Fuzz introspector: fuzz_h11
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
59 77 h11._connection._body_framing call site: {node_id} h11._connection.Connection._process_event
21 137 h11._connection._keep_alive call site: {node_id} h11._connection.Connection._process_error
15 18 h11._util.validate call site: {node_id} h11._util.validate
9 160 ...fuzz_h11.fuzz_connection call site: {node_id} h11._connection.Connection._process_event
8 7 ...fuzz_h11.fuzz_headers call site: {node_id} h11._util.bytesify
7 69 ...fuzz_h11.fuzz_connection call site: {node_id} h11._connection.Connection.send_with_data_passthrough
6 45 h11._events.Request.__init__ call site: {node_id} h11._util.bytesify
5 34 ...fuzz_h11.fuzz_headers call site: {node_id} h11._headers.get_comma_header
3 53 h11._events.Request.__init__ call site: {node_id} h11._util.validate
3 171 ...fuzz_h11.fuzz_connection call site: {node_id} h11._connection.Connection.send
2 4 ...fuzz_h11.fuzz_headers call site: {node_id} fdp.ConsumeBytes
2 176 ...fuzz_h11.fuzz_connection call site: {node_id} h11._connection.Connection.receive_data

Fuzzer calltree

0 ...fuzz_h11.TestOneInput [function] [call site] 00000
1 ...fuzz_h11.fuzz_headers [function] [call site] 00001
2 atheris.FuzzedDataProvider [function] [call site] 00002
2 fdp.ConsumeBytes [function] [call site] 00003
2 fdp.ConsumeBytes [function] [call site] 00004
2 fdp.ConsumeBytes [function] [call site] 00005
2 fdp.ConsumeBytes [function] [call site] 00006
2 h11._headers.normalize_and_validate [function] [call site] 00007
3 h11._util.bytesify [function] [call site] 00008
3 h11._util.bytesify [function] [call site] 00014
3 h11._util.validate [function] [call site] 00015
4 regex.fullmatch [function] [call site] 00016
4 msg.format [function] [call site] 00017
4 match.groupdict [function] [call site] 00018
3 h11._util.validate [function] [call site] 00019
3 .isinstance [function] [call site] 00020
3 .isinstance [function] [call site] 00021
3 name.lower [function] [call site] 00022
3 length.strip [function] [call site] 00023
3 value.split [function] [call site] 00024
3 lengths.pop [function] [call site] 00026
3 h11._util.validate [function] [call site] 00027
3 new_headers.append [function] [call site] 00028
3 value.lower [function] [call site] 00029
3 new_headers.append [function] [call site] 00030
3 new_headers.append [function] [call site] 00031
3 h11._headers.Headers.__init__ [function] [call site] 00032
2 fdp.ConsumeBytes [function] [call site] 00033
2 h11._headers.has_expect_100_continue [function] [call site] 00034
3 h11._headers.get_comma_header [function] [call site] 00035
4 found_raw_value.lower [function] [call site] 00036
4 found_raw_value.split [function] [call site] 00037
4 found_split_value.strip [function] [call site] 00038
4 out.append [function] [call site] 00039
2 h11._events.Request.__init__ [function] [call site] 00040
3 .isinstance [function] [call site] 00042
3 object.__setattr__ [function] [call site] 00043
3 object.__setattr__ [function] [call site] 00044
3 h11._headers.normalize_and_validate [function] [call site] 00045
3 h11._util.bytesify [function] [call site] 00046
3 object.__setattr__ [function] [call site] 00047
3 h11._util.bytesify [function] [call site] 00048
3 object.__setattr__ [function] [call site] 00049
3 h11._util.bytesify [function] [call site] 00050
3 object.__setattr__ [function] [call site] 00051
3 object.__setattr__ [function] [call site] 00052
3 object.__setattr__ [function] [call site] 00053
3 object.__setattr__ [function] [call site] 00054
3 h11._util.validate [function] [call site] 00055
3 h11._util.validate [function] [call site] 00056
1 ...fuzz_h11.fuzz_receivebuffer [function] [call site] 00057
2 atheris.FuzzedDataProvider [function] [call site] 00058
2 h11._receivebuffer.ReceiveBuffer.__init__ [function] [call site] 00059
3 .bytearray [function] [call site] 00060
2 fdp.ConsumeBytes [function] [call site] 00062
2 fdp.ConsumeIntInRange [function] [call site] 00063
2 rec_buf.maybe_extract_at_most [function] [call site] 00064
2 rec_buf.maybe_extract_next_line [function] [call site] 00065
2 rec_buf.maybe_extract_lines [function] [call site] 00066
1 ...fuzz_h11.fuzz_connection [function] [call site] 00067
2 atheris.FuzzedDataProvider [function] [call site] 00068
2 h11._connection.Connection.send [function] [call site] 00069
3 h11._connection.Connection.send_with_data_passthrough [function] [call site] 00070
4 h11._connection.Connection._clean_up_response_headers_for_sending [function] [call site] 00072
5 typing.cast [function] [call site] 00074
5 h11._connection._body_framing [function] [call site] 00075
6 h11._headers.get_comma_header [function] [call site] 00078
6 h11._headers.get_comma_header [function] [call site] 00079
