Fuzz introspector: jq_fuzz_parse_stream
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
134 308 jv_number_value call site: 00308 jvp_literal_number_to_double
125 506 scan call site: 00506 jv_object_set
22 2 jv_parser_new call site: 00002 memory_exhausted
14 255 check_literal call site: 00255 check_literal
6 236 decSetSubnormal call site: 00236 decSetSubnormal
5 123 jv_array_set call site: 00123 jv_string
5 183 jv_parser_next call site: 00183 check_literal
4 130 jvp_array_offset call site: 00130 jv_string
4 649 jv_string_vfmt call site: 00649 jv_array_append
3 164 jvp_array_slice call site: 00164 jv_array_get
2 84 jvp_object_free call site: 00084 jv_free
2 178 jv_array_get call site: 00178 jv_array_append

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 jv_parser_new [function] [call site] 00001
2 jv_mem_alloc [function] [call site] 00002
3 memory_exhausted [function] [call site] 00003
4 pthread_once [call site] 00004
4 tsd_init [function] [call site] 00005
5 pthread_key_create [call site] 00006
5 tsd_fini_thread [function] [call site] 00007
5 fprintf [call site] 00008
5 abort [call site] 00009
5 atexit [call site] 00010
5 tsd_fini [function] [call site] 00011
6 pthread_getspecific [call site] 00012
6 pthread_setspecific [call site] 00013
5 fprintf [call site] 00014
5 abort [call site] 00015
4 tsd_init_nomem_handler [function] [call site] 00016
5 pthread_getspecific [call site] 00017
5 calloc [call site] 00018
5 pthread_setspecific [call site] 00019
5 fprintf [call site] 00020
5 abort [call site] 00021
4 pthread_getspecific [call site] 00022
4 fprintf [call site] 00023
4 abort [call site] 00024
2 parser_init [function] [call site] 00025
3 jv_array [function] [call site] 00026
4 jv_array_sized [function] [call site] 00027
5 jvp_array_new [function] [call site] 00028
6 jvp_array_alloc [function] [call site] 00029
7 jv_mem_alloc [function] [call site] 00030
3 jv_invalid [function] [call site] 00031
3 jv_invalid [function] [call site] 00032
3 jv_invalid [function] [call site] 00033
3 jv_mem_alloc [function] [call site] 00034
3 jvp_dtoa_context_init [function] [call site] 00035
1 jv_parser_set_buf [function] [call site] 00036
2 __assert_fail [call site] 00037
1 jv_parser_next [function] [call site] 00038
2 jv_invalid [function] [call site] 00039
2 jv_invalid [function] [call site] 00040
2 jv_string [function] [call site] 00041
3 strlen [call site] 00042
3 jv_string_sized [function] [call site] 00043
4 jvp_utf8_is_valid [function] [call site] 00044
5 jvp_utf8_next [function] [call site] 00045
6 __assert_fail [call site] 00046
6 __assert_fail [call site] 00047
4 jvp_string_new [function] [call site] 00048
5 jvp_string_alloc [function] [call site] 00049
6 jv_mem_alloc [function] [call site] 00050
4 jvp_string_copy_replace_bad [function] [call site] 00051
5 jvp_string_alloc [function] [call site] 00052
5 jvp_utf8_next [function] [call site] 00053
5 jvp_utf8_encode [function] [call site] 00054
6 __assert_fail [call site] 00055
6 jvp_utf8_encode_length [function] [call site] 00056
6 __assert_fail [call site] 00057
5 __assert_fail [call site] 00058
2 jv_invalid_with_msg [function] [call site] 00059
3 jv_mem_alloc [function] [call site] 00060
2 parser_reset [function] [call site] 00061
3 jv_free [function] [call site] 00062
4 jvp_array_free [function] [call site] 00063
5 __assert_fail [call site] 00064
5 jvp_refcnt_dec [function] [call site] 00065
5 jvp_array_ptr [function] [call site] 00066
6 __assert_fail [call site] 00067
5 jv_free [function] [call site] 00068
6 jvp_string_free [function] [call site] 00069
7 jvp_string_ptr [function] [call site] 00070
8 __assert_fail [call site] 00071
