Fuzz introspector: fuzz_reqparse
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
246 0 EP call site: 00000 werkzeug.wrappers.request.Request.from_values

Fuzzer calltree

0 ...fuzz_reqparse.TestOneInput [function] [call site] 00000
1 atheris.FuzzedDataProvider [function] [call site] 00001
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00002
1 werkzeug.wrappers.request.Request.from_values [function] [call site] 00003
2 werkzeug.test.EnvironBuilder.__init__ [function] [call site] 00004
3 urllib.parse.urlsplit [function] [call site] 00005
3 werkzeug.urls.iri_to_uri [function] [call site] 00006
4 urllib.parse.urlsplit [function] [call site] 00007
4 urllib.parse.quote [function] [call site] 00008
4 urllib.parse.quote [function] [call site] 00009
4 urllib.parse.quote [function] [call site] 00010
4 urllib.parse.urlsplit.hostname.encode [function] [call site] 00011
4 urllib.parse.quote [function] [call site] 00012
4 urllib.parse.quote [function] [call site] 00013
4 urllib.parse.urlunsplit [function] [call site] 00014
3 werkzeug.urls.iri_to_uri [function] [call site] 00015
3 <builtin>.isinstance [function] [call site] 00016
3 <builtin>.isinstance [function] [call site] 00017
3 <builtin>.isinstance [function] [call site] 00018
3 <builtin>.isinstance [function] [call site] 00019
3 auth.to_header [function] [call site] 00020
3 <builtin>.hasattr [function] [call site] 00021
3 data.read [function] [call site] 00022
3 <builtin>.isinstance [function] [call site] 00023
3 data.encode [function] [call site] 00024
3 <builtin>.isinstance [function] [call site] 00025
3 io.BytesIO [function] [call site] 00026
3 <builtin>.len [function] [call site] 00027
3 werkzeug.test._iter_data [function] [call site] 00028
4 <builtin>.isinstance [function] [call site] 00029
4 data.items [function] [call site] 00030
4 data.items [function] [call site] 00031
4 <builtin>.isinstance [function] [call site] 00032
3 <builtin>.isinstance [function] [call site] 00033
3 <builtin>.hasattr [function] [call site] 00034
3 werkzeug.test.EnvironBuilder._add_file_from_data [function] [call site] 00035
4 <builtin>.isinstance [function] [call site] 00036
2 werkzeug.test.EnvironBuilder.get_request [function] [call site] 00037
3 werkzeug.test.EnvironBuilder.get_environ [function] [call site] 00038
4 io.BytesIO.tell [function] [call site] 00039
4 io.BytesIO.seek [function] [call site] 00040
4 io.BytesIO.tell [function] [call site] 00041
4 io.BytesIO.seek [function] [call site] 00042
4 werkzeug.test.stream_encode_multipart [function] [call site] 00043
5 time.time [function] [call site] 00044
5 random.random [function] [call site] 00045
5 io.BytesIO [function] [call site] 00046
5 boundary.encode [function] [call site] 00047
5 werkzeug.sansio.multipart.MultipartEncoder.__init__ [function] [call site] 00048
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00049
6 <builtin>.isinstance [function] [call site] 00050
6 <builtin>.isinstance [function] [call site] 00051
6 event.name.encode [function] [call site] 00052
6 <builtin>.isinstance [function] [call site] 00053
6 event.filename.encode [function] [call site] 00054
6 typing.cast [function] [call site] 00055
6 name.lower [function] [call site] 00056
6 <builtin>.isinstance [function] [call site] 00057
6 <builtin>.len [function] [call site] 00058
6 <builtin>.isinstance [function] [call site] 00059
6 <builtin>.isinstance [function] [call site] 00060
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00061
6 stream.write [function] [call site] 00062
6 <builtin>.len [function] [call site] 00063
6 stream.write [function] [call site] 00064
6 tempfile.TemporaryFile [function] [call site] 00065
6 typing.cast [function] [call site] 00066
6 stream.getvalue [function] [call site] 00067
6 new_stream.write [function] [call site] 00068
6 new_stream.write [function] [call site] 00069
5 werkzeug.test._iter_data [function] [call site] 00070
5 <builtin>.getattr [function] [call site] 00071
5 <builtin>.getattr [function] [call site] 00072
5 <builtin>.getattr [function] [call site] 00073
5 <builtin>.getattr [function] [call site] 00074
5 mimetypes.guess_type [function] [call site] 00075
5 headers.update [function] [call site] 00076
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00077
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00078
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00079
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00080
