Fuzz introspector: fuzz_cfg_parser
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
271 234 parse_cfg call site: 00234 hash_ipanon
79 57 print_message call site: 00057 ring_write
31 597 cfg_eval_condition call site: 00597 cfg_eval_cond_and
20 548 make_arg_list call site: 00548 parse_time_err
12 174 cfg_apply_default_path call site: 00174 ha_alert
10 629 cfg_eval_cond_term call site: 00629 memprintf
8 32 b_room call site: 00032 b_tail
7 41 generate_usermsgs_ctx_str call site: 00041 b_tail
7 570 ha_warning call site: 00570 parse_dotted_uints
7 582 make_arg_list call site: 00582 memprintf
7 710 parse_cfg call site: 00710 check_section_position
5 542 make_arg_list call site: 00542 read_int64

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 chunk_init [function] [call site] 00001
1 parse_cfg [function] [call site] 00002
2 ha_alert [function] [call site] 00003
3 warn_exec_path [function] [call site] 00004
4 get_exec_path [function] [call site] 00005
5 getauxval [call site] 00006
4 print_message_args [function] [call site] 00007
5 print_message [function] [call site] 00008
6 strncpy [call site] 00009
6 strlen [call site] 00010
6 getpid [call site] 00011
6 memprintf [function] [call site] 00012
7 memvprintf [function] [call site] 00013
8 vsnprintf [call site] 00014
8 my_realloc2 [function] [call site] 00015
9 realloc [call site] 00016
6 memvprintf [function] [call site] 00017
6 strlen [call site] 00018
6 reset_usermsgs_ctx [function] [call site] 00057
6 strlen [call site] 00058
6 strlen [call site] 00059
6 ring_write [function] [call site] 00060
7 varint_bytes [function] [call site] 00061
7 vp_ring_to_data [function] [call site] 00062
7 vp_peek_varint_ofs [function] [call site] 00065
8 vp_get_varint_ofs [function] [call site] 00066
7 vp_data_to_ring [function] [call site] 00071
7 vp_ring_to_room [function] [call site] 00072
7 vp_put_varint [function] [call site] 00073
8 vp_put_varint_ofs [function] [call site] 00074
7 vp_putblk [function] [call site] 00079
8 vp_putblk_ofs [function] [call site] 00080
7 vp_putblk [function] [call site] 00082
7 vp_putchr [function] [call site] 00083
7 _mt_list_lock_next [function] [call site] 00084
8 mt_list_wait [function] [call site] 00085
9 mt_list_prng [function] [call site] 00086
7 _mt_list_unlock_prev [function] [call site] 00087
7 _task_wakeup [function] [call site] 00088
8 complain [function] [call site] 00089
9 strlen [call site] 00090
9 write [call site] 00091
9 mark_tainted [function] [call site] 00092
9 mark_tainted [function] [call site] 00093
8 ha_backtrace_to_stderr [function] [call site] 00094
9 ha_dump_backtrace [function] [call site] 00096
10 sigemptyset [call site] 00097
10 sigprocmask [call site] 00098
10 snprintf [call site] 00099
10 chunk_appendf [function] [call site] 00100
11 vsnprintf [call site] 00101
10 dump_addr_and_bytes [function] [call site] 00102
11 chunk_appendf [function] [call site] 00103
11 may_access [function] [call site] 00104
12 stat [call site] 00105
12 __errno_location [call site] 00106
11 chunk_appendf [function] [call site] 00107
11 chunk_appendf [function] [call site] 00108
10 resolve_sym_name [function] [call site] 00109
11 chunk_appendf [function] [call site] 00110
11 chunk_appendf [function] [call site] 00111
11 chunk_appendf [function] [call site] 00112
11 chunk_appendf [function] [call site] 00113
11 chunk_appendf [function] [call site] 00114
10 may_access [function] [call site] 00115
10 resolve_sym_name [function] [call site] 00116
10 chunk_appendf [function] [call site] 00117
10 sigprocmask [call site] 00118
9 write [call site] 00119
8 strlen [call site] 00120
8 write [call site] 00121
8 __task_wakeup [function] [call site] 00122
9 now_mono_time [function] [call site] 00123
10 clock_gettime [call site] 00124
9 eb32_insert [function] [call site] 00125
10 eb_dotag [function] [call site] 00126
10 eb_gettag [function] [call site] 00127
10 eb_untag [function] [call site] 00128
10 eb_insert_dup [function] [call site] 00129