7 jvp_refcnt_dec [function] [call site] 00072
7 jv_mem_free [function] [call site] 00073
6 jvp_object_free [function] [call site] 00074
7 __assert_fail [call site] 00075
7 jvp_refcnt_dec [function] [call site] 00076
7 jvp_object_size [function] [call site] 00077
8 __assert_fail [call site] 00078
7 jvp_object_get_slot [function] [call site] 00079
8 jvp_object_size [function] [call site] 00080
8 __assert_fail [call site] 00081
8 jvp_object_ptr [function] [call site] 00082
9 __assert_fail [call site] 00083
7 jv_get_kind [function] [call site] 00084
7 jvp_string_free [function] [call site] 00085
7 jv_free [function] [call site] 00086
8 jvp_invalid_free [function] [call site] 00087
9 __assert_fail [call site] 00088
9 jvp_refcnt_dec [function] [call site] 00089
9 jv_free [function] [call site] 00090
10 jvp_number_free [function] [call site] 00091
11 __assert_fail [call site] 00092
11 jvp_refcnt_dec [function] [call site] 00093
11 jvp_literal_number_ptr [function] [call site] 00094
12 __assert_fail [call site] 00095
11 jv_mem_free [function] [call site] 00096
11 jv_mem_free [function] [call site] 00097
9 jv_mem_free [function] [call site] 00098
7 jvp_object_ptr [function] [call site] 00099
7 jv_mem_free [function] [call site] 00100
5 jv_mem_free [function] [call site] 00101
3 jv_invalid [function] [call site] 00104
3 jv_invalid [function] [call site] 00106
2 jv_invalid [function] [call site] 00108
2 stream_check_done [function] [call site] 00109
3 jv_is_valid [function] [call site] 00110
4 jv_get_kind [function] [call site] 00111
3 jv_copy [function] [call site] 00113
4 jvp_refcnt_inc [function] [call site] 00114
3 jv_array_append [function] [call site] 00115
4 jv_array_length [function] [call site] 00117
5 __assert_fail [call site] 00118
5 jvp_array_length [function] [call site] 00119
6 __assert_fail [call site] 00120
4 jv_array_set [function] [call site] 00122
5 __assert_fail [call site] 00123
5 jvp_array_length [function] [call site] 00124
5 jv_string [function] [call site] 00127
5 jv_invalid_with_msg [function] [call site] 00128
5 jvp_array_offset [function] [call site] 00129
6 __assert_fail [call site] 00130
5 jv_string [function] [call site] 00133
5 jv_invalid_with_msg [function] [call site] 00134
5 jvp_array_write [function] [call site] 00135
6 __assert_fail [call site] 00136
6 jvp_array_ptr [function] [call site] 00137
6 jvp_array_offset [function] [call site] 00138
6 jvp_refcnt_unshared [function] [call site] 00139
7 __assert_fail [call site] 00140
6 jvp_array_length [function] [call site] 00143
6 jvp_array_alloc [function] [call site] 00145
6 jvp_array_length [function] [call site] 00146
6 jvp_array_offset [function] [call site] 00147
6 jvp_array_free [function] [call site] 00149
3 jv_invalid [function] [call site] 00151
3 jv_is_valid [function] [call site] 00152
3 jv_array_length [function] [call site] 00154
3 jv_array_slice [function] [call site] 00156
4 __assert_fail [call site] 00157
4 jvp_array_slice [function] [call site] 00158
5 __assert_fail [call site] 00159
5 jvp_array_length [function] [call site] 00160
5 jvp_clamp_slice_params [function] [call site] 00161
5 __assert_fail [call site] 00162
5 jv_array_sized [function] [call site] 00165
5 jv_array_get [function] [call site] 00167
6 __assert_fail [call site] 00168
6 jvp_array_read [function] [call site] 00169
7 __assert_fail [call site] 00170
7 jvp_array_length [function] [call site] 00171
7 jvp_array_ptr [function] [call site] 00172
7 jvp_array_offset [function] [call site] 00173
7 __assert_fail [call site] 00174
7 jvp_array_offset [function] [call site] 00175
6 jv_invalid [function] [call site] 00177
5 jv_array_append [function] [call site] 00179
