Fuzz introspector: fuzz_cups
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['getuid']

4 4 cups_globals_alloc call site: 00132 /src/cups/cups/globals.c:379
0 0 None 36 56 cups_globals_alloc call site: 00115 /src/cups/cups/globals.c:179
0 0 None 10 36 _cupsStrScand call site: 00159 /src/cups/cups/string.c:855
0 0 None 6 6 cups_globals_alloc call site: 00127 /src/cups/cups/globals.c:341
0 0 None 6 6 _cupsStrScand call site: 00161 /src/cups/cups/string.c:892
0 0 None 2 2 cups_globals_alloc call site: 00130 /src/cups/cups/globals.c:369
0 0 None 2 2 cups_globals_alloc call site: 00131 /src/cups/cups/globals.c:374
0 0 None 0 353 _cupsRasterExecPS call site: 00003 /src/cups/cups/raster-interpret.c:523
0 0 None 0 353 _cupsRasterExecPS call site: 00142 /src/cups/cups/raster-interpret.c:529
0 0 None 0 5 copy_stack call site: 00189 /src/cups/cups/raster-interpret.c:733
0 0 None 0 0 _cupsRasterAddError call site: 00140 /src/cups/cups/raster-error.c:44
0 0 None 0 0 _cupsRasterAddError call site: 00140 /src/cups/cups/raster-error.c:51

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 calloc [call site] 00001
1 _cupsRasterExecPS [function] [call site] 00002
2 strdup [call site] 00003
2 _cupsRasterAddError [function] [call site] 00004
3 _cupsGlobals [function] [call site] 00005
4 pthread_once [call site] 00006
4 cups_globals_init [function] [call site] 00007
5 pthread_key_create [call site] 00008
5 cups_globals_free [function] [call site] 00009
6 _cupsStrFree [function] [call site] 00010
7 cupsMutexLock [function] [call site] 00011
8 pthread_mutex_lock [call site] 00012
7 cupsArrayFind [function] [call site] 00013
8 cups_array_find [function] [call site] 00014
7 cupsArrayRemove [function] [call site] 00015
8 cups_array_find [function] [call site] 00016
7 cupsMutexUnlock [function] [call site] 00017
8 pthread_mutex_unlock [call site] 00018
6 cupsArrayDelete [function] [call site] 00019
6 cupsArrayDelete [function] [call site] 00020
6 cupsArrayDelete [function] [call site] 00021
6 httpClose [function] [call site] 00022
7 _httpDisconnect [function] [call site] 00023
8 _httpTLSStop [function] [call site] 00024
9 SSL_get_SSL_CTX [call site] 00025
9 SSL_shutdown [call site] 00026
9 SSL_CTX_free [call site] 00027
9 SSL_free [call site] 00028
8 httpAddrClose [function] [call site] 00029
9 close [call site] 00030
9 unlink [call site] 00031
7 httpAddrFreeList [function] [call site] 00032
7 httpClearFields [function] [call site] 00033
8 httpSetField [function] [call site] 00034
9 http_add_field [function] [call site] 00035
10 strchr [call site] 00036
10 strchr [call site] 00037
10 snprintf [call site] 00038
10 cupsCopyString [function] [call site] 00039
11 strlen [call site] 00040
11 validate_end [function] [call site] 00041
10 strlen [call site] 00042
10 strlen [call site] 00043
10 strlen [call site] 00044
10 snprintf [call site] 00045
10 cupsCopyString [function] [call site] 00046
10 snprintf [call site] 00047
10 realloc [call site] 00048
10 cupsConcatString [function] [call site] 00049
11 strlen [call site] 00050
11 strlen [call site] 00051
11 validate_end [function] [call site] 00052
10 cupsConcatString [function] [call site] 00053
10 strdup [call site] 00054
10 http_content_coding_start [function] [call site] 00055
11 strcmp [call site] 00056
11 strcmp [call site] 00057
11 httpFlushWrite [function] [call site] 00058
12 http_write_chunk [function] [call site] 00059
13 snprintf [call site] 00060
13 strlen [call site] 00061
13 http_write [function] [call site] 00062
14 poll [call site] 00063
14 __errno_location [call site] 00064
14 __errno_location [call site] 00065
14 _httpTLSWrite [function] [call site] 00066
15 SSL_write [call site] 00067
14 send [call site] 00068
14 __errno_location [call site] 00069
14 __errno_location [call site] 00070
14 __errno_location [call site] 00071
