Fuzz introspector: json_pack_unpack_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
21 482 unpack_array call site: 00482 set_error
16 355 diff call site: 00355 lshift
14 510 unpack_object call site: 00510 hashtable_get
7 331 pow5mult call site: 00331 pow5mult
7 342 lshift call site: 00342 lshift
5 307 jsonp_dtostr call site: 00307 nrv_alloc
5 460 unpack_object call site: 00460 set_error
4 143 seed_from_urandom call site: 00143 seed_from_timestamp_and_pid
4 445 json_unpack call site: 00445 jsonp_error_init
3 323 pow5mult call site: 00323 Balloc
2 5 jsonp_error_set_source call site: 00005 error_set
2 165 hashtable_find_pair call site: 00165 error_set

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 json_loadb [function] [call site] 00001
2 jsonp_error_init [function] [call site] 00002
3 jsonp_error_set_source [function] [call site] 00003
4 strlen [call site] 00004
4 strncpy [call site] 00005
4 strncpy [call site] 00006
2 error_set [function] [call site] 00007
3 vsnprintf [call site] 00008
3 strbuffer_value [function] [call site] 00009
3 snprintf [call site] 00010
3 snprintf [call site] 00011
3 jsonp_error_set [function] [call site] 00012
4 jsonp_error_vset [function] [call site] 00013
5 vsnprintf [call site] 00014
2 lex_init [function] [call site] 00015
3 stream_init [function] [call site] 00016
3 strbuffer_init [function] [call site] 00017
4 jsonp_malloc [function] [call site] 00018
2 buffer_get [function] [call site] 00019
2 parse_json [function] [call site] 00020
3 lex_scan [function] [call site] 00021
4 strbuffer_clear [function] [call site] 00022
4 lex_free_string [function] [call site] 00023
5 jsonp_free [function] [call site] 00024
4 lex_get [function] [call site] 00025
5 stream_get [function] [call site] 00026
6 utf8_check_first [function] [call site] 00027
6 __assert_fail [call site] 00028
6 utf8_check_full [function] [call site] 00029
6 utf8_check_first [function] [call site] 00030
6 error_set [function] [call site] 00031
4 lex_save [function] [call site] 00032
5 strbuffer_append_byte [function] [call site] 00033
6 strbuffer_append_bytes [function] [call site] 00034
7 jsonp_realloc [function] [call site] 00035
4 lex_scan_string [function] [call site] 00036
5 lex_get_save [function] [call site] 00037
5 error_set [function] [call site] 00040
5 lex_unget_unsave [function] [call site] 00041
6 stream_unget [function] [call site] 00042
7 utf8_check_first [function] [call site] 00043
7 __assert_fail [call site] 00044
7 __assert_fail [call site] 00045
6 strbuffer_pop [function] [call site] 00046
6 __assert_fail [call site] 00047
5 error_set [function] [call site] 00048
5 error_set [function] [call site] 00049
5 lex_get_save [function] [call site] 00050
5 lex_get_save [function] [call site] 00051
5 error_set [function] [call site] 00052
5 lex_get_save [function] [call site] 00053
5 lex_get_save [function] [call site] 00054
5 error_set [function] [call site] 00055
5 lex_get_save [function] [call site] 00056
5 jsonp_malloc [function] [call site] 00057
5 strbuffer_value [function] [call site] 00058
5 decode_unicode_escape [function] [call site] 00059
6 __assert_fail [call site] 00060
5 error_set [function] [call site] 00061
5 decode_unicode_escape [function] [call site] 00062
5 error_set [function] [call site] 00063
5 error_set [function] [call site] 00064
5 error_set [function] [call site] 00065
5 error_set [function] [call site] 00066
5 utf8_encode [function] [call site] 00067
5 __assert_fail [call site] 00068
5 __assert_fail [call site] 00069
5 lex_free_string [function] [call site] 00070
4 lex_scan_number [function] [call site] 00071
5 lex_get_save [function] [call site] 00072
5 lex_get_save [function] [call site] 00073
5 lex_unget_unsave [function] [call site] 00074
5 lex_get_save [function] [call site] 00075
5 lex_unget_unsave [function] [call site] 00076
5 lex_unget_unsave [function] [call site] 00077
5 strbuffer_value [function] [call site] 00078
5 __errno_location [call site] 00079
5 strtoll [call site] 00080
5 __errno_location [call site] 00081
5 error_set [function] [call site] 00082