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00081
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00082
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00083
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00084
5 <builtin>.isinstance [function] [call site] 00085
5 <builtin>.str [function] [call site] 00086
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00087
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00088
5 value.encode [function] [call site] 00089
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00090
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00091
5 werkzeug.sansio.multipart.MultipartEncoder.send_event [function] [call site] 00092
5 werkzeug.test.stream_encode_multipart.write_binary [function] [call site] 00093
5 stream.tell [function] [call site] 00094
5 stream.seek [function] [call site] 00095
4 werkzeug.urls._urlencode [function] [call site] 00096
5 urllib.parse.urlencode [function] [call site] 00097
4 <builtin>.len [function] [call site] 00098
4 io.BytesIO [function] [call site] 00099
4 io.BytesIO [function] [call site] 00100
4 result.update [function] [call site] 00101
4 werkzeug._internal._wsgi_encoding_dance [function] [call site] 00102
5 urllib.parse.urlsplit.path.encode [function] [call site] 00103
5 http.server.BaseHTTPRequestHandler.path.encode [function] [call site] 00104
5 urllib.parse.urlsplit.query.encode [function] [call site] 00105
5 urllib.parse.unquote.encode [function] [call site] 00106
4 result.update [function] [call site] 00107
4 headers.remove [function] [call site] 00108
4 headers.remove [function] [call site] 00109
4 <builtin>.str [function] [call site] 00110
4 collections.defaultdict [function] [call site] 00111
4 headers.to_wsgi_list [function] [call site] 00112
4 key.upper [function] [call site] 00113
4 collections.defaultdict.items [function] [call site] 00114
4 result.update [function] [call site] 00115
3 werkzeug.wrappers.request.Request.__init__ [function] [call site] 00116
4 <builtin>.super [function] [call site] 00117
4 environ.get [function] [call site] 00118
4 environ.get [function] [call site] 00119
4 werkzeug.wsgi._get_server [function] [call site] 00120
5 environ.get [function] [call site] 00121
5 environ.get [function] [call site] 00122
5 <builtin>.int [function] [call site] 00123
4 environ.get [function] [call site] 00124
4 werkzeug._internal._wsgi_decoding_dance [function] [call site] 00125
4 environ.get [function] [call site] 00127
4 werkzeug._internal._wsgi_decoding_dance [function] [call site] 00128
4 environ.get [function] [call site] 00129
4 werkzeug.datastructures.headers.EnvironHeaders.__init__ [function] [call site] 00130
5 <builtin>.super [function] [call site] 00131
4 environ.get [function] [call site] 00132
2 werkzeug.test.EnvironBuilder.close [function] [call site] 00133
1 flask.app.Flask.app_context [function] [call site] 00135
2 flask.ctx.AppContext.__init__ [function] [call site] 00136
3 flask.app.Flask.create_url_adapter [function] [call site] 00137
4 werkzeug.wsgi.get_host [function] [call site] 00138
5 werkzeug.sansio.utils.get_host [function] [call site] 00139
6 host.endswith [function] [call site] 00140
6 host.endswith [function] [call site] 00141
6 werkzeug.sansio.utils.host_is_trusted [function] [call site] 00142
7 hostname.partition [function] [call site] 00143
7 <builtin>.isinstance [function] [call site] 00144
7 ref.startswith [function] [call site] 00145
7 ref.partition [function] [call site] 00146
7 hostname.endswith [function] [call site] 00147
5 environ.get [function] [call site] 00148
5 werkzeug.wsgi._get_server [function] [call site] 00149
4 werkzeug.routing.map.Map.bind_to_environ [function] [call site] 00150
5 werkzeug._internal._get_environ [function] [call site] 00151
6 <builtin>.getattr [function] [call site] 00152
6 <builtin>.isinstance [function] [call site] 00153
6 <builtin>.type [function] [call site] 00154
5 werkzeug.wsgi.get_host [function] [call site] 00155
5 <builtin>.any [function] [call site] 00156
5 server_name.lower [function] [call site] 00160
5 server_name.endswith [function] [call site] 00161
5 server_name.endswith [function] [call site] 00162
5 wsgi_server_name.split [function] [call site] 00163
5 server_name.split [function] [call site] 00164
5 <builtin>.len [function] [call site] 00165
5 warnings.warn [function] [call site] 00166
5 <builtin>.filter [function] [call site] 00167