3 jv_array_slice [function] [call site] 00181
3 jv_invalid [function] [call site] 00182
2 scan [function] [call site] 00183
3 stream_seq_check_truncation [function] [call site] 00184
4 jv_get_kind [function] [call site] 00185
3 seq_check_truncation [function] [call site] 00186
4 jv_get_kind [function] [call site] 00187
3 check_literal [function] [call site] 00188
4 jv_number_with_literal [function] [call site] 00198
5 jvp_literal_number_new [function] [call site] 00199
6 strlen [call site] 00200
6 jvp_literal_number_alloc [function] [call site] 00201
7 jv_mem_alloc [function] [call site] 00202
6 tsd_dec_ctx_get [function] [call site] 00203
7 pthread_once [call site] 00204
7 jv_tsd_dec_ctx_init [function] [call site] 00205
8 pthread_key_create [call site] 00206
8 jv_mem_free [function] [call site] 00207
8 fprintf [call site] 00208
8 abort [call site] 00209
8 atexit [call site] 00210
8 jv_tsd_dec_ctx_fini [function] [call site] 00211
9 pthread_getspecific [call site] 00212
9 jv_mem_free [function] [call site] 00213
9 pthread_setspecific [call site] 00214
7 pthread_getspecific [call site] 00215
7 decContextDefault [function] [call site] 00216
8 decContextSetStatus [function] [call site] 00217
9 raise [call site] 00218
7 pthread_setspecific [call site] 00219
7 fprintf [call site] 00220
7 abort [call site] 00221
6 decContextClearStatus [function] [call site] 00222
6 decNumberFromString [function] [call site] 00223
7 decNumberZero [function] [call site] 00224
7 decSetCoeff [function] [call site] 00227
7 decFinalize [function] [call site] 00228
8 decSetSubnormal [function] [call site] 00229
9 decSetCoeff [function] [call site] 00230
9 decApplyRound [function] [call site] 00231
10 decSetOverflow [function] [call site] 00232
11 decNumberZero [function] [call site] 00233
11 decSetMaxValue [function] [call site] 00234
10 decUnitAddSub [function] [call site] 00235
9 decShiftToMost [function] [call site] 00236
8 decNumberZero [function] [call site] 00237
8 decCompare [function] [call site] 00238
9 decUnitCompare [function] [call site] 00239
10 decUnitAddSub [function] [call site] 00240
8 decApplyRound [function] [call site] 00241
8 decSetSubnormal [function] [call site] 00242
8 decApplyRound [function] [call site] 00243
8 decSetOverflow [function] [call site] 00244
8 decShiftToMost [function] [call site] 00245
7 decFinalize [function] [call site] 00246
7 decStatus [function] [call site] 00247
8 decNumberZero [function] [call site] 00248
8 decContextSetStatus [function] [call site] 00249
6 jv_mem_free [function] [call site] 00250
6 jv_mem_free [function] [call site] 00251
6 jv_mem_free [function] [call site] 00252
6 jv_number [function] [call site] 00253
4 jv_get_kind [function] [call site] 00254
3 stream_is_top_num [function] [call site] 00256
4 jv_get_kind [function] [call site] 00257
3 parse_is_top_num [function] [call site] 00258
4 jv_get_kind [function] [call site] 00259
3 check_literal [function] [call site] 00260
3 stream_check_done [function] [call site] 00261
3 parse_check_done [function] [call site] 00262
4 jv_is_valid [function] [call site] 00263
4 jv_invalid [function] [call site] 00264
3 jv_is_valid [function] [call site] 00265
3 __assert_fail [call site] 00266
3 parser_reset [function] [call site] 00267
3 jv_invalid [function] [call site] 00269
3 check_literal [function] [call site] 00271
3 stream_check_done [function] [call site] 00272
3 parse_check_done [function] [call site] 00273
3 tokenadd [function] [call site] 00274
4 __assert_fail [call site] 00275
4 jv_mem_realloc [function] [call site] 00276
5 realloc [call site] 00277
5 memory_exhausted [function] [call site] 00278
