Fuzz introspector: freeradius-serverbin/fuzzer_json.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
364 0 EP call site: 00000 json_tokener_parse

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 talloc_init [function] [call site] 00001
1 talloc_strndup [function] [call site] 00002
1 json_tokener_parse [function] [call site] 00003
2 json_tokener_parse_verbose [function] [call site] 00004
3 json_tokener_new [function] [call site] 00005
4 json_tokener_new_ex [function] [call site] 00006
5 json_tokener_reset [function] [call site] 00016
6 json_tokener_reset_level [function] [call site] 00017
7 json_object_put [function] [call site] 00018
8 __sync_sub_and_fetch [function] [call site] 00020
8 _event_user_delete [function] [call site] 00021
9 fr_strerror_printf [function] [call site] 00025
9 fr_syserror [function] [call site] 00026
10 HAVE_DEFINITION [function] [call site] 00027
10 _fr_syserror_buffer [function] [call site] 00028
11 talloc_array [function] [call site] 00029
11 fr_perror [function] [call site] 00030
12 fr_strerror_marker_pop [function] [call site] 00031
13 unlikely [function] [call site] 00032
13 fr_dlist_head [function] [call site] 00033
14 fr_dlist_entry_to_item [function] [call site] 00034
13 fr_dlist_remove [function] [call site] 00035
14 fr_dlist_empty [function] [call site] 00036
14 _talloc_get_type_abort [function] [call site] 00037
14 fr_dlist_item_to_entry [function] [call site] 00038
14 fr_dlist_entry_in_list [function] [call site] 00039
14 fr_dlist_entry_to_item [function] [call site] 00040
12 va_start [function] [call site] 00041
12 talloc_vasprintf [function] [call site] 00042
12 talloc_free [function] [call site] 00046
12 talloc_free [function] [call site] 00047
12 fr_strerror_marker_pop [function] [call site] 00049
11 fr_atexit_thread_local [function] [call site] 00051
10 HAVE_DEFINITION [function] [call site] 00052
10 snprintf [function] [call site] 00061
8 json_object_object_delete [function] [call site] 00073
9 lh_table_free [function] [call site] 00074
9 JC_OBJECT [function] [call site] 00078
9 json_object_generic_delete [function] [call site] 00079
8 json_object_array_delete [function] [call site] 00084
9 array_list_free [function] [call site] 00085
9 json_object_generic_delete [function] [call site] 00090
8 json_object_string_delete [function] [call site] 00091
9 JC_STRING [function] [call site] 00092
9 JC_STRING [function] [call site] 00094
9 json_object_generic_delete [function] [call site] 00095
8 json_object_generic_delete [function] [call site] 00096
3 json_tokener_parse_ex [function] [call site] 00098
4 uselocale [function] [call site] 00099
4 duplocale [function] [call site] 00101
4 newlocale [function] [call site] 00102
4 freelocale [function] [call site] 00103
4 freelocale [function] [call site] 00104
4 uselocale [function] [call site] 00105
4 setlocale [function] [call site] 00106
4 setlocale [function] [call site] 00108
4 PEEK_CHAR [function] [call site] 00109
4 is_ws_char [function] [call site] 00110
4 ADVANCE_CHAR [function] [call site] 00111
4 PEEK_CHAR [function] [call site] 00112
4 printbuf_reset [function] [call site] 00113
4 printbuf_memappend_checked [function] [call site] 00114
4 json_object_new_object [function] [call site] 00115
5 JSON_OBJECT_NEW [function] [call site] 00116
5 json_object_generic_delete [function] [call site] 00123
4 json_object_new_array [function] [call site] 00124
5 json_object_new_array_ext [function] [call site] 00125
4 printbuf_reset [function] [call site] 00132
4 printbuf_reset [function] [call site] 00133
4 printbuf_reset [function] [call site] 00134
4 printbuf_reset [function] [call site] 00135
4 printbuf_reset [function] [call site] 00136
4 json_object_get [function] [call site] 00137
5 __sync_add_and_fetch [function] [call site] 00139
4 json_tokener_reset_level [function] [call site] 00140
4 ADVANCE_CHAR [function] [call site] 00141
4 PEEK_CHAR [function] [call site] 00142
4 printbuf_length [function] [call site] 00143