5 h11._headers.set_comma_header [function] [call site] 00082
6 new_headers.append [function] [call site] 00083
6 name.title [function] [call site] 00084
6 new_headers.append [function] [call site] 00085
6 h11._headers.normalize_and_validate [function] [call site] 00086
5 h11._headers.set_comma_header [function] [call site] 00087
5 h11._headers.set_comma_header [function] [call site] 00088
5 h11._headers.get_comma_header [function] [call site] 00089
5 connection.discard [function] [call site] 00091
5 connection.add [function] [call site] 00092
5 h11._headers.set_comma_header [function] [call site] 00094
5 h11._events._ResponseBase.__init__ [function] [call site] 00095
6 .isinstance [function] [call site] 00097
6 object.__setattr__ [function] [call site] 00098
6 object.__setattr__ [function] [call site] 00099
6 h11._headers.normalize_and_validate [function] [call site] 00100
6 h11._util.bytesify [function] [call site] 00101
6 object.__setattr__ [function] [call site] 00102
6 h11._util.bytesify [function] [call site] 00103
6 object.__setattr__ [function] [call site] 00104
6 .isinstance [function] [call site] 00105
6 object.__setattr__ [function] [call site] 00107
6 object.__setattr__ [function] [call site] 00108
6 object.__setattr__ [function] [call site] 00109
6 object.__setattr__ [function] [call site] 00110
6 h11._events._ResponseBase.__post_init__ [function] [call site] 00111
6 h11._events.Response.__post_init__ [function] [call site] 00112
4 h11._connection.Connection._process_event [function] [call site] 00113
5 h11._state.ConnectionState.process_client_switch_proposal [function] [call site] 00116
6 h11._state.ConnectionState._fire_state_triggered_transitions [function] [call site] 00117
7 STATE_TRIGGERED_TRANSITIONS.get [function] [call site] 00119
5 h11._headers.get_comma_header [function] [call site] 00120
5 h11._state.ConnectionState.process_client_switch_proposal [function] [call site] 00121
5 h11._connection.Connection._server_switch_event [function] [call site] 00122
5 h11._state.ConnectionState.process_event [function] [call site] 00126
6 h11._state.ConnectionState._fire_event_triggered_transitions [function] [call site] 00128
7 typing.cast [function] [call site] 00129
6 h11._state.ConnectionState._fire_event_triggered_transitions [function] [call site] 00130
6 h11._state.ConnectionState._fire_state_triggered_transitions [function] [call site] 00131
5 typing.cast [function] [call site] 00134
5 h11._connection._keep_alive [function] [call site] 00136
6 h11._headers.get_comma_header [function] [call site] 00137
5 typing.cast [function] [call site] 00139
5 h11._state.ConnectionState.process_keep_alive_disabled [function] [call site] 00140
6 h11._state.ConnectionState._fire_state_triggered_transitions [function] [call site] 00141
5 h11._headers.has_expect_100_continue [function] [call site] 00143
5 h11._connection.Connection._respond_to_state_changes [function] [call site] 00146
6 h11._connection.Connection._get_io_object [function] [call site] 00147
7 h11._connection._body_framing [function] [call site] 00148
7 typing.cast [function] [call site] 00149
7 typing.cast [function] [call site] 00150
7 io_dict.get [function] [call site] 00151
6 h11._connection.Connection._get_io_object [function] [call site] 00152
4 h11._connection.Connection._process_error [function] [call site] 00154
5 h11._state.ConnectionState.process_error [function] [call site] 00156
6 h11._state.ConnectionState._fire_state_triggered_transitions [function] [call site] 00157
5 h11._connection.Connection._respond_to_state_changes [function] [call site] 00158
2 h11._connection.Connection.send [function] [call site] 00159
2 h11._connection.Connection.next_event [function] [call site] 00160
3 h11._connection.Connection._extract_next_receive_event [function] [call site] 00161
4 abc.ABC.__init__ [function] [call site] 00163
3 typing.cast [function] [call site] 00164
3 h11._connection.Connection._process_event [function] [call site] 00165
3 h11._connection.Connection._process_error [function] [call site] 00167
3 .isinstance [function] [call site] 00168
3 exc._reraise_as_remote_protocol_error [function] [call site] 00169
2 fdp.ConsumeBytes [function] [call site] 00170
2 h11._connection.Connection.receive_data [function] [call site] 00171
2 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00172
2 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00173
2 h11._connection.Connection.send [function] [call site] 00174
2 h11._connection.Connection.send [function] [call site] 00175
2 h11._connection.Connection.next_event [function] [call site] 00176
2 fdp.ConsumeBytes [function] [call site] 00177
2 h11._connection.Connection.receive_data [function] [call site] 00178