The followings are the branches where fuzzer fails to bypass.
Unique non-covered Complexity | Unique Reachable Complexities | Unique Reachable Functions | All non-covered Complexity | All Reachable Complexity | Function Name | Function Callsite | Blocked Branch |
---|---|---|---|---|---|---|---|
463 | 780 |
9 :
['eap_aka_learn_ids', 'eap_aka_response_reauth', 'eap_sim_derive_keys_reauth', 'eap_aka_clear_identities', 'eap_aka_state', 'eap_aka_prime_derive_keys_reauth', 'eap_sim_parse_encr', 'free', 'wpa_hexdump'] |
463 | 1179 | eap_aka_process_reauthentication | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:1366 |
190 | 256 |
4 :
['eap_sim_msg_add', 'eap_sim_msg_add_encr_start', 'eap_sim_msg_add_encr_end', 'eap_sim_msg_free'] |
190 | 398 | eap_aka_response_notification | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:867 |
101 | 101 |
2 :
['eap_aka_ext_sim_req', 'eap_aka_ext_sim_result'] |
101 | 101 | eap_aka_umts_auth | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:292 |
97 | 97 |
1 :
['eap_aka_process_notification_reauth'] |
97 | 97 | eap_aka_process_notification_auth | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:1282 |
13 | 13 |
2 :
['__ctype_b_loc', 'wpa_debug_print_timestamp'] |
13 | 13 | _wpa_hexdump_ascii | call site: 00000 | /src/hostap/tests/fuzzing/json/../../../src/utils/wpa_debug.c:423 |
11 | 11 |
1 :
['wpa_debug_print_timestamp'] |
11 | 11 | _wpa_hexdump | call site: 00035 | /src/hostap/tests/fuzzing/json/../../../src/utils/wpa_debug.c:281 |
2 | 2 |
1 :
['eap_aka_prime_derive_keys'] |
2 | 559 | eap_aka_process_challenge | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:1179 |
2 | 2 |
1 :
['eap_sm_request_identity'] |
2 | 2 | eap_aka_process | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:1477 |
2 | 2 |
1 :
['eap_sim_verify_mac_sha256'] |
2 | 2 | eap_aka_verify_mac | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:951 |
2 | 2 |
1 :
['atoi'] |
2 | 2 | wpa_fuzzer_set_debug_level | call site: 00002 | /src/hostap/tests/fuzzing/json/../fuzzer-common.c:23 |
0 | 137 |
2 :
['eap_aka_client_error', 'wpabuf_free'] |
0 | 137 | eap_aka_process_identity | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:932 |
0 | 73 |
1 :
['eap_sim_msg_add_mac'] |
0 | 142 | eap_aka_response_notification | call site: 00000 | /src/hostap/tests/fuzzing/eap-aka-peer/../../../src/eap_peer/eap_aka.c:883 |
LLVMFuzzerTestOneInput
[function]
[call site]
00000
wpa_fuzzer_set_debug_level
[function]
[call site]
00001
getenv
[call site]
00002
atoi
[call site]
00003
eap_peer_aka_register
[function]
[call site]
00004
eap_peer_method_alloc
[function]
[call site]
00005
os_zalloc
[function]
[call site]
00006
calloc
[call site]
00007
eap_peer_method_register
[function]
[call site]
00008
os_zalloc
[function]
[call site]
00009
WPA_GET_BE16
[function]
[call site]
00010
wpabuf_alloc_copy
[function]
[call site]
00011
wpabuf_alloc
[function]
[call site]
00012
os_zalloc
[function]
[call site]
00013
wpabuf_put_data
[function]
[call site]
00014
wpabuf_put
[function]
[call site]
00015
wpabuf_mhead_u8
[function]
[call site]
00016
wpabuf_mhead
[function]
[call site]
00017
wpabuf_len
[function]
[call site]
00018
wpabuf_overflow
[function]
[call site]
00019
wpa_printf
[function]
[call site]
00020
wpa_debug_print_timestamp
[function]
[call site]
00021
os_get_time
[function]
[call site]
00022
gettimeofday
[call site]
00023
fprintf
[call site]
00024
printf
[call site]
00025
vfprintf
[call site]
00026
fprintf
[call site]
00027
vprintf
[call site]
00028
printf
[call site]
00029
abort
[call site]
00030
wpa_hexdump_buf
[function]
[call site]
00031
wpabuf_head
[function]
[call site]
00032
wpabuf_len
[function]
[call site]
00033
wpa_hexdump
[function]
[call site]
00034
_wpa_hexdump
[function]
[call site]
00035
wpa_debug_print_timestamp
[function]
[call site]
00036
fprintf
[call site]
00037
fprintf
[call site]
00038
fprintf
[call site]
00039
fprintf
[call site]
00040
fprintf
[call site]
00041
printf
[call site]
00042
printf
[call site]
00043
printf
[call site]
00044
printf
[call site]
00045
printf
[call site]
00046
wpa_hexdump_buf
[function]
[call site]
00047
wpabuf_free
[function]
[call site]
00048
wpabuf_free
[function]
[call site]
00049