Fuzz introspector: FuzzStunClient
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
7 61 is_http call site: 00061 findstr
1 41 stun_attr_get_first_by_type_str call site: 00041 stun_attr_get_first_str
1 104 fuzz_addr call site: 00104 fuzz_u32
1 106 fuzz_u32 call site: 00106 htonl
1 136 stun_init_command_str call site: 00136 stun_tid_generate_in_message_str
1 195 addr_set_port call site: 00195 ntohs
1 282 old_stun_init_command_str call site: 00282 stun_tid_generate_in_message_str

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 harness_stun_client [function] [call site] 00001
2 stun_is_command_message [function] [call site] 00002
3 stun_is_command_message_str [function] [call site] 00003
4 ntohs [call site] 00004
4 ntohl [call site] 00005
4 ntohs [call site] 00006
2 stun_get_method_str [function] [call site] 00007
3 ntohs [call site] 00008
2 stun_get_msg_type_str [function] [call site] 00009
3 ntohs [call site] 00010
2 stun_is_response [function] [call site] 00011
3 stun_is_response_str [function] [call site] 00012
4 is_channel_msg_str [function] [call site] 00013
5 ntohs [call site] 00014
4 stun_get_msg_type_str [function] [call site] 00015
4 stun_get_msg_type_str [function] [call site] 00016
2 stun_is_success_response [function] [call site] 00017
3 stun_is_success_response_str [function] [call site] 00018
4 is_channel_msg_str [function] [call site] 00019
4 stun_get_msg_type_str [function] [call site] 00020
2 stun_is_binding_response [function] [call site] 00021
3 stun_is_binding_response_str [function] [call site] 00022
4 stun_is_command_message_str [function] [call site] 00023
4 stun_get_method_str [function] [call site] 00024
4 stun_is_response_str [function] [call site] 00025
2 stun_is_indication_str [function] [call site] 00026
3 is_channel_msg_str [function] [call site] 00027
3 stun_get_msg_type_str [function] [call site] 00028
2 stun_is_error_response_str [function] [call site] 00029
3 is_channel_msg_str [function] [call site] 00030
3 stun_get_msg_type_str [function] [call site] 00031
3 stun_attr_get_first_by_type_str [function] [call site] 00032
4 stun_attr_get_first_str [function] [call site] 00033
5 stun_get_command_message_len_str [function] [call site] 00034
6 ntohs [call site] 00035
5 stun_attr_check_valid [function] [call site] 00036
6 stun_attr_get_len [function] [call site] 00037
7 ntohs [call site] 00038
4 stun_attr_get_type [function] [call site] 00039
5 ntohs [call site] 00040
4 stun_attr_get_next_str [function] [call site] 00041
5 stun_attr_get_first_str [function] [call site] 00042
5 stun_get_command_message_len_str [function] [call site] 00043
5 stun_attr_get_len [function] [call site] 00044
5 stun_attr_check_valid [function] [call site] 00045
3 stun_attr_get_len [function] [call site] 00046
3 stun_attr_get_value [function] [call site] 00047
4 ntohs [call site] 00048
3 stun_attr_get_len [function] [call site] 00049
3 stun_attr_get_len [function] [call site] 00050
1 harness_channel_data [function] [call site] 00051
2 stun_get_message_len_str [function] [call site] 00052
3 ntohs [call site] 00053
3 ntohl [call site] 00054
3 ntohs [call site] 00055
3 is_http [function] [call site] 00056
4 has_prefix [function] [call site] 00057
5 strlen [call site] 00058
5 sheadof [function] [call site] 00059
6 tolower [call site] 00060
4 has_prefix [function] [call site] 00061
4 findstr [function] [call site] 00062
5 strlen [call site] 00063
4 strlen [call site] 00067
4 __isoc23_strtoul [call site] 00068
3 ntohs [call site] 00069
3 ntohs [call site] 00070
2 stun_get_message_len_str [function] [call site] 00071
2 stun_is_channel_message_str [function] [call site] 00072
3 ntohs [call site] 00073
3 ntohs [call site] 00074
2 stun_is_channel_message_str [function] [call site] 00075
1 harness_addr_codec [function] [call site] 00076
2 stun_addr_decode [function] [call site] 00077
3 ntohs [call site] 00078
3 ntohl [call site] 00079