14 __errno_location [call site] 00072
14 __errno_location [call site] 00073
14 __errno_location [call site] 00074
13 http_write [function] [call site] 00075
13 http_write [function] [call site] 00076
12 http_write [function] [call site] 00077
11 __errno_location [call site] 00078
11 calloc [call site] 00079
11 __errno_location [call site] 00080
11 deflateInit2_ [call site] 00081
11 __errno_location [call site] 00082
11 calloc [call site] 00083
11 __errno_location [call site] 00084
11 inflateInit2_ [call site] 00085
8 httpSetField [function] [call site] 00086
7 _httpFreeCredentials [function] [call site] 00087
8 sk_X509_free [function] [call site] 00088
9 OPENSSL_sk_free [call site] 00089
6 _httpFreeCredentials [function] [call site] 00090
6 cupsFileClose [function] [call site] 00091
7 cupsFileFlush [function] [call site] 00092
8 cups_compress [function] [call site] 00093
9 crc32 [call site] 00094
9 cups_write [function] [call site] 00095
10 send [call site] 00096
10 write [call site] 00097
10 __errno_location [call site] 00098
9 deflate [call site] 00099
8 cups_write [function] [call site] 00100
7 inflateEnd [call site] 00101
7 cups_write [function] [call site] 00102
7 deflate [call site] 00103
7 cups_write [function] [call site] 00104
7 deflateEnd [call site] 00105
7 httpAddrClose [function] [call site] 00106
7 close [call site] 00107
6 cupsFileClose [function] [call site] 00108
6 cupsFileClose [function] [call site] 00109
6 cupsFreeOptions [function] [call site] 00110
7 _cupsStrFree [function] [call site] 00111
7 _cupsStrFree [function] [call site] 00112
4 pthread_getspecific [call site] 00113
4 cups_globals_alloc [function] [call site] 00114
5 calloc [call site] 00115
5 getenv [call site] 00116
5 getenv [call site] 00117
5 getenv [call site] 00118
5 geteuid [call site] 00119
5 getuid [call site] 00120
5 getegid [call site] 00121
5 getgid [call site] 00122
5 getenv [call site] 00123
5 getenv [call site] 00124
5 getenv [call site] 00125
5 getenv [call site] 00126
5 getenv [call site] 00127
5 getuid [call site] 00128
5 getpwuid_r [call site] 00129
5 cupsCopyString [function] [call site] 00130
5 snprintf [call site] 00131
5 snprintf [call site] 00132
5 snprintf [call site] 00133
5 access [call site] 00134
5 snprintf [call site] 00135
5 getuid [call site] 00136
5 snprintf [call site] 00137
5 strdup [call site] 00138
4 pthread_setspecific [call site] 00139
3 vsnprintf [call site] 00140
3 realloc [call site] 00141
2 new_stack [function] [call site] 00142
3 calloc [call site] 00143
3 calloc [call site] 00144
2 _cupsRasterAddError [function] [call site] 00145
2 scan_ps [function] [call site] 00146
3 __ctype_b_loc [call site] 00147
3 __ctype_b_loc [call site] 00148
3 tolower [call site] 00149
3 __ctype_b_loc [call site] 00150
3 tolower [call site] 00151
3 __ctype_b_loc [call site] 00152
3 __ctype_b_loc [call site] 00153
3 atoi [call site] 00154
3 strtol [call site] 00155
3 strchr [call site] 00156
3 __ctype_b_loc [call site] 00157
3 localeconv [call site] 00158
3 _cupsStrScand [function] [call site] 00159
4 _cups_isspace [function] [call site] 00160
4 __ctype_b_loc [call site] 00161
4 cupsCopyString [function] [call site] 00162
4 strlen [call site] 00163
4 __ctype_b_loc [call site] 00164
4 __ctype_b_loc [call site] 00165
4 atof [call site] 00166
3 strchr [call site] 00167
3 __ctype_b_loc [call site] 00168
3 strcmp [call site] 00169
3 strcmp [call site] 00170
3 strcmp [call site] 00171
3 strcmp [call site] 00172
3 strcmp [call site] 00173
3 strcmp [call site] 00174
3 strcmp [call site] 00175
3 strcmp [call site] 00176
3 strcmp [call site] 00177
3 strcmp [call site] 00178
3 strcmp [call site] 00179
3 push_stack [function] [call site] 00180
4 realloc [call site] 00181
2 pop_stack [function] [call site] 00182
2 cleartomark_stack [function] [call site] 00183
3 pop_stack [function] [call site] 00184
