Fuzz introspector: FuzzStun
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
350 0 EP call site: 00000 harness_attr_iter
48 356 make_ioa_addr call site: 00356 harness_integrity_attr_add

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 harness_integrity_sha1 [function] [call site] 00001
2 stun_is_command_message_full_check_str [function] [call site] 00002
3 stun_is_command_message_str [function] [call site] 00003
4 ntohs [call site] 00004
4 ntohl [call site] 00005
4 ntohs [call site] 00006
3 stun_attr_get_first_by_type_str [function] [call site] 00007
4 stun_attr_get_first_str [function] [call site] 00008
5 stun_get_command_message_len_str [function] [call site] 00009
6 ntohs [call site] 00010
5 stun_attr_check_valid [function] [call site] 00011
6 stun_attr_get_len [function] [call site] 00012
7 ntohs [call site] 00013
4 stun_attr_get_type [function] [call site] 00014
5 ntohs [call site] 00015
4 stun_attr_get_next_str [function] [call site] 00016
5 stun_attr_get_first_str [function] [call site] 00017
5 stun_get_command_message_len_str [function] [call site] 00018
5 stun_attr_get_len [function] [call site] 00019
5 stun_attr_check_valid [function] [call site] 00020
3 stun_get_method_str [function] [call site] 00021
4 ntohs [call site] 00022
3 stun_attr_get_len [function] [call site] 00023
3 stun_attr_get_value [function] [call site] 00024
4 ntohs [call site] 00025
3 ntohl [call site] 00027
2 stun_check_message_integrity_str [function] [call site] 00028
3 strncpy [call site] 00029
3 stun_produce_integrity_key_str [function] [call site] 00030
4 ERR_clear_error [call site] 00031
4 strlen [call site] 00032
4 strlen [call site] 00033
4 strlen [call site] 00034
4 strncpy [call site] 00035
4 strncpy [call site] 00036
4 strncpy [call site] 00037
4 EVP_MD_CTX_new [call site] 00038
4 EVP_sha256 [call site] 00039
4 EVP_DigestInit [call site] 00040
4 EVP_DigestUpdate [call site] 00041
4 EVP_DigestFinal [call site] 00042
4 EVP_MD_CTX_free [call site] 00043
4 EVP_MD_CTX_new [call site] 00044
4 EVP_sha384 [call site] 00045
4 EVP_DigestInit [call site] 00046
4 EVP_DigestUpdate [call site] 00047
4 EVP_DigestFinal [call site] 00048
4 EVP_MD_CTX_free [call site] 00049
4 EVP_MD_CTX_new [call site] 00050
4 EVP_sha512 [call site] 00051
4 EVP_DigestInit [call site] 00052
4 EVP_DigestUpdate [call site] 00053
4 EVP_DigestFinal [call site] 00054
4 EVP_MD_CTX_free [call site] 00055
4 EVP_MD_CTX_new [call site] 00056
4 EVP_default_properties_is_fips_enabled [call site] 00057
4 EVP_default_properties_enable_fips [call site] 00058
4 EVP_md5 [call site] 00059
4 EVP_DigestInit_ex [call site] 00060
4 EVP_DigestUpdate [call site] 00061
4 EVP_DigestFinal [call site] 00062
4 EVP_MD_CTX_free [call site] 00063
3 stun_check_message_integrity_by_key_str [function] [call site] 00064
4 stun_attr_get_first_by_type_str [function] [call site] 00065
4 stun_attr_get_len [function] [call site] 00066
4 stun_get_command_message_len_str [function] [call site] 00067
4 stun_set_command_message_len_str [function] [call site] 00068
5 ntohs [call site] 00069
4 strlen [call site] 00070
4 stun_calculate_hmac [function] [call site] 00071
5 ERR_clear_error [call site] 00072
5 EVP_sha256 [call site] 00073
5 HMAC [call site] 00074
5 EVP_sha384 [call site] 00075
5 HMAC [call site] 00076
5 EVP_sha512 [call site] 00077
5 HMAC [call site] 00078
5 EVP_sha1 [call site] 00079
5 HMAC [call site] 00080
4 get_hmackey_size [function] [call site] 00081
4 stun_calculate_hmac [function] [call site] 00082
4 stun_set_command_message_len_str [function] [call site] 00083
4 stun_attr_get_value [function] [call site] 00084
4 CRYPTO_memcmp [call site] 00085