3 ntohl [call site] 00080
3 ntohs [call site] 00081
2 stun_addr_encode [function] [call site] 00082
3 ntohs [call site] 00083
3 ntohl [call site] 00084
3 ntohl [call site] 00085
3 ntohs [call site] 00086
2 stun_addr_decode [function] [call site] 00087
2 stun_addr_decode [function] [call site] 00088
2 stun_addr_encode [function] [call site] 00089
2 stun_addr_decode [function] [call site] 00090
2 stun_addr_decode [function] [call site] 00091
1 harness_message_builders [function] [call site] 00092
2 fuzz_addr [function] [call site] 00095
3 htons [call site] 00100
3 fuzz_byte [function] [call site] 00101
3 memcmp [call site] 00102
3 htons [call site] 00104
3 htonl [call site] 00107
2 fuzz_addr [function] [call site] 00108
2 fuzz_addr [function] [call site] 00109
2 fuzz_addr [function] [call site] 00110
2 fuzz_addr [function] [call site] 00111
2 fuzz_string [function] [call site] 00112
2 fuzz_string [function] [call site] 00115
2 fuzz_byte [function] [call site] 00116
2 fuzz_byte [function] [call site] 00117
2 fuzz_flag [function] [call site] 00123
2 fuzz_flag [function] [call site] 00124
2 fuzz_flag [function] [call site] 00125
2 stun_init_buffer [function] [call site] 00127
2 stun_init_error_response [function] [call site] 00128
3 stun_get_size [function] [call site] 00129
3 stun_init_error_response_str [function] [call site] 00130
4 stun_make_error_response [function] [call site] 00131
5 stun_make_type [function] [call site] 00132
4 stun_init_command_str [function] [call site] 00133
5 stun_init_buffer_str [function] [call site] 00134
5 ntohs [call site] 00135
5 ntohl [call site] 00136
5 stun_tid_generate_in_message_str [function] [call site] 00137
6 stun_tid_generate [function] [call site] 00138
7 turn_random_tid_size [function] [call site] 00139
8 turn_random_number [function] [call site] 00140
9 fuzz_prng_next [function] [call site] 00141
6 stun_tid_message_cpy [function] [call site] 00142
7 stun_tid_string_cpy [function] [call site] 00143
4 stun_init_error_response_common_str [function] [call site] 00144
5 strcmp [call site] 00145
5 get_default_reason [function] [call site] 00146
5 strncpy [call site] 00147
5 strlen [call site] 00148
5 stun_attr_add_str [function] [call site] 00149
6 stun_get_command_message_len_str [function] [call site] 00150
6 stun_set_command_message_len_str [function] [call site] 00151
7 ntohs [call site] 00152
6 ntohs [call site] 00153
6 ntohs [call site] 00154
5 stun_tid_message_cpy [function] [call site] 00155
2 inspect_buffer_message [function] [call site] 00156
3 stun_get_command_message_len [function] [call site] 00157
4 stun_get_command_message_len_str [function] [call site] 00158
3 stun_is_command_message [function] [call site] 00159
3 stun_is_request [function] [call site] 00160
4 stun_is_request_str [function] [call site] 00161
5 is_channel_msg_str [function] [call site] 00162
5 stun_get_msg_type_str [function] [call site] 00163
3 stun_is_response [function] [call site] 00164
3 stun_is_success_response [function] [call site] 00165
3 stun_is_binding_response [function] [call site] 00166
3 stun_get_method [function] [call site] 00167
4 stun_get_method_str [function] [call site] 00168
3 stun_get_msg_type [function] [call site] 00169
4 stun_get_msg_type_str [function] [call site] 00170
3 stun_is_error_response [function] [call site] 00171
4 stun_is_error_response_str [function] [call site] 00172
3 stun_attr_get_first_addr [function] [call site] 00173
4 stun_attr_get_first_addr_str [function] [call site] 00174
5 stun_attr_get_first_str [function] [call site] 00175
5 stun_attr_is_addr [function] [call site] 00176
6 stun_attr_get_type [function] [call site] 00177
5 stun_attr_get_type [function] [call site] 00178
5 stun_attr_get_addr_str [function] [call site] 00179
6 stun_tid_from_message_str [function] [call site] 00180
7 stun_tid_from_string [function] [call site] 00181
6 addr_set_any [function] [call site] 00182