4 json_object_new_double [function] [call site] 00144
5 JSON_OBJECT_NEW [function] [call site] 00145
4 printbuf_memappend_checked [function] [call site] 00146
4 strncasecmp [function] [call site] 00155
4 json_object_new_double [function] [call site] 00157
4 printbuf_memappend_checked [function] [call site] 00158
4 ADVANCE_CHAR [function] [call site] 00159
4 PEEK_CHAR [function] [call site] 00160
4 printbuf_memappend_checked [function] [call site] 00161
4 printbuf_memappend_checked [function] [call site] 00162
4 ADVANCE_CHAR [function] [call site] 00163
4 PEEK_CHAR [function] [call site] 00164
4 printbuf_memappend_checked [function] [call site] 00165
4 printbuf_memappend_checked [function] [call site] 00166
4 printbuf_memappend_checked [function] [call site] 00168
4 printbuf_memappend_checked [function] [call site] 00170
4 json_object_new_string_len [function] [call site] 00171
5 _json_object_new_string [function] [call site] 00172
4 printbuf_memappend_checked [function] [call site] 00176
4 ADVANCE_CHAR [function] [call site] 00177
4 PEEK_CHAR [function] [call site] 00178
4 printbuf_memappend_checked [function] [call site] 00179
4 printbuf_memappend_checked [function] [call site] 00180
4 printbuf_memappend_checked [function] [call site] 00181
4 printbuf_memappend_checked [function] [call site] 00182
4 printbuf_memappend_checked [function] [call site] 00183
4 printbuf_memappend_checked [function] [call site] 00184
4 printbuf_memappend_checked [function] [call site] 00185
4 is_hex_char [function] [call site] 00186
4 jt_hexdigit [function] [call site] 00187
4 ADVANCE_CHAR [function] [call site] 00188
4 PEEK_CHAR [function] [call site] 00189
4 IS_LOW_SURROGATE [function] [call site] 00190
4 DECODE_SURROGATE_PAIR [function] [call site] 00191
4 printbuf_memappend_checked [function] [call site] 00192
4 printbuf_memappend_checked [function] [call site] 00193
4 printbuf_memappend_checked [function] [call site] 00194
4 IS_HIGH_SURROGATE [function] [call site] 00195
4 IS_LOW_SURROGATE [function] [call site] 00196
4 printbuf_memappend_checked [function] [call site] 00197
4 printbuf_memappend_checked [function] [call site] 00198
4 printbuf_memappend_checked [function] [call site] 00199
4 printbuf_memappend_checked [function] [call site] 00200
4 printbuf_memappend_checked [function] [call site] 00201
4 printbuf_memappend_checked [function] [call site] 00202
4 printbuf_memappend_checked [function] [call site] 00203
4 strncasecmp [function] [call site] 00206
4 json_object_new_boolean [function] [call site] 00208
5 JSON_OBJECT_NEW [function] [call site] 00209
4 strncasecmp [function] [call site] 00210
4 json_object_new_boolean [function] [call site] 00212
4 printbuf_length [function] [call site] 00213
4 printbuf_length [function] [call site] 00216
4 ADVANCE_CHAR [function] [call site] 00217
4 PEEK_CHAR [function] [call site] 00218
4 printbuf_memappend_checked [function] [call site] 00219
4 is_ws_char [function] [call site] 00220
4 printbuf_memappend_checked [function] [call site] 00221
4 printbuf_length [function] [call site] 00222
4 printbuf_length [function] [call site] 00223
4 printbuf_length [function] [call site] 00224
4 printbuf_length [function] [call site] 00225
4 json_parse_int64 [function] [call site] 00226
4 json_object_new_int64 [function] [call site] 00228
5 JSON_OBJECT_NEW [function] [call site] 00229
4 json_parse_uint64 [function] [call site] 00230
4 json_object_new_int64 [function] [call site] 00232
4 json_object_new_uint64 [function] [call site] 00233
5 JSON_OBJECT_NEW [function] [call site] 00234
4 json_tokener_parse_double [function] [call site] 00235
4 printbuf_length [function] [call site] 00237
4 json_object_new_double_s [function] [call site] 00238
5 json_object_new_double [function] [call site] 00239
5 json_object_generic_delete [function] [call site] 00241
5 json_object_set_serializer [function] [call site] 00242
6 json_object_set_userdata [function] [call site] 00243
7 _event_user_delete [function] [call site] 00245
8 fr_strerror_printf [function] [call site] 00249
