Fuzz introspector: h2o-fuzzer-url
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['strlen']

2 44 h2o_url_parse call site: 00001 /src/h2o/lib/common/url.c:252

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 h2o_url_parse [function] [call site] 00001
2 strlen [call site] 00002
2 parse_scheme [function] [call site] 00003
3 memcmp [call site] 00004
3 memcmp [call site] 00005
3 memcmp [call site] 00006
2 parse_authority_and_path [function] [call site] 00007
3 h2o_url_parse_hostport [function] [call site] 00008
4 memchr [call site] 00009
4 h2o_iovec_init [function] [call site] 00010
4 h2o_iovec_init [function] [call site] 00011
4 memchr [call site] 00012
4 h2o_strtosize [function] [call site] 00013
3 h2o_iovec_init [function] [call site] 00014
3 h2o_iovec_init [function] [call site] 00015
3 h2o_iovec_init [function] [call site] 00016
1 __assert_fail [call site] 00017
1 __assert_fail [call site] 00018