6 addr_set_any [function] [call site] 00183
6 stun_attr_get_type [function] [call site] 00184
6 stun_attr_get_value [function] [call site] 00185
6 stun_attr_get_len [function] [call site] 00186
6 stun_addr_decode [function] [call site] 00187
6 map_addr_from_public_to_private [function] [call site] 00188
7 addr_eq_no_port [function] [call site] 00189
8 memcmp [call site] 00190
7 addr_get_port [function] [call site] 00192
8 ntohs [call site] 00193
7 addr_set_port [function] [call site] 00194
8 ntohs [call site] 00195
8 ntohs [call site] 00196
6 addr_any_no_port [function] [call site] 00198
6 addr_get_port [function] [call site] 00199
6 addr_set_port [function] [call site] 00201
5 stun_attr_get_next_str [function] [call site] 00202
3 stun_attr_get_first [function] [call site] 00203
4 stun_attr_get_first_str [function] [call site] 00204
3 stun_attr_get_type [function] [call site] 00205
3 stun_attr_get_len [function] [call site] 00206
3 stun_attr_is_addr [function] [call site] 00207
3 stun_attr_get_addr [function] [call site] 00208
4 stun_attr_get_addr_str [function] [call site] 00209
3 stun_attr_get_next [function] [call site] 00210
4 stun_attr_get_next_str [function] [call site] 00211
3 stun_attr_get_first_channel_number [function] [call site] 00212
4 stun_attr_get_first_channel_number_str [function] [call site] 00213
5 stun_attr_get_first_str [function] [call site] 00214
5 stun_attr_get_type [function] [call site] 00215
5 stun_attr_get_channel_number [function] [call site] 00216
6 stun_attr_get_value [function] [call site] 00217
6 stun_attr_get_len [function] [call site] 00218
6 ntohs [call site] 00219
5 stun_attr_get_next_str [function] [call site] 00220
2 stun_init_buffer [function] [call site] 00221
2 fuzz_flag [function] [call site] 00222
2 stun_set_allocate_response [function] [call site] 00223
3 stun_set_allocate_response_str [function] [call site] 00224
4 stun_init_success_response_str [function] [call site] 00225
5 stun_make_success_response [function] [call site] 00226
6 stun_make_type [function] [call site] 00227
5 stun_init_command_str [function] [call site] 00228
5 stun_tid_message_cpy [function] [call site] 00229
4 stun_attr_add_addr_str [function] [call site] 00230
5 stun_tid_from_message_str [function] [call site] 00231
5 map_addr_from_private_to_public [function] [call site] 00232
6 addr_eq_no_port [function] [call site] 00233
6 addr_get_port [function] [call site] 00235
6 addr_set_port [function] [call site] 00236
5 stun_addr_encode [function] [call site] 00238
5 stun_attr_add_str [function] [call site] 00239
4 stun_attr_add_addr_str [function] [call site] 00240
4 stun_attr_add_addr_str [function] [call site] 00241
4 _ioa_ntoh64 [function] [call site] 00242
4 stun_attr_add_str [function] [call site] 00243
4 ntohl [call site] 00244
4 stun_attr_add_str [function] [call site] 00245
4 strlen [call site] 00246
4 stun_attr_add_str [function] [call site] 00247
4 stun_init_error_response_str [function] [call site] 00248
2 inspect_buffer_message [function] [call site] 00249
2 stun_set_allocate_response_str [function] [call site] 00250
2 inspect_raw_message [function] [call site] 00251
3 stun_is_command_message_str [function] [call site] 00252
3 stun_is_request_str [function] [call site] 00253
3 stun_is_response_str [function] [call site] 00254
3 stun_is_success_response_str [function] [call site] 00255
3 stun_is_binding_response_str [function] [call site] 00256
3 stun_get_method_str [function] [call site] 00257
3 stun_get_msg_type_str [function] [call site] 00258
3 stun_is_error_response_str [function] [call site] 00259
3 stun_attr_get_first_addr_str [function] [call site] 00260
3 stun_attr_get_first_str [function] [call site] 00261
3 stun_attr_get_type [function] [call site] 00262
3 stun_attr_get_len [function] [call site] 00263
3 stun_attr_is_addr [function] [call site] 00264
3 stun_attr_get_addr_str [function] [call site] 00265
