Fuzz introspector: xml_parsebuffer_fuzzer_UTF-16LE
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
11 150 XML_ParseBuffer64 call site: 00150 generate_hash_secret_salt
4 13 getDebugLevel call site: 00013 __errno_location
2 9 expat_heap_increase_tolerable call site: 00009 expat_heap_stat
2 62 XML_ParserFree call site: 00062 callUnknownEncodingRelease
2 173 expat_realloc call site: 00173 expat_heap_stat
2 211 addBinding call site: 00211 beforeHandler
1 20 parserCreate call site: 00020 expat_heap_stat
1 25 expat_malloc call site: 00025 expat_heap_stat
1 31 expat_free call site: 00031 expat_heap_stat
1 60 parserInit call site: 00060 XML_ParserFree
1 65 beforeHandler call site: 00065 afterHandler
1 127 ENTROPY_DEBUG call site: 00127 fprintf

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 XML_ParserCreate [function] [call site] 00001
2 XML_ParserCreate_MM [function] [call site] 00002
3 parserCreate [function] [call site] 00003
4 getRootParserOf [function] [call site] 00004
5 __assert_fail [call site] 00005
4 expat_heap_increase_tolerable [function] [call site] 00006
5 __assert_fail [call site] 00007
5 __assert_fail [call site] 00008
5 __assert_fail [call site] 00009
5 expat_heap_stat [function] [call site] 00010
6 fprintf [call site] 00011
4 getDebugLevel [function] [call site] 00012
5 getenv [call site] 00013
5 __errno_location [call site] 00014
5 strtoul [call site] 00015
5 __errno_location [call site] 00016
5 __errno_location [call site] 00017
4 getRootParserOf [function] [call site] 00018
4 __assert_fail [call site] 00019
4 __assert_fail [call site] 00020
4 expat_heap_stat [function] [call site] 00021
4 expat_malloc [function] [call site] 00022
5 getRootParserOf [function] [call site] 00023
5 __assert_fail [call site] 00024
5 expat_heap_increase_tolerable [function] [call site] 00025
5 expat_heap_stat [function] [call site] 00026
4 expat_free [function] [call site] 00027
5 __assert_fail [call site] 00028
5 getRootParserOf [function] [call site] 00029
5 __assert_fail [call site] 00030
5 __assert_fail [call site] 00031
5 expat_heap_stat [function] [call site] 00032
4 expat_malloc [function] [call site] 00033
4 expat_free [function] [call site] 00034
4 expat_free [function] [call site] 00035
4 dtdCreate [function] [call site] 00036
5 expat_malloc [function] [call site] 00037
5 hashTableInit [function] [call site] 00040
5 hashTableInit [function] [call site] 00041
5 hashTableInit [function] [call site] 00042
5 hashTableInit [function] [call site] 00043
5 hashTableInit [function] [call site] 00044
4 expat_free [function] [call site] 00045
4 expat_free [function] [call site] 00046
4 expat_free [function] [call site] 00047
4 parserInit [function] [call site] 00050
5 XmlPrologStateInit [function] [call site] 00051
5 copyString [function] [call site] 00052
6 xcslen [function] [call site] 00053
7 strlen [call site] 00054
6 expat_malloc [function] [call site] 00055
5 XmlInitEncoding [function] [call site] 00056
6 getEncodingIndex [function] [call site] 00057
5 getDebugLevel [function] [call site] 00059
5 getDebugLevel [function] [call site] 00060
4 XML_ParserFree [function] [call site] 00061
5 isCalledFromInsideHandler [function] [call site] 00062
5 callUnknownEncodingRelease [function] [call site] 00063
6 beforeHandler [function] [call site] 00064
7 __assert_fail [call site] 00065
6 afterHandler [function] [call site] 00066
7 __assert_fail [call site] 00067
5 expat_free [function] [call site] 00068
5 destroyBindings [function] [call site] 00069
6 expat_free [function] [call site] 00070
6 expat_free [function] [call site] 00071
5 expat_free [function] [call site] 00072
5 expat_free [function] [call site] 00073
5 expat_free [function] [call site] 00074
5 expat_free [function] [call site] 00075
5 expat_free [function] [call site] 00076
5 destroyBindings [function] [call site] 00077
5 destroyBindings [function] [call site] 00078
5 poolDestroy [function] [call site] 00079
6 expat_free [function] [call site] 00080
6 expat_free [function] [call site] 00081
5 poolDestroy [function] [call site] 00082
5 expat_free [function] [call site] 00083
5 dtdDestroy [function] [call site] 00084
6 hashTableIterInit [function] [call site] 00085
6 hashTableIterNext [function] [call site] 00086
6 hashTableDestroy [function] [call site] 00087
7 expat_free [function] [call site] 00088
7 expat_free [function] [call site] 00089
