Fuzz introspector: freeradius-serverfuzzer/fuzzer_json.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
368 0 EP call site: 00000 json_tokener_parse

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 talloc_init [function] [call site] 00001
1 talloc_strndup [function] [call site] 00002
1 json_tokener_parse [function] [call site] 00003
2 json_tokener_parse_verbose [function] [call site] 00004
3 json_tokener_new [function] [call site] 00005
4 json_tokener_new_ex [function] [call site] 00006
5 json_tokener_reset [function] [call site] 00016
6 json_tokener_reset_level [function] [call site] 00017
7 json_object_put [function] [call site] 00018
8 __sync_sub_and_fetch [function] [call site] 00020
8 _event_user_delete [function] [call site] 00021
9 fr_strerror_printf [function] [call site] 00025
9 fr_syserror [function] [call site] 00026
10 HAVE_DEFINITION [function] [call site] 00027
10 _fr_syserror_buffer [function] [call site] 00028
11 talloc_array [function] [call site] 00029
11 fr_perror [function] [call site] 00030
12 fr_strerror_marker_pop [function] [call site] 00031
13 unlikely [function] [call site] 00032
13 fr_dlist_head [function] [call site] 00033
14 fr_dlist_entry_to_item [function] [call site] 00034
13 fr_dlist_remove [function] [call site] 00035
14 fr_dlist_empty [function] [call site] 00036
14 _talloc_get_type_abort [function] [call site] 00037
15 __coverity_panic__ [function] [call site] 00038
15 __coverity_mark_pointee_as_sanitized__ [function] [call site] 00039
14 fr_dlist_item_to_entry [function] [call site] 00040
14 fr_dlist_entry_in_list [function] [call site] 00041
14 fr_dlist_entry_to_item [function] [call site] 00042
12 va_start [function] [call site] 00043
12 talloc_vasprintf [function] [call site] 00044
12 talloc_free [function] [call site] 00048
12 talloc_free [function] [call site] 00049
12 fr_strerror_marker_pop [function] [call site] 00051
11 fr_atexit_thread_local [function] [call site] 00053
10 HAVE_DEFINITION [function] [call site] 00054
10 snprintf [function] [call site] 00063
8 json_object_object_delete [function] [call site] 00075
9 lh_table_free [function] [call site] 00076
9 JC_OBJECT [function] [call site] 00080
9 json_object_generic_delete [function] [call site] 00081
8 json_object_array_delete [function] [call site] 00086
9 array_list_free [function] [call site] 00087
9 json_object_generic_delete [function] [call site] 00092
8 json_object_string_delete [function] [call site] 00093
9 JC_STRING [function] [call site] 00094
9 JC_STRING [function] [call site] 00096
9 json_object_generic_delete [function] [call site] 00097
8 json_object_generic_delete [function] [call site] 00098
3 json_tokener_parse_ex [function] [call site] 00100
4 uselocale [function] [call site] 00101
4 duplocale [function] [call site] 00103
4 newlocale [function] [call site] 00104
4 freelocale [function] [call site] 00105
4 freelocale [function] [call site] 00106
4 uselocale [function] [call site] 00107
4 setlocale [function] [call site] 00108
4 setlocale [function] [call site] 00110
4 PEEK_CHAR [function] [call site] 00111
4 is_ws_char [function] [call site] 00112
4 ADVANCE_CHAR [function] [call site] 00113
4 PEEK_CHAR [function] [call site] 00114
4 printbuf_reset [function] [call site] 00115
4 printbuf_memappend_checked [function] [call site] 00116
4 json_object_new_object [function] [call site] 00117
5 JSON_OBJECT_NEW [function] [call site] 00118
5 json_object_generic_delete [function] [call site] 00125
4 json_object_new_array [function] [call site] 00126
5 json_object_new_array_ext [function] [call site] 00127
4 printbuf_reset [function] [call site] 00134
4 printbuf_reset [function] [call site] 00135
4 printbuf_reset [function] [call site] 00136
4 printbuf_reset [function] [call site] 00137
4 printbuf_reset [function] [call site] 00138
4 json_object_get [function] [call site] 00139
5 __sync_add_and_fetch [function] [call site] 00141
4 json_tokener_reset_level [function] [call site] 00142
4 ADVANCE_CHAR [function] [call site] 00143
4 PEEK_CHAR [function] [call site] 00144