4 __assert_fail [call site] 00279
3 stream_token [function] [call site] 00280
4 jv_is_valid [function] [call site] 00281
4 jv_array_get [function] [call site] 00283
4 jv_get_kind [function] [call site] 00284
4 jv_number [function] [call site] 00286
4 jv_array_append [function] [call site] 00287
4 jv_array_get [function] [call site] 00289
4 jv_get_kind [function] [call site] 00290
4 jv_array_append [function] [call site] 00293
4 jv_invalid [function] [call site] 00294
4 jv_array_get [function] [call site] 00296
4 jv_get_kind [function] [call site] 00297
4 jv_is_valid [function] [call site] 00300
4 jv_get_kind [function] [call site] 00301
4 jv_array_set [function] [call site] 00302
4 jv_invalid [function] [call site] 00303
4 jv_array_get [function] [call site] 00305
4 jv_get_kind [function] [call site] 00306
4 jv_number_value [function] [call site] 00307
5 __assert_fail [call site] 00308
5 jvp_literal_number_ptr [function] [call site] 00309
5 jvp_literal_number_to_double [function] [call site] 00310
6 __assert_fail [call site] 00311
6 decContextDefault [function] [call site] 00312
6 jvp_dec_number_ptr [function] [call site] 00313
7 __assert_fail [call site] 00314
6 decNumberReduce [function] [call site] 00315
7 decNaNs [function] [call site] 00316
8 decNumberCopy [function] [call site] 00317
8 decDecap [function] [call site] 00318
9 decGetDigits [function] [call site] 00319
7 decCopyFit [function] [call site] 00320
8 decSetCoeff [function] [call site] 00321
7 decFinalize [function] [call site] 00322
7 decTrim [function] [call site] 00323
8 decShiftToLeast [function] [call site] 00324
7 decStatus [function] [call site] 00325
6 decNumberToString [function] [call site] 00326
7 decToString [function] [call site] 00327
8 strcpy [call site] 00328
8 strcpy [call site] 00329
8 strcpy [call site] 00330
6 tsd_dtoa_context_get [function] [call site] 00331
7 pthread_once [call site] 00332
7 jv_tsd_dtoa_ctx_init [function] [call site] 00333
8 pthread_key_create [call site] 00334
8 tsd_dtoa_ctx_dtor [function] [call site] 00335
9 jvp_dtoa_context_free [function] [call site] 00336
10 jv_mem_free [function] [call site] 00339
9 jv_mem_free [function] [call site] 00340
8 fprintf [call site] 00341
8 abort [call site] 00342
8 atexit [call site] 00343
8 jv_tsd_dtoa_ctx_fini [function] [call site] 00344
9 pthread_getspecific [call site] 00345
9 tsd_dtoa_ctx_dtor [function] [call site] 00346
9 pthread_setspecific [call site] 00347
7 pthread_getspecific [call site] 00348
7 jv_mem_alloc [function] [call site] 00349
7 jvp_dtoa_context_init [function] [call site] 00350
7 pthread_setspecific [call site] 00351
7 jv_mem_free [function] [call site] 00352
7 fprintf [call site] 00353
7 abort [call site] 00354
6 jvp_strtod [function] [call site] 00355
4 jv_is_valid [function] [call site] 00443
4 jv_array_append [function] [call site] 00446
4 jv_invalid [function] [call site] 00447
4 jv_number [function] [call site] 00448
4 jv_array_set [function] [call site] 00449
4 jv_is_valid [function] [call site] 00450
4 jv_array_append [function] [call site] 00453
4 jv_invalid [function] [call site] 00454
4 jv_array_set [function] [call site] 00456
4 __assert_fail [call site] 00457
4 jv_is_valid [function] [call site] 00460
4 __assert_fail [call site] 00461
4 jv_array_get [function] [call site] 00463
4 jv_get_kind [function] [call site] 00464
4 jv_is_valid [function] [call site] 00466
4 jv_array_append [function] [call site] 00469
4 jv_invalid [function] [call site] 00471
4 jv_array_append [function] [call site] 00474
4 jv_array_slice [function] [call site] 00475
4 jv_invalid [function] [call site] 00477
4 jv_array_append [function] [call site] 00480