6 expat_free [function] [call site] 00090
6 hashTableDestroy [function] [call site] 00091
6 hashTableDestroy [function] [call site] 00092
6 hashTableDestroy [function] [call site] 00093
6 hashTableDestroy [function] [call site] 00094
6 hashTableDestroy [function] [call site] 00095
6 poolDestroy [function] [call site] 00096
6 poolDestroy [function] [call site] 00097
6 expat_free [function] [call site] 00098
6 expat_free [function] [call site] 00099
6 expat_free [function] [call site] 00100
5 expat_free [function] [call site] 00101
5 expat_free [function] [call site] 00102
5 expat_free [function] [call site] 00103
5 expat_free [function] [call site] 00104
5 expat_free [function] [call site] 00105
5 expat_free [function] [call site] 00106
4 XmlGetUtf8InternalEncodingNS [function] [call site] 00107
4 XmlGetUtf8InternalEncoding [function] [call site] 00108
1 __assert_fail [call site] 00109
1 ParseOneInput [function] [call site] 00110
2 sip_tokey [function] [call site] 00111
2 siphash24 [function] [call site] 00112
3 sip24_init [function] [call site] 00113
3 sip24_update [function] [call site] 00114
4 sip_round [function] [call site] 00115
3 sip24_final [function] [call site] 00116
2 sip_tokey [function] [call site] 00119
2 siphash24 [function] [call site] 00120
2 XML_SetHashSalt16Bytes [function] [call site] 00121
3 getRootParserOf [function] [call site] 00122
3 __assert_fail [call site] 00123
3 parserBusy [function] [call site] 00124
3 sip_tokey [function] [call site] 00125
3 ENTROPY_DEBUG [function] [call site] 00126
4 getDebugLevel [function] [call site] 00127
4 fprintf [call site] 00128
2 XML_SetUserData [function] [call site] 00129
2 XML_SetElementHandler [function] [call site] 00130
2 XML_SetCharacterDataHandler [function] [call site] 00133
2 may_stop_character_handler [function] [call site] 00134
3 XML_StopParser [function] [call site] 00135
4 __assert_fail [call site] 00136
2 __assert_fail [call site] 00137
2 XML_GetBuffer [function] [call site] 00138
3 isCalledFromInsideHandler [function] [call site] 00139
3 XML_GetBuffer64 [function] [call site] 00140
4 isCalledFromInsideHandler [function] [call site] 00141
4 internalGetBuffer64 [function] [call site] 00142
5 __assert_fail [call site] 00143
5 setParserBuffer [function] [call site] 00144
2 __assert_fail [call site] 00145
2 XML_ParseBuffer [function] [call site] 00146
3 isCalledFromInsideHandler [function] [call site] 00147
3 XML_ParseBuffer64 [function] [call site] 00148
4 isCalledFromInsideHandler [function] [call site] 00149
4 startParsing [function] [call site] 00150
5 generate_hash_secret_salt [function] [call site] 00151
6 writeRandomBytes_getentropy [function] [call site] 00152
7 __errno_location [call site] 00153
7 getentropy [call site] 00154
6 ENTROPY_DEBUG [function] [call site] 00155
6 __errno_location [call site] 00156
6 gather_time_entropy [function] [call site] 00157
7 gettimeofday [call site] 00158
7 __assert_fail [call site] 00159
6 getpid [call site] 00160
6 ENTROPY_DEBUG [function] [call site] 00161
5 setContext [function] [call site] 00162
6 poolAppendChar [function] [call site] 00163
7 poolGrow [function] [call site] 00164
8 poolBytesToAllocateFor [function] [call site] 00165
8 expat_realloc [function] [call site] 00166
9 __assert_fail [call site] 00167
9 expat_malloc [function] [call site] 00168
9 expat_free [function] [call site] 00169
9 getRootParserOf [function] [call site] 00170
9 __assert_fail [call site] 00171
9 expat_heap_increase_tolerable [function] [call site] 00172
9 __assert_fail [call site] 00173
9 __assert_fail [call site] 00174
9 expat_heap_stat [function] [call site] 00175
8 poolBytesToAllocateFor [function] [call site] 00176
8 expat_malloc [function] [call site] 00177
6 lookup [function] [call site] 00178
7 lookupWithLength [function] [call site] 00181
8 expat_malloc [function] [call site] 00182
8 hash [function] [call site] 00183
9 copy_salt_to_sipkey [function] [call site] 00184
10 getRootParserOf [function] [call site] 00185
10 __assert_fail [call site] 00186
9 sip24_init [function] [call site] 00187
9 sip24_update [function] [call site] 00188
9 sip24_final [function] [call site] 00189
8 keyeq [function] [call site] 00191
9 strncmp [call site] 00192
8 expat_malloc [function] [call site] 00193
8 expat_free [function] [call site] 00196
8 __assert_fail [call site] 00197
8 expat_malloc [function] [call site] 00198
6 poolAppendChar [function] [call site] 00199
