026
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator(mdns::Minimal::BytesRange, unsigned char const*)
[function]
[call site]
00027
mdns::Minimal::BytesRange::Start() const
[function]
[call site]
00028
mdns::Minimal::SerializedQNameIterator::FindDataEnd()
[function]
[call site]
00029
mdns::Minimal::SerializedQNameIterator::Next(bool)
[function]
[call site]
00030
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00031
__assert_fail
[call site]
00032
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00033
mdns::Minimal::BytesRange::Size() const
[function]
[call site]
00034
mdns::Minimal::BytesRange::Start() const
[function]
[call site]
00035
mdns::Minimal::BytesRange::Start() const
[function]
[call site]
00036
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00037
mdns::Minimal::SerializedQNameIterator::IsValid() const
[function]
[call site]
00038
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00039
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00040
chip::Encoding::BigEndian::Read16(unsigned char const*&)
[function]
[call site]
00041
nl::IO::BigEndian::ReadUnaligned16(void const*&)
[function]
[call site]
00042
nl::IO::ReadUnaligned16(void const*&)
[function]
[call site]
00043
nlIOReadUnaligned16(void const**)
[function]
[call site]
00044
nlIOGetUnaligned16(void const*)
[function]
[call site]
00045
nl::ByteOrder::Swap16BigToHost(unsigned short)
[function]
[call site]
00046
chip::Encoding::BigEndian::Read16(unsigned char const*&)
[function]
[call site]
00047
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator(mdns::Minimal::BytesRange, unsigned char const*)
[function]
[call site]
00048
mdns::Minimal::ResourceData::ResourceData()
[function]
[call site]
00049
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator()
[function]
[call site]
00050
mdns::Minimal::BytesRange::BytesRange()
[function]
[call site]
00051
mdns::Minimal::ConstHeaderRef::GetAnswerCount() const
[function]
[call site]
00052
mdns::Minimal::ConstHeaderRef::Get16At(unsigned long) const
[function]
[call site]
00053
mdns::Minimal::ResourceData::Parse(mdns::Minimal::BytesRange const&, unsigned char const**)
[function]
[call site]
00054
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator(mdns::Minimal::BytesRange, unsigned char const*)
[function]
[call site]
00055
mdns::Minimal::SerializedQNameIterator::FindDataEnd()
[function]
[call site]
00056
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00057
chip::Encoding::BigEndian::Read16(unsigned char const*&)
[function]
[call site]
00058
chip::Encoding::BigEndian::Read16(unsigned char const*&)
[function]
[call site]
00059
chip::Encoding::BigEndian::Read32(unsigned char const*&)
[function]
[call site]
00060
nl::IO::BigEndian::ReadUnaligned32(void const*&)
[function]
[call site]
00061
nl::IO::ReadUnaligned32(void const*&)
[function]
[call site]
00062
nlIOReadUnaligned32(void const**)
[function]
[call site]
00063
nlIOGetUnaligned32(void const*)
[function]
[call site]
00064
nl::ByteOrder::Swap32BigToHost(unsigned int)
[function]
[call site]
00065
nlByteOrderSwap32BigToHost(unsigned int)
[function]
[call site]
00066
nlByteOrderValueSwap32(unsigned int)
[function]
[call site]
00067
chip::Encoding::BigEndian::Read16(unsigned char const*&)
[function]
[call site]
00068
mdns::Minimal::BytesRange::Contains(unsigned char const*) const
[function]
[call site]
00069
mdns::Minimal::BytesRange::BytesRange(unsigned char const*, unsigned char const*)
[function]
[call site]
00070
mdns::Minimal::SerializedQNameIterator::SerializedQNameIterator(mdns::Minimal::BytesRange, unsigned char const*)
[function]
[call site]
00071
mdns::Minimal::ConstHeaderRef::GetAuthorityCount() const
[function]
[call site]
00072
mdns::Minimal::ConstHeaderRef::Get16At(unsigned long) const
[function]
[call site]
00073
mdns::Minimal::ResourceData::Parse(mdns::Minimal::BytesRange const&, unsigned char const**)
[function]
[call site]
00074
mdns::Minimal::ConstHeaderRef::GetAdditionalCount() const
[function]
[call site]
00075
mdns::Minimal::ConstHeaderRef::Get16At(unsigned long) const
[function]
[call site]
00076
mdns::Minimal::ResourceData::Parse(mdns::Minimal::BytesRange const&, unsigned char const**)
[function]
[call site]
00077
(anonymous namespace)::FuzzDelegate::~FuzzDelegate()
[function]
[call site]
00078
mdns::Minimal::ParserDelegate::~ParserDelegate()
[function]
[call site]
00079