Fuzz introspector: fuzz-credential-from-url-gently
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
173 116 xrealloc call site: 00116 url_decode_internal
55 22 strbuf_add call site: 00022 die
22 92 git_env_ulong call site: 00092 die
3 12 credential_from_url_1 call site: 00012 _
3 78 strbuf_add call site: 00078 BUG_fl
3 304 xmallocz call site: 00304 die
2 86 strbuf_grow call site: 00086 xmalloc
2 315 check_url_component call site: 00315 _
1 84 strbuf_grow call site: 00084 die
1 294 url_decode_internal call site: 00294 strbuf_addch
1 296 url_decode_internal call site: 00296 strbuf_detach

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 credential_init [function] [call site] 00001
1 credential_from_url_gently [function] [call site] 00002
2 credential_from_url_1 [function] [call site] 00003
3 credential_clear [function] [call site] 00004
4 credential_clear_secrets [function] [call site] 00005
4 string_list_clear [function] [call site] 00006
4 strvec_clear [function] [call site] 00007
5 strvec_init [function] [call site] 00008
4 strvec_clear [function] [call site] 00009
4 strvec_clear [function] [call site] 00010
4 credential_init [function] [call site] 00011
3 strstr [call site] 00012
3 _ [function] [call site] 00013
4 gettext [call site] 00014
3 warning [function] [call site] 00015
3 strchr [call site] 00016
3 strchr [call site] 00017
3 strcspn [call site] 00018
3 url_decode_mem [function] [call site] 00019
4 memchr [call site] 00020
4 strbuf_add [function] [call site] 00021
5 strbuf_grow [function] [call site] 00022
6 die [function] [call site] 00023
7 fputs [call site] 00024
7 common_exit [function] [call site] 00025
8 check_bug_if_BUG [function] [call site] 00026
9 BUG_fl [function] [call site] 00027
10 BUG_vfl [function] [call site] 00028
11 BUG_vfl_common [function] [call site] 00029
12 snprintf [call site] 00030
12 vreportf [function] [call site] 00031
13 vfreportf [function] [call site] 00032
14 strlen [call site] 00033
14 fprintf [call site] 00034
14 abort [call site] 00035
14 vsnprintf [call site] 00036
14 _ [function] [call site] 00037
14 fprintf [call site] 00038
14 fflush [call site] 00039
14 fileno [call site] 00040
14 write_in_full [function] [call site] 00041
15 xwrite [function] [call site] 00042
16 write [call site] 00043
16 __errno_location [call site] 00044
16 __errno_location [call site] 00045
16 handle_nonblock [function] [call site] 00046
17 poll [call site] 00047
15 __errno_location [call site] 00048
11 abort [call site] 00049
11 trace2_cmd_error_va_fl [function] [call site] 00050
12 tr2_dst_trace_want [function] [call site] 00051
13 tr2_dst_get_trace_fd [function] [call site] 00052
14 tr2_sysenv_get [function] [call site] 00053
15 BUG_fl [function] [call site] 00054
15 getenv [call site] 00055
15 xstrdup [function] [call site] 00056
16 strdup [call site] 00057
16 die [function] [call site] 00058
17 exit [call site] 00059
14 strcmp [call site] 00060
14 strcasecmp [call site] 00061
14 strcmp [call site] 00062
14 strcasecmp [call site] 00063
14 strlen [call site] 00064
14 atoi [call site] 00065
14 is_absolute_path [function] [call site] 00066
15 git_is_dir_sep [function] [call site] 00067
15 git_has_dos_drive_prefix [function] [call site] 00068
14 is_directory [function] [call site] 00069
15 stat64 [call site] 00070
14 tr2_dst_try_auto_path [function] [call site] 00071
15 tr2_sid_get [function] [call site] 00072
16 tr2_sid_compute [function] [call site] 00073
17 getenv [call site] 00074
17 strbuf_addstr [function] [call site] 00075
18 strlen [call site] 00076
18 strbuf_add [function] [call site] 00077
19 strbuf_setlen [function] [call site] 00078
20 BUG_fl [function] [call site] 00079
20 __assert_fail [call site] 00080
17 strbuf_addch [function] [call site] 00081
18 strbuf_avail [function] [call site] 00082
18 strbuf_grow [function] [call site] 00083
19 st_mult [function] [call site] 00084
20 die [function] [call site] 00085
19 xrealloc [function] [call site] 00086
20 xmalloc [function] [call site] 00087
21 do_xmalloc [function] [call site] 00088
22 memory_limit_check [function] [call site] 00089
23 git_env_ulong [function] [call site] 00090
24 getenv [call site] 00091
24 git_parse_ulong [function] [call site] 00092
25 git_parse_unsigned [function] [call site] 00093
26 strchr [call site] 00094
26 __errno_location [call site] 00095
26 __errno_location [call site] 00096
26 strtoumax [call site] 00097
26 __errno_location [call site] 00098
26 __errno_location [call site] 00099
26 get_unit_factor [function] [call site] 00100
27 strcasecmp [call site] 00101
27 strcasecmp [call site] 00102