11 eb_dotag [function] [call site] 00130
11 eb_gettag [function] [call site] 00131
11 eb_untag [function] [call site] 00132
7 _mt_list_unlock_next [function] [call site] 00134
7 mt_list_unlock_link [function] [call site] 00135
6 usermsgs_put [function] [call site] 00163
6 fprintf [call site] 00164
6 fflush [call site] 00165
4 print_message_args [function] [call site] 00166
3 print_message [function] [call site] 00167
2 cfg_apply_default_path [function] [call site] 00168
3 strrchr [call site] 00169
3 getcwd [call site] 00170
3 __errno_location [call site] 00171
3 strerror [call site] 00172
3 memprintf [function] [call site] 00173
3 chdir [call site] 00174
3 __errno_location [call site] 00175
3 strerror [call site] 00176
3 memprintf [function] [call site] 00177
3 snprintf [call site] 00178
3 memprintf [function] [call site] 00179
3 memprintf [function] [call site] 00180
3 memprintf [function] [call site] 00181
3 chdir [call site] 00182
3 __errno_location [call site] 00183
3 strerror [call site] 00184
3 memprintf [function] [call site] 00185
2 fgets_from_mem [function] [call site] 00187
3 memchr [call site] 00188
2 strlen [call site] 00191
2 realloc [call site] 00192
2 __ctype_b_loc [call site] 00194
2 cfg_parse_scope [function] [call site] 00195
3 strchr [call site] 00196
3 my_strndup [function] [call site] 00198
3 invalid_char [function] [call site] 00199
4 __ctype_b_loc [call site] 00200
3 __ctype_b_loc [call site] 00202
2 parse_line [function] [call site] 00204
3 toupper [call site] 00206
3 toupper [call site] 00207
3 __ctype_b_loc [call site] 00208
3 __ctype_b_loc [call site] 00209
3 __ctype_b_loc [call site] 00210
3 __ctype_b_loc [call site] 00211
3 strcmp [call site] 00212
3 strcmp [call site] 00215
3 strcmp [call site] 00216
3 getenv [call site] 00217
3 __ctype_b_loc [call site] 00218
3 __ctype_b_loc [call site] 00219
2 sanitize_for_printing [function] [call site] 00220
3 __ctype_b_loc [call site] 00221
3 __ctype_b_loc [call site] 00222
2 sanitize_for_printing [function] [call site] 00224
2 sanitize_for_printing [function] [call site] 00226
2 sanitize_for_printing [function] [call site] 00228
2 sanitize_for_printing [function] [call site] 00230
2 my_realloc2 [function] [call site] 00232
2 qfprintf [function] [call site] 00235
3 vfprintf [call site] 00236
3 fflush [call site] 00237
2 strcmp [call site] 00238
2 hash_anon [function] [call site] 00242
3 strlen [call site] 00243
3 XXH_INLINE_XXH32 [function] [call site] 00244
4 XXH32_endian_align [function] [call site] 00245
5 XXH_readLE32_align [function] [call site] 00246
6 XXH_readLE32 [function] [call site] 00247
7 XXH_read32 [function] [call site] 00248
5 XXH32_round [function] [call site] 00249
5 XXH_readLE32_align [function] [call site] 00250
5 XXH32_round [function] [call site] 00251
5 XXH_readLE32_align [function] [call site] 00252
5 XXH32_round [function] [call site] 00253
5 XXH_readLE32_align [function] [call site] 00254
5 XXH32_round [function] [call site] 00255
5 XXH32_finalize [function] [call site] 00256
6 XXH_readLE32_align [function] [call site] 00257
6 XXH32_avalanche [function] [call site] 00258
3 snprintf [call site] 00259
2 strcmp [call site] 00264
2 strcmp [call site] 00266
2 strcmp [call site] 00268
2 strcmp [call site] 00269
2 strcmp [call site] 00271
2 hash_ipanon [function] [call site] 00273
3 strcmp [call site] 00274
3 strcmp [call site] 00275
3 strcmp [call site] 00276
3 strncmp [call site] 00277
3 strncmp [call site] 00278
3 str2ip2 [function] [call site] 00279
4 get_host_port [function] [call site] 00280
5 ntohs [call site] 00281
5 ntohs [call site] 00282
4 strlen [call site] 00283
4 set_host_port [function] [call site] 00284
5 htons [call site] 00285
5 htons [call site] 00286
4 set_host_port [function] [call site] 00287
4 inet_pton [call site] 00288
4 set_host_port [function] [call site] 00289
4 inet_pton [call site] 00290
4 set_host_port [function] [call site] 00291
4 resolv_hostname_validation [function] [call site] 00292
5 strlen [call site] 00293
