Fuzz introspector: fuzz-header
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
74 158 hts_log_vprint call site: 00158 secret_vfprintf
53 344 cookie_domain_is_suffix call site: 00344 cookie_remove
34 262 cookie_host call site: 00262 hts_convertStringUTF8ToIDNA
20 129 treathead_opt call site: 00129 hts_parse_retry_after
13 466 has_login call site: 00466 adr_nologin_r
5 13 strcpy_safe_ call site: 00013 log_abort_
5 103 treathead_opt call site: 00103 hts_header_param
4 318 treathead_opt call site: 00318 cookie_expires_time
3 252 strrchr_limit call site: 00252 strchr
3 313 treathead_opt call site: 00313 cookie_max_age_time
2 419 cookie_nextfield call site: 00419 cookie_delete
1 42 LLVMFuzzerTestOneInput call site: 00042 treathead_opt

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_strdup [function] [call site] 00001
1 calloc [call site] 00002
1 strchr [call site] 00003
1 strlen [call site] 00004
1 treatfirstline [function] [call site] 00005
2 strfield [function] [call site] 00006
2 hts_status_code [function] [call site] 00007
2 strlen [call site] 00008
2 hts_is_control_free [function] [call site] 00009
3 strlen [call site] 00010
3 hts_is_control_free_sized [function] [call site] 00011
2 strcpy_safe_ [function] [call site] 00012
3 abortf_ [function] [call site] 00013
4 hts_get_error_callback [function] [call site] 00014
4 log_abort_ [function] [call site] 00015
5 fprintf [call site] 00016
5 fflush [call site] 00017
4 abort [call site] 00018
3 strncat_safe_ [function] [call site] 00019
4 strlen_safe_ [function] [call site] 00020
5 abortf_ [function] [call site] 00021
5 htssafe_strnlen_ [function] [call site] 00022
6 strnlen [call site] 00023
5 strlen [call site] 00024
5 abortf_ [function] [call site] 00025
4 strlen_safe_ [function] [call site] 00026
4 abortf_ [function] [call site] 00027
2 infostatuscode [function] [call site] 00028
3 infostatuscode_const [function] [call site] 00029
3 strcpy_safe_ [function] [call site] 00030
3 strcpy_safe_ [function] [call site] 00031
2 strcpy_safe_ [function] [call site] 00032
2 strcpy_safe_ [function] [call site] 00033
2 strcpy_safe_ [function] [call site] 00034
2 strcpy_safe_ [function] [call site] 00035
2 strcpy_safe_ [function] [call site] 00036
2 strcpy_safe_ [function] [call site] 00037
2 strcpy_safe_ [function] [call site] 00038
2 strcpy_safe_ [function] [call site] 00039
2 strcpy_safe_ [function] [call site] 00040
2 strcpy_safe_ [function] [call site] 00041
1 treathead [function] [call site] 00042
2 treathead_opt [function] [call site] 00043
3 strfield [function] [call site] 00044
3 hts_scan_llint [function] [call site] 00045
4 __ctype_b_loc [call site] 00046
4 hts_parse_llint [function] [call site] 00047
5 is_decimal_digit [function] [call site] 00048
4 is_decimal_digit [function] [call site] 00049
4 hts_parse_llint [function] [call site] 00050
3 strfield [function] [call site] 00051
3 hts_header_param [function] [call site] 00052
4 span_in_set [function] [call site] 00053
5 strchr [call site] 00054
4 span_in_set [function] [call site] 00055
4 span_in_set [function] [call site] 00056
4 param_name_is [function] [call site] 00057
5 tolower [call site] 00058
4 span_in_set [function] [call site] 00059
4 param_escape [function] [call site] 00060
4 param_skip [function] [call site] 00061
5 span_in_set [function] [call site] 00062
5 param_escape [function] [call site] 00063
4 span_in_set [function] [call site] 00064
4 span_in_set [function] [call site] 00065
3 strchr [call site] 00066
3 hts_rtrim [function] [call site] 00067
4 hts_rtrimlen [function] [call site] 00068
5 strlen [call site] 00069
5 strchr [call site] 00070
3 strlen [call site] 00071
3 strcpy_safe_ [function] [call site] 00072
3 strfield [function] [call site] 00073
3 strlen [call site] 00074
3 strcpy_safe_ [function] [call site] 00075
3 strfield [function] [call site] 00076
3 strlen [call site] 00077
3 strcpy_safe_ [function] [call site] 00078