2 _cupsRasterAddError [function] [call site] 00185
2 pop_stack [function] [call site] 00186
2 pop_stack [function] [call site] 00187
2 copy_stack [function] [call site] 00188
3 push_stack [function] [call site] 00189
2 pop_stack [function] [call site] 00190
2 copy_stack [function] [call site] 00191
2 pop_stack [function] [call site] 00192
2 pop_stack [function] [call site] 00193
2 index_stack [function] [call site] 00194
3 push_stack [function] [call site] 00195
2 pop_stack [function] [call site] 00196
2 pop_stack [function] [call site] 00197
2 pop_stack [function] [call site] 00198
2 pop_stack [function] [call site] 00199
2 pop_stack [function] [call site] 00200
2 roll_stack [function] [call site] 00201
3 calloc [call site] 00202
3 calloc [call site] 00203
2 pop_stack [function] [call site] 00204
2 setpagedevice [function] [call site] 00205
3 strcmp [call site] 00206
3 cupsCopyString [function] [call site] 00207
3 strcmp [call site] 00208
3 cupsCopyString [function] [call site] 00209
3 strcmp [call site] 00210
3 cupsCopyString [function] [call site] 00211
3 strcmp [call site] 00212
3 cupsCopyString [function] [call site] 00213
3 strcmp [call site] 00214
3 strcmp [call site] 00215
3 strcmp [call site] 00216
3 strcmp [call site] 00217
3 strcmp [call site] 00218
3 strcmp [call site] 00219
3 strcmp [call site] 00220
3 strcmp [call site] 00221
3 strcmp [call site] 00222
3 strcmp [call site] 00223
3 strcmp [call site] 00224
3 strcmp [call site] 00225
3 strcmp [call site] 00226
3 strcmp [call site] 00227
3 strcmp [call site] 00228
3 strcmp [call site] 00229
3 strcmp [call site] 00230
3 strcmp [call site] 00231
3 strcmp [call site] 00232
3 strcmp [call site] 00233
3 strcmp [call site] 00234
3 strcmp [call site] 00235
3 strcmp [call site] 00236
3 strcmp [call site] 00237
3 strcmp [call site] 00238
3 strcmp [call site] 00239
3 strcmp [call site] 00240
3 strcmp [call site] 00241
3 strcmp [call site] 00242
3 strcmp [call site] 00243
3 strcmp [call site] 00244
3 strcmp [call site] 00245
3 strncmp [call site] 00246
3 atoi [call site] 00247
3 strncmp [call site] 00248
3 atoi [call site] 00249
3 strncmp [call site] 00250
3 atoi [call site] 00251
3 cupsCopyString [function] [call site] 00252
3 strcmp [call site] 00253
3 cupsCopyString [function] [call site] 00254
3 strcmp [call site] 00255
3 cupsCopyString [function] [call site] 00256
3 strcmp [call site] 00257
3 cupsCopyString [function] [call site] 00258
2 pop_stack [function] [call site] 00259
2 _cupsRasterAddError [function] [call site] 00260
2 error_stack [function] [call site] 00261
3 _cupsRasterAddError [function] [call site] 00262
3 error_object [function] [call site] 00263
4 _cupsRasterAddError [function] [call site] 00264
4 _cupsRasterAddError [function] [call site] 00265
4 _cupsRasterAddError [function] [call site] 00266
4 _cupsRasterAddError [function] [call site] 00267
4 _cupsRasterAddError [function] [call site] 00268
4 _cupsRasterAddError [function] [call site] 00269
4 _cupsRasterAddError [function] [call site] 00270
4 _cupsRasterAddError [function] [call site] 00271
4 _cupsRasterAddError [function] [call site] 00272
4 _cupsRasterAddError [function] [call site] 00273
4 _cupsRasterAddError [function] [call site] 00274
4 _cupsRasterAddError [function] [call site] 00275
4 _cupsRasterAddError [function] [call site] 00276
4 _cupsRasterAddError [function] [call site] 00277
4 _cupsRasterAddError [function] [call site] 00278
4 _cupsRasterAddError [function] [call site] 00279
4 _cupsRasterAddError [function] [call site] 00280
4 _cupsRasterAddError [function] [call site] 00281
4 _cupsRasterAddError [function] [call site] 00282
4 _cupsRasterAddError [function] [call site] 00283
4 _cupsRasterAddError [function] [call site] 00284
3 _cupsRasterAddError [function] [call site] 00285
2 delete_stack [function] [call site] 00286
2 delete_stack [function] [call site] 00287