Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
169	748	4 : View List ['free', 'strchr', 'xstrdup', 'a2tun']	169	748	a2tun	call site: 00084	/src/hpn-ssh/misc.c:580
2	2	1 : View List ['getpagesize']	8	8	recallocarray	call site: 00052	/src/hpn-ssh/openbsd-compat/recallocarray.c:64
2	2	1 : View List ['ntohs']	2	2	a2port	call site: 00077	/src/hpn-ssh/misc.c:568
0	11	1 : View List ['sshauthopt_free']	0	11	sshauthopt_merge	call site: 00149	/src/hpn-ssh/auth-options.c:635
0	0	None	12	100	sshauthopt_merge	call site: 00135	/src/hpn-ssh/auth-options.c:541
0	0	None	8	19	sshauthopt_merge	call site: 00146	/src/hpn-ssh/auth-options.c:614
0	0	None	6	669	sshauthopt_parse	call site: 00003	/src/hpn-ssh/auth-options.c:333
0	0	None	2	2	recallocarray	call site: 00054	/src/hpn-ssh/openbsd-compat/recallocarray.c:77
0	0	None	2	2	strtonum	call site: 00072	/src/hpn-ssh/openbsd-compat/strtonum.c:52
0	0	None	0	11	sshauthopt_parse	call site: 00004	/src/hpn-ssh/auth-options.c:335
0	0	None	0	11	sshauthopt_parse	call site: 00042	/src/hpn-ssh/auth-options.c:405
0	0	None	0	11	sshauthopt_parse	call site: 00045	/src/hpn-ssh/auth-options.c:417

