Fuzz introspector: freeradius-serverbin/fuzzer_json.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
25 25 talloc_bstrndup call site: 00025 jpath_selector_parse
22 0 EP call site: 00000 fr_jpath_parse

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 talloc_init [function] [call site] 00001
1 talloc_strndup [function] [call site] 00002
1 json_tokener_parse [function] [call site] 00003
1 json_object_put [function] [call site] 00004
1 talloc_strndup [function] [call site] 00005
1 fr_jpath_parse [function] [call site] 00006
2 fr_strerror_const [function] [call site] 00007
2 fr_strerror_printf [function] [call site] 00011
2 TALLOC_FREE [function] [call site] 00012
2 fr_strerror_printf [function] [call site] 00013
2 fr_strerror_const [function] [call site] 00014
2 jpath_field_parse [function] [call site] 00015
3 fr_strerror_const [function] [call site] 00016
3 fr_utf8_char [function] [call site] 00017
3 fr_strerror_const [function] [call site] 00018
3 fr_strerror_const [function] [call site] 00021
3 talloc_bstrndup [function] [call site] 00022
2 fr_assert [function] [call site] 00026
2 jpath_selector_parse [function] [call site] 00027
3 fr_strerror_const [function] [call site] 00028
3 jpath_filter_expr_parse [function] [call site] 00029
4 fr_strerror_const [function] [call site] 00030
3 jpath_expr_parse [function] [call site] 00031
4 fr_strerror_const [function] [call site] 00032
3 jpath_array_parse [function] [call site] 00033
4 fr_strerror_const [function] [call site] 00034
4 fr_strerror_const [function] [call site] 00035
4 fr_strerror_const [function] [call site] 00036
4 fr_strerror_const [function] [call site] 00039
4 fr_strerror_const [function] [call site] 00042
4 fr_strerror_const [function] [call site] 00043
3 fr_assert [function] [call site] 00044
3 fr_strerror_printf [function] [call site] 00045
3 talloc_zero [function] [call site] 00046
3 fr_strerror_const [function] [call site] 00047
2 fr_assert [function] [call site] 00048
2 fr_strerror_const [function] [call site] 00049
1 talloc_free [function] [call site] 00050