Fuzz introspector: FuzzJson
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 0 None 18 529 json_read_array call site: 00035 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:758
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779
0 0 None 18 529 json_read_array call site: 00037 /src/gpsd/gpsd-3.25.1~dev/libgps/json.c:779

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 calloc [call site] 00001
1 libgps_json_unpack [function] [call site] 00002
2 strstr [call site] 00003
2 str_starts_with [function] [call site] 00004
3 strlen [call site] 00005
2 json_tpv_read [function] [call site] 00006
3 json_read_object [function] [call site] 00007
4 json_trace [function] [call site] 00008
5 strlcpy [function] [call site] 00009
6 strlen [call site] 00010
5 str_vappendf [function] [call site] 00011
6 strlen [call site] 00012
5 fputs [call site] 00013
4 json_internal_read_object [function] [call site] 00014
5 json_target_address [function] [call site] 00015
6 json_trace [function] [call site] 00016
5 json_trace [function] [call site] 00017
5 json_trace [function] [call site] 00018
5 __ctype_b_loc [call site] 00019
5 __ctype_b_loc [call site] 00020
5 json_trace [function] [call site] 00021
5 __ctype_b_loc [call site] 00022
5 json_trace [function] [call site] 00023
5 json_trace [function] [call site] 00024
5 json_trace [function] [call site] 00025
5 strcmp [call site] 00026
5 strncmp [call site] 00027
5 json_trace [function] [call site] 00028
5 strnlen [call site] 00029
5 json_trace [function] [call site] 00030
5 __ctype_b_loc [call site] 00031
5 json_trace [function] [call site] 00032
5 json_read_array [function] [call site] 00033
6 json_trace [function] [call site] 00034
6 __ctype_b_loc [call site] 00035
6 json_trace [function] [call site] 00036
6 json_trace [function] [call site] 00037
6 json_trace [function] [call site] 00038
6 json_trace [function] [call site] 00039
6 json_internal_read_object [function] [call site] 00040
7 json_trace [function] [call site] 00041
7 json_trace [function] [call site] 00042
7 json_trace [function] [call site] 00043
7 json_trace [function] [call site] 00044
7 __isoc99_sscanf [call site] 00045
7 __ctype_b_loc [call site] 00046
7 json_trace [function] [call site] 00047
7 json_trace [function] [call site] 00048
7 __ctype_b_loc [call site] 00049
7 json_trace [function] [call site] 00050
7 strcmp [call site] 00051
7 strcmp [call site] 00052
7 strchr [call site] 00053
7 strcmp [call site] 00054
7 json_trace [function] [call site] 00055
7 json_trace [function] [call site] 00056
7 strcmp [call site] 00057
7 json_trace [function] [call site] 00058
7 snprintf [call site] 00059
7 json_target_address [function] [call site] 00060
7 atoi [function] [call site] 00061
8 strtol [call site] 00062
7 atoll [function] [call site] 00067
8 strtoll [call site] 00068
7 iso8601_to_timespec [function] [call site] 00071
8 strptime [call site] 00072
8 strtod [call site] 00073
7 safe_atof [function] [call site] 00075
7 modf [call site] 00076
7 safe_atof [function] [call site] 00077
7 strcmp [call site] 00079
7 strnlen [call site] 00080
7 strcmp [call site] 00081
7 json_trace [function] [call site] 00082
7 json_trace [function] [call site] 00083
7 json_trace [function] [call site] 00084
7 json_trace [function] [call site] 00085
6 strtol [call site] 00086
6 strtoul [call site] 00087
6 strtol [call site] 00088
6 strtoul [call site] 00089
6 strtol [call site] 00090
6 strtoul [call site] 00091
6 strtol [call site] 00092
6 strtoul [call site] 00093
6 iso8601_to_timespec [function] [call site] 00094
6 strtod [call site] 00095
6 str_starts_with [function] [call site] 00096
6 str_starts_with [function] [call site] 00097
6 json_trace [function] [call site] 00098
6 json_trace [function] [call site] 00099
6 json_trace [function] [call site] 00100
6 json_trace [function] [call site] 00101
6 json_trace [function] [call site] 00102
2 str_starts_with [function] [call site] 00103
2 json_noise_read [function] [call site] 00104
3 json_read_object [function] [call site] 00105