2 stun_check_message_integrity_str [function] [call site] 00086
1 harness_integrity_multi [function] [call site] 00087
2 stun_is_command_message_full_check_str [function] [call site] 00088
2 stun_check_message_integrity_str [function] [call site] 00089
2 stun_check_message_integrity_str [function] [call site] 00090
1 harness_attr_iter [function] [call site] 00091
2 stun_is_command_message_str [function] [call site] 00092
2 stun_attr_get_first_str [function] [call site] 00093
2 stun_attr_get_type [function] [call site] 00094
2 stun_attr_get_len [function] [call site] 00095
2 stun_attr_get_value [function] [call site] 00096
2 stun_attr_is_addr [function] [call site] 00097
3 stun_attr_get_type [function] [call site] 00098
2 stun_attr_get_next_str [function] [call site] 00099
2 stun_attr_get_first_by_type_str [function] [call site] 00100
2 stun_attr_get_addr_str [function] [call site] 00101
3 stun_tid_from_message_str [function] [call site] 00102
4 stun_tid_from_string [function] [call site] 00103
3 addr_set_any [function] [call site] 00104
3 addr_set_any [function] [call site] 00105
3 stun_attr_get_type [function] [call site] 00106
3 stun_attr_get_value [function] [call site] 00107
3 stun_attr_get_len [function] [call site] 00108
3 stun_addr_decode [function] [call site] 00109
4 ntohs [call site] 00110
4 ntohl [call site] 00111
4 ntohl [call site] 00112
4 ntohs [call site] 00113
3 map_addr_from_public_to_private [function] [call site] 00114
4 addr_eq_no_port [function] [call site] 00115
5 memcmp [call site] 00116
4 addr_get_port [function] [call site] 00118
5 ntohs [call site] 00119
4 addr_set_port [function] [call site] 00120
5 ntohs [call site] 00121
5 ntohs [call site] 00122
3 addr_any_no_port [function] [call site] 00124
3 addr_get_port [function] [call site] 00125
3 addr_set_port [function] [call site] 00127
2 stun_attr_get_first_addr_str [function] [call site] 00128
3 stun_attr_get_first_str [function] [call site] 00129
3 stun_attr_is_addr [function] [call site] 00130
3 stun_attr_get_type [function] [call site] 00131
3 stun_attr_get_addr_str [function] [call site] 00132
3 stun_attr_get_next_str [function] [call site] 00133
2 stun_attr_get_first_by_type_str [function] [call site] 00134
2 stun_attr_get_channel_number [function] [call site] 00135
3 stun_attr_get_value [function] [call site] 00136
3 stun_attr_get_len [function] [call site] 00137
3 ntohs [call site] 00138
2 stun_attr_get_first_channel_number_str [function] [call site] 00139
3 stun_attr_get_first_str [function] [call site] 00140
3 stun_attr_get_type [function] [call site] 00141
3 stun_attr_get_channel_number [function] [call site] 00142
3 stun_attr_get_next_str [function] [call site] 00143
2 stun_attr_get_first_by_type_str [function] [call site] 00144
2 stun_get_requested_address_family [function] [call site] 00145
3 ntohs [call site] 00146
2 stun_attr_get_first_by_type_str [function] [call site] 00147
2 stun_get_requested_address_family [function] [call site] 00148
2 stun_attr_get_first_by_type_str [function] [call site] 00149
2 stun_attr_get_even_port [function] [call site] 00150
3 stun_attr_get_value [function] [call site] 00151
2 stun_attr_get_first_by_type_str [function] [call site] 00152
2 stun_attr_get_bandwidth [function] [call site] 00153
3 stun_attr_get_value [function] [call site] 00154
3 stun_attr_get_len [function] [call site] 00155
3 ntohl [call site] 00156
2 stun_attr_get_first_by_type_str [function] [call site] 00157
2 stun_attr_get_bandwidth [function] [call site] 00158
2 stun_attr_get_first_by_type_str [function] [call site] 00159
2 stun_attr_get_reservation_token_value [function] [call site] 00160
3 stun_attr_get_value [function] [call site] 00161