3 strfield [function] [call site] 00079
3 strlen [call site] 00080
3 strcpy_safe_ [function] [call site] 00081
3 strfield [function] [call site] 00082
3 strfield [function] [call site] 00083
3 strfield [function] [call site] 00084
3 strchr [call site] 00085
3 hts_header_param [function] [call site] 00086
3 strspn [call site] 00087
3 strcspn [call site] 00088
3 strncat_safe_ [function] [call site] 00089
3 __isoc99_sscanf [call site] 00090
3 strlen [call site] 00091
3 strcpy_safe_ [function] [call site] 00092
3 strcpy_safe_ [function] [call site] 00093
3 strfield [function] [call site] 00094
3 strncasecmp [call site] 00095
3 hts_scan_llint [function] [call site] 00096
3 hts_scan_llint [function] [call site] 00097
3 hts_scan_llint [function] [call site] 00098
3 strchr [call site] 00099
3 hts_scan_llint [function] [call site] 00100
3 strfield [function] [call site] 00101
3 strfield [function] [call site] 00102
3 strfield [function] [call site] 00103
3 hts_header_param [function] [call site] 00104
3 keep_alive_param [function] [call site] 00105
4 hts_scan_llint [function] [call site] 00106
3 hts_header_param [function] [call site] 00107
3 keep_alive_param [function] [call site] 00108
3 strfield [function] [call site] 00109
3 strfield [function] [call site] 00110
3 strfield [function] [call site] 00111
3 strchr [call site] 00112
3 __isoc99_sscanf [call site] 00113
3 strlen [call site] 00114
3 strcpy_safe_ [function] [call site] 00115
3 hts_codec_parse [function] [call site] 00116
4 strlen [call site] 00117
4 strfield [function] [call site] 00118
4 strlen [call site] 00119
4 strfield [function] [call site] 00120
4 strlen [call site] 00121
4 strfield [function] [call site] 00122
4 strlen [call site] 00123
4 strfield [function] [call site] 00124
4 strlen [call site] 00125
4 strfield [function] [call site] 00126
4 strlen [call site] 00127
4 strfield [function] [call site] 00128
3 strfield [function] [call site] 00129
3 time [call site] 00130
3 hts_parse_retry_after [function] [call site] 00131
4 strspn [call site] 00132
4 hts_parse_llint [function] [call site] 00133
4 hts_parse_date [function] [call site] 00134
5 convert_time_rfc822_pivot [function] [call site] 00135
6 strlen [call site] 00136
6 strcpy_safe_ [function] [call site] 00137
6 lowcase [function] [call site] 00138
6 strchr [call site] 00139
6 strchr [call site] 00140
6 strchr [call site] 00141
6 strspn [call site] 00142
6 strcspn [call site] 00143
6 strncat_safe_ [function] [call site] 00144
6 strstr [call site] 00145
6 strspn [call site] 00146
6 __ctype_b_loc [call site] 00147
6 hts_scan_llint [function] [call site] 00148
5 hts_utc_seconds [function] [call site] 00149
3 strfield [function] [call site] 00150
3 strlen [call site] 00151
3 strcpy_safe_ [function] [call site] 00152
3 hts_location_is_safe [function] [call site] 00153
4 strstr [call site] 00154
3 hts_log_print [function] [call site] 00155
4 abortf_ [function] [call site] 00156
4 hts_log_vprint [function] [call site] 00157
5 abortf_ [function] [call site] 00158
5 __errno_location [call site] 00159
5 fspc_count [function] [call site] 00160
6 strcmp [call site] 00161
6 hts_increment_int [function] [call site] 00162
6 strcmp [call site] 00163
6 hts_increment_int [function] [call site] 00164
6 strcmp [call site] 00165
6 hts_increment_int [function] [call site] 00166
5 fspc [function] [call site] 00167
6 time [call site] 00168
6 hts_localtime [function] [call site] 00169
7 localtime_r [call site] 00170
6 abortf_ [function] [call site] 00171
6 strftime [call site] 00172
6 fprintf [call site] 00173
6 fprintf [call site] 00174
6 hts_store_release_int [function] [call site] 00175
6 hts_store_release_int [function] [call site] 00176
6 hts_store_release_int [function] [call site] 00177
6 strcmp [call site] 00178
6 hts_load_acquire_int [function] [call site] 00179
6 strcmp [call site] 00180
6 hts_load_acquire_int [function] [call site] 00181
