Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
70	70	2 : View List ['wpabuf_put_be24', 'wpabuf_put_be32']	70	70	eap_msg_alloc	call site: 00118	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_common/eap_common.c:146
54	104	2 : View List ['generate_nt_response_pwhash', 'generate_authenticator_response_pwhash']	54	291	mschapv2_derive_response	call site: 00154	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/mschapv2.c:63
13	13	2 : View List ['__ctype_b_loc', 'wpa_debug_print_timestamp']	13	13	_wpa_hexdump_ascii	call site: 00079	/src/hostap/tests/fuzzing/asn1/../../../src/utils/wpa_debug.c:423
11	11	1 : View List ['wpa_debug_print_timestamp']	11	11	_wpa_hexdump	call site: 00141	/src/hostap/tests/fuzzing/asn1/../../../src/utils/wpa_debug.c:281
4	16	2 : View List ['eap_mschapv2_deinit', 'os_memdup']	4	16	eap_mschapv2_init	call site: 00021	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:126
2	2	1 : View List ['atoi']	2	2	wpa_fuzzer_set_debug_level	call site: 00002	/src/hostap/tests/fuzzing/asn1/../fuzzer-common.c:23
0	4	1 : View List ['wpabuf_free']	0	4	eap_mschapv2_challenge_reply	call site: 00136	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:211
0	2	1 : View List ['eap_sm_request_identity']	0	2	eap_mschapv2_check_config	call site: 00031	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:718
0	2	1 : View List ['eap_sm_request_password']	0	2	eap_mschapv2_check_config	call site: 00035	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:724
0	0	None	8	32	eap_mschapv2_init	call site: 00010	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:117
0	0	None	0	206	eap_mschapv2_challenge_reply	call site: 00131	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:196
0	0	None	0	206	eap_mschapv2_challenge_reply	call site: 00134	/src/hostap/tests/fuzzing/eap-mschapv2-peer/../../../src/eap_peer/eap_mschapv2.c:206

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           wpa_fuzzer_set_debug_level