3 stun_attr_get_len [function] [call site] 00162
3 _ioa_ntoh64 [function] [call site] 00163
2 stun_attr_get_first_by_type_str [function] [call site] 00164
2 stun_attr_get_change_request_str [function] [call site] 00165
3 stun_attr_get_len [function] [call site] 00166
3 stun_attr_get_value [function] [call site] 00167
2 stun_attr_get_first_by_type_str [function] [call site] 00168
2 stun_attr_get_response_port_str [function] [call site] 00169
3 stun_attr_get_len [function] [call site] 00170
3 stun_attr_get_value [function] [call site] 00171
3 ntohs [call site] 00172
2 stun_attr_get_first_by_type_str [function] [call site] 00173
2 stun_attr_get_padding_len_str [function] [call site] 00174
3 stun_attr_get_len [function] [call site] 00175
2 stun_is_error_response_str [function] [call site] 00176
3 is_channel_msg_str [function] [call site] 00177
4 ntohs [call site] 00178
3 stun_get_msg_type_str [function] [call site] 00179
4 ntohs [call site] 00180
3 stun_attr_get_first_by_type_str [function] [call site] 00181
3 stun_attr_get_len [function] [call site] 00182
3 stun_attr_get_value [function] [call site] 00183
3 stun_attr_get_len [function] [call site] 00184
3 stun_attr_get_len [function] [call site] 00185
2 stun_is_challenge_response_str [function] [call site] 00186
3 stun_is_error_response_str [function] [call site] 00187
3 stun_attr_get_first_by_type_str [function] [call site] 00188
3 stun_attr_get_value [function] [call site] 00189
3 stun_attr_get_len [function] [call site] 00190
3 stun_attr_get_first_by_type_str [function] [call site] 00191
3 stun_attr_get_value [function] [call site] 00192
3 stun_attr_get_len [function] [call site] 00193
3 stun_attr_get_first_by_type_str [function] [call site] 00194
3 stun_attr_get_value [function] [call site] 00195
3 stun_attr_get_len [function] [call site] 00196
2 stun_attr_get_first_by_type_str [function] [call site] 00197
2 stun_attr_get_type [function] [call site] 00198
2 stun_attr_get_len [function] [call site] 00199
2 stun_attr_get_value [function] [call site] 00200
1 harness_attr_add [function] [call site] 00201
2 stun_is_command_message_str [function] [call site] 00202
2 stun_attr_add_str [function] [call site] 00203
3 stun_get_command_message_len_str [function] [call site] 00204
3 stun_set_command_message_len_str [function] [call site] 00205
3 ntohs [call site] 00206
3 ntohs [call site] 00207
2 stun_attr_add_str [function] [call site] 00208
2 stun_attr_add_str [function] [call site] 00209
2 stun_attr_add_str [function] [call site] 00210
2 stun_attr_add_str [function] [call site] 00211
2 stun_attr_add_str [function] [call site] 00212
2 stun_attr_add_str [function] [call site] 00213
2 stun_attr_add_str [function] [call site] 00214
2 stun_attr_add_str [function] [call site] 00215
2 stun_attr_add_channel_number_str [function] [call site] 00216
3 ntohs [call site] 00217
3 stun_attr_add_str [function] [call site] 00218
2 stun_attr_add_bandwidth_str [function] [call site] 00219
3 ntohl [call site] 00220
3 stun_attr_add_str [function] [call site] 00221
2 htons [call site] 00222
2 htonl [call site] 00223
2 stun_attr_add_addr_str [function] [call site] 00224
3 stun_tid_from_message_str [function] [call site] 00225
3 map_addr_from_private_to_public [function] [call site] 00226
4 addr_eq_no_port [function] [call site] 00227
4 addr_get_port [function] [call site] 00229
4 addr_set_port [function] [call site] 00230
3 stun_addr_encode [function] [call site] 00232
4 ntohs [call site] 00233
4 ntohl [call site] 00234
4 ntohl [call site] 00235
4 ntohs [call site] 00236
3 stun_attr_add_str [function] [call site] 00237
2 stun_attr_add_addr_str [function] [call site] 00238