2 str_starts_with [function] [call site] 00106
2 json_sky_read [function] [call site] 00107
3 json_read_object [function] [call site] 00108
2 str_starts_with [function] [call site] 00109
2 json_att_read [function] [call site] 00110
3 json_read_object [function] [call site] 00111
2 str_starts_with [function] [call site] 00112
2 json_imu_read [function] [call site] 00113
3 json_read_object [function] [call site] 00114
2 str_starts_with [function] [call site] 00115
2 json_devicelist_read [function] [call site] 00116
3 json_read_object [function] [call site] 00117
3 clock_gettime [call site] 00118
2 str_starts_with [function] [call site] 00119
2 json_device_read [function] [call site] 00120
3 json_read_object [function] [call site] 00121
3 modf [call site] 00122
3 modf [call site] 00123
2 str_starts_with [function] [call site] 00124
2 json_watch_read [function] [call site] 00125
3 json_read_object [function] [call site] 00126
2 str_starts_with [function] [call site] 00127
2 json_version_read [function] [call site] 00128
3 json_read_object [function] [call site] 00129
2 str_starts_with [function] [call site] 00130
2 json_rtcm2_read [function] [call site] 00131
3 strstr [call site] 00132
3 strstr [call site] 00133
3 json_read_object [function] [call site] 00134
3 strstr [call site] 00135
3 json_read_object [function] [call site] 00136
3 strstr [call site] 00137
3 json_read_object [function] [call site] 00138
3 strstr [call site] 00139
3 json_read_object [function] [call site] 00140
3 strstr [call site] 00141
3 json_read_object [function] [call site] 00142
3 strstr [call site] 00143
3 json_read_object [function] [call site] 00144
3 strstr [call site] 00145
3 json_read_object [function] [call site] 00146
3 strstr [call site] 00147
3 json_read_object [function] [call site] 00148
3 strstr [call site] 00149
3 json_read_object [function] [call site] 00150
3 strstr [call site] 00151
3 json_read_object [function] [call site] 00152
3 json_read_object [function] [call site] 00153
3 __isoc99_sscanf [call site] 00154
2 str_starts_with [function] [call site] 00155
2 json_rtcm3_read [function] [call site] 00156
3 strstr [call site] 00157
3 json_read_object [function] [call site] 00158
3 strstr [call site] 00159
3 json_read_object [function] [call site] 00160
3 strstr [call site] 00161
3 strstr [call site] 00162
3 json_read_object [function] [call site] 00163
3 strstr [call site] 00164
3 json_read_object [function] [call site] 00165
3 strstr [call site] 00166
3 json_read_object [function] [call site] 00167
3 strstr [call site] 00168
3 json_read_object [function] [call site] 00169
3 strstr [call site] 00170
3 json_read_object [function] [call site] 00171
3 json_read_object [function] [call site] 00172
3 __isoc99_sscanf [call site] 00173
2 str_starts_with [function] [call site] 00174
2 json_ais_read [function] [call site] 00175
3 strstr [call site] 00176
3 strstr [call site] 00177
3 json_read_object [function] [call site] 00178
3 strstr [call site] 00179
3 strstr [call site] 00180
3 json_read_object [function] [call site] 00181
3 __isoc99_sscanf [call site] 00182
3 json_read_object [function] [call site] 00183
3 __isoc99_sscanf [call site] 00184
3 strstr [call site] 00185
3 strstr [call site] 00186
3 strstr [call site] 00187
3 json_read_object [function] [call site] 00188
3 __isoc99_sscanf [call site] 00189
3 __isoc99_sscanf [call site] 00190
3 strstr [call site] 00191
3 json_read_object [function] [call site] 00192
3 strstr [call site] 00193
3 json_read_object [function] [call site] 00194
3 strstr [call site] 00195
3 json_read_object [function] [call site] 00196
3 __isoc99_sscanf [call site] 00197
3 strstr [call site] 00198
3 json_read_object [function] [call site] 00199
3 __isoc99_sscanf [call site] 00200
3 strstr [call site] 00201
3 json_read_object [function] [call site] 00202
3 strstr [call site] 00203
3 json_read_object [function] [call site] 00204
3 __isoc99_sscanf [call site] 00205
3 strstr [call site] 00206
3 json_read_object [function] [call site] 00207