3 stun_attr_get_next_str [function] [call site] 00266
3 stun_attr_get_first_channel_number_str [function] [call site] 00267
2 stun_init_buffer [function] [call site] 00268
2 stun_set_allocate_response [function] [call site] 00269
2 inspect_buffer_message [function] [call site] 00270
2 stun_set_allocate_response_str [function] [call site] 00271
2 inspect_raw_message [function] [call site] 00272
2 stun_init_buffer [function] [call site] 00273
2 stun_set_binding_response [function] [call site] 00274
3 stun_set_binding_response_str [function] [call site] 00275
4 stun_init_success_response_str [function] [call site] 00276
4 old_stun_init_success_response_str [function] [call site] 00277
5 stun_make_success_response [function] [call site] 00278
5 old_stun_init_command_str [function] [call site] 00279
6 stun_init_buffer_str [function] [call site] 00280
6 ntohs [call site] 00281
6 ntohl [call site] 00282
6 stun_tid_generate_in_message_str [function] [call site] 00283
5 stun_tid_message_cpy [function] [call site] 00284
4 stun_attr_add_addr_str [function] [call site] 00285
4 stun_attr_add_addr_str [function] [call site] 00286
4 stun_init_error_response_str [function] [call site] 00287
4 old_stun_init_error_response_str [function] [call site] 00288
5 stun_make_error_response [function] [call site] 00289
5 old_stun_init_command_str [function] [call site] 00290
5 stun_init_error_response_common_str [function] [call site] 00291
2 inspect_buffer_message [function] [call site] 00292
2 stun_set_binding_response_str [function] [call site] 00293
2 inspect_raw_message [function] [call site] 00294
2 stun_init_buffer [function] [call site] 00295
2 stun_set_binding_response [function] [call site] 00296
2 inspect_buffer_message [function] [call site] 00297
2 stun_set_binding_response_str [function] [call site] 00298
2 inspect_raw_message [function] [call site] 00299
2 stun_init_buffer [function] [call site] 00300
2 fuzz_flag [function] [call site] 00301
2 stun_set_channel_bind_request [function] [call site] 00302
3 stun_set_channel_bind_request_str [function] [call site] 00303
4 turn_random_number [function] [call site] 00304
4 stun_init_request_str [function] [call site] 00305
5 stun_make_request [function] [call site] 00306
6 stun_make_type [function] [call site] 00307
5 stun_init_command_str [function] [call site] 00308
4 stun_attr_add_channel_number_str [function] [call site] 00309
5 ntohs [call site] 00310
5 stun_attr_add_str [function] [call site] 00311
4 stun_attr_add_addr_str [function] [call site] 00312
4 stun_attr_add_addr_str [function] [call site] 00313
2 inspect_buffer_message [function] [call site] 00314
2 fuzz_flag [function] [call site] 00315
2 stun_set_channel_bind_request_str [function] [call site] 00316
2 inspect_raw_message [function] [call site] 00317
2 stun_init_buffer [function] [call site] 00318
2 stun_set_channel_bind_response [function] [call site] 00319
3 stun_set_channel_bind_response_str [function] [call site] 00320
4 stun_init_success_response_str [function] [call site] 00321
4 stun_init_error_response_str [function] [call site] 00322
2 inspect_buffer_message [function] [call site] 00323
2 stun_set_channel_bind_response_str [function] [call site] 00324
2 inspect_raw_message [function] [call site] 00325
1 harness_attr_get_first_addr [function] [call site] 00326
2 fuzz_addr [function] [call site] 00327
2 stun_attr_get_first_addr [function] [call site] 00328
2 stun_attr_get_first_addr [function] [call site] 00329
1 harness_response_matrix [function] [call site] 00330
2 fuzz_addr [function] [call site] 00332
2 fuzz_addr [function] [call site] 00333
2 fuzz_addr [function] [call site] 00334
2 fuzz_addr [function] [call site] 00335
2 fuzz_addr [function] [call site] 00336
2 fuzz_string [function] [call site] 00337
2 fuzz_string [function] [call site] 00338
2 stun_init_buffer [function] [call site] 00343
2 stun_init_error_response [function] [call site] 00344