6 strcmp [call site] 00182
6 hts_load_acquire_int [function] [call site] 00183
5 secret_vfprintf [function] [call site] 00184
6 secrets_known [function] [call site] 00185
7 hts_mutexlock [function] [call site] 00186
8 abortf_ [function] [call site] 00187
8 hts_load_acquire_mutex [function] [call site] 00188
8 hts_mutexinit [function] [call site] 00189
9 abortf_ [function] [call site] 00190
9 pthread_mutex_init [call site] 00191
8 hts_mutexfree [function] [call site] 00192
9 pthread_mutex_destroy [call site] 00193
8 abortf_ [function] [call site] 00194
8 pthread_mutex_lock [call site] 00195
7 hts_mutexrelease [function] [call site] 00196
8 abortf_ [function] [call site] 00197
8 hts_load_acquire_mutex [function] [call site] 00198
8 abortf_ [function] [call site] 00199
8 pthread_mutex_unlock [call site] 00200
6 vfprintf [call site] 00201
6 vsnprintf [call site] 00202
6 fputs [call site] 00203
6 vsnprintf [call site] 00204
6 hts_secret_fwrite [function] [call site] 00205
7 secret_mask [function] [call site] 00206
8 hts_mutexlock [function] [call site] 00207
8 secret_scan [function] [call site] 00208
9 secret_at [function] [call site] 00209
10 memcmp [call site] 00210
10 login_at [function] [call site] 00211
11 strchr [call site] 00212
11 strlen [call site] 00213
11 strfield [function] [call site] 00214
11 word_start [function] [call site] 00215
12 strchr [call site] 00216
12 strncmp [call site] 00217
8 secret_scan [function] [call site] 00218
8 hts_mutexrelease [function] [call site] 00219
7 fwrite [call site] 00220
7 fputs [call site] 00221
7 fwrite [call site] 00222
5 hts_strerror [function] [call site] 00223
6 abortf_ [function] [call site] 00224
6 __xpg_strerror_r [call site] 00225
6 strclipbuff [function] [call site] 00226
7 abortf_ [function] [call site] 00227
7 strlen [call site] 00228
5 fprintf [call site] 00229
5 fputs [call site] 00230
5 fflush [call site] 00231
5 __errno_location [call site] 00232
3 strlen [call site] 00233
3 hts_log_print [function] [call site] 00234
3 strfield [function] [call site] 00235
3 time [call site] 00236
3 strlen [call site] 00237
3 cookie_host [function] [call site] 00238
4 jump_identification_const [function] [call site] 00239
5 strcmp [call site] 00240
5 jump_protocol_const [function] [call site] 00241
6 strfield [function] [call site] 00242
6 strfield [function] [call site] 00243
6 strfield [function] [call site] 00244
6 strfield [function] [call site] 00245
6 strfield [function] [call site] 00246
6 strfield [function] [call site] 00247
6 strfield [function] [call site] 00248
6 strncmp [call site] 00249
5 strchr [call site] 00250
5 strrchr_limit [function] [call site] 00251
6 strrchr [call site] 00252
6 strchr [call site] 00253
4 strchr [call site] 00254
4 strlen [call site] 00255
4 strchr [call site] 00256
4 strchr [call site] 00257
4 strlen [call site] 00258
4 strncat_safe_ [function] [call site] 00259
4 hts_lowcase [function] [call site] 00260
4 strlen [call site] 00261
4 hts_isStringAscii [function] [call site] 00262
4 strlen [call site] 00263
4 cookie_host_refusal [function] [call site] 00264
5 hts_isStringUTF8 [function] [call site] 00265
5 hts_readUTF8 [function] [call site] 00266
6 nlz8 [function] [call site] 00267
5 cookie_is_capital [function] [call site] 00268
4 strlen [call site] 00269
4 hts_convertStringUTF8ToIDNA [function] [call site] 00270
5 realloc [call site] 00271
5 abortf_ [function] [call site] 00272
5 realloc [call site] 00273
5 abortf_ [function] [call site] 00274
5 realloc [call site] 00275
5 abortf_ [function] [call site] 00276
5 realloc [call site] 00277
5 abortf_ [function] [call site] 00278
5 nlz8 [function] [call site] 00279
5 abortf_ [function] [call site] 00280
5 abortf_ [function] [call site] 00281
5 punycode_encode [function] [call site] 00282
6 encode_basic [function] [call site] 00283
6 encode_digit [function] [call site] 00284
6 encode_digit [function] [call site] 00285
