Fuzz introspector: sig_fuzz
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
57 120 sshkey_ssh_name_from_type_nid call site: 00120 cert_free
45 31 sshlog call site: 00031 match_pattern_list
18 101 sshbuf_ptr call site: 00101 sshbuf_put
10 11 sshkey_is_cert call site: 00011 cert_new
9 88 sshkey_impl_from_key call site: 00088 helper_by_key
8 22 sshbuf_free call site: 00022 ssh_signal
7 80 sshbuf_free call site: 00080 sshkey_free
2 98 sshbuf_len call site: 00098 sshbuf_putb
1 7 sshkey_generate call site: 00007 sshkey_impl_from_type
1 77 sshbuf_free call site: 00077 freezero
1 203 LLVMFuzzerTestOneInput call site: 00203 sshkey_verify

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 __cxa_guard_acquire [call site] 00001
1 generate_or_die(int, unsigned int) [function] [call site] 00002
2 sshkey_generate [function] [call site] 00003
3 sshkey_type_is_cert [function] [call site] 00004
4 sshkey_impl_from_type [function] [call site] 00005
3 sshkey_impl_from_type [function] [call site] 00006
3 sshkey_new [function] [call site] 00007
4 sshkey_impl_from_type [function] [call site] 00008
4 calloc [call site] 00009
4 sshkey_is_cert [function] [call site] 00010
5 sshkey_type_is_cert [function] [call site] 00011
4 cert_new [function] [call site] 00012
5 calloc [call site] 00013
5 sshbuf_new_label [function] [call site] 00014
6 calloc [call site] 00015
6 strncpy [call site] 00016
6 calloc [call site] 00017
5 sshbuf_new_label [function] [call site] 00018
5 sshbuf_new_label [function] [call site] 00019
5 cert_free [function] [call site] 00020
6 sshbuf_free [function] [call site] 00021
7 sshbuf_check_sanity [function] [call site] 00022
8 ssh_signal [function] [call site] 00023
9 memset [call site] 00024
9 sigfillset [call site] 00025
9 sigaction [call site] 00026
9 strsignal [call site] 00027
9 __errno_location [call site] 00028
9 strerror [call site] 00029
9 sshlog [function] [call site] 00030
10 sshlogv [function] [call site] 00031
11 strrchr [call site] 00032
11 getpid [call site] 00033
11 snprintf [call site] 00034
11 match_pattern_list [function] [call site] 00035
12 strlen [call site] 00036
12 __ctype_b_loc [call site] 00037
12 tolower [call site] 00038
12 match_pattern [function] [call site] 00039
13 strlen [call site] 00040
13 xcalloc [function] [call site] 00041
14 sshfatal [function] [call site] 00042
15 sshlogv [function] [call site] 00043
16 snprintf [call site] 00044
16 snprintf [call site] 00045
16 strlcpy [function] [call site] 00046
16 do_log [function] [call site] 00047
17 __errno_location [call site] 00048
17 snprintf [call site] 00049
17 vsnprintf [call site] 00050
17 vsnprintf [call site] 00051
17 snprintf [call site] 00052
17 strlcpy [function] [call site] 00053
17 strnvis [function] [call site] 00054
18 __ctype_b_loc [call site] 00055
18 vis [function] [call site] 00056
19 __ctype_b_loc [call site] 00057
19 __ctype_b_loc [call site] 00058
18 vis [function] [call site] 00059
17 snprintf [call site] 00060
17 strlen [call site] 00061
17 write [call site] 00062
17 openlog [call site] 00063
17 syslog [call site] 00064
17 closelog [call site] 00065
17 __errno_location [call site] 00066
15 cleanup_exit [function] [call site] 00067
16 _exit [call site] 00068
14 sshfatal [function] [call site] 00069
14 calloc [call site] 00070
14 sshfatal [function] [call site] 00071
13 xcalloc [function] [call site] 00072
13 epsilon_closure [function] [call site] 00073
13 memset [call site] 00074
13 epsilon_closure [function] [call site] 00075
8 raise [call site] 00076
7 sshbuf_free [function] [call site] 00077
8 freezero [function] [call site] 00078
9 explicit_bzero [call site] 00079
8 freezero [function] [call site] 00080
6 sshbuf_free [function] [call site] 00081
6 sshbuf_free [function] [call site] 00082
6 sshkey_free [function] [call site] 00083
7 sshkey_free_contents [function] [call site] 00084
8 pkcs11_key_free [function] [call site] 00085
9 sshkey_type [function] [call site] 00086
10 sshkey_impl_from_key [function] [call site] 00087
11 sshkey_impl_from_type_nid [function] [call site] 00088
9 sshlog [function] [call site] 00089
9 helper_by_key [function] [call site] 00090
10 sshbuf_new_label [function] [call site] 00091
10 sshfatal [function] [call site] 00092
10 sshkey_putb [function] [call site] 00093
11 to_blob_buf [function] [call site] 00094
12 sshkey_type_plain [function] [call site] 00095
12 sshkey_type_is_cert [function] [call site] 00096
12 sshbuf_len [function] [call site] 00097
13 sshbuf_check_sanity [function] [call site] 00098
12 sshbuf_putb [function] [call site] 00099
13 sshbuf_ptr [function] [call site] 00100
14 sshbuf_check_sanity [function] [call site] 00101
