Fuzz introspector: FuzzStunClient
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 0 None 0 0 stun_is_command_message call site: 00001 /src/coturn/src/apps/common/stun_buffer.c:73
0 0 None 0 0 stun_get_method_str call site: 00000 /src/coturn/src/client/ns_turn_msg.c:418
0 0 None 0 0 stun_get_msg_type_str call site: 00010 /src/coturn/src/client/ns_turn_msg.c:427
0 0 None 0 0 stun_is_success_response_str call site: 00015 /src/coturn/src/client/ns_turn_msg.c:511
0 0 None 0 0 stun_is_response_str call site: 00008 /src/coturn/src/client/ns_turn_msg.c:598

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 stun_is_command_message [function] [call site] 00001
2 stun_is_command_message_str [function] [call site] 00002
3 ntohs [call site] 00003
3 ntohl [call site] 00004
3 ntohs [call site] 00005
1 stun_is_response [function] [call site] 00006
2 stun_is_response_str [function] [call site] 00007
3 is_channel_msg_str [function] [call site] 00008
4 ntohs [call site] 00009
3 stun_get_msg_type_str [function] [call site] 00010
4 ntohs [call site] 00011
3 stun_get_msg_type_str [function] [call site] 00012
1 stun_is_success_response [function] [call site] 00013
2 stun_is_success_response_str [function] [call site] 00014
3 is_channel_msg_str [function] [call site] 00015
3 stun_get_msg_type_str [function] [call site] 00016
1 stun_is_binding_response [function] [call site] 00017
2 stun_is_binding_response_str [function] [call site] 00018
3 stun_is_command_message_str [function] [call site] 00019
3 stun_is_response_str [function] [call site] 00020