5 error_set [function] [call site] 00083
5 __assert_fail [call site] 00084
5 lex_unget [function] [call site] 00086
6 stream_unget [function] [call site] 00087
5 lex_get_save [function] [call site] 00089
5 lex_get_save [function] [call site] 00090
5 lex_get_save [function] [call site] 00091
5 lex_unget_unsave [function] [call site] 00092
5 lex_get_save [function] [call site] 00093
5 lex_unget_unsave [function] [call site] 00094
5 jsonp_strtod [function] [call site] 00095
6 to_locale [function] [call site] 00096
7 get_decimal_point [function] [call site] 00097
8 sprintf [call site] 00098
7 strchr [call site] 00099
6 __errno_location [call site] 00100
6 strtod [call site] 00101
6 __assert_fail [call site] 00102
6 __errno_location [call site] 00103
5 error_set [function] [call site] 00104
4 lex_get_save [function] [call site] 00105
4 lex_unget_unsave [function] [call site] 00106
4 strbuffer_value [function] [call site] 00107
4 strcmp [call site] 00108
4 strcmp [call site] 00109
4 strcmp [call site] 00110
4 lex_save_cached [function] [call site] 00111
3 error_set [function] [call site] 00113
3 parse_value [function] [call site] 00114
4 error_set [function] [call site] 00115
4 memchr [call site] 00116
4 error_set [function] [call site] 00117
4 jsonp_stringn_nocheck_own [function] [call site] 00118
5 string_create [function] [call site] 00119
6 jsonp_strndup [function] [call site] 00120
7 jsonp_malloc [function] [call site] 00121
6 jsonp_malloc [function] [call site] 00122
6 jsonp_free [function] [call site] 00123
6 json_init [function] [call site] 00124
4 json_integer [function] [call site] 00125
5 jsonp_malloc [function] [call site] 00126
5 json_init [function] [call site] 00127
4 json_real [function] [call site] 00128
5 jsonp_malloc [function] [call site] 00129
5 json_init [function] [call site] 00130
4 json_true [function] [call site] 00131
4 json_false [function] [call site] 00132
4 json_null [function] [call site] 00133
4 parse_object [function] [call site] 00134
5 json_object [function] [call site] 00135
6 jsonp_malloc [function] [call site] 00136
6 json_object_seed [function] [call site] 00137
7 generate_seed [function] [call site] 00138
8 seed_from_urandom [function] [call site] 00139
9 open [call site] 00140
9 read [call site] 00141
9 close [call site] 00142
9 buf_to_uint32 [function] [call site] 00143
8 seed_from_timestamp_and_pid [function] [call site] 00144
9 gettimeofday [call site] 00145
9 getpid [call site] 00146
7 sched_yield [call site] 00147
6 json_init [function] [call site] 00148
6 hashtable_init [function] [call site] 00149
7 jsonp_malloc [function] [call site] 00150
7 list_init [function] [call site] 00151
7 list_init [function] [call site] 00152
6 jsonp_free [function] [call site] 00153
5 error_set [function] [call site] 00155
5 lex_steal_string [function] [call site] 00156
5 memchr [call site] 00157
5 jsonp_free [function] [call site] 00158
5 error_set [function] [call site] 00159
5 json_object_getn [function] [call site] 00160
6 hashtable_get [function] [call site] 00161
7 hashlittle [function] [call site] 00162
7 hashtable_find_pair [function] [call site] 00163
8 bucket_is_empty [function] [call site] 00164
8 memcmp [call site] 00165
5 jsonp_free [function] [call site] 00166
5 error_set [function] [call site] 00167
5 jsonp_free [function] [call site] 00169
5 error_set [function] [call site] 00170
5 parse_value [function] [call site] 00172
6 parse_array [function] [call site] 00173
7 json_array [function] [call site] 00174
8 jsonp_malloc [function] [call site] 00175
8 json_init [function] [call site] 00176
8 jsonp_malloc [function] [call site] 00177
8 jsonp_free [function] [call site] 00178
7 parse_value [function] [call site] 00180
7 json_array_append_new [function] [call site] 00183
8 json_decref [function] [call site] 00184
9 json_delete [function] [call site] 00185
10 json_delete_object [function] [call site] 00186
11 hashtable_close [function] [call site] 00187
12 hashtable_do_clear [function] [call site] 00188
13 json_decref [function] [call site] 00189