2 inspect_buffer_message [function] [call site] 00345
2 stun_init_buffer [function] [call site] 00346
2 stun_init_error_response [function] [call site] 00347
2 inspect_buffer_message [function] [call site] 00348
2 stun_init_buffer [function] [call site] 00349
2 stun_set_allocate_response [function] [call site] 00350
2 inspect_buffer_message [function] [call site] 00351
2 stun_set_allocate_response_str [function] [call site] 00352
2 inspect_raw_message [function] [call site] 00353
2 stun_init_buffer [function] [call site] 00354
2 stun_set_allocate_response [function] [call site] 00355
2 inspect_buffer_message [function] [call site] 00356
2 stun_set_allocate_response_str [function] [call site] 00357
2 inspect_raw_message [function] [call site] 00358
2 stun_init_buffer [function] [call site] 00359
2 stun_set_allocate_response [function] [call site] 00360
2 inspect_buffer_message [function] [call site] 00361
2 stun_set_allocate_response_str [function] [call site] 00362
2 inspect_raw_message [function] [call site] 00363
2 stun_init_buffer [function] [call site] 00364
2 stun_set_binding_response [function] [call site] 00365
2 inspect_buffer_message [function] [call site] 00366
2 stun_init_buffer [function] [call site] 00367
2 stun_set_binding_response [function] [call site] 00368
2 inspect_buffer_message [function] [call site] 00369
2 stun_set_binding_response_str [function] [call site] 00370
2 inspect_raw_message [function] [call site] 00371
2 stun_set_binding_response_str [function] [call site] 00372
2 inspect_raw_message [function] [call site] 00373
2 stun_init_buffer [function] [call site] 00374
2 stun_set_channel_bind_request [function] [call site] 00375
2 inspect_buffer_message [function] [call site] 00376
2 stun_init_buffer [function] [call site] 00377
2 stun_set_channel_bind_request [function] [call site] 00378
2 inspect_buffer_message [function] [call site] 00379
2 stun_set_channel_bind_request_str [function] [call site] 00380
2 inspect_raw_message [function] [call site] 00381
2 stun_set_channel_bind_request_str [function] [call site] 00382
2 inspect_raw_message [function] [call site] 00383
2 stun_init_buffer [function] [call site] 00384
2 stun_set_channel_bind_response [function] [call site] 00385
2 inspect_buffer_message [function] [call site] 00386
2 stun_init_buffer [function] [call site] 00387
2 stun_set_channel_bind_response [function] [call site] 00388
2 inspect_buffer_message [function] [call site] 00389
2 stun_set_channel_bind_response_str [function] [call site] 00390
2 inspect_raw_message [function] [call site] 00391
2 stun_set_channel_bind_response_str [function] [call site] 00392
2 inspect_raw_message [function] [call site] 00393
1 harness_stun_buffer_api [function] [call site] 00394
2 fuzz_addr [function] [call site] 00396
2 fuzz_addr [function] [call site] 00397
2 fuzz_string [function] [call site] 00398
2 fuzz_string [function] [call site] 00399
2 fuzz_byte [function] [call site] 00400
2 fuzz_byte [function] [call site] 00403
2 fuzz_byte [function] [call site] 00404
2 fuzz_flag [function] [call site] 00405
2 fuzz_flag [function] [call site] 00406
2 fuzz_flag [function] [call site] 00407
2 fuzz_flag [function] [call site] 00408
2 fuzz_byte [function] [call site] 00410
2 stun_get_size [function] [call site] 00411
2 stun_init_buffer [function] [call site] 00412
2 stun_get_msg_type [function] [call site] 00413
2 stun_tid_generate_in_message [function] [call site] 00414
3 stun_tid_generate_in_message_str [function] [call site] 00415
2 stun_init_buffer [function] [call site] 00416
2 stun_init_request [function] [call site] 00417
3 stun_make_request [function] [call site] 00418
3 stun_init_command [function] [call site] 00419
4 stun_get_size [function] [call site] 00420
4 stun_init_command_str [function] [call site] 00421
2 stun_tid_from_message [function] [call site] 00422
3 stun_tid_from_message_str [function] [call site] 00423