6 adapt [function] [call site] 00286
5 realloc [call site] 00287
5 abortf_ [function] [call site] 00288
5 realloc [call site] 00289
5 abortf_ [function] [call site] 00290
5 realloc [call site] 00291
5 abortf_ [function] [call site] 00292
4 strlen [call site] 00293
4 strcpy_safe_ [function] [call site] 00294
4 strchr [call site] 00295
4 strlen [call site] 00296
3 strcpy_safe_ [function] [call site] 00297
3 strcpy_safe_ [function] [call site] 00298
3 strcpy_safe_ [function] [call site] 00299
3 strcpy_safe_ [function] [call site] 00300
3 strncat_safe_ [function] [call site] 00301
3 strncat_safe_ [function] [call site] 00302
3 strcpy_safe_ [function] [call site] 00303
3 strcpy_safe_ [function] [call site] 00304
3 strlen [call site] 00305
3 strfield [function] [call site] 00306
3 strcmp [call site] 00307
3 strcpy_safe_ [function] [call site] 00308
3 strlen [call site] 00309
3 strfield [function] [call site] 00310
3 strcpy_safe_ [function] [call site] 00311
3 strlen [call site] 00312
3 strfield [function] [call site] 00313
3 cookie_max_age_time [function] [call site] 00314
4 strspn [call site] 00315
4 cookie_bound_expiry [function] [call site] 00316
3 strlen [call site] 00317
3 strfield [function] [call site] 00318
3 cookie_expires_time [function] [call site] 00319
4 convert_time_rfc822_pivot [function] [call site] 00320
4 hts_utc_seconds [function] [call site] 00321
4 cookie_bound_expiry [function] [call site] 00322
3 strlen [call site] 00323
3 strfield [function] [call site] 00324
3 strlen [call site] 00325
3 strfield [function] [call site] 00326
3 strfield [function] [call site] 00327
3 strfield [function] [call site] 00328
3 cookie_domain_allowed [function] [call site] 00329
4 strlen [call site] 00330
4 strcpy_safe_ [function] [call site] 00331
4 hts_lowcase [function] [call site] 00332
4 strcmp [call site] 00333
4 cookie_domain_match [function] [call site] 00334
5 strlen [call site] 00335
5 strlen [call site] 00336
5 strcmpnocase [function] [call site] 00337
5 hts_host_is_address [function] [call site] 00338
6 memchr [call site] 00339
6 hts_host_is_ipv4 [function] [call site] 00340
4 cookie_domain_is_suffix [function] [call site] 00341
5 strlen [call site] 00342
5 hts_psl_loaded [function] [call site] 00343
5 hts_host_is_address [function] [call site] 00344
5 strncat_safe_ [function] [call site] 00345
5 hts_lowcase [function] [call site] 00346
5 hts_psl_registrable_domain [function] [call site] 00347
6 psl_labels [function] [call site] 00348
7 strlen [call site] 00349
6 strlen [call site] 00350
6 hts_isStringAscii [function] [call site] 00351
6 strlen [call site] 00352
6 hts_convertStringUTF8ToIDNA [function] [call site] 00353
6 psl_labels [function] [call site] 00354
6 psl_suffix [function] [call site] 00355
7 psl_kind [function] [call site] 00356
8 coucal_read [function] [call site] 00357
9 coucal_read_value [function] [call site] 00358
10 coucal_fetch_value [function] [call site] 00359
11 coucal_calc_hashes [function] [call site] 00360
12 coucal_hash_string [function] [call site] 00361
13 strlen [call site] 00362
13 coucal_hash_data [function] [call site] 00363
14 MurmurHash3_x86_128 [function] [call site] 00364
15 getblock32 [function] [call site] 00365
15 getblock32 [function] [call site] 00366
15 getblock32 [function] [call site] 00367
15 getblock32 [function] [call site] 00368
15 rotl32 [function] [call site] 00369
15 rotl32 [function] [call site] 00370
15 rotl32 [function] [call site] 00371
15 rotl32 [function] [call site] 00372
15 rotl32 [function] [call site] 00373
15 rotl32 [function] [call site] 00374
15 rotl32 [function] [call site] 00375
15 rotl32 [function] [call site] 00376
15 rotl32 [function] [call site] 00377
15 rotl32 [function] [call site] 00378
15 rotl32 [function] [call site] 00379
15 rotl32 [function] [call site] 00380
15 fmix32 [function] [call site] 00381
15 fmix32 [function] [call site] 00382
15 fmix32 [function] [call site] 00383