13 jsonp_free [function] [call site] 00190
12 jsonp_free [function] [call site] 00191
11 jsonp_free [function] [call site] 00192
10 json_delete_array [function] [call site] 00193
11 json_decref [function] [call site] 00194
11 jsonp_free [function] [call site] 00195
11 jsonp_free [function] [call site] 00196
10 json_delete_string [function] [call site] 00197
11 jsonp_free [function] [call site] 00198
11 jsonp_free [function] [call site] 00199
10 json_delete_integer [function] [call site] 00200
11 jsonp_free [function] [call site] 00201
10 json_delete_real [function] [call site] 00202
11 jsonp_free [function] [call site] 00203
8 json_array_grow [function] [call site] 00204
9 jsonp_realloc [function] [call site] 00205
8 json_decref [function] [call site] 00206
7 error_set [function] [call site] 00209
7 json_decref [function] [call site] 00210
5 jsonp_free [function] [call site] 00211
5 json_object_setn_new_nocheck [function] [call site] 00212
6 json_decref [function] [call site] 00213
6 hashtable_set [function] [call site] 00214
7 hashtable_do_rehash [function] [call site] 00215
8 jsonp_malloc [function] [call site] 00216
8 jsonp_free [function] [call site] 00217
8 list_init [function] [call site] 00218
8 insert_to_bucket [function] [call site] 00219
9 bucket_is_empty [function] [call site] 00220
9 list_insert [function] [call site] 00221
9 list_insert [function] [call site] 00222
7 hashlittle [function] [call site] 00223
7 hashtable_find_pair [function] [call site] 00224
7 json_decref [function] [call site] 00225
7 init_pair [function] [call site] 00226
8 jsonp_malloc [function] [call site] 00227
8 list_init [function] [call site] 00228
8 list_init [function] [call site] 00229
7 insert_to_bucket [function] [call site] 00230
7 list_insert [function] [call site] 00231
6 json_decref [function] [call site] 00232
5 jsonp_free [function] [call site] 00233
5 jsonp_free [function] [call site] 00234
5 error_set [function] [call site] 00237
5 json_decref [function] [call site] 00238
3 error_set [function] [call site] 00240
3 json_decref [function] [call site] 00241
2 lex_close [function] [call site] 00242
3 lex_free_string [function] [call site] 00243
3 strbuffer_close [function] [call site] 00244
4 jsonp_free [function] [call site] 00245
1 json_deep_copy [function] [call site] 00246
2 hashtable_init [function] [call site] 00247
2 do_deep_copy [function] [call site] 00248
3 json_object_deep_copy [function] [call site] 00249
4 jsonp_loop_check [function] [call site] 00250
5 snprintf [call site] 00251
5 hashtable_get [function] [call site] 00252
5 json_null [function] [call site] 00253
5 hashtable_set [function] [call site] 00254
4 json_object [function] [call site] 00255
4 json_object_iter [function] [call site] 00256
5 hashtable_iter [function] [call site] 00257
6 hashtable_iter_next [function] [call site] 00258
4 json_object_iter_key [function] [call site] 00259
5 hashtable_iter_key [function] [call site] 00260
4 json_object_iter_key_len [function] [call site] 00261
5 hashtable_iter_key_len [function] [call site] 00262
4 json_object_iter_value [function] [call site] 00263
5 hashtable_iter_value [function] [call site] 00264
4 do_deep_copy [function] [call site] 00265
5 json_array_deep_copy [function] [call site] 00266
6 jsonp_loop_check [function] [call site] 00267
6 json_array [function] [call site] 00268
6 json_array_size [function] [call site] 00269
6 json_array_get [function] [call site] 00270
6 do_deep_copy [function] [call site] 00271
7 json_string_copy [function] [call site] 00272
8 json_stringn_nocheck [function] [call site] 00273
9 string_create [function] [call site] 00274
7 json_integer_copy [function] [call site] 00275
8 json_integer_value [function] [call site] 00276
8 json_integer [function] [call site] 00277
7 json_real_copy [function] [call site] 00278
8 json_real_value [function] [call site] 00279
8 json_real [function] [call site] 00280
6 json_array_append_new [function] [call site] 00281
6 json_decref [function] [call site] 00282
6 hashtable_del [function] [call site] 00283
7 hashlittle [function] [call site] 00284