[function] [call site] 00001


             getenv

[call site] 00002


             atoi

[call site] 00003


           eap_peer_mschapv2_register

[function] [call site] 00004


             eap_peer_method_alloc

[function] [call site] 00005


               os_zalloc

[function] [call site] 00006


                 calloc

[call site] 00007


             eap_mschapv2_init

[function] [call site] 00008


               os_zalloc

[function] [call site] 00009


               wpa_printf

[function] [call site] 00010


                 wpa_debug_print_timestamp

[function] [call site] 00011


                   os_get_time

[function] [call site] 00012


                     gettimeofday

[call site] 00013


                   fprintf

[call site] 00014


                   printf

[call site] 00015


                 vfprintf

[call site] 00016


                 fprintf

[call site] 00017


                 vprintf

[call site] 00018


                 printf

[call site] 00019


               os_memdup

[function] [call site] 00020


               eap_mschapv2_deinit

[function] [call site] 00021


                 wpabuf_free

[function] [call site] 00022


                 bin_clear_free

[function] [call site] 00023


                   forced_memzero

[function] [call site] 00024


               os_memdup

[function] [call site] 00025


               eap_mschapv2_deinit

[function] [call site] 00026


             eap_mschapv2_deinit

[function] [call site] 00027


             eap_mschapv2_process

[function] [call site] 00028


               eap_get_config

[function] [call site] 00029


               eap_mschapv2_check_config

[function] [call site] 00030


                 eap_get_config_identity

[function] [call site] 00031


                   strlen

[call site] 00032


                 wpa_printf

[function] [call site] 00033


                 eap_sm_request_identity

[function] [call site] 00034


                 eap_get_config_password

[function] [call site] 00035


                   eap_get_config

[function] [call site] 00036


                 wpa_printf

[function] [call site] 00037


                 eap_sm_request_password

[function] [call site] 00038


               wpa_printf

[function] [call site] 00039


               eap_hdr_validate

[function] [call site] 00040


                 eap_hdr_len_valid

[function] [call site] 00041


                   wpabuf_head

[function] [call site] 00042


                   wpabuf_len

[function] [call site] 00043


                   wpa_printf

[function] [call site] 00044


                   __bswap_16

[function] [call site] 00045


                   wpabuf_len

[function] [call site] 00046


                   wpa_printf

[function] [call site] 00047


                 wpabuf_head

[function] [call site] 00048


                 __bswap_16

[function] [call site] 00049


                 wpa_printf

[function] [call site] 00050


                 WPA_GET_BE24

[function] [call site] 00051


                 WPA_GET_BE32

[function] [call site] 00052


                 wpa_printf

[function] [call site] 00053


                 wpa_printf

[function] [call site] 00054


               eap_mschapv2_check_mslen

[function] [call site] 00055


                 WPA_GET_BE16

[function] [call site] 00056


                 wpa_printf

[function] [call site] 00057


                 wpa_printf

[function] [call site] 00058


               eap_get_id

[function] [call site] 00059


                 wpabuf_len

[function] [call site] 00060


                 wpabuf_head

[function] [call site] 00061


               wpa_printf

[function] [call site] 00062


               eap_mschapv2_copy_challenge

[function] [call site] 00063


                 wpabuf_free

[function] [call site] 00064


                 wpabuf_dup

[function] [call site] 00065


                   wpabuf_len

[function] [call site] 00066


                   wpabuf_alloc

[function] [call site] 00067


                     os_zalloc

[function] [call site] 00068


                   wpabuf_head

[function] [call site] 00069


               eap_mschapv2_challenge

[function] [call site] 00070


                 eap_get_config_identity

[function] [call site] 00071


                 eap_get_config_password

[function] [call site] 00072


                 wpa_printf

[function] [call site] 00073


                 wpa_printf

[function] [call site] 00074


                 wpa_printf

[function] [call site] 00075


                 wpa_printf

[function] [call site] 00076


                 wpa_printf

[function] [call site] 00077


                 wpa_hexdump_ascii

[function] [call site] 00078


                   _wpa_hexdump_ascii

[function] [call site] 00079


                     wpa_debug_print_timestamp

[function] [call site] 00080


                     fprintf

[call site] 00081


                     fprintf

[call site] 00082


                     fprintf

[call site] 00083


                     fprintf

[call site] 00084


                     fprintf

[call site] 00085


                     fprintf

[call site] 00086


                     fprintf

[call site] 00087


                     __ctype_b_loc

[call site] 00088


                     fprintf

[call site] 00089


                     fprintf

[call site] 00090


                     fprintf

[call site] 00091


                     fprintf