4 gethostbyname [call site] 00294
4 set_host_port [function] [call site] 00295
4 set_host_port [function] [call site] 00296
3 hash_anon [function] [call site] 00297
3 str2sa_range [function] [call site] 00298
4 strdup [call site] 00299
4 env_expand [function] [call site] 00300
5 __ctype_b_loc [call site] 00301
5 getenv [call site] 00302
5 strlen [call site] 00303
5 my_realloc2 [function] [call site] 00304
4 memprintf [function] [call site] 00305
4 memprintf [function] [call site] 00306
4 strncmp [call site] 00307
4 strncmp [call site] 00308
4 strncmp [call site] 00309
4 strncmp [call site] 00310
4 strncmp [call site] 00311
4 strncmp [call site] 00312
4 strncmp [call site] 00313
4 strncmp [call site] 00314
4 strncmp [call site] 00315
4 strncmp [call site] 00316
4 strncmp [call site] 00317
4 strncmp [call site] 00318
4 strncmp [call site] 00319
4 strncmp [call site] 00320
4 strncmp [call site] 00321
4 strncmp [call site] 00322
4 strncmp [call site] 00323
4 strncmp [call site] 00324
4 strncmp [call site] 00325
4 strncmp [call site] 00326
4 strncmp [call site] 00327
4 strncmp [call site] 00328
4 strncmp [call site] 00329
4 strncmp [call site] 00330
4 strncmp [call site] 00331
4 memprintf [function] [call site] 00332
4 mark_tainted [function] [call site] 00333
4 strtol [call site] 00334
4 memprintf [function] [call site] 00335
4 getsockname [call site] 00336
4 __errno_location [call site] 00337
4 strerror [call site] 00338
4 strtol [call site] 00339
4 memprintf [function] [call site] 00340
4 getsockname [call site] 00341
4 __errno_location [call site] 00342
4 strerror [call site] 00343
4 memprintf [function] [call site] 00344
4 getsockopt [call site] 00345
4 memprintf [function] [call site] 00346
4 get_host_port [function] [call site] 00347
4 memprintf [function] [call site] 00348
4 strlen [call site] 00349
4 strlen [call site] 00350
4 memprintf [function] [call site] 00351
4 strlen [call site] 00352
4 memprintf [function] [call site] 00353
4 memprintf [function] [call site] 00354
4 __ctype_b_loc [call site] 00355
4 strchr [call site] 00356
4 memprintf [function] [call site] 00357
4 strtol [call site] 00358
4 memprintf [function] [call site] 00359
4 strtol [call site] 00360
4 memprintf [function] [call site] 00361
4 memprintf [function] [call site] 00362
4 memprintf [function] [call site] 00363
4 memprintf [function] [call site] 00364
4 memprintf [function] [call site] 00365
4 strtol [call site] 00366
4 memprintf [function] [call site] 00367
4 memprintf [function] [call site] 00368
4 strtol [call site] 00369
4 memprintf [function] [call site] 00370
4 memprintf [function] [call site] 00371
4 memprintf [function] [call site] 00372
4 memprintf [function] [call site] 00375
4 strlen [call site] 00376
4 set_host_port [function] [call site] 00377
4 memprintf [function] [call site] 00378
4 memprintf [function] [call site] 00379
4 protocol_lookup [function] [call site] 00380
4 memprintf [function] [call site] 00381
4 memprintf [function] [call site] 00382
3 hash_anon [function] [call site] 00383
3 addr_to_str [function] [call site] 00384
4 inet_ntop [call site] 00385
3 get_host_port [function] [call site] 00386
3 strncmp [call site] 00387
3 strlen [call site] 00388
3 XXH_INLINE_XXH32 [function] [call site] 00389
3 snprintf [call site] 00390
3 strlen [call site] 00391
3 XXH_INLINE_XXH32 [function] [call site] 00392
3 snprintf [call site] 00393
3 strcmp [call site] 00394
3 strlen [call site] 00395
3 XXH_INLINE_XXH32 [function] [call site] 00396
3 snprintf [call site] 00397
3 strlen [call site] 00398
3 XXH_INLINE_XXH32 [function] [call site] 00399
3 snprintf [call site] 00400
3 hash_anon [function] [call site] 00401
2 strcmp [call site] 00406
2 strcmp [call site] 00408
2 strcmp [call site] 00410
2 hash_anon [function] [call site] 00411
2 strcmp [call site] 00415
2 hash_ipanon [function] [call site] 00417
2 strcmp [call site] 00421
2 hash_anon [function] [call site] 00422
2 hash_ipanon [function] [call site] 00424