4 printbuf_length [function] [call site] 00145
4 json_object_new_double [function] [call site] 00146
5 JSON_OBJECT_NEW [function] [call site] 00147
4 printbuf_memappend_checked [function] [call site] 00148
4 strncasecmp [function] [call site] 00157
4 json_object_new_double [function] [call site] 00159
4 printbuf_memappend_checked [function] [call site] 00160
4 ADVANCE_CHAR [function] [call site] 00161
4 PEEK_CHAR [function] [call site] 00162
4 printbuf_memappend_checked [function] [call site] 00163
4 printbuf_memappend_checked [function] [call site] 00164
4 ADVANCE_CHAR [function] [call site] 00165
4 PEEK_CHAR [function] [call site] 00166
4 printbuf_memappend_checked [function] [call site] 00167
4 printbuf_memappend_checked [function] [call site] 00168
4 printbuf_memappend_checked [function] [call site] 00170
4 printbuf_memappend_checked [function] [call site] 00172
4 json_object_new_string_len [function] [call site] 00173
5 _json_object_new_string [function] [call site] 00174
4 printbuf_memappend_checked [function] [call site] 00178
4 ADVANCE_CHAR [function] [call site] 00179
4 PEEK_CHAR [function] [call site] 00180
4 printbuf_memappend_checked [function] [call site] 00181
4 printbuf_memappend_checked [function] [call site] 00182
4 printbuf_memappend_checked [function] [call site] 00183
4 printbuf_memappend_checked [function] [call site] 00184
4 printbuf_memappend_checked [function] [call site] 00185
4 printbuf_memappend_checked [function] [call site] 00186
4 printbuf_memappend_checked [function] [call site] 00187
4 is_hex_char [function] [call site] 00188
4 jt_hexdigit [function] [call site] 00189
4 ADVANCE_CHAR [function] [call site] 00190
4 PEEK_CHAR [function] [call site] 00191
4 IS_LOW_SURROGATE [function] [call site] 00192
4 DECODE_SURROGATE_PAIR [function] [call site] 00193
4 printbuf_memappend_checked [function] [call site] 00194
4 printbuf_memappend_checked [function] [call site] 00195
4 printbuf_memappend_checked [function] [call site] 00196
4 IS_HIGH_SURROGATE [function] [call site] 00197
4 IS_LOW_SURROGATE [function] [call site] 00198
4 printbuf_memappend_checked [function] [call site] 00199
4 printbuf_memappend_checked [function] [call site] 00200
4 printbuf_memappend_checked [function] [call site] 00201
4 printbuf_memappend_checked [function] [call site] 00202
4 printbuf_memappend_checked [function] [call site] 00203
4 printbuf_memappend_checked [function] [call site] 00204
4 printbuf_memappend_checked [function] [call site] 00205
4 strncasecmp [function] [call site] 00208
4 json_object_new_boolean [function] [call site] 00210
5 JSON_OBJECT_NEW [function] [call site] 00211
4 strncasecmp [function] [call site] 00212
4 json_object_new_boolean [function] [call site] 00214
4 printbuf_length [function] [call site] 00215
4 printbuf_length [function] [call site] 00218
4 ADVANCE_CHAR [function] [call site] 00219
4 PEEK_CHAR [function] [call site] 00220
4 printbuf_memappend_checked [function] [call site] 00221
4 is_ws_char [function] [call site] 00222
4 printbuf_memappend_checked [function] [call site] 00223
4 printbuf_length [function] [call site] 00224
4 printbuf_length [function] [call site] 00225
4 printbuf_length [function] [call site] 00226
4 printbuf_length [function] [call site] 00227
4 json_parse_int64 [function] [call site] 00228
4 json_object_new_int64 [function] [call site] 00230
5 JSON_OBJECT_NEW [function] [call site] 00231
4 json_parse_uint64 [function] [call site] 00232
4 json_object_new_int64 [function] [call site] 00234
4 json_object_new_uint64 [function] [call site] 00235
5 JSON_OBJECT_NEW [function] [call site] 00236
4 json_tokener_parse_double [function] [call site] 00237
4 printbuf_length [function] [call site] 00239
4 json_object_new_double_s [function] [call site] 00240
5 json_object_new_double [function] [call site] 00241
5 json_object_generic_delete [function] [call site] 00243
5 json_object_set_serializer [function] [call site] 00244
6 json_object_set_userdata [function] [call site] 00245
7 _event_user_delete [function] [call site] 00247
8 fr_strerror_printf [function] [call site] 00251