8 fr_syserror [function] [call site] 00250
4 json_object_array_shrink [function] [call site] 00251
5 array_list_shrink [function] [call site] 00255
6 array_list_expand_internal [function] [call site] 00256
4 json_tokener_reset_level [function] [call site] 00260
4 json_object_array_add [function] [call site] 00261
5 json_object_get_type [function] [call site] 00263
5 array_list_add [function] [call site] 00264
6 array_list_expand_internal [function] [call site] 00265
4 json_object_array_shrink [function] [call site] 00267
4 printbuf_reset [function] [call site] 00268
4 printbuf_memappend_checked [function] [call site] 00269
4 printbuf_memappend_checked [function] [call site] 00271
4 ADVANCE_CHAR [function] [call site] 00272
4 PEEK_CHAR [function] [call site] 00273
4 printbuf_memappend_checked [function] [call site] 00274
4 json_tokener_reset_level [function] [call site] 00275
4 json_object_object_add [function] [call site] 00276
5 json_object_object_add_ex [function] [call site] 00277
6 json_object_get_type [function] [call site] 00279
6 lh_get_hash [function] [call site] 00280
7 struct [call site] 00281
6 JC_OBJECT [function] [call site] 00282
6 lh_table_lookup_entry_w_hash [function] [call site] 00283
7 struct [call site] 00284
6 JC_OBJECT [function] [call site] 00285
6 lh_table_insert_w_hash [function] [call site] 00287
7 lh_table_resize [function] [call site] 00288
8 lh_table_new [function] [call site] 00289
8 lh_get_hash [function] [call site] 00290
8 lh_table_insert_w_hash [function] [call site] 00291
8 lh_table_free [function] [call site] 00292
6 JC_OBJECT [function] [call site] 00295
6 lh_entry_v [function] [call site] 00296
7 _LH_UNCONST [function] [call site] 00297
6 json_object_put [function] [call site] 00298
6 lh_entry_set_val [function] [call site] 00299
4 ADVANCE_CHAR [function] [call site] 00301
4 uselocale [function] [call site] 00302
4 freelocale [function] [call site] 00303
4 setlocale [function] [call site] 00304
4 json_object_get [function] [call site] 00306
4 json_tokener_reset_level [function] [call site] 00307
3 json_tokener_get_parse_end [function] [call site] 00309
3 json_object_put [function] [call site] 00312
3 json_tokener_free [function] [call site] 00313
4 json_tokener_reset [function] [call site] 00314
4 printbuf_free [function] [call site] 00315
1 json_object_put [function] [call site] 00318
1 talloc_strndup [function] [call site] 00319
1 fr_jpath_parse [function] [call site] 00320
2 fr_strerror_const [function] [call site] 00321
2 fr_strerror_printf [function] [call site] 00325
2 TALLOC_FREE [function] [call site] 00326
2 fr_strerror_printf [function] [call site] 00327
2 fr_strerror_const [function] [call site] 00328
2 jpath_field_parse [function] [call site] 00329
3 fr_strerror_const [function] [call site] 00330
3 fr_utf8_char [function] [call site] 00331
3 fr_strerror_const [function] [call site] 00332
3 fr_strerror_const [function] [call site] 00335
3 talloc_bstrndup [function] [call site] 00336
2 fr_assert [function] [call site] 00340
2 jpath_selector_parse [function] [call site] 00341
3 fr_strerror_const [function] [call site] 00342
3 jpath_filter_expr_parse [function] [call site] 00343
4 fr_strerror_const [function] [call site] 00344
3 jpath_expr_parse [function] [call site] 00345
4 fr_strerror_const [function] [call site] 00346
3 jpath_array_parse [function] [call site] 00347
4 fr_strerror_const [function] [call site] 00348
4 fr_strerror_const [function] [call site] 00349
4 fr_strerror_const [function] [call site] 00350
4 fr_strerror_const [function] [call site] 00353
4 fr_strerror_const [function] [call site] 00356
4 fr_strerror_const [function] [call site] 00357
3 fr_assert [function] [call site] 00358
3 fr_strerror_printf [function] [call site] 00359
3 talloc_zero [function] [call site] 00360
3 fr_strerror_const [function] [call site] 00361
2 fr_assert [function] [call site] 00362
2 fr_strerror_const [function] [call site] 00363
1 talloc_free [function] [call site] 00364