2 strcmp [call site] 00428
2 strcmp [call site] 00430
2 hash_anon [function] [call site] 00431
2 strcmp [call site] 00436
2 hash_anon [function] [call site] 00437
2 strcmp [call site] 00441
2 strcmp [call site] 00443
2 hash_ipanon [function] [call site] 00445
2 strcmp [call site] 00449
2 hash_anon [function] [call site] 00450
2 hash_ipanon [function] [call site] 00452
2 strcmp [call site] 00456
2 hash_anon [function] [call site] 00457
2 strcmp [call site] 00461
2 hash_anon [function] [call site] 00462
2 strcmp [call site] 00464
2 hash_ipanon [function] [call site] 00465
2 strcmp [call site] 00469
2 hash_anon [function] [call site] 00470
2 hash_ipanon [function] [call site] 00471
2 strcmp [call site] 00475
2 strcmp [call site] 00479
2 strcmp [call site] 00483
2 strcmp [call site] 00487
2 strcmp [call site] 00491
2 hash_anon [function] [call site] 00492
2 strcmp [call site] 00494
2 hash_anon [function] [call site] 00495
2 strcmp [call site] 00500
2 hash_anon [function] [call site] 00501
2 strcmp [call site] 00506
2 strlen [call site] 00507
2 cfg_eval_condition [function] [call site] 00509
3 cfg_parse_cond_expr [function] [call site] 00510
4 memprintf [function] [call site] 00511
4 calloc [call site] 00512
4 memprintf [function] [call site] 00513
4 cfg_parse_cond_and [function] [call site] 00514
5 memprintf [function] [call site] 00515
5 calloc [call site] 00516
5 memprintf [function] [call site] 00517
5 cfg_parse_cond_term [function] [call site] 00518
6 calloc [call site] 00519
6 memprintf [function] [call site] 00520
6 strtol [call site] 00521
6 cfg_parse_cond_expr [function] [call site] 00522
7 memprintf [function] [call site] 00523
7 cfg_parse_cond_expr [function] [call site] 00524
8 cfg_free_cond_expr [function] [call site] 00525
9 cfg_free_cond_and [function] [call site] 00526
10 cfg_free_cond_term [function] [call site] 00527
11 cfg_free_cond_expr [function] [call site] 00528
11 free_args [function] [call site] 00529
12 chunk_destroy [function] [call site] 00530
13 chunk_drop [function] [call site] 00531
12 regex_free [function] [call site] 00532
13 regfree [call site] 00533
6 memprintf [function] [call site] 00534
6 cfg_lookup_cond_pred [function] [call site] 00535
7 strcspn [call site] 00536
7 strlen [call site] 00537
7 strncmp [call site] 00538
6 strlen [call site] 00539
6 make_arg_list [function] [call site] 00540
7 calloc [call site] 00541
7 chunk_reset [function] [call site] 00542
7 read_int64 [function] [call site] 00543
8 read_uint64 [function] [call site] 00544
7 arg_list_add [function] [call site] 00545
8 arg_list_clone [function] [call site] 00546
9 calloc [call site] 00547
7 my_strndup [function] [call site] 00548
7 inet_pton [call site] 00549
7 str2mask [function] [call site] 00550
8 strchr [call site] 00551
8 inet_pton [call site] 00552
8 strtol [call site] 00553
8 len2mask4 [function] [call site] 00554
9 htonl [call site] 00555
7 inet_pton [call site] 00556
7 str2mask6 [function] [call site] 00557
8 strchr [call site] 00558
8 inet_pton [call site] 00559
8 strtol [call site] 00560
7 parse_time_err [function] [call site] 00566
8 __ctype_b_loc [call site] 00567
8 ha_warning [function] [call site] 00568
9 warn_exec_path [function] [call site] 00569
9 print_message [function] [call site] 00570
7 parse_size_ui [function] [call site] 00571
8 __ctype_b_loc [call site] 00572
7 parse_dotted_uints [function] [call site] 00573
8 strlen [call site] 00574
8 read_uint [function] [call site] 00575
9 __read_uint [function] [call site] 00576
8 my_realloc2 [function] [call site] 00577
7 memprintf [function] [call site] 00578
7 my_strndup [function] [call site] 00579
7 memprintf [function] [call site] 00580
7 memprintf [function] [call site] 00581
7 free_args [function] [call site] 00582
7 memprintf [function] [call site] 00583
7 memprintf [function] [call site] 00584
7 memprintf [function] [call site] 00585
7 memprintf [function] [call site] 00586
7 memprintf [function] [call site] 00587
7 memprintf [function] [call site] 00588