6 poolCopyStringNoFinish [function] [call site] 00200
7 poolAppendChar [function] [call site] 00201
6 poolAppendChar [function] [call site] 00203
6 poolAppendChar [function] [call site] 00204
6 addBinding [function] [call site] 00205
7 is_rfc3986_uri_char [function] [call site] 00206
7 expat_realloc [function] [call site] 00207
7 expat_malloc [function] [call site] 00208
7 expat_free [function] [call site] 00209
7 expat_malloc [function] [call site] 00210
7 expat_free [function] [call site] 00211
7 beforeHandler [function] [call site] 00212
7 afterHandler [function] [call site] 00213
6 poolAppendChar [function] [call site] 00214
4 callProcessor [function] [call site] 00215
4 advanceEventPtr [function] [call site] 00216
5 isInsideEntity [function] [call site] 00217
2 XML_GetBuffer [function] [call site] 00218
2 XML_ParseBuffer [function] [call site] 00219
2 XML_GetErrorCode [function] [call site] 00220
2 XML_ErrorString [function] [call site] 00221
2 XML_GetCurrentLineNumber64 [function] [call site] 00222
2 XML_ParserReset [function] [call site] 00223
3 isCalledFromInsideHandler [function] [call site] 00224
3 callUnknownEncodingRelease [function] [call site] 00225
3 moveToFreeBindingList [function] [call site] 00226
3 moveEntityList [function] [call site] 00227
3 moveEntityList [function] [call site] 00228
3 moveEntityList [function] [call site] 00229
3 moveToFreeBindingList [function] [call site] 00230
3 expat_free [function] [call site] 00231
3 poolClear [function] [call site] 00232
3 poolClear [function] [call site] 00233
3 expat_free [function] [call site] 00234
3 parserInit [function] [call site] 00235
3 dtdReset [function] [call site] 00236
4 hashTableIterInit [function] [call site] 00237
4 hashTableIterNext [function] [call site] 00238
4 hashTableDestroy [function] [call site] 00239
4 expat_free [function] [call site] 00240
4 hashTableClear [function] [call site] 00241
5 expat_free [function] [call site] 00242
4 hashTableClear [function] [call site] 00243
4 hashTableClear [function] [call site] 00244
4 hashTableClear [function] [call site] 00245
4 hashTableClear [function] [call site] 00246
4 poolClear [function] [call site] 00247
4 poolClear [function] [call site] 00248
4 expat_free [function] [call site] 00249
4 expat_free [function] [call site] 00250
1 XML_ParserCreateNS [function] [call site] 00251
2 XML_ParserCreate_MM [function] [call site] 00252
1 __assert_fail [call site] 00253
1 ParseOneInput [function] [call site] 00254
1 XML_ParserFree [function] [call site] 00255
1 XML_ExternalEntityParserCreate [function] [call site] 00256
2 parserCreate [function] [call site] 00257
2 parserCreate [function] [call site] 00258
2 dtdCopy [function] [call site] 00259
3 hashTableIterInit [function] [call site] 00260
3 hashTableIterNext [function] [call site] 00261
3 poolCopyString [function] [call site] 00262
4 poolAppendChars [function] [call site] 00264
5 poolGrowUntil [function] [call site] 00265
3 hashTableIterInit [function] [call site] 00268
3 hashTableIterNext [function] [call site] 00269
3 poolAppendChar [function] [call site] 00270
3 poolCopyString [function] [call site] 00271
3 hashTableIterInit [function] [call site] 00274
3 hashTableIterNext [function] [call site] 00275
3 poolCopyString [function] [call site] 00276
3 hashTableInit [function] [call site] 00278
3 expat_malloc [function] [call site] 00279
3 poolCopyString [function] [call site] 00283
3 copyEntityTable [function] [call site] 00285
4 hashTableIterInit [function] [call site] 00286
4 hashTableIterNext [function] [call site] 00287
4 poolCopyString [function] [call site] 00288
4 poolCopyString [function] [call site] 00290
4 poolCopyString [function] [call site] 00291
4 poolCopyString [function] [call site] 00292
4 poolCopyStringN [function] [call site] 00293
5 poolAppendChars [function] [call site] 00295
4 poolCopyString [function] [call site] 00296
3 copyEntityTable [function] [call site] 00297
2 setContext [function] [call site] 00298
2 XML_ParserFree [function] [call site] 00299
2 XmlPrologStateInitExternalEntity [function] [call site] 00300
1 ParseOneInput [function] [call site] 00301
1 XML_ParserFree [function] [call site] 00302
1 XML_ExternalEntityParserCreate [function] [call site] 00303
1 ParseOneInput [function] [call site] 00304
1 XML_ParserFree [function] [call site] 00305
1 XML_ParserFree [function] [call site] 00306