27 strcasecmp [call site] 00103
26 __errno_location [call site] 00104
26 __errno_location [call site] 00105
26 __errno_location [call site] 00106
24 _ [function] [call site] 00107
24 die [function] [call site] 00108
23 error [function] [call site] 00109
23 const_error [function] [call site] 00110
23 die [function] [call site] 00111
22 die [function] [call site] 00112
22 error [function] [call site] 00113
22 const_error [function] [call site] 00114
20 memory_limit_check [function] [call site] 00115
20 realloc [call site] 00116
20 die [function] [call site] 00117
17 tr2_sid_append_my_sid_component [function] [call site] 00118
18 getpid [call site] 00119
18 tr2_tbuf_utc_datetime [function] [call site] 00120
19 gettimeofday [call site] 00121
19 gmtime_r [call site] 00122
19 xsnprintf [function] [call site] 00123
20 vsnprintf [call site] 00124
20 _ [function] [call site] 00125
20 die [function] [call site] 00126
20 BUG_fl [function] [call site] 00127
18 strbuf_addstr [function] [call site] 00128
18 strbuf_addch [function] [call site] 00129
18 xgethostname [function] [call site] 00130
19 gethostname [call site] 00131
18 strbuf_add [function] [call site] 00132
18 strlen [call site] 00133
18 git_hash_update [function] [call site] 00134
18 git_hash_final [function] [call site] 00135
18 hash_to_hex_algop_r [function] [call site] 00136
18 strbuf_addch [function] [call site] 00137
18 strbuf_add [function] [call site] 00138
18 strbuf_addf [function] [call site] 00139
19 strbuf_vaddf [function] [call site] 00140
20 strbuf_avail [function] [call site] 00141
20 strbuf_grow [function] [call site] 00142
20 vsnprintf [call site] 00143
20 _ [function] [call site] 00144
20 die [function] [call site] 00145
20 strbuf_avail [function] [call site] 00146
20 strbuf_grow [function] [call site] 00147
20 vsnprintf [call site] 00148
20 strbuf_avail [function] [call site] 00149
20 BUG_fl [function] [call site] 00150
20 strbuf_setlen [function] [call site] 00151
17 setenv [call site] 00152
15 strrchr [call site] 00153
15 strbuf_addstr [function] [call site] 00154
15 git_is_dir_sep [function] [call site] 00155
15 strbuf_addch [function] [call site] 00156
15 strbuf_addstr [function] [call site] 00157
15 tr2_dst_too_many_files [function] [call site] 00158
16 tr2_sysenv_get [function] [call site] 00159
16 atoi [call site] 00160
16 strbuf_addstr [function] [call site] 00161
16 git_is_dir_sep [function] [call site] 00162
16 strbuf_addbuf [function] [call site] 00163
17 strbuf_grow [function] [call site] 00164
17 strbuf_setlen [function] [call site] 00165
16 strbuf_addstr [function] [call site] 00166
16 stat64 [call site] 00167
16 opendir [call site] 00168
16 readdir64 [call site] 00169
16 closedir [call site] 00170
16 open64 [call site] 00171
16 strbuf_release [function] [call site] 00172
17 strbuf_init [function] [call site] 00173
18 strbuf_grow [function] [call site] 00174
16 strbuf_release [function] [call site] 00175
15 strbuf_setlen [function] [call site] 00176
15 strbuf_addf [function] [call site] 00177
15 open64 [call site] 00178
15 strbuf_release [function] [call site] 00179
15 tr2_dst_want_warning [function] [call site] 00180
16 tr2_sysenv_get [function] [call site] 00181
16 atoi [call site] 00182
15 tr2_sysenv_display_name [function] [call site] 00183
16 BUG_fl [function] [call site] 00184
15 warning [function] [call site] 00185
15 tr2_dst_want_warning [function] [call site] 00186
15 tr2_sysenv_display_name [function] [call site] 00187
15 __errno_location [call site] 00188
15 strerror [call site] 00189
15 warning [function] [call site] 00190
15 tr2_dst_trace_disable [function] [call site] 00191
16 close [call site] 00192
15 strbuf_release [function] [call site] 00193
15 strbuf_release [function] [call site] 00194
14 tr2_dst_try_path [function] [call site] 00195
15 open64 [call site] 00196
15 tr2_dst_want_warning [function] [call site] 00197
15 tr2_sysenv_display_name [function] [call site] 00198
15 __errno_location [call site] 00199
15 strerror [call site] 00200
15 warning [function] [call site] 00201
15 tr2_dst_trace_disable [function] [call site] 00202
14 starts_with [function] [call site] 00203
14 tr2_dst_try_unix_domain_socket [function] [call site] 00204
15 skip_prefix [function] [call site] 00205
15 skip_prefix [function] [call site] 00206
15 skip_prefix [function] [call site] 00207
15 tr2_dst_want_warning [function] [call site] 00208
15 tr2_sysenv_display_name [function] [call site] 00209
15 warning [function] [call site] 00210
15 tr2_dst_trace_disable [function] [call site] 00211
15 is_absolute_path [function] [call site] 00212