7 memprintf [function] [call site] 00589
6 memprintf [function] [call site] 00590
6 memprintf [function] [call site] 00591
6 cfg_free_cond_term [function] [call site] 00592
5 memprintf [function] [call site] 00593
5 cfg_parse_cond_and [function] [call site] 00594
6 cfg_free_cond_and [function] [call site] 00595
3 memprintf [function] [call site] 00596
3 cfg_eval_cond_expr [function] [call site] 00597
4 cfg_eval_cond_and [function] [call site] 00598
5 cfg_eval_cond_term [function] [call site] 00599
6 getenv [call site] 00600
6 strstr [call site] 00601
6 strcmp [call site] 00602
6 strcmp [call site] 00603
6 strstr [call site] 00604
6 compare_current_version [function] [call site] 00605
7 split_version [function] [call site] 00606
8 strtol [call site] 00607
8 strtol [call site] 00608
8 strtol [call site] 00609
8 strtol [call site] 00610
8 strncmp [call site] 00611
8 strncmp [call site] 00612
8 strncmp [call site] 00613
8 strtol [call site] 00614
8 strrchr [call site] 00615
8 strtol [call site] 00616
8 strtol [call site] 00617
7 split_version [function] [call site] 00618
6 compare_current_version [function] [call site] 00619
6 openssl_compare_current_version [function] [call site] 00620
6 memprintf [function] [call site] 00621
6 openssl_compare_current_version [function] [call site] 00622
6 memprintf [function] [call site] 00623
6 awslc_compare_current_api [function] [call site] 00624
6 memprintf [function] [call site] 00625
6 awslc_compare_current_api [function] [call site] 00626
6 memprintf [function] [call site] 00627
6 openssl_compare_current_name [function] [call site] 00628
6 cfg_eval_cond_enabled [function] [call site] 00629
7 strcmp [call site] 00630
7 strcmp [call site] 00631
7 strcmp [call site] 00632
7 strcmp [call site] 00633
7 strcmp [call site] 00634
7 strcmp [call site] 00635
7 strcmp [call site] 00636
7 strcmp [call site] 00637
7 strcmp [call site] 00638
6 memprintf [function] [call site] 00639
6 cfg_eval_cond_expr [function] [call site] 00640
6 memprintf [function] [call site] 00641
3 memprintf [function] [call site] 00642
3 cfg_free_cond_expr [function] [call site] 00643
2 sanitize_for_printing [function] [call site] 00644
2 strcmp [call site] 00646
2 strlen [call site] 00647
2 cfg_eval_condition [function] [call site] 00650
2 sanitize_for_printing [function] [call site] 00651
2 strcmp [call site] 00653
2 strcmp [call site] 00657
2 strcmp [call site] 00660
2 strcmp [call site] 00663
2 ha_warning [function] [call site] 00665
2 strcmp [call site] 00666
2 ha_notice [function] [call site] 00668
3 print_message [function] [call site] 00669
2 strcmp [call site] 00670
2 ha_diag_warning [function] [call site] 00672
3 _ha_vdiag_warning [function] [call site] 00673
4 warn_exec_path [function] [call site] 00674
4 print_message [function] [call site] 00675
2 strlen [call site] 00677
2 __ctype_b_loc [call site] 00678
2 sanitize_for_printing [function] [call site] 00679
2 __ctype_b_loc [call site] 00681
2 env_suggest [function] [call site] 00683
3 make_word_fingerprint_with_len [function] [call site] 00685
4 update_word_fingerprint_with_len [function] [call site] 00686
5 tolower [call site] 00687
5 tolower [call site] 00688
3 strlen [call site] 00689
3 make_word_fingerprint_with_len [function] [call site] 00693
3 word_fingerprint_distance [function] [call site] 00694
2 ha_notice [function] [call site] 00700
2 strcmp [call site] 00701
2 lshift_args [function] [call site] 00702
2 strcmp [call site] 00703
2 lshift_args [function] [call site] 00704
2 strcmp [call site] 00705
2 strcmp [call site] 00706
2 strcmp [call site] 00707
2 strcmp [call site] 00708
2 strcmp [call site] 00709
2 strcmp [call site] 00711
2 strdup [call site] 00712
2 check_section_position [function] [call site] 00713
3 strcmp [call site] 00714
3 _ha_diag_warning [function] [call site] 00715
4 _ha_vdiag_warning [function] [call site] 00716
2 strcmp [call site] 00717
2 strcmp [call site] 00719
2 strcmp [call site] 00720
2 strcmp [call site] 00722