[call site] 00092


                     printf

[call site] 00093


                     printf

[call site] 00094


                     printf

[call site] 00095


                     printf

[call site] 00096


                     printf

[call site] 00097


                     printf

[call site] 00098


                     printf

[call site] 00099


                     __ctype_b_loc

[call site] 00100


                     printf

[call site] 00101


                     printf

[call site] 00102


                     printf

[call site] 00103


                     printf

[call site] 00104


                 eap_mschapv2_challenge_reply

[function] [call site] 00105


                   wpa_printf

[function] [call site] 00106


                   eap_get_config_identity

[function] [call site] 00107


                   eap_get_config_password2

[function] [call site] 00108


                     eap_get_config

[function] [call site] 00109


                   eap_msg_alloc

[function] [call site] 00110


                     wpabuf_alloc

[function] [call site] 00111


                     wpabuf_put

[function] [call site] 00112


                       wpabuf_mhead_u8

[function] [call site] 00113


                         wpabuf_mhead

[function] [call site] 00114


                       wpabuf_overflow

[function] [call site] 00115


                         wpa_printf

[function] [call site] 00116


                         abort

[call site] 00117


                     __bswap_16

[function] [call site] 00118


                     wpabuf_put_u8

[function] [call site] 00119


                       wpabuf_put

[function] [call site] 00120


                     wpabuf_put_u8

[function] [call site] 00121


                     wpabuf_put_be24

[function] [call site] 00122


                       wpabuf_put

[function] [call site] 00123


                       WPA_PUT_BE24

[function] [call site] 00124


                     wpabuf_put_be32

[function] [call site] 00125


                       wpabuf_put

[function] [call site] 00126


                       WPA_PUT_BE32

[function] [call site] 00127


                   wpabuf_put

[function] [call site] 00128


                   WPA_PUT_BE16

[function] [call site] 00129


                   wpabuf_put_u8

[function] [call site] 00130


                   wpabuf_put

[function] [call site] 00131


                   wpa_printf

[function] [call site] 00132


                   os_get_random

[function] [call site] 00133


                   wpabuf_free

[function] [call site] 00134


                   wpa_printf

[function] [call site] 00135


                   mschapv2_derive_response

[function] [call site] 00136


                     wpa_hexdump_ascii

[function] [call site] 00137


                     mschapv2_remove_domain

[function] [call site] 00138


                     wpa_hexdump_ascii

[function] [call site] 00139


                     wpa_hexdump

[function] [call site] 00140


                       _wpa_hexdump

[function] [call site] 00141


                         wpa_debug_print_timestamp

[function] [call site] 00142


                         fprintf

[call site] 00143


                         fprintf

[call site] 00144


                         fprintf

[call site] 00145


                         fprintf

[call site] 00146


                         fprintf

[call site] 00147


                         printf

[call site] 00148


                         printf

[call site] 00149


                         printf

[call site] 00150


                         printf

[call site] 00151


                         printf

[call site] 00152


                     wpa_hexdump

[function] [call site] 00153


                     wpa_hexdump_ascii

[function] [call site] 00154


                     wpa_hexdump_key

[function] [call site] 00155


                       _wpa_hexdump

[function] [call site] 00156


                     generate_nt_response_pwhash

[function] [call site] 00157


                       challenge_hash

[function] [call site] 00158


                         sha1_vector

[function] [call site] 00159


                           SHA1Init

[function] [call site] 00160


                           SHA1Update

[function] [call site] 00161


                             SHA1Transform

[function] [call site] 00162


                               forced_memzero

[function] [call site] 00163


                             SHA1Transform

[function] [call site] 00164


                           SHA1Final

[function] [call site] 00165


                             SHA1Update

[function] [call site] 00166


                             SHA1Update

[function] [call site] 00167


                             SHA1Update

[function] [call site] 00168


                             forced_memzero

[function] [call site] 00169


                       challenge_response

[function] [call site] 00170


                         des_encrypt

[function] [call site] 00171


                           deskey

[function] [call site] 00172


                             cookey

[function] [call site] 00173


                           WPA_GET_BE32

[function] [call site] 00174


                           WPA_GET_BE32

[function] [call site] 00175


                           desfunc

[function] [call site] 00176


                           WPA_PUT_BE32