2 stun_attr_add_addr_str [function] [call site] 00239
2 stun_attr_add_addr_str [function] [call site] 00240
2 htons [call site] 00241
2 stun_attr_add_addr_str [function] [call site] 00242
2 stun_attr_add_addr_str [function] [call site] 00243
2 stun_attr_add_address_error_code [function] [call site] 00244
3 get_default_reason [function] [call site] 00245
3 strncpy [call site] 00246
3 strlen [call site] 00247
3 stun_attr_add_str [function] [call site] 00248
2 stun_attr_add_change_request_str [function] [call site] 00249
3 stun_attr_add_str [function] [call site] 00250
2 stun_attr_add_response_port_str [function] [call site] 00251
3 ntohs [call site] 00252
3 stun_attr_add_str [function] [call site] 00253
2 stun_attr_add_padding_str [function] [call site] 00254
3 stun_attr_add_str [function] [call site] 00255
2 stun_attr_add_str [function] [call site] 00256
2 stun_attr_add_fingerprint_str [function] [call site] 00257
3 stun_attr_add_str [function] [call site] 00258
3 ntohl [call site] 00260
1 harness_old_stun [function] [call site] 00261
2 old_stun_is_command_message_str [function] [call site] 00262
3 ntohs [call site] 00263
3 ntohl [call site] 00264
3 ntohs [call site] 00265
3 ntohl [call site] 00266
2 stun_is_command_message_str [function] [call site] 00267
2 stun_get_msg_type_str [function] [call site] 00268
2 stun_get_method_str [function] [call site] 00269
2 stun_is_request_str [function] [call site] 00270
3 is_channel_msg_str [function] [call site] 00271
3 stun_get_msg_type_str [function] [call site] 00272
2 stun_is_indication_str [function] [call site] 00273
3 is_channel_msg_str [function] [call site] 00274
3 stun_get_msg_type_str [function] [call site] 00275
2 stun_is_success_response_str [function] [call site] 00276
3 is_channel_msg_str [function] [call site] 00277
3 stun_get_msg_type_str [function] [call site] 00278
2 stun_is_error_response_str [function] [call site] 00279
2 stun_is_command_message_full_check_str [function] [call site] 00280
2 stun_is_command_message_full_check_str [function] [call site] 00281
2 stun_is_binding_request_str [function] [call site] 00282
3 stun_is_command_message_str [function] [call site] 00283
3 stun_is_request_str [function] [call site] 00284
3 stun_get_method_str [function] [call site] 00285
2 stun_is_binding_response_str [function] [call site] 00286
3 stun_is_command_message_str [function] [call site] 00287
3 stun_get_method_str [function] [call site] 00288
3 stun_is_response_str [function] [call site] 00289
4 is_channel_msg_str [function] [call site] 00290
4 stun_get_msg_type_str [function] [call site] 00291
4 stun_get_msg_type_str [function] [call site] 00292
2 stun_attr_get_first_str [function] [call site] 00293
2 stun_attr_get_type [function] [call site] 00294
2 stun_attr_get_len [function] [call site] 00295
2 stun_attr_get_next_str [function] [call site] 00296
1 harness_challenge_response_builder [function] [call site] 00297
2 stun_init_error_response_str [function] [call site] 00298
3 stun_make_error_response [function] [call site] 00299
4 stun_make_type [function] [call site] 00300
3 stun_init_command_str [function] [call site] 00301
4 stun_init_buffer_str [function] [call site] 00302
4 ntohs [call site] 00303
4 ntohl [call site] 00304
4 stun_tid_generate_in_message_str [function] [call site] 00305
5 stun_tid_generate [function] [call site] 00306
6 turn_random_tid_size [function] [call site] 00307
7 turn_random_number [function] [call site] 00308
8 fuzz_prng_next [function] [call site] 00309
5 stun_tid_message_cpy [function] [call site] 00310
6 stun_tid_string_cpy [function] [call site] 00311
3 stun_init_error_response_common_str [function] [call site] 00312
