Fuzz introspector: radius
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
39 39 1 :

['wpabuf_put_u8']

39 130 radius_msg_add_attr call site: 00055 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:796
16 18 2 :

['wpabuf_mhead', 'wpabuf_resize']

55 334 radius_msg_add_attr call site: 00049 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:789
14 14 1 :

['wpa_debug_print_timestamp']

14 14 _wpa_hexdump call site: 00162 /src/hostap/src/utils/wpa_debug.c:281
2 2 1 :

['atoi']

2 2 wpa_fuzzer_set_debug_level call site: 00002 /src/hostap/tests/fuzzing/sae/../fuzzer-common.c:23
0 7 1 :

['radius_msg_free']

0 7 radius_msg_new call site: 00012 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:111
0 4 1 :

['MD5Transform']

0 4 MD5Update call site: 00082 /src/hostap/src/crypto/md5-internal.c:121
0 2 1 :

['wpabuf_len']

0 2 radius_msg_finish call site: 00095 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:479
0 0 None 55 342 radius_msg_add_attr call site: 00041 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:751
0 0 None 55 336 radius_msg_add_attr call site: 00046 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:765
0 0 None 55 336 radius_msg_add_attr call site: 00047 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:775
0 0 None 2 33 radius_msg_finish call site: 00035 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:468
0 0 None 2 8 radius_msg_finish call site: 00034 /src/hostap/tests/fuzzing/radius/../../../src/radius/radius.c:464