4 jv_is_valid [function] [call site] 00481
4 __assert_fail [call site] 00482
4 jv_array_get [function] [call site] 00484
4 jv_get_kind [function] [call site] 00485
4 jv_is_valid [function] [call site] 00487
4 jv_array_append [function] [call site] 00490
4 jv_invalid [function] [call site] 00492
4 jv_array_append [function] [call site] 00495
4 jv_array_slice [function] [call site] 00496
4 jv_invalid [function] [call site] 00498
4 jv_array_append [function] [call site] 00501
4 jv_object [function] [call site] 00502
5 jvp_object_new [function] [call site] 00503
6 __assert_fail [call site] 00504
6 jv_mem_alloc [function] [call site] 00505
3 parse_token [function] [call site] 00506
4 jv_is_valid [function] [call site] 00507
4 push [function] [call site] 00509
5 __assert_fail [call site] 00510
5 jv_mem_realloc [function] [call site] 00511
5 __assert_fail [call site] 00512
4 jv_is_valid [function] [call site] 00513
4 jv_object [function] [call site] 00514
4 jv_is_valid [function] [call site] 00516
4 jv_get_kind [function] [call site] 00517
4 jv_get_kind [function] [call site] 00518
4 jv_invalid [function] [call site] 00520
4 jv_is_valid [function] [call site] 00521
4 jv_get_kind [function] [call site] 00522
4 jv_array_append [function] [call site] 00523
4 jv_invalid [function] [call site] 00524
4 jv_get_kind [function] [call site] 00525
4 jv_get_kind [function] [call site] 00526
4 __assert_fail [call site] 00527
4 jv_object_set [function] [call site] 00528
5 __assert_fail [call site] 00529
5 __assert_fail [call site] 00530
5 jvp_object_write [function] [call site] 00531
6 jvp_object_unshare [function] [call site] 00532
7 __assert_fail [call site] 00533
7 jvp_refcnt_unshared [function] [call site] 00534
7 jvp_object_size [function] [call site] 00535
7 jvp_object_new [function] [call site] 00536
7 jvp_object_ptr [function] [call site] 00537
7 jvp_object_size [function] [call site] 00538
7 jvp_object_get_slot [function] [call site] 00539
7 jvp_object_get_slot [function] [call site] 00540
7 jv_get_kind [function] [call site] 00541
7 jvp_object_buckets [function] [call site] 00544
8 jvp_object_ptr [function] [call site] 00545
7 jvp_object_buckets [function] [call site] 00546
7 jvp_object_size [function] [call site] 00547
7 jvp_object_free [function] [call site] 00548
7 jvp_refcnt_unshared [function] [call site] 00549
7 __assert_fail [call site] 00550
6 jvp_object_find_bucket [function] [call site] 00551
7 jvp_object_buckets [function] [call site] 00552
7 jvp_object_mask [function] [call site] 00553
8 __assert_fail [call site] 00554
7 jvp_string_hash [function] [call site] 00555
8 jvp_string_ptr [function] [call site] 00556
8 jvp_string_length [function] [call site] 00557
6 jvp_object_find_slot [function] [call site] 00561
7 jvp_string_hash [function] [call site] 00562
7 jvp_object_get_slot [function] [call site] 00563
7 jvp_string_equal [function] [call site] 00564
8 __assert_fail [call site] 00565
8 __assert_fail [call site] 00566
8 jvp_string_ptr [function] [call site] 00567
8 jvp_string_ptr [function] [call site] 00568
8 jvp_string_length [function] [call site] 00569
8 jvp_string_length [function] [call site] 00570
8 memcmp [call site] 00571
7 jvp_object_next_slot [function] [call site] 00572
8 jvp_object_get_slot [function] [call site] 00573
6 jvp_string_free [function] [call site] 00574
6 jvp_object_add_slot [function] [call site] 00575
7 jvp_object_ptr [function] [call site] 00576
7 jvp_object_size [function] [call site] 00577
7 jvp_object_get_slot [function] [call site] 00578
7 jvp_string_hash [function] [call site] 00579
6 jv_invalid [function] [call site] 00580
6 jvp_object_rehash [function] [call site] 00581
