Fuzz introspector: fuzz_url
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
40 293 curl_url_cleanup call site: 00293 hostname_check
30 132 formatf call site: 00132 curl_url_get
29 262 Curl_urldecode call site: 00262 checkurl
13 236 curlx_dyn_addn call site: 00236 urlget_format
11 17 free_urlhandle call site: 00017 Curl_safefree
11 92 dollarstring call site: 00092 dollarstring
10 340 ipv6_parse call site: 00340 inet_pton6
8 121 out_number call site: 00121 OUTCHAR
8 164 urlget_url call site: 00164 Curl_get_scheme_handler
7 225 curlx_dyn_addf call site: 00225 curl_easy_escape
6 63 Curl_get_scheme_handler call site: 00063 set_url_port
6 81 curl_url_set call site: 00081 curl_url_set

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 curl_url_set [function] [call site] 00005
2 set_url_scheme [function] [call site] 00030
2 Curl_safefree [function] [call site] 00066
2 set_url_port [function] [call site] 00067
3 curlx_str_number [function] [call site] 00069
4 str_num_base [function] [call site] 00070
5 DEBUGASSERT [function] [call site] 00071
5 DEBUGASSERT [function] [call site] 00072
5 DEBUGASSERT [function] [call site] 00073
5 valid_digit [function] [call site] 00074
5 Curl_hexval [function] [call site] 00075
5 valid_digit [function] [call site] 00076
5 Curl_hexval [function] [call site] 00077
5 valid_digit [function] [call site] 00078
2 set_url [function] [call site] 00081
3 curl_url_set [function] [call site] 00083
3 curl_url_set [function] [call site] 00084
3 curl_mfprintf [function] [call site] 00085
4 formatf [function] [call site] 00087
5 parsefmt [function] [call site] 00088
6 dollarstring [function] [call site] 00090
7 curlx_str_number [function] [call site] 00091
7 curlx_str_single [function] [call site] 00092
8 DEBUGASSERT [function] [call site] 00093
6 dollarstring [function] [call site] 00094
6 curlx_str_number [function] [call site] 00095
6 FALLTHROUGH [function] [call site] 00096
6 curlx_str_number [function] [call site] 00097
6 dollarstring [function] [call site] 00098
6 FALLTHROUGH [function] [call site] 00099
6 is_arg_used [function] [call site] 00100
6 mark_arg_used [function] [call site] 00101
6 is_arg_used [function] [call site] 00102
6 mark_arg_used [function] [call site] 00103
6 mark_arg_used [function] [call site] 00104
6 is_arg_used [function] [call site] 00105
6 DEBUGASSERT [function] [call site] 00115
5 out_number [function] [call site] 00132
3 curl_url_strerror [function] [call site] 00158
3 curl_url_get [function] [call site] 00159
4 Curl_get_scheme_handler [function] [call site] 00160
4 msnprintf [function] [call site] 00161
4 Curl_get_scheme_handler [function] [call site] 00162
4 urlget_url [function] [call site] 00163
5 curl_strequal [function] [call site] 00164
6 casecompare [function] [call site] 00165
7 Curl_raw_toupper [function] [call site] 00166
7 Curl_raw_toupper [function] [call site] 00167
5 Curl_get_scheme_handler [function] [call site] 00169
5 msnprintf [function] [call site] 00170
5 curlx_dyn_init [function] [call site] 00172
6 DEBUGASSERT [function] [call site] 00173
6 DEBUGASSERT [function] [call site] 00174
6 DEBUGASSERT [function] [call site] 00175
5 curlx_dyn_addf [function] [call site] 00176
6 DEBUGASSERT [function] [call site] 00177
6 DEBUGASSERT [function] [call site] 00178
6 DEBUGASSERT [function] [call site] 00179
6 DEBUGASSERT [function] [call site] 00180
6 curlx_dyn_vaddf [function] [call site] 00183
7 DEBUGASSERT [function] [call site] 00184
7 DEBUGASSERT [function] [call site] 00185
7 DEBUGASSERT [function] [call site] 00186
7 DEBUGASSERT [function] [call site] 00187
7 curlx_dyn_vprintf [function] [call site] 00188
8 curlx_dyn_free [function] [call site] 00190
9 DEBUGASSERT [function] [call site] 00191
9 DEBUGASSERT [function] [call site] 00192
9 Curl_safefree [function] [call site] 00193
7 curl_mvaprintf [function] [call site] 00194
8 curlx_dyn_init [function] [call site] 00195
8 curlx_dyn_free [function] [call site] 00197
8 curlx_dyn_len [function] [call site] 00198