13 sshbuf_len [function] [call site] 00102
13 sshbuf_put [function] [call site] 00103
14 sshbuf_reserve [function] [call site] 00104
15 sshbuf_allocate [function] [call site] 00105
16 sshbuf_check_reserve [function] [call site] 00106
17 sshbuf_check_sanity [function] [call site] 00107
16 sshbuf_maybe_pack [function] [call site] 00108
16 recallocarray [function] [call site] 00109
17 calloc [call site] 00110
17 __errno_location [call site] 00111
17 __errno_location [call site] 00112
17 getpagesize [call site] 00113
17 memset [call site] 00114
17 memset [call site] 00115
17 explicit_bzero [call site] 00116
16 sshbuf_check_reserve [function] [call site] 00117
12 sshkey_impl_from_type [function] [call site] 00118
12 sshkey_ssh_name_from_type_nid [function] [call site] 00119
13 sshkey_impl_from_type_nid [function] [call site] 00120
12 sshbuf_put_cstring [function] [call site] 00121
13 strlen [call site] 00122
13 sshbuf_put_string [function] [call site] 00123
14 sshbuf_reserve [function] [call site] 00124
10 ssh_err [function] [call site] 00125
11 ssherr_libcrypto [function] [call site] 00126
12 OPENSSL_init_crypto [call site] 00127
12 ERR_get_error_line_data [call site] 00128
12 ERR_error_string_n [call site] 00129
12 snprintf [call site] 00130
12 sshlog [function] [call site] 00131
12 ERR_reason_error_string [call site] 00132
12 snprintf [call site] 00133
11 __errno_location [call site] 00134
11 strerror [call site] 00135
10 sshfatal [function] [call site] 00136
10 sshbuf_equals [function] [call site] 00137
11 sshbuf_ptr [function] [call site] 00138
11 sshbuf_len [function] [call site] 00139
11 sshbuf_len [function] [call site] 00140
11 sshbuf_ptr [function] [call site] 00141
11 sshbuf_len [function] [call site] 00142
11 memcmp [call site] 00143
10 sshbuf_free [function] [call site] 00144
10 sshbuf_free [function] [call site] 00145
9 sshkey_type [function] [call site] 00146
9 sshfatal [function] [call site] 00147
9 sshbuf_new_label [function] [call site] 00148
9 sshfatal [function] [call site] 00149
9 sshkey_putb [function] [call site] 00150
9 ssh_err [function] [call site] 00151
9 sshfatal [function] [call site] 00152
9 sshbuf_equals [function] [call site] 00153
9 sshfatal [function] [call site] 00154
9 xrecallocarray [function] [call site] 00155
10 recallocarray [function] [call site] 00156
10 sshfatal [function] [call site] 00157
9 helper_terminate [function] [call site] 00158
10 sshfatal [function] [call site] 00159
10 sshlog [function] [call site] 00160
10 close [call site] 00161
10 sshfatal [function] [call site] 00162
10 xrecallocarray [function] [call site] 00163
10 sshbuf_free [function] [call site] 00164
8 sshkey_impl_from_type [function] [call site] 00165
8 sshkey_is_cert [function] [call site] 00166
8 cert_free [function] [call site] 00167
9 freezero [function] [call site] 00168
8 freezero [function] [call site] 00169
8 sshkey_prekey_free [function] [call site] 00170
9 munmap [call site] 00171
7 freezero [function] [call site] 00172
4 sshkey_free [function] [call site] 00173
3 sshkey_free [function] [call site] 00174
2 ssh_err [function] [call site] 00175
2 fprintf [call site] 00176
2 abort [call site] 00177
1 __cxa_guard_release [call site] 00178
1 __cxa_guard_acquire [call site] 00179
1 generate_or_die(int, unsigned int) [function] [call site] 00180
1 __cxa_guard_release [call site] 00181
1 __cxa_guard_acquire [call site] 00182
1 generate_or_die(int, unsigned int) [function] [call site] 00183
1 __cxa_guard_release [call site] 00184
1 __cxa_guard_acquire [call site] 00185
1 generate_or_die(int, unsigned int) [function] [call site] 00186
1 __cxa_guard_release [call site] 00187
1 __cxa_guard_acquire [call site] 00188
1 generate_or_die(int, unsigned int) [function] [call site] 00189
1 __cxa_guard_release [call site] 00190
1 __cxa_guard_acquire [call site] 00191
1 strlen [call site] 00192
1 __cxa_guard_release [call site] 00193
1 sshkey_verify [function] [call site] 00194
2 sshkey_impl_from_key [function] [call site] 00195
1 sshkey_sig_details_free [function] [call site] 00196
2 freezero [function] [call site] 00197
1 sshkey_verify [function] [call site] 00198
1 sshkey_sig_details_free [function] [call site] 00199
1 sshkey_verify [function] [call site] 00200
1 sshkey_sig_details_free [function] [call site] 00201
1 sshkey_verify [function] [call site] 00202
1 sshkey_sig_details_free [function] [call site] 00203
1 sshkey_verify [function] [call site] 00204
1 sshkey_sig_details_free [function] [call site] 00205
1 __cxa_guard_abort [call site] 00206
1 __cxa_guard_abort [call site] 00207
1 __cxa_guard_abort [call site] 00208
1 __cxa_guard_abort [call site] 00209
1 __cxa_guard_abort [call site] 00210