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           sshauthopt_new

[function] [call site] 00001


             calloc

[call site] 00002


           sshauthopt_parse

[function] [call site] 00003


             sshauthopt_new_with_keys_defaults

[function] [call site] 00004


               sshauthopt_new

[function] [call site] 00005


             opt_flag

[function] [call site] 00006


               strlen

[call site] 00007


               strncasecmp

[call site] 00008


               strncasecmp

[call site] 00009


             opt_flag

[function] [call site] 00010


             opt_flag

[function] [call site] 00011


             opt_flag

[function] [call site] 00012


             opt_flag

[function] [call site] 00013


             opt_flag

[function] [call site] 00014


             opt_flag

[function] [call site] 00015


             opt_flag

[function] [call site] 00016


             opt_flag

[function] [call site] 00017


             opt_match

[function] [call site] 00018


               strlen

[call site] 00019


               strncasecmp

[call site] 00020


               strlen

[call site] 00021


               strlen

[call site] 00022


             opt_dequote

[function] [call site] 00023


               strlen

[call site] 00024


             opt_match

[function] [call site] 00025


             opt_dequote

[function] [call site] 00026


             opt_match

[function] [call site] 00027


             opt_dequote

[function] [call site] 00028


             opt_match

[function] [call site] 00029


             opt_dequote

[function] [call site] 00030


             parse_absolute_time

[function] [call site] 00031


               strlen

[call site] 00032


               strcasecmp

[call site] 00033


               strcasecmp

[call site] 00034


               snprintf

[call site] 00035


               snprintf

[call site] 00036


               snprintf

[call site] 00037


               memset

[call site] 00038


               strptime

[call site] 00039


               timegm

[call site] 00040


               mktime

[call site] 00041


             opt_match

[function] [call site] 00042


             opt_dequote

[function] [call site] 00043


             strchr

[call site] 00044


             strdup

[call site] 00045


             valid_env_name

[function] [call site] 00046


               __ctype_b_loc

[call site] 00047


             strncmp

[call site] 00048


             recallocarray

[function] [call site] 00049


               calloc

[call site] 00050


               __errno_location

[call site] 00051


               __errno_location

[call site] 00052


               getpagesize

[call site] 00053


               memset

[call site] 00054


               memset

[call site] 00055


               explicit_bzero

[call site] 00056


             opt_match

[function] [call site] 00057


             handle_permit

[function] [call site] 00058


               opt_dequote

[function] [call site] 00059


               strchr

[call site] 00060


               asprintf

[call site] 00061


               strdup

[call site] 00062


               hpdelim2

[function] [call site] 00063


                 strchr

[call site] 00064


                 strpbrk

[call site] 00065


                 strlen

[call site] 00066


               strlen

[call site] 00067


               strcmp

[call site] 00068


               a2port

[function] [call site] 00069


                 strtonum

[function] [call site] 00070


                   __errno_location

[call site] 00071


                   __errno_location

[call site] 00072


                   strtoll

[call site] 00073


                   __errno_location

[call site] 00074


                   __errno_location

[call site] 00075


                   __errno_location

[call site] 00076


                 getservbyname

[call site] 00077


                 ntohs

[call site] 00078


               recallocarray

[function] [call site] 00079


             opt_match

[function] [call site] 00080


             handle_permit

[function] [call site] 00081


             opt_match

[function] [call site] 00082


             opt_dequote

[function] [call site] 00083


             a2tun

[function] [call site] 00084


               xstrdup

[function] [call site] 00085


                 strlen

[call site] 00086


                 xmalloc

[function] [call site] 00087


                   sshfatal

[function] [call site] 00088


                     sshlogv

[function] [call site] 00089


                       strrchr

[call site] 00090


                       getpid

[call site] 00091


                       snprintf

[call site] 00092


                       match_pattern_list

[function] [call site] 00093


                         strlen

[call site] 00094


                         __ctype_b_loc

[call site] 00095


                         tolower

[call site] 00096


                         match_pattern

[function] [call site] 00097


                           match_pattern

[function] [call site] 00098


                             match_pattern

[function] [call site] 00099


                       snprintf

[call site] 00100


                       snprintf

[call site] 00101


                       strlcpy

[function] [call site] 00102


                       do_log

[function] [call site] 00103


                         __errno_location

[call site] 00104


                         snprintf

[call site] 00105


                         vsnprintf

[call site] 00106


                         vsnprintf

[call site] 00107


                         snprintf

[call site] 00108


                         strlcpy

[function] [call site] 00109


                         strnvis

[function] [call site] 00110


                           __ctype_b_loc

[call site] 00111

vis

[function] [call site] 00112


                             __ctype_b_loc

[call site] 00113


                             __ctype_b_loc

[call site] 00114

vis

[function] [call site] 00115


                         snprintf

[call site] 00116


                         strlen

[call site] 00117


                         write

[call site] 00118


                         openlog

[call site] 00119


                         syslog

[call site] 00120


                         closelog

[call site] 00121


                         __errno_location

[call site] 00122


                     cleanup_exit

[function] [call site] 00123


                       _exit

[call site] 00124


                   sshfatal

[function] [call site] 00125


               strchr

[call site] 00126


               a2tun

[function] [call site] 00127


                 a2tun

[function] [call site] 00128


                   a2tun

[function] [call site] 00129


                     strcasecmp

[call site] 00130


                     strtonum

[function] [call site] 00131


             sshauthopt_free

[function] [call site] 00132


               freezero

[function] [call site] 00133


                 explicit_bzero

[call site] 00134


           sshauthopt_merge

[function] [call site] 00135


             sshauthopt_new

[function] [call site] 00136


             strdup

[call site] 00137


             strdup

[call site] 00138


             dup_strings

[function] [call site] 00139


               calloc

[call site] 00140


               strdup

[call site] 00141


             dup_strings

[function] [call site] 00142


             dup_strings

[function] [call site] 00143


             dup_strings

[function] [call site] 00144


             dup_strings

[function] [call site] 00145


             dup_strings

[function] [call site] 00146


             strcmp

[call site] 00147


             strdup

[call site] 00148


             strdup

[call site] 00149


             strdup

[call site] 00150


             sshauthopt_free

[function] [call site] 00151


           sshauthopt_free

[function] [call site] 00152


           sshauthopt_free

[function] [call site] 00153


           sshauthopt_free

[function] [call site] 00154