Fuzz introspector: ghostpdl/expat/fuzz/xml_parsebuffer_fuzzer.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
427 0 EP call site: {node_id} XML_ExternalEntityParserCreate

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 XML_ParserCreate [function] [call site] 00001
2 XML_ParserCreate_MM [function] [call site] 00002
3 parserCreate [function] [call site] 00003
4 XML_Memory_Handling_Suite*::malloc_fcn [function] [call site] 00004
4 dtdCreate [function] [call site] 00015
5 XML_Memory_Handling_Suite*::malloc_fcn [function] [call site] 00016
5 hashTableInit [function] [call site] 00019
5 hashTableInit [function] [call site] 00020
5 hashTableInit [function] [call site] 00021
5 hashTableInit [function] [call site] 00022
5 hashTableInit [function] [call site] 00023
4 parserInit [function] [call site] 00030
5 XmlPrologStateInit [function] [call site] 00031
5 copyString [function] [call site] 00032
6 XML_Memory_Handling_Suite*::malloc_fcn [function] [call site] 00033
5 XmlInitEncoding [function] [call site] 00035
5 getDebugLevel [function] [call site] 00038
5 getDebugLevel [function] [call site] 00041
4 XML_ParserFree [function] [call site] 00042
5 destroyBindings [function] [call site] 00049
5 destroyBindings [function] [call site] 00050
5 poolDestroy [function] [call site] 00051
6 STRING_POOL*::mem::free_fcn [function] [call site] 00052
6 STRING_POOL*::mem::free_fcn [function] [call site] 00053
5 poolDestroy [function] [call site] 00054
5 dtdDestroy [function] [call site] 00056
6 hashTableIterInit [function] [call site] 00057
6 hashTableIterNext [function] [call site] 00058
6 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00059
6 hashTableDestroy [function] [call site] 00060
7 HASH_TABLE*::mem::free_fcn [function] [call site] 00061
7 HASH_TABLE*::mem::free_fcn [function] [call site] 00062
6 hashTableDestroy [function] [call site] 00063
6 hashTableDestroy [function] [call site] 00064
6 hashTableDestroy [function] [call site] 00065
6 hashTableDestroy [function] [call site] 00066
6 poolDestroy [function] [call site] 00067
6 poolDestroy [function] [call site] 00068
6 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00069
6 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00070
6 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00071
5 XML_Parser::m_unknownEncodingRelease [function] [call site] 00079
4 XmlGetInternalEncodingNS [function] [call site] 00081
4 XmlGetInternalEncoding [function] [call site] 00082
1 ParseOneInput [function] [call site] 00085
2 sip_keyof [function] [call site] 00086
2 XML_SetHashSalt [function] [call site] 00087
3 XML_SetHashSalt [function] [call site] 00088
2 XML_SetUserData [function] [call site] 00109
2 XML_SetElementHandler [function] [call site] 00110
2 XML_SetCharacterDataHandler [function] [call site] 00111
2 XML_Parse [function] [call site] 00112
3 startParsing [function] [call site] 00113
4 generate_hash_secret_salt [function] [call site] 00114
5 arc4random_buf [function] [call site] 00115
5 ENTROPY_DEBUG [function] [call site] 00116
6 getDebugLevel [function] [call site] 00117
5 writeRandomBytes_arc4random [function] [call site] 00119
5 ENTROPY_DEBUG [function] [call site] 00120
5 writeRandomBytes_rand_s [function] [call site] 00121
5 ENTROPY_DEBUG [function] [call site] 00123
5 writeRandomBytes_getrandom_nonblock [function] [call site] 00124
5 ENTROPY_DEBUG [function] [call site] 00127
5 writeRandomBytes_dev_urandom [function] [call site] 00128
5 ENTROPY_DEBUG [function] [call site] 00132
5 gather_time_entropy [function] [call site] 00133
6 GetSystemTimeAsFileTime [function] [call site] 00134
6 gettimeofday [function] [call site] 00135
5 ENTROPY_DEBUG [function] [call site] 00138
5 ENTROPY_DEBUG [function] [call site] 00139
4 setContext [function] [call site] 00140
5 poolAppendChar [function] [call site] 00143
5 lookup [function] [call site] 00145
6 toFixedDomain [function] [call site] 00146
6 toFixedDomain [function] [call site] 00147
6 toFixedDomain [function] [call site] 00148
6 toFixedDomain [function] [call site] 00149
6 FIXED_TO_INT [function] [call site] 00150
6 FIXED_TO_INT [function] [call site] 00151
6 FIXED_TO_INT [function] [call site] 00152
6 FIXED_TO_INT [function] [call site] 00153
6 FIXED_REST_TO_INT [function] [call site] 00154
6 FIXED_REST_TO_INT [function] [call site] 00155
6 FIXED_REST_TO_INT [function] [call site] 00156
6 FIXED_REST_TO_INT [function] [call site] 00157
6 ROUND_FIXED_TO_INT [function] [call site] 00189
6 toFixedDomain [function] [call site] 00190
6 ROUND_FIXED_TO_INT [function] [call site] 00222
6 toFixedDomain [function] [call site] 00223
6 LinearInterp [function] [call site] 00224
6 LinearInterp [function] [call site] 00225
6 LinearInterp [function] [call site] 00226
5 poolStart [function] [call site] 00227
5 poolDiscard [function] [call site] 00229
5 poolLength [function] [call site] 00231
5 poolAppendChar [function] [call site] 00232
5 poolStart [function] [call site] 00235
5 poolStart [function] [call site] 00236