15 fmix32 [function] [call site] 00384
11 coucal_fetch_value_hashes [function] [call site] 00385
12 coucal_hash_to_pos [function] [call site] 00386
13 coucal_hash_to_pos_ [function] [call site] 00387
12 coucal_matches [function] [call site] 00388
13 coucal_matches_ [function] [call site] 00389
14 coucal_equals [function] [call site] 00390
15 strcmp [call site] 00391
12 coucal_hash_to_pos [function] [call site] 00392
12 coucal_matches [function] [call site] 00393
12 coucal_matches_ [function] [call site] 00394
3 cookie_remove [function] [call site] 00395
4 cookie_host [function] [call site] 00396
4 cookie_find_exact [function] [call site] 00397
5 cookie_get [function] [call site] 00398
6 strspn [call site] 00399
6 strchr [call site] 00400
6 strlen [call site] 00401
6 hts_span_next [function] [call site] 00402
7 memchr [call site] 00403
6 htsbuff_ptr_ [function] [call site] 00404
7 abortf_ [function] [call site] 00405
6 htsbuff_catn [function] [call site] 00406
7 htssafe_strnlen_ [function] [call site] 00407
7 strlen [call site] 00408
7 abortf_ [function] [call site] 00409
5 strcmp [call site] 00410
5 cookie_get [function] [call site] 00411
5 cookie_same_domain [function] [call site] 00412
6 strcmpnocase [function] [call site] 00413
5 cookie_get [function] [call site] 00414
5 strcmp [call site] 00415
5 cookie_nextfield [function] [call site] 00416
6 strchr [call site] 00417
6 strlen [call site] 00418
6 strspn [call site] 00419
4 cookie_nextfield [function] [call site] 00420
4 cookie_delete [function] [call site] 00421
5 strlen [call site] 00422
5 strlen [call site] 00423
5 strcpy_safe_ [function] [call site] 00424
5 strcpy_safe_ [function] [call site] 00425
3 cookie_set [function] [call site] 00426
4 cookie_host [function] [call site] 00427
4 strpbrk [call site] 00428
4 strpbrk [call site] 00429
4 strpbrk [call site] 00430
4 strlen [call site] 00431
4 strlen [call site] 00432
4 strlen [call site] 00433
4 cookie_domain_is_suffix [function] [call site] 00434
4 cookie_find_exact [function] [call site] 00435
4 strlen [call site] 00436
4 cookie_nextfield [function] [call site] 00437
4 strlen [call site] 00438
4 strlen [call site] 00439
4 snprintf [call site] 00440
4 strlen [call site] 00441
4 cookie_nextfield [function] [call site] 00442
4 cookie_delete [function] [call site] 00443
4 cookie_get [function] [call site] 00444
4 strlen [call site] 00445
4 strlen [call site] 00446
4 cookie_nextfield [function] [call site] 00447
4 cookie_insert [function] [call site] 00448
5 strncat_safe_ [function] [call site] 00449
5 strlen [call site] 00450
5 strlen [call site] 00451
5 strcpy_safe_ [function] [call site] 00452
5 strcpy_safe_ [function] [call site] 00453
5 strncat_safe_ [function] [call site] 00454
3 adr_nologin [function] [call site] 00455
4 has_login [function] [call site] 00456
5 login_end [function] [call site] 00457
6 login_start [function] [call site] 00458
7 __ctype_b_loc [call site] 00459
7 jump_protocol_const [function] [call site] 00460
7 __ctype_b_loc [call site] 00461
7 __ctype_b_loc [call site] 00462
7 strncmp [call site] 00463
6 strchr [call site] 00464
6 strrchr_limit [function] [call site] 00465
5 login_start [function] [call site] 00466
4 login_end [function] [call site] 00467
4 getHtsOptBuff_ [function] [call site] 00468
4 adr_nologin_r [function] [call site] 00469
5 login_start [function] [call site] 00470
5 login_end [function] [call site] 00471
5 has_login [function] [call site] 00472
5 memchr [call site] 00473
5 append_clipped [function] [call site] 00474
5 append_clipped [function] [call site] 00475
5 append_clipped [function] [call site] 00476
5 append_clipped [function] [call site] 00477
5 strlen [call site] 00478
5 append_clipped [function] [call site] 00479
3 hts_log_print [function] [call site] 00480
1 fuzz_header_param [function] [call site] 00481
2 hts_header_param [function] [call site] 00482
2 strlen [call site] 00483
2 abort [call site] 00484