5 werkzeug.routing.map.Map.bind_to_environ._get_wsgi_string [function] [call site] 00168
6 werkzeug._internal._wsgi_decoding_dance [function] [call site] 00170
5 werkzeug.routing.map.Map.bind_to_environ._get_wsgi_string [function] [call site] 00171
5 werkzeug.routing.map.Map.bind_to_environ._get_wsgi_string [function] [call site] 00172
5 werkzeug.routing.map.Map.bind [function] [call site] 00173
6 server_name.lower [function] [call site] 00174
6 server_name.partition [function] [call site] 00175
6 server_name.encode [function] [call site] 00176
6 werkzeug.routing.map.MapAdapter.__init__ [function] [call site] 00177
7 script_name.endswith [function] [call site] 00178
4 werkzeug.routing.map.Map.bind [function] [call site] 00179
1 flask_restx.reqparse.RequestParser.__init__ [function] [call site] 00180
1 flask_restx.reqparse.RequestParser.add_argument [function] [call site] 00181
2 <builtin>.len [function] [call site] 00182
2 <builtin>.isinstance [function] [call site] 00183
2 flask_restx.reqparse.Argument.__init__ [function] [call site] 00184
2 kwargs.get [function] [call site] 00185
1 flask_restx.reqparse.RequestParser.add_argument [function] [call site] 00186
1 flask_restx.reqparse.RequestParser.parse_args [function] [call site] 00187
2 flask_restx.reqparse.Argument.__init__ [function] [call site] 00188
2 flask_restx.reqparse.Argument.source [function] [call site] 00189
3 <builtin>.isinstance [function] [call site] 00190
3 request.get_json [function] [call site] 00191
3 werkzeug.datastructures.structures.MultiDict.__init__ [function] [call site] 00192
4 werkzeug.datastructures.structures.MultiDict.__iter__ [function] [call site] 00193
5 <builtin>.super [function] [call site] 00194
4 werkzeug.datastructures.structures.CombinedMultiDict.__iter__ [function] [call site] 00195
5 werkzeug.datastructures.structures.CombinedMultiDict._keys_impl [function] [call site] 00196
6 <builtin>.set [function] [call site] 00197
5 <builtin>.iter [function] [call site] 00198
4 <builtin>.super [function] [call site] 00199
4 <builtin>.isinstance [function] [call site] 00200
4 werkzeug.datastructures.structures.MultiDict.lists [function] [call site] 00201
5 <builtin>.super [function] [call site] 00202
5 <builtin>.list [function] [call site] 00203
4 werkzeug.datastructures.structures.CombinedMultiDict.lists [function] [call site] 00204
5 rv.setdefault [function] [call site] 00206
4 <builtin>.super [function] [call site] 00208
4 <builtin>.isinstance [function] [call site] 00209
4 werkzeug.datastructures.structures.CombinedMultiDict.items [function] [call site] 00210
5 <builtin>.set [function] [call site] 00211
5 found.add [function] [call site] 00213
4 werkzeug.datastructures.structures.MultiDict.items [function] [call site] 00214
5 <builtin>.super [function] [call site] 00215
4 <builtin>.isinstance [function] [call site] 00216
4 <builtin>.list [function] [call site] 00217
4 <builtin>.super [function] [call site] 00218
4 tmp.setdefault [function] [call site] 00219
4 <builtin>.super [function] [call site] 00220
3 <builtin>.getattr [function] [call site] 00221
3 <builtin>.callable [function] [call site] 00222
3 werkzeug.datastructures.structures.MultiDict.__init__ [function] [call site] 00223
3 request.get_json [function] [call site] 00224
3 <builtin>.getattr [function] [call site] 00225
3 <builtin>.callable [function] [call site] 00226
3 werkzeug.datastructures.structures.MultiDict.update [function] [call site] 00227
4 werkzeug.datastructures.structures.iter_multi_items [function] [call site] 00228
5 <builtin>.isinstance [function] [call site] 00229
5 mapping.items [function] [call site] 00230
5 <builtin>.isinstance [function] [call site] 00231
5 mapping.items [function] [call site] 00232
5 <builtin>.isinstance [function] [call site] 00233
4 werkzeug.datastructures.structures.MultiDict.add [function] [call site] 00234
5 <builtin>.super [function] [call site] 00235
3 werkzeug.datastructures.structures.MultiDict.__init__ [function] [call site] 00236
2 <builtin>.dict [function] [call site] 00237
2 arg.parse [function] [call site] 00238
2 <builtin>.isinstance [function] [call site] 00239
2 errors.update [function] [call site] 00240
2 flask_restx.errors.abort [function] [call site] 00241
3 flask.abort [function] [call site] 00242
3 <builtin>.str [function] [call site] 00243
2 req.unparsed_arguments.keys [function] [call site] 00244
1 traceback.format_exc [function] [call site] 00245
1 <builtin>.str [function] [call site] 00246