[function] [call site] 00177


                           WPA_PUT_BE32

[function] [call site] 00178


                         des_encrypt

[function] [call site] 00179


                         des_encrypt

[function] [call site] 00180


                     generate_authenticator_response_pwhash

[function] [call site] 00181


                       hash_nt_password_hash

[function] [call site] 00182


                         md4_vector

[function] [call site] 00183


                           MD4Init

[function] [call site] 00184


                           MD4Update

[function] [call site] 00185


                             MD4Transform

[function] [call site] 00186


                             MD4Transform

[function] [call site] 00187


                           MD4Final

[function] [call site] 00188


                             MD4Pad

[function] [call site] 00189


                               MD4Update

[function] [call site] 00190


                               MD4Update

[function] [call site] 00191


                       challenge_hash

[function] [call site] 00192


                       sha1_vector

[function] [call site] 00193


                     wpa_hexdump_ascii_key

[function] [call site] 00194


                       _wpa_hexdump_ascii

[function] [call site] 00195


                     generate_nt_response

[function] [call site] 00196


                       challenge_hash

[function] [call site] 00197


                       nt_password_hash

[function] [call site] 00198


                         utf8_to_ucs2

[function] [call site] 00199


                           WPA_PUT_LE16

[function] [call site] 00200


                           WPA_PUT_LE16

[function] [call site] 00201


                           WPA_PUT_LE16

[function] [call site] 00202


                         md4_vector

[function] [call site] 00203


                       challenge_response

[function] [call site] 00204


                     generate_authenticator_response

[function] [call site] 00205


                       nt_password_hash

[function] [call site] 00206


                       generate_authenticator_response_pwhash

[function] [call site] 00207


                     wpa_hexdump

[function] [call site] 00208


                     wpa_hexdump

[function] [call site] 00209


                     hash_nt_password_hash

[function] [call site] 00210


                     nt_password_hash

[function] [call site] 00211


                     hash_nt_password_hash

[function] [call site] 00212


                     get_master_key

[function] [call site] 00213


                       sha1_vector

[function] [call site] 00214


                     wpa_hexdump_key

[function] [call site] 00215


                   wpa_printf

[function] [call site] 00216


                   wpabuf_free

[function] [call site] 00217


                   wpabuf_put_data

[function] [call site] 00218


                     wpabuf_put

[function] [call site] 00219


                   wpa_printf

[function] [call site] 00220


               eap_mschapv2_success

[function] [call site] 00221


                 wpa_printf

[function] [call site] 00222


                 mschapv2_verify_auth_response

[function] [call site] 00223


                   hexstr2bin

[function] [call site] 00224


                     hex2byte

[function] [call site] 00225


                       hex2num

[function] [call site] 00226


                       hex2num

[function] [call site] 00227


                   os_memcmp_const

[function] [call site] 00228


                 wpa_printf

[function] [call site] 00229


                 wpa_hexdump_ascii

[function] [call site] 00230


                 wpa_printf

[function] [call site] 00231


                 eap_msg_alloc

[function] [call site] 00232


                 wpa_printf

[function] [call site] 00233


                 wpabuf_put_u8

[function] [call site] 00234


                 eap_mschapv2_password_changed

[function] [call site] 00235


                   eap_get_config

[function] [call site] 00236


                   wpa_msg

[function] [call site] 00237


                     vsnprintf

[call site] 00238


                     wpa_printf

[function] [call site] 00239


                     snprintf

[call site] 00240


                     os_snprintf_error

[function] [call site] 00241


                     vsnprintf

[call site] 00242


                     wpa_printf

[function] [call site] 00243


                     bin_clear_free

[function] [call site] 00244


                   bin_clear_free

[function] [call site] 00245


                   nt_password_hash

[function] [call site] 00246


                   bin_clear_free

[function] [call site] 00247


                   bin_clear_free

[function] [call site] 00248


               eap_mschapv2_failure

[function] [call site] 00249


                 wpa_printf

[function] [call site] 00250


                 wpa_hexdump_ascii

[function] [call site] 00251


                 dup_binstr

[function] [call site] 00252


                 eap_mschapv2_failure_txt

[function] [call site] 00253


                   eap_get_config

[function] [call site] 00254


                   strncmp

[call site] 00255


                   atoi

[call site] 00256


                   wpa_printf

[function] [call site] 00257


                   strchr

[call site] 00258