7 hashtable_do_del [function] [call site] 00285
8 hashtable_find_pair [function] [call site] 00286
8 list_remove [function] [call site] 00287
8 list_remove [function] [call site] 00288
8 json_decref [function] [call site] 00289
8 jsonp_free [function] [call site] 00290
4 json_object_setn_new_nocheck [function] [call site] 00291
4 json_decref [function] [call site] 00292
4 json_object_iter_next [function] [call site] 00293
5 hashtable_iter_next [function] [call site] 00294
4 hashtable_del [function] [call site] 00295
2 hashtable_close [function] [call site] 00296
1 json_decref(json_t*) [function] [call site] 00297
1 json_dumps [function] [call site] 00298
2 strbuffer_init [function] [call site] 00299
2 json_dump_callback [function] [call site] 00300
3 hashtable_init [function] [call site] 00301
3 do_dump [function] [call site] 00302
4 json_integer_value [function] [call site] 00303
4 snprintf [call site] 00304
4 json_real_value [function] [call site] 00305
4 jsonp_dtostr [function] [call site] 00306
5 dtoa_r [function] [call site] 00307
6 nrv_alloc [function] [call site] 00312
6 nrv_alloc [function] [call site] 00313
5 strncpy [call site] 00372
5 strncpy [call site] 00373
5 strncpy [call site] 00374
5 sprintf [call site] 00375
4 json_string_value [function] [call site] 00376
4 json_string_length [function] [call site] 00377
4 dump_string [function] [call site] 00378
5 utf8_iterate [function] [call site] 00379
6 utf8_check_first [function] [call site] 00380
6 utf8_check_full [function] [call site] 00381
5 snprintf [call site] 00382
5 snprintf [call site] 00383
4 jsonp_loop_check [function] [call site] 00384
4 json_array_size [function] [call site] 00385
4 hashtable_del [function] [call site] 00386
4 dump_indent [function] [call site] 00387
4 json_array_get [function] [call site] 00388
4 do_dump [function] [call site] 00389
5 dump_indent [function] [call site] 00390
5 json_array_get [function] [call site] 00391
5 do_dump [function] [call site] 00392
6 dump_indent [function] [call site] 00393
6 hashtable_del [function] [call site] 00394
6 jsonp_loop_check [function] [call site] 00395
6 json_object_iter [function] [call site] 00396
6 hashtable_del [function] [call site] 00397
6 dump_indent [function] [call site] 00398
6 json_object_size [function] [call site] 00399
6 jsonp_malloc [function] [call site] 00400
6 json_object_iter_key [function] [call site] 00401
6 json_object_iter_key_len [function] [call site] 00402
6 json_object_iter_next [function] [call site] 00403
6 __assert_fail [call site] 00404
6 qsort [call site] 00405
6 compare_keys [function] [call site] 00406
7 memcmp [call site] 00407
6 json_object_getn [function] [call site] 00408
6 __assert_fail [call site] 00409
6 dump_string [function] [call site] 00410
6 do_dump [function] [call site] 00411
7 jsonp_free [function] [call site] 00412
7 dump_indent [function] [call site] 00413
7 jsonp_free [function] [call site] 00414
7 dump_indent [function] [call site] 00415
7 jsonp_free [function] [call site] 00416
7 jsonp_free [function] [call site] 00417
7 json_object_iter_next [function] [call site] 00418
7 json_object_iter_key [function] [call site] 00419
7 json_object_iter_key_len [function] [call site] 00420
7 dump_string [function] [call site] 00421
7 json_object_iter_value [function] [call site] 00422
7 do_dump [function] [call site] 00423
8 dump_indent [function] [call site] 00424
8 dump_indent [function] [call site] 00425
8 hashtable_del [function] [call site] 00426
3 hashtable_close [function] [call site] 00427
2 dump_to_strbuffer [function] [call site] 00428
3 strbuffer_append_bytes [function] [call site] 00429
2 strbuffer_steal_value [function] [call site] 00430
2 jsonp_realloc [function] [call site] 00431
2 strbuffer_close [function] [call site] 00432
1 json_loads [function] [call site] 00433
2 jsonp_error_init [function] [call site] 00434
2 error_set [function] [call site] 00435
2 string_get [function] [call site] 00437
2 parse_json [function] [call site] 00438
2 lex_close [function] [call site] 00439
1 json_decref(json_t*) [function] [call site] 00440