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 wpa_fuzzer_set_debug_level [function] [call site] 00001
2 getenv [call site] 00002
2 atoi [call site] 00003
1 os_program_init [function] [call site] 00004
2 os_get_random [function] [call site] 00005
2 srandom [call site] 00006
1 radius_msg_new [function] [call site] 00007
2 os_zalloc [function] [call site] 00008
3 calloc [call site] 00009
2 wpabuf_alloc [function] [call site] 00010
3 os_zalloc [function] [call site] 00011
2 radius_msg_initialize [function] [call site] 00012
2 radius_msg_free [function] [call site] 00015
3 wpabuf_free [function] [call site] 00016
2 wpabuf_put [function] [call site] 00017
3 wpabuf_mhead_u8 [function] [call site] 00018
4 wpabuf_mhead [function] [call site] 00019
3 wpabuf_len [function] [call site] 00020
3 wpabuf_overflow [function] [call site] 00021
4 wpa_printf [function] [call site] 00022
5 wpa_debug_print_timestamp [function] [call site] 00023
6 os_get_time [function] [call site] 00024
7 gettimeofday [call site] 00025
6 fprintf [call site] 00026
6 printf [call site] 00027
5 vfprintf [call site] 00028
5 fprintf [call site] 00029
5 vprintf [call site] 00030
5 printf [call site] 00031
4 abort [call site] 00032
2 radius_msg_set_hdr [function] [call site] 00033
1 radius_msg_finish [function] [call site] 00034
2 radius_msg_auth_pos [function] [call site] 00035
3 radius_msg_get_attr_ptr [function] [call site] 00036
4 radius_get_attr_hdr [function] [call site] 00037
5 wpabuf_mhead_u8 [function] [call site] 00038
6 wpabuf_mhead [function] [call site] 00039
3 radius_msg_add_msg_auth [function] [call site] 00040
4 radius_msg_add_attr [function] [call site] 00041
5 radius_is_ext_type [function] [call site] 00042
5 wpa_printf [function] [call site] 00043
5 radius_is_ext_type [function] [call site] 00044
5 wpa_printf [function] [call site] 00045
5 radius_is_long_ext_type [function] [call site] 00046
5 radius_is_ext_type [function] [call site] 00047
5 wpa_printf [function] [call site] 00048
5 wpabuf_tailroom [function] [call site] 00049
5 wpabuf_resize [function] [call site] 00050
6 wpabuf_alloc [function] [call site] 00051
6 realloc [call site] 00052
6 realloc [call site] 00053
5 wpabuf_mhead [function] [call site] 00054
5 radius_is_long_ext_type [function] [call site] 00055
5 wpabuf_put [function] [call site] 00056
5 wpabuf_put_u8 [function] [call site] 00057
6 wpabuf_put [function] [call site] 00058
5 wpabuf_put_data [function] [call site] 00059
6 wpabuf_put [function] [call site] 00060
5 radius_msg_add_attr_to_array [function] [call site] 00061
6 os_realloc_array [function] [call site] 00062
7 realloc [call site] 00063
6 wpabuf_head_u8 [function] [call site] 00064
7 wpabuf_head [function] [call site] 00065
5 radius_is_ext_type [function] [call site] 00066
5 wpabuf_put [function] [call site] 00067
5 wpabuf_put_data [function] [call site] 00068
5 radius_msg_add_attr_to_array [function] [call site] 00069
5 wpabuf_put [function] [call site] 00070
5 wpabuf_put_data [function] [call site] 00071
5 radius_msg_add_attr_to_array [function] [call site] 00072
4 wpa_printf [function] [call site] 00073
2 wpabuf_len [function] [call site] 00074
2 __bswap_16 [function] [call site] 00075
2 wpabuf_head [function] [call site] 00076
2 wpabuf_len [function] [call site] 00077
2 hmac_md5 [function] [call site] 00078
3 hmac_md5_vector [function] [call site] 00079
4 md5_vector [function] [call site] 00080
5 MD5Update [function] [call site] 00082
6 MD5Transform [function] [call site] 00083
6 MD5Transform [function] [call site] 00084
5 MD5Final [function] [call site] 00085
6 MD5Transform [function] [call site] 00086
6 __hide_aliasing_typecast [function] [call site] 00087
6 __hide_aliasing_typecast [function] [call site] 00088
6 MD5Transform [function] [call site] 00089
4 md5_vector [function] [call site] 00090
4 md5_vector [function] [call site] 00091
2 wpa_printf [function] [call site] 00092
2 wpabuf_len [function] [call site] 00093
2 __bswap_16 [function] [call site] 00094
2 wpabuf_len [function] [call site] 00095
2 wpabuf_len [function] [call site] 00096
2 wpa_printf [function] [call site] 00097
1 radius_msg_parse [function] [call site] 00098
2 __bswap_16 [function] [call site] 00099
2 wpa_printf [function] [call site] 00100
2 wpa_printf [function] [call site] 00101
2 os_zalloc [function] [call site] 00102
2 wpabuf_alloc_copy [function] [call site] 00103
3 wpabuf_alloc [function] [call site] 00104
3 wpabuf_put_data [function] [call site] 00105
2 radius_msg_initialize [function] [call site] 00106
2 radius_msg_free [function] [call site] 00107
2 wpabuf_mhead [function] [call site] 00108
2 wpabuf_mhead_u8 [function] [call site] 00109
2 wpabuf_mhead_u8 [function] [call site] 00110
2 wpabuf_len [function] [call site] 00111
2 radius_msg_add_attr_to_array [function] [call site] 00112
2 radius_msg_free [function] [call site] 00113
1 radius_msg_dump [function] [call site] 00114
2 radius_code_string [function] [call site] 00115
2 __bswap_16 [function] [call site] 00116
2 wpa_printf [function] [call site] 00117
2 radius_get_attr_hdr [function] [call site] 00118
2 radius_msg_dump_attr [function] [call site] 00119
3 radius_is_ext_type [function] [call site] 00120
3 wpa_printf [function] [call site] 00121
3 radius_get_attr_type [function] [call site] 00122
3 wpa_printf [function] [call site] 00123
3 radius_get_attr_type [function] [call site] 00124
3 wpa_printf [function] [call site] 00125
3 printf_encode [function] [call site] 00126
4 snprintf [call site] 00127
3 wpa_printf [function] [call site] 00128
3 inet_ntoa [call site] 00129
3 wpa_printf [function] [call site] 00130
3 wpa_printf [function] [call site] 00131
3 inet_ntop [call site] 00132
3 wpa_printf [function] [call site] 00133
3 wpa_printf [function] [call site] 00134
3 wpa_snprintf_hex [function] [call site] 00135
4 _wpa_snprintf_hex [function] [call site] 00136
5 snprintf [call site] 00137
5 os_snprintf_error [function] [call site] 00138
3 wpa_printf [function] [call site] 00139
3 WPA_GET_BE32 [function] [call site] 00140
3 wpa_printf [function] [call site] 00141
3 wpa_printf [function] [call site] 00142
1 radius_msg_get_attr [function] [call site] 00143
2 radius_get_attr_hdr [function] [call site] 00144
1 radius_msg_get_vlanid [function] [call site] 00145
2 radius_get_attr_hdr [function] [call site] 00146
2 WPA_GET_BE24 [function] [call site] 00147
2 WPA_GET_BE24 [function] [call site] 00148
2 atoi [call site] 00149
2 WPA_GET_BE24 [function] [call site] 00150
2 qsort [call site] 00151
1 radius_msg_get_eap [function] [call site] 00153
2 radius_get_attr_hdr [function] [call site] 00154
2 wpabuf_alloc [function] [call site] 00155
2 radius_get_attr_hdr [function] [call site] 00156
2 wpabuf_put_data [function] [call site] 00157
1 wpa_hexdump_buf [function] [call site] 00158
2 wpabuf_head [function] [call site] 00159
2 wpabuf_len [function] [call site] 00160
2 wpa_hexdump [function] [call site] 00161
3 _wpa_hexdump [function] [call site] 00162
4 wpa_debug_print_timestamp [function] [call site] 00163
4 fprintf [call site] 00164
4 fprintf [call site] 00165
4 fprintf [call site] 00166
4 fprintf [call site] 00167
4 fprintf [call site] 00168
4 printf [call site] 00169
4 printf [call site] 00170
4 printf [call site] 00171
4 printf [call site] 00172
4 printf [call site] 00173
1 wpabuf_free [function] [call site] 00174
1 radius_msg_get_tunnel_password [function] [call site] 00175
2 radius_get_attr_hdr [function] [call site] 00176
2 os_memdup [function] [call site] 00177
2 md5_vector [function] [call site] 00178
2 wpa_printf [function] [call site] 00179
2 md5_vector [function] [call site] 00180
2 wpa_printf [function] [call site] 00181
1 wpa_printf [function] [call site] 00182
1 radius_msg_free [function] [call site] 00183
1 radius_msg_free [function] [call site] 00184
1 os_program_deinit [function] [call site] 00185