9 DEBUGASSERT [function] [call site] 00199
9 DEBUGASSERT [function] [call site] 00200
9 DEBUGASSERT [function] [call site] 00201
8 curlx_dyn_ptr [function] [call site] 00202
9 DEBUGASSERT [function] [call site] 00203
9 DEBUGASSERT [function] [call site] 00204
9 DEBUGASSERT [function] [call site] 00205
7 dyn_nappend [function] [call site] 00210
8 DEBUGASSERT [function] [call site] 00211
8 DEBUGASSERT [function] [call site] 00212
8 DEBUGASSERT [function] [call site] 00213
8 DEBUGASSERT [function] [call site] 00214
8 DEBUGASSERT [function] [call site] 00215
8 DEBUGASSERT [function] [call site] 00216
8 curlx_dyn_free [function] [call site] 00217
8 DEBUGASSERT [function] [call site] 00218
8 curlx_dyn_free [function] [call site] 00220
7 curlx_dyn_free [function] [call site] 00224
5 curlx_dyn_ptr [function] [call site] 00226
5 curl_easy_escape [function] [call site] 00227
6 curlx_dyn_init [function] [call site] 00230
6 ISUNRESERVED [function] [call site] 00231
6 curlx_dyn_addn [function] [call site] 00232
7 DEBUGASSERT [function] [call site] 00233
7 DEBUGASSERT [function] [call site] 00234
7 DEBUGASSERT [function] [call site] 00235
7 dyn_nappend [function] [call site] 00236
6 Curl_hexbyte [function] [call site] 00237
6 curlx_dyn_addn [function] [call site] 00238
6 curlx_dyn_ptr [function] [call site] 00239
5 Curl_is_ASCII_name [function] [call site] 00240
5 host_decode [function] [call site] 00241
5 Curl_is_ASCII_name [function] [call site] 00242
5 host_encode [function] [call site] 00243
5 msnprintf [function] [call site] 00244
4 urlget_format [function] [call site] 00247
5 Curl_urldecode [function] [call site] 00253
5 curlx_dyn_init [function] [call site] 00264
5 urlencode_str [function] [call site] 00265
6 find_host_sep [function] [call site] 00266
6 curlx_dyn_addn [function] [call site] 00268
6 curlx_dyn_addn [function] [call site] 00269
6 curlx_dyn_addn [function] [call site] 00270
6 Curl_hexbyte [function] [call site] 00271
6 curlx_dyn_addn [function] [call site] 00272
6 curlx_dyn_addn [function] [call site] 00273
5 curlx_dyn_ptr [function] [call site] 00276
5 Curl_is_ASCII_name [function] [call site] 00277
5 host_decode [function] [call site] 00278
5 Curl_is_ASCII_name [function] [call site] 00280
5 host_encode [function] [call site] 00281
3 curl_mfprintf [function] [call site] 00283
3 curl_url_strerror [function] [call site] 00284
3 curl_mfprintf [function] [call site] 00290
3 curl_url_cleanup [function] [call site] 00291
2 DEBUGASSERT [function] [call site] 00294
2 curlx_dyn_init [function] [call site] 00295
2 curlx_dyn_addn [function] [call site] 00296
2 curlx_dyn_addn [function] [call site] 00298
2 ISUNRESERVED [function] [call site] 00299
2 allowed_in_path [function] [call site] 00300
2 curlx_dyn_addn [function] [call site] 00301
2 Curl_hexbyte [function] [call site] 00303
2 curlx_dyn_addn [function] [call site] 00304
2 curlx_dyn_add [function] [call site] 00306
3 DEBUGASSERT [function] [call site] 00307
3 DEBUGASSERT [function] [call site] 00308
3 DEBUGASSERT [function] [call site] 00309
3 DEBUGASSERT [function] [call site] 00310
3 dyn_nappend [function] [call site] 00312
2 curlx_dyn_ptr [function] [call site] 00314
2 Curl_raw_tolower [function] [call site] 00319
2 Curl_raw_tolower [function] [call site] 00320
2 curlx_dyn_ptr [function] [call site] 00321
2 curlx_dyn_init [function] [call site] 00323
2 curlx_dyn_addn [function] [call site] 00324
2 curlx_dyn_addn [function] [call site] 00325
2 curlx_dyn_add [function] [call site] 00326
2 curlx_dyn_free [function] [call site] 00327
2 curlx_dyn_ptr [function] [call site] 00329
2 curlx_dyn_free [function] [call site] 00330
2 curlx_dyn_len [function] [call site] 00331
2 Curl_urldecode [function] [call site] 00332
2 hostname_check [function] [call site] 00355
2 CURL_UNCONST [function] [call site] 00356
2 curlx_dyn_free [function] [call site] 00357
2 CURL_UNCONST [function] [call site] 00359
1 curl_url_cleanup [function] [call site] 00361