2 stun_tid_generate_in_message [function] [call site] 00424
2 strlen [call site] 00425
2 stun_attr_add [function] [call site] 00426
3 stun_attr_add_str [function] [call site] 00427
2 stun_attr_add_channel_number [function] [call site] 00428
3 stun_attr_add_channel_number_str [function] [call site] 00429
2 stun_attr_add_addr [function] [call site] 00430
3 stun_attr_add_addr_str [function] [call site] 00431
2 stun_attr_add_even_port [function] [call site] 00432
3 stun_attr_add [function] [call site] 00433
2 stun_attr_add_even_port [function] [call site] 00434
2 stun_attr_get_first_by_type [function] [call site] 00435
3 stun_attr_get_first_by_type_str [function] [call site] 00436
2 stun_attr_get_first_by_type [function] [call site] 00437
2 stun_attr_get_first_by_type [function] [call site] 00438
2 stun_attr_get_first_by_type [function] [call site] 00439
2 stun_is_indication [function] [call site] 00440
3 is_channel_msg [function] [call site] 00441
4 is_channel_msg_str [function] [call site] 00442
3 stun_get_msg_type [function] [call site] 00443
2 inspect_buffer_message [function] [call site] 00444
2 stun_init_buffer [function] [call site] 00445
2 stun_init_indication [function] [call site] 00446
3 stun_make_indication [function] [call site] 00447
4 stun_make_type [function] [call site] 00448
3 stun_init_command [function] [call site] 00449
2 stun_is_indication [function] [call site] 00450
2 inspect_buffer_message [function] [call site] 00451
2 stun_init_buffer [function] [call site] 00452
2 stun_init_success_response [function] [call site] 00453
3 stun_get_size [function] [call site] 00454
3 stun_init_success_response_str [function] [call site] 00455
2 inspect_buffer_message [function] [call site] 00456
2 stun_init_buffer [function] [call site] 00457
2 stun_set_allocate_request [function] [call site] 00458
3 stun_set_allocate_request_str [function] [call site] 00459
4 stun_init_request_str [function] [call site] 00460
4 stun_attr_add_str [function] [call site] 00461
4 ntohl [call site] 00462
4 stun_attr_add_str [function] [call site] 00463
4 stun_attr_add_str [function] [call site] 00464
4 stun_attr_add_str [function] [call site] 00465
4 stun_attr_add_str [function] [call site] 00466
4 stun_attr_add_str [function] [call site] 00467
4 stun_attr_add_str [function] [call site] 00468
4 stun_attr_add_str [function] [call site] 00469
2 inspect_buffer_message [function] [call site] 00470
2 stun_init_buffer [function] [call site] 00471
2 stun_set_allocate_request [function] [call site] 00472
2 inspect_buffer_message [function] [call site] 00473
2 stun_init_buffer [function] [call site] 00474
2 stun_set_binding_request [function] [call site] 00475
3 stun_set_binding_request_str [function] [call site] 00476
4 stun_init_request_str [function] [call site] 00477
2 inspect_buffer_message [function] [call site] 00478
2 stun_init_buffer [function] [call site] 00479
2 stun_prepare_binding_request [function] [call site] 00480
3 stun_set_binding_request_str [function] [call site] 00481
2 inspect_buffer_message [function] [call site] 00482
2 stun_init_buffer [function] [call site] 00483
2 stun_init_channel_message [function] [call site] 00484
3 stun_init_channel_message_str [function] [call site] 00485
4 ntohs [call site] 00486
4 ntohs [call site] 00487
2 stun_is_channel_message [function] [call site] 00488
3 stun_is_channel_message_str [function] [call site] 00489
2 stun_is_channel_message [function] [call site] 00490
2 stun_is_channel_message [function] [call site] 00491
2 stun_is_indication [function] [call site] 00492
2 stun_tid_from_message [function] [call site] 00493
2 stun_is_channel_message [function] [call site] 00494
2 stun_is_channel_message [function] [call site] 00495
2 stun_attr_get_first_by_type [function] [call site] 00496
2 stun_attr_get_first_by_type [function] [call site] 00497
2 stun_attr_get_first_by_type [function] [call site] 00498