3 strstr [call site] 00208
3 strstr [call site] 00209
3 json_read_object [function] [call site] 00210
3 strstr [call site] 00211
3 json_read_object [function] [call site] 00212
3 strstr [call site] 00213
3 strstr [call site] 00214
3 json_read_object [function] [call site] 00215
3 __isoc99_sscanf [call site] 00216
3 strstr [call site] 00217
3 json_read_object [function] [call site] 00218
3 __isoc99_sscanf [call site] 00219
3 strstr [call site] 00220
3 json_read_object [function] [call site] 00221
3 lenhex_unpack [function] [call site] 00222
3 strstr [call site] 00227
3 strstr [call site] 00228
3 json_read_object [function] [call site] 00229
3 strstr [call site] 00230
3 strstr [call site] 00231
3 strstr [call site] 00232
3 json_read_object [function] [call site] 00233
3 __isoc99_sscanf [call site] 00234
3 strstr [call site] 00235
3 json_read_object [function] [call site] 00236
3 __isoc99_sscanf [call site] 00237
3 __isoc99_sscanf [call site] 00238
3 strstr [call site] 00239
3 json_read_object [function] [call site] 00240
3 strstr [call site] 00241
3 json_read_object [function] [call site] 00242
3 strstr [call site] 00243
3 json_read_object [function] [call site] 00244
3 strstr [call site] 00245
3 json_read_object [function] [call site] 00246
3 strstr [call site] 00247
3 json_read_object [function] [call site] 00248
3 __isoc99_sscanf [call site] 00249
3 strstr [call site] 00250
3 json_read_object [function] [call site] 00251
3 strstr [call site] 00252
3 json_read_object [function] [call site] 00253
3 __isoc99_sscanf [call site] 00254
3 json_read_object [function] [call site] 00255
3 strstr [call site] 00256
3 json_read_object [function] [call site] 00257
3 __isoc99_sscanf [call site] 00258
3 strstr [call site] 00259
3 strstr [call site] 00260
3 strstr [call site] 00261
3 strstr [call site] 00262
3 json_read_object [function] [call site] 00263
3 json_read_object [function] [call site] 00264
3 json_read_object [function] [call site] 00265
3 lenhex_unpack [function] [call site] 00266
3 strstr [call site] 00267
3 json_read_object [function] [call site] 00268
3 strstr [call site] 00269
3 json_read_object [function] [call site] 00270
3 strstr [call site] 00271
3 json_read_object [function] [call site] 00272
3 strstr [call site] 00273
3 json_read_object [function] [call site] 00274
3 strstr [call site] 00275
3 strstr [call site] 00276
3 json_read_object [function] [call site] 00277
3 strstr [call site] 00278
3 lenhex_unpack [function] [call site] 00279
3 strstr [call site] 00280
3 json_read_object [function] [call site] 00281
3 strstr [call site] 00282
3 json_read_object [function] [call site] 00283
3 strstr [call site] 00284
3 json_read_object [function] [call site] 00285
3 strstr [call site] 00286
3 json_read_object [function] [call site] 00287
3 strstr [call site] 00288
3 json_read_object [function] [call site] 00289
3 strstr [call site] 00290
3 json_read_object [function] [call site] 00291
3 strstr [call site] 00292
3 json_read_object [function] [call site] 00293
3 strstr [call site] 00294
3 json_read_object [function] [call site] 00295
3 lenhex_unpack [function] [call site] 00296
3 strstr [call site] 00297
3 json_read_object [function] [call site] 00298
3 lenhex_unpack [function] [call site] 00299
3 strstr [call site] 00300
3 json_read_object [function] [call site] 00301
2 str_starts_with [function] [call site] 00302
2 json_error_read [function] [call site] 00303
3 json_read_object [function] [call site] 00304
2 str_starts_with [function] [call site] 00305
2 json_toff_read [function] [call site] 00306
3 json_read_object [function] [call site] 00307
2 str_starts_with [function] [call site] 00308
2 json_pps_read [function] [call site] 00309
3 json_read_object [function] [call site] 00310
2 str_starts_with [function] [call site] 00311
2 json_oscillator_read [function] [call site] 00312
3 json_read_object [function] [call site] 00313
2 str_starts_with [function] [call site] 00314
2 json_raw_read [function] [call site] 00315
1 json_toff_read [function] [call site] 00316