4 strcmp [call site] 00313
4 get_default_reason [function] [call site] 00314
4 strncpy [call site] 00315
4 strlen [call site] 00316
4 stun_attr_add_str [function] [call site] 00317
4 stun_tid_message_cpy [function] [call site] 00318
2 stun_attr_add_str [function] [call site] 00319
2 stun_attr_add_str [function] [call site] 00320
2 stun_attr_add_str [function] [call site] 00321
2 stun_is_challenge_response_str [function] [call site] 00322
2 stun_is_challenge_response_str [function] [call site] 00323
1 harness_full_addr_parser [function] [call site] 00324
2 fuzz_byte [function] [call site] 00328
2 fuzz_byte [function] [call site] 00329
2 snprintf [call site] 00330
2 fuzz_byte [function] [call site] 00331
2 fuzz_byte [function] [call site] 00332
2 snprintf [call site] 00333
2 snprintf [call site] 00336
2 snprintf [call site] 00339
2 fuzz_byte [function] [call site] 00340
2 fuzz_byte [function] [call site] 00341
2 snprintf [call site] 00342
2 make_ioa_addr_from_full_string [function] [call site] 00343
3 strdup [call site] 00344
3 get_addr_string_and_port [function] [call site] 00345
4 strstr [call site] 00346
4 atoi [call site] 00347
4 strstr [call site] 00348
4 atoi [call site] 00349
3 make_ioa_addr [function] [call site] 00350
4 strncpy [call site] 00351
4 strlen [call site] 00352
4 inet_pton [call site] 00353
4 ntohs [call site] 00354
4 inet_pton [call site] 00355
4 ntohs [call site] 00356
4 getaddrinfo [call site] 00357
4 gai_strerror [call site] 00358
4 fprintf [call site] 00359
4 ntohs [call site] 00360
4 ntohs [call site] 00361
4 freeaddrinfo [call site] 00362
2 make_ioa_addr_from_full_string [function] [call site] 00363
2 make_ioa_addr_from_full_string [function] [call site] 00364
1 harness_integrity_attr_add [function] [call site] 00365
2 fuzz_byte [function] [call site] 00366
2 fuzz_printable_string [function] [call site] 00367
2 fuzz_printable_string [function] [call site] 00370
2 fuzz_printable_string [function] [call site] 00371
2 fuzz_printable_string [function] [call site] 00372
2 fuzz_printable_string [function] [call site] 00373
2 fuzz_byte [function] [call site] 00374
2 stun_init_request_str [function] [call site] 00375
3 stun_make_request [function] [call site] 00376
4 stun_make_type [function] [call site] 00377
3 stun_init_command_str [function] [call site] 00378
2 stun_attr_add_integrity_by_key_str [function] [call site] 00379
3 strlen [call site] 00380
3 stun_attr_add_str [function] [call site] 00381
3 strlen [call site] 00382
3 stun_attr_add_str [function] [call site] 00383
3 strlen [call site] 00384
3 stun_attr_add_str [function] [call site] 00385
3 stun_attr_add_integrity_str [function] [call site] 00386
4 stun_attr_add_str [function] [call site] 00387
4 strlen [call site] 00388
4 stun_calculate_hmac [function] [call site] 00389
4 get_hmackey_size [function] [call site] 00390
4 stun_calculate_hmac [function] [call site] 00391
2 stun_init_request_str [function] [call site] 00392
2 stun_attr_add_integrity_by_user_str [function] [call site] 00393
3 stun_produce_integrity_key_str [function] [call site] 00394
3 stun_attr_add_integrity_by_key_str [function] [call site] 00395
2 stun_init_request_str [function] [call site] 00396
2 stun_attr_add_integrity_by_user_short_term_str [function] [call site] 00397
3 strlen [call site] 00398
3 stun_attr_add_str [function] [call site] 00399
3 stun_attr_add_integrity_str [function] [call site] 00400
2 stun_init_request_str [function] [call site] 00401
2 stun_attr_add_integrity_str [function] [call site] 00402
2 stun_init_request_str [function] [call site] 00403
2 stun_attr_add_integrity_str [function] [call site] 00404