5 poolCopyString [function] [call site] 00237
6 poolAppendChar [function] [call site] 00238
6 poolFinish [function] [call site] 00239
5 poolDiscard [function] [call site] 00240
5 poolAppendChar [function] [call site] 00242
5 poolAppendChar [function] [call site] 00243
5 poolStart [function] [call site] 00262
5 poolDiscard [function] [call site] 00263
5 poolAppendChar [function] [call site] 00265
3 callProcessor [function] [call site] 00266
4 EXPAT_MIN [function] [call site] 00267
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00268
4 XML_Parser::m_processor [function] [call site] 00269
3 XmlUpdatePosition [function] [call site] 00270
3 XML_GetBuffer [function] [call site] 00272
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00273
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00274
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00275
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00276
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00279
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00280
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00283
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00285
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00287
4 EXPAT_SAFE_PTR_DIFF [function] [call site] 00289
3 XML_ParseBuffer [function] [call site] 00292
4 startParsing [function] [call site] 00293
4 callProcessor [function] [call site] 00294
4 XmlUpdatePosition [function] [call site] 00295
2 XML_Parse [function] [call site] 00296
2 XML_ErrorString [function] [call site] 00297
2 XML_GetErrorCode [function] [call site] 00342
2 XML_GetCurrentLineNumber [function] [call site] 00343
3 XmlUpdatePosition [function] [call site] 00344
2 XML_ParserReset [function] [call site] 00345
3 moveToFreeBindingList [function] [call site] 00346
3 moveToFreeBindingList [function] [call site] 00347
3 XML_Parser::m_unknownEncodingRelease [function] [call site] 00349
3 poolClear [function] [call site] 00350
3 poolClear [function] [call site] 00351
3 parserInit [function] [call site] 00353
3 dtdReset [function] [call site] 00354
4 hashTableIterInit [function] [call site] 00355
4 hashTableIterNext [function] [call site] 00356
4 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00357
4 hashTableClear [function] [call site] 00358
5 HASH_TABLE*::mem::free_fcn [function] [call site] 00359
4 hashTableClear [function] [call site] 00360
4 hashTableClear [function] [call site] 00361
4 hashTableClear [function] [call site] 00362
4 hashTableClear [function] [call site] 00363
4 poolClear [function] [call site] 00364
4 poolClear [function] [call site] 00365
4 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00366
4 XML_Memory_Handling_Suite*::free_fcn [function] [call site] 00367
1 XML_ParserCreateNS [function] [call site] 00368
2 XML_ParserCreate_MM [function] [call site] 00369
1 ParseOneInput [function] [call site] 00371
1 XML_ParserFree [function] [call site] 00372
1 XML_ExternalEntityParserCreate [function] [call site] 00373
2 parserCreate [function] [call site] 00374
2 parserCreate [function] [call site] 00375
2 dtdCopy [function] [call site] 00376
3 hashTableIterInit [function] [call site] 00377
3 hashTableIterNext [function] [call site] 00378
3 poolCopyString [function] [call site] 00379
3 hashTableIterInit [function] [call site] 00381
3 hashTableIterNext [function] [call site] 00382
3 poolAppendChar [function] [call site] 00383
3 poolCopyString [function] [call site] 00385
3 hashTableIterInit [function] [call site] 00388
3 hashTableIterNext [function] [call site] 00389
3 poolCopyString [function] [call site] 00390
3 XML_Memory_Handling_Suite*::malloc_fcn [function] [call site] 00392
3 poolCopyString [function] [call site] 00396
3 copyEntityTable [function] [call site] 00397
4 hashTableIterInit [function] [call site] 00398
4 hashTableIterNext [function] [call site] 00399
4 poolCopyString [function] [call site] 00400
4 poolCopyString [function] [call site] 00402
4 poolCopyString [function] [call site] 00403
4 poolCopyString [function] [call site] 00404
4 poolCopyStringN [function] [call site] 00405
5 poolGrow [function] [call site] 00406
6 poolBytesToAllocateFor [function] [call site] 00408
6 STRING_POOL*::mem::realloc_fcn [function] [call site] 00409
6 poolBytesToAllocateFor [function] [call site] 00410
6 STRING_POOL*::mem::malloc_fcn [function] [call site] 00411
5 poolAppendChar [function] [call site] 00413
5 poolFinish [function] [call site] 00414
4 poolCopyString [function] [call site] 00415
3 copyEntityTable [function] [call site] 00416
2 setContext [function] [call site] 00417
2 XML_ParserFree [function] [call site] 00418
2 XmlPrologStateInitExternalEntity [function] [call site] 00419
1 ParseOneInput [function] [call site] 00421
1 XML_ParserFree [function] [call site] 00422
1 XML_ExternalEntityParserCreate [function] [call site] 00423
1 ParseOneInput [function] [call site] 00425
1 XML_ParserFree [function] [call site] 00426
1 XML_ParserFree [function] [call site] 00427