15 strlen [call site] 00213
15 tr2_dst_want_warning [function] [call site] 00214
15 tr2_sysenv_display_name [function] [call site] 00215
15 warning [function] [call site] 00216
15 tr2_dst_trace_disable [function] [call site] 00217
15 tr2_dst_try_uds_connect [function] [call site] 00218
16 socket [call site] 00219
16 gitstrlcpy [function] [call site] 00220
17 strlen [call site] 00221
16 connect [call site] 00222
16 __errno_location [call site] 00223
16 close [call site] 00224
16 __errno_location [call site] 00225
15 __errno_location [call site] 00226
15 tr2_dst_try_uds_connect [function] [call site] 00227
15 tr2_dst_want_warning [function] [call site] 00228
15 tr2_sysenv_display_name [function] [call site] 00229
15 __errno_location [call site] 00230
15 strerror [call site] 00231
15 warning [function] [call site] 00232
15 tr2_dst_trace_disable [function] [call site] 00233
14 tr2_dst_malformed_warning [function] [call site] 00234
15 tr2_sysenv_display_name [function] [call site] 00235
15 warning [function] [call site] 00236
14 tr2_dst_trace_disable [function] [call site] 00237
11 common_exit [function] [call site] 00238
12 trace2_cmd_exit_fl [function] [call site] 00239
13 trace2_collect_process_info [function] [call site] 00240
14 trace2_is_enabled [function] [call site] 00241
14 getppid [call site] 00242
14 push_ancestry_name [function] [call site] 00243
15 stat_parent_pid [function] [call site] 00244
16 strbuf_addf [function] [call site] 00245
16 git_fopen [function] [call site] 00246
17 fopen64 [call site] 00247
17 fopen64 [call site] 00248
17 fileno [call site] 00249
17 fstat64 [call site] 00250
17 fclose [call site] 00251
17 fclose [call site] 00252
17 __errno_location [call site] 00253
16 strbuf_fread [function] [call site] 00254
17 strbuf_grow [function] [call site] 00255
17 fread [call site] 00256
17 strbuf_setlen [function] [call site] 00257
17 strbuf_release [function] [call site] 00258
16 parse_proc_stat [function] [call site] 00259
17 strchr [call site] 00260
17 strrchr [call site] 00261
17 strchr [call site] 00262
17 strtol [call site] 00263
17 strbuf_add [function] [call site] 00264
16 fclose [call site] 00265
16 strbuf_release [function] [call site] 00266
16 strbuf_release [function] [call site] 00267
15 strvec_push [function] [call site] 00268
16 xstrdup [function] [call site] 00269
16 strvec_push_nodup [function] [call site] 00270
17 st_mult [function] [call site] 00271
17 xrealloc [function] [call site] 00272
15 push_ancestry_name [function] [call site] 00273
16 strbuf_release [function] [call site] 00274
14 trace2_cmd_ancestry_fl [function] [call site] 00275
15 tr2_dst_trace_want [function] [call site] 00276
14 strvec_clear [function] [call site] 00277
13 getnanotime [function] [call site] 00278
14 highres_nanos [function] [call site] 00279
15 clock_gettime [call site] 00280
14 gettimeofday_nanos [function] [call site] 00281
15 gettimeofday [call site] 00282
14 gettimeofday_nanos [function] [call site] 00283
14 highres_nanos [function] [call site] 00284
13 tr2tls_absolute_elapsed [function] [call site] 00285
13 tr2_dst_trace_want [function] [call site] 00286
11 exit [call site] 00287
11 abort [call site] 00288
4 url_decode_internal [function] [call site] 00289
5 strchr [call site] 00290
5 hex2chr [function] [call site] 00291
6 hexval [function] [call site] 00292
6 hexval [function] [call site] 00293
5 strbuf_addch [function] [call site] 00294
5 strbuf_addch [function] [call site] 00295
5 strbuf_addch [function] [call site] 00296
5 strbuf_detach [function] [call site] 00297
6 strbuf_grow [function] [call site] 00298
6 strbuf_init [function] [call site] 00299
3 url_decode_mem [function] [call site] 00300
3 url_decode_mem [function] [call site] 00301
3 xmemdupz [function] [call site] 00302
4 xmallocz [function] [call site] 00303
5 do_xmallocz [function] [call site] 00304
6 error [function] [call site] 00305
6 const_error [function] [call site] 00306
6 die [function] [call site] 00307
6 do_xmalloc [function] [call site] 00308
3 url_decode_mem [function] [call site] 00309
3 url_decode [function] [call site] 00310
4 strlen [call site] 00311
4 url_decode_mem [function] [call site] 00312
3 strlen [call site] 00313
3 check_url_component [function] [call site] 00314
4 strchr [call site] 00315
4 _ [function] [call site] 00316
4 warning [function] [call site] 00317
3 check_url_component [function] [call site] 00318
3 check_url_component [function] [call site] 00319
3 check_url_component [function] [call site] 00320
3 check_url_component [function] [call site] 00321
1 credential_clear [function] [call site] 00322