1 json_object_iter [function] [call site] 00441
1 json_object_iter_key [function] [call site] 00442
1 json_object_iter_value [function] [call site] 00443
1 json_unpack [function] [call site] 00444
2 json_vunpack_ex [function] [call site] 00445
3 jsonp_error_init [function] [call site] 00446
3 jsonp_error_set [function] [call site] 00447
3 jsonp_error_init [function] [call site] 00448
3 jsonp_error_set [function] [call site] 00449
3 jsonp_error_init [function] [call site] 00450
3 scanner_init [function] [call site] 00451
3 next_token [function] [call site] 00452
3 unpack [function] [call site] 00453
4 unpack_object [function] [call site] 00454
5 hashtable_init [function] [call site] 00455
5 set_error [function] [call site] 00456
6 jsonp_error_vset [function] [call site] 00457
6 jsonp_error_set_source [function] [call site] 00458
5 set_error [function] [call site] 00459
5 next_token [function] [call site] 00460
5 set_error [function] [call site] 00461
5 set_error [function] [call site] 00462
5 next_token [function] [call site] 00463
5 set_error [function] [call site] 00464
5 set_error [function] [call site] 00465
5 strlen [call site] 00466
5 next_token [function] [call site] 00467
5 next_token [function] [call site] 00468
5 json_object_getn [function] [call site] 00469
5 set_error [function] [call site] 00470
5 unpack [function] [call site] 00471
6 unpack_array [function] [call site] 00472
7 set_error [function] [call site] 00473
7 next_token [function] [call site] 00474
7 set_error [function] [call site] 00475
7 set_error [function] [call site] 00476
7 next_token [function] [call site] 00477
7 strchr [call site] 00478
7 set_error [function] [call site] 00479
7 json_array_get [function] [call site] 00480
7 set_error [function] [call site] 00481
7 unpack [function] [call site] 00482
8 set_error [function] [call site] 00483
8 set_error [function] [call site] 00484
8 next_token [function] [call site] 00485
8 set_error [function] [call site] 00486
8 prev_token [function] [call site] 00487
8 json_string_value [function] [call site] 00488
8 json_string_length [function] [call site] 00489
8 set_error [function] [call site] 00490
8 json_integer_value [function] [call site] 00491
8 set_error [function] [call site] 00492
8 json_integer_value [function] [call site] 00493
8 set_error [function] [call site] 00494
8 set_error [function] [call site] 00495
8 json_real_value [function] [call site] 00496
8 set_error [function] [call site] 00497
8 json_number_value [function] [call site] 00498
9 json_integer_value [function] [call site] 00499
9 json_real_value [function] [call site] 00500
8 json_incref [function] [call site] 00501
8 set_error [function] [call site] 00502
8 set_error [function] [call site] 00503
7 next_token [function] [call site] 00504
7 json_array_size [function] [call site] 00505
7 json_array_size [function] [call site] 00506
7 set_error [function] [call site] 00507
5 json_null [function] [call site] 00508
5 hashtable_set [function] [call site] 00509
5 next_token [function] [call site] 00510
5 json_object_size [function] [call site] 00511
5 json_object_iter [function] [call site] 00512
5 json_object_iter_key [function] [call site] 00513
5 json_object_key_to_iter [function] [call site] 00514
5 json_object_iter_key_len [function] [call site] 00515
5 json_object_iter_value [function] [call site] 00516
5 hashtable_get [function] [call site] 00517
5 strbuffer_init [function] [call site] 00518
5 strbuffer_append_bytes [function] [call site] 00519
5 strbuffer_append_bytes [function] [call site] 00520
5 json_object_iter_next [function] [call site] 00521
5 strbuffer_value [function] [call site] 00522
5 set_error [function] [call site] 00523
5 strbuffer_close [function] [call site] 00524
5 hashtable_close [function] [call site] 00525
3 next_token [function] [call site] 00526
3 set_error [function] [call site] 00527
1 json_unpack [function] [call site] 00528
1 json_array_size [function] [call site] 00529
1 json_unpack [function] [call site] 00530
1 json_decref(json_t*) [function] [call site] 00531