8 fr_syserror [function] [call site] 00252
4 json_object_array_shrink [function] [call site] 00253
5 array_list_shrink [function] [call site] 00257
6 array_list_expand_internal [function] [call site] 00258
4 json_tokener_reset_level [function] [call site] 00262
4 json_object_array_add [function] [call site] 00263
5 json_object_get_type [function] [call site] 00265
5 array_list_add [function] [call site] 00266
6 array_list_expand_internal [function] [call site] 00267
4 json_object_array_shrink [function] [call site] 00269
4 printbuf_reset [function] [call site] 00270
4 printbuf_memappend_checked [function] [call site] 00271
4 printbuf_memappend_checked [function] [call site] 00273
4 ADVANCE_CHAR [function] [call site] 00274
4 PEEK_CHAR [function] [call site] 00275
4 printbuf_memappend_checked [function] [call site] 00276
4 json_tokener_reset_level [function] [call site] 00277
4 json_object_object_add [function] [call site] 00278
5 json_object_object_add_ex [function] [call site] 00279
6 json_object_get_type [function] [call site] 00281
6 lh_get_hash [function] [call site] 00282
7 struct [call site] 00283
6 JC_OBJECT [function] [call site] 00284
6 lh_table_lookup_entry_w_hash [function] [call site] 00285
7 struct [call site] 00286
6 JC_OBJECT [function] [call site] 00287
6 lh_table_insert_w_hash [function] [call site] 00289
7 lh_table_resize [function] [call site] 00290
8 lh_table_new [function] [call site] 00291
8 lh_get_hash [function] [call site] 00292
8 lh_table_insert_w_hash [function] [call site] 00293
8 lh_table_free [function] [call site] 00294
6 JC_OBJECT [function] [call site] 00297
6 lh_entry_v [function] [call site] 00298
7 _LH_UNCONST [function] [call site] 00299
6 json_object_put [function] [call site] 00300
6 lh_entry_set_val [function] [call site] 00301
4 ADVANCE_CHAR [function] [call site] 00303
4 uselocale [function] [call site] 00304
4 freelocale [function] [call site] 00305
4 setlocale [function] [call site] 00306
4 json_object_get [function] [call site] 00308
4 json_tokener_reset_level [function] [call site] 00309
3 json_tokener_get_parse_end [function] [call site] 00311
3 json_object_put [function] [call site] 00314
3 json_tokener_free [function] [call site] 00315
4 json_tokener_reset [function] [call site] 00316
4 printbuf_free [function] [call site] 00317
1 json_object_put [function] [call site] 00320
1 talloc_strndup [function] [call site] 00321
1 fr_jpath_parse [function] [call site] 00322
2 fr_strerror_const [function] [call site] 00323
2 fr_strerror_printf [function] [call site] 00327
2 TALLOC_FREE [function] [call site] 00328
2 fr_strerror_printf [function] [call site] 00329
2 fr_strerror_const [function] [call site] 00330
2 jpath_field_parse [function] [call site] 00331
3 fr_strerror_const [function] [call site] 00332
3 fr_utf8_char [function] [call site] 00333
3 fr_strerror_const [function] [call site] 00334
3 fr_strerror_const [function] [call site] 00337
3 talloc_bstrndup [function] [call site] 00338
2 fr_assert [function] [call site] 00342
2 jpath_selector_parse [function] [call site] 00343
3 fr_strerror_const [function] [call site] 00344
3 jpath_filter_expr_parse [function] [call site] 00345
4 fr_strerror_const [function] [call site] 00346
3 jpath_expr_parse [function] [call site] 00347
4 fr_strerror_const [function] [call site] 00348
3 jpath_array_parse [function] [call site] 00349
4 fr_strerror_const [function] [call site] 00350
4 fr_strerror_const [function] [call site] 00351
4 fr_strerror_const [function] [call site] 00352
4 fr_strerror_const [function] [call site] 00355
4 fr_strerror_const [function] [call site] 00358
4 fr_strerror_const [function] [call site] 00359
3 fr_assert [function] [call site] 00360
3 fr_strerror_printf [function] [call site] 00361
3 talloc_zero [function] [call site] 00362
3 fr_strerror_const [function] [call site] 00363
2 fr_assert [function] [call site] 00364
2 fr_strerror_const [function] [call site] 00365
1 talloc_strlen [function] [call site] 00366
2 talloc_array_length [function] [call site] 00367
1 talloc_free [function] [call site] 00368