7 __assert_fail [call site] 00582
7 jvp_refcnt_unshared [function] [call site] 00583
7 __assert_fail [call site] 00584
7 jvp_object_size [function] [call site] 00585
7 jvp_object_new [function] [call site] 00586
7 jvp_object_get_slot [function] [call site] 00587
7 jv_get_kind [function] [call site] 00588
7 jvp_object_find_bucket [function] [call site] 00589
7 jvp_object_find_slot [function] [call site] 00590
7 __assert_fail [call site] 00591
7 jvp_object_add_slot [function] [call site] 00592
7 __assert_fail [call site] 00593
7 jvp_object_ptr [function] [call site] 00594
7 jv_mem_free [function] [call site] 00595
6 jvp_string_free [function] [call site] 00596
6 jvp_object_find_bucket [function] [call site] 00597
6 jvp_object_find_slot [function] [call site] 00598
6 __assert_fail [call site] 00599
6 jvp_object_add_slot [function] [call site] 00600
6 __assert_fail [call site] 00601
6 jv_invalid [function] [call site] 00602
5 jv_string [function] [call site] 00605
5 jv_invalid_with_msg [function] [call site] 00606
4 jv_invalid [function] [call site] 00608
4 jv_get_kind [function] [call site] 00609
4 jv_is_valid [function] [call site] 00610
4 jv_array_append [function] [call site] 00611
4 jv_invalid [function] [call site] 00612
4 jv_array_length [function] [call site] 00614
4 jv_is_valid [function] [call site] 00616
4 jv_get_kind [function] [call site] 00617
4 jv_get_kind [function] [call site] 00618
4 __assert_fail [call site] 00619
4 jv_object_set [function] [call site] 00620
4 jv_invalid [function] [call site] 00621
4 jv_get_kind [function] [call site] 00622
4 jv_object_length [function] [call site] 00624
5 __assert_fail [call site] 00625
5 jvp_object_length [function] [call site] 00626
6 jvp_object_size [function] [call site] 00627
6 jvp_object_get_slot [function] [call site] 00628
6 jv_get_kind [function] [call site] 00629
3 stream_check_done [function] [call site] 00632
3 parse_check_done [function] [call site] 00633
3 found_string [function] [call site] 00634
3 stream_check_done [function] [call site] 00640
3 parse_check_done [function] [call site] 00641
2 make_error [function] [call site] 00644
3 jv_string_vfmt [function] [call site] 00645
4 jv_mem_alloc [function] [call site] 00646
4 vsnprintf [call site] 00647
4 jv_string_sized [function] [call site] 00648
4 jv_mem_free [function] [call site] 00649
4 jv_mem_free [function] [call site] 00650
3 jv_array_append [function] [call site] 00652
3 jv_invalid_with_msg [function] [call site] 00654
2 parser_reset [function] [call site] 00655
2 make_error [function] [call site] 00656
2 parser_reset [function] [call site] 00657
2 __assert_fail [call site] 00658
2 jv_invalid [function] [call site] 00659
2 __assert_fail [call site] 00660
2 make_error [function] [call site] 00662
2 make_error [function] [call site] 00663
2 parser_reset [function] [call site] 00664
2 check_literal [function] [call site] 00665
2 make_error [function] [call site] 00666
2 parser_reset [function] [call site] 00667
2 make_error [function] [call site] 00668
2 parser_reset [function] [call site] 00669
2 jv_is_valid [function] [call site] 00670
2 jv_array_append [function] [call site] 00673
2 jv_invalid [function] [call site] 00674
2 jv_get_kind [function] [call site] 00675
2 make_error [function] [call site] 00677
1 jv_is_valid [function] [call site] 00678
1 jv_parser_free [function] [call site] 00681
2 parser_free [function] [call site] 00682
3 parser_reset [function] [call site] 00683
3 jv_mem_free [function] [call site] 00686
3 jv_mem_free [function] [call site] 00687
3 jvp_dtoa_context_free [function] [call site] 00688
2 jv_mem_free [function] [call site] 00689