                   strncmp

[call site] 00259


                   atoi

[call site] 00260


                   wpa_printf

[function] [call site] 00261


                   strchr

[call site] 00262


                   strncmp

[call site] 00263


                   strchr

[call site] 00264


                   hexstr2bin

[function] [call site] 00265


                   wpa_printf

[function] [call site] 00266


                   wpa_hexdump

[function] [call site] 00267


                   wpa_printf

[function] [call site] 00268


                   strchr

[call site] 00269


                   wpa_printf

[function] [call site] 00270


                   atoi

[call site] 00271


                   wpa_printf

[function] [call site] 00272


                   strchr

[call site] 00273


                   strncmp

[call site] 00274


                   strstr

[call site] 00275


                   wpa_printf

[function] [call site] 00276


                   wpa_msg

[function] [call site] 00277


                   wpa_msg

[function] [call site] 00278


                   eap_sm_request_new_password

[function] [call site] 00279


                   eap_sm_request_identity

[function] [call site] 00280


                   eap_sm_request_password

[function] [call site] 00281


                 eap_get_config

[function] [call site] 00282


                 eap_mschapv2_change_password

[function] [call site] 00283


                   eap_get_config_identity

[function] [call site] 00284


                   eap_get_config_password2

[function] [call site] 00285


                   eap_get_config_new_password

[function] [call site] 00286


                   mschapv2_remove_domain

[function] [call site] 00287


                   eap_msg_alloc

[function] [call site] 00288


                   wpabuf_put

[function] [call site] 00289


                   WPA_PUT_BE16

[function] [call site] 00290


                   wpabuf_put

[function] [call site] 00291


                   encrypt_pw_block_with_password_hash

[function] [call site] 00292


                     utf8_to_ucs2

[function] [call site] 00293


                     os_get_random

[function] [call site] 00294


                     WPA_PUT_LE16

[function] [call site] 00295


                     rc4_skip

[function] [call site] 00296


                   new_password_encrypted_with_old_nt_password_hash

[function] [call site] 00297


                     nt_password_hash

[function] [call site] 00298


                     encrypt_pw_block_with_password_hash

[function] [call site] 00299


                   nt_password_hash

[function] [call site] 00300


                   nt_password_hash_encrypted_with_block

[function] [call site] 00301


                     des_encrypt

[function] [call site] 00302


                     des_encrypt

[function] [call site] 00303


                   old_nt_password_hash_encrypted_with_new_nt_password_hash

[function] [call site] 00304


                     nt_password_hash

[function] [call site] 00305


                     nt_password_hash

[function] [call site] 00306


                     nt_password_hash_encrypted_with_block

[function] [call site] 00307


                   os_get_random

[function] [call site] 00308


                   wpa_hexdump

[function] [call site] 00309


                   wpa_hexdump

[function] [call site] 00310


                   wpa_hexdump_ascii

[function] [call site] 00311


                   wpa_hexdump_ascii_key

[function] [call site] 00312


                   generate_nt_response

[function] [call site] 00313


                   wpa_hexdump

[function] [call site] 00314


                   generate_authenticator_response

[function] [call site] 00315


                   nt_password_hash

[function] [call site] 00316


                   hash_nt_password_hash

[function] [call site] 00317


                   get_master_key

[function] [call site] 00318


                   wpa_printf

[function] [call site] 00319


                   wpabuf_free

[function] [call site] 00320


                 eap_msg_alloc

[function] [call site] 00321


                 wpabuf_put_u8

[function] [call site] 00322


               wpa_printf

[function] [call site] 00323


             eap_mschapv2_isKeyAvailable

[function] [call site] 00324


             eap_mschapv2_getKey

[function] [call site] 00325


               get_asymetric_start_key

[function] [call site] 00326


                 sha1_vector

[function] [call site] 00327


               get_asymetric_start_key

[function] [call site] 00328


               wpa_hexdump_key

[function] [call site] 00329


             eap_peer_method_register

[function] [call site] 00330


           os_zalloc

[function] [call site] 00331


           WPA_GET_BE16

[function] [call site] 00332


           wpabuf_alloc_copy

[function] [call site] 00333


             wpabuf_alloc

[function] [call site] 00334


             wpabuf_put_data

[function] [call site] 00335


           wpa_hexdump_buf

[function] [call site] 00336


             wpabuf_head

[function] [call site] 00337


             wpabuf_len

[function] [call site] 00338


             wpa_hexdump

[function] [call site] 00339


           wpa_hexdump_buf

[function] [call site] 00340


           wpabuf_free

[function] [call site] 00341


           wpabuf_free

[function] [call site] 00342