Fuzz introspector: jq_fuzz_parse_stream
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
134 304 jv_number_value call site: 00304 jvp_literal_number_to_double
131 502 scan call site: 00502 jv_object_set
22 2 jv_parser_new call site: 00002 memory_exhausted
14 253 check_literal call site: 00253 check_literal
6 234 decSetSubnormal call site: 00234 decSetSubnormal
5 122 jv_array_set call site: 00122 jv_string
5 181 jv_parser_next call site: 00181 check_literal
4 129 jvp_array_offset call site: 00129 jv_string
4 651 jv_string_vfmt call site: 00651 jv_array_append
3 162 jvp_array_slice call site: 00162 jv_array_get
2 51 jv_string_sized call site: 00051 jv_string
2 176 jv_array_get call site: 00176 jv_array_append

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 jv_parser_new [function] [call site] 00001
2 jv_mem_alloc [function] [call site] 00002
3 memory_exhausted [function] [call site] 00003
4 pthread_once [call site] 00004
4 tsd_init [function] [call site] 00005
5 pthread_key_create [call site] 00006
5 tsd_fini_thread [function] [call site] 00007
5 fprintf [call site] 00008
5 abort [call site] 00009
5 atexit [call site] 00010
5 tsd_fini [function] [call site] 00011
6 pthread_getspecific [call site] 00012
6 pthread_setspecific [call site] 00013
5 fprintf [call site] 00014
5 abort [call site] 00015
4 tsd_init_nomem_handler [function] [call site] 00016
5 pthread_getspecific [call site] 00017
5 calloc [call site] 00018
5 pthread_setspecific [call site] 00019
5 fprintf [call site] 00020
5 abort [call site] 00021
4 pthread_getspecific [call site] 00022
4 fprintf [call site] 00023
4 abort [call site] 00024
2 parser_init [function] [call site] 00025
3 jv_array [function] [call site] 00026
4 jv_array_sized [function] [call site] 00027
5 jvp_array_new [function] [call site] 00028
6 jvp_array_alloc [function] [call site] 00029
7 jv_mem_alloc [function] [call site] 00030
3 jv_invalid [function] [call site] 00031
3 jv_invalid [function] [call site] 00032
3 jv_invalid [function] [call site] 00033
3 jv_mem_alloc [function] [call site] 00034
3 jvp_dtoa_context_init [function] [call site] 00035
1 jv_parser_set_buf [function] [call site] 00036
2 __assert_fail [call site] 00037
1 jv_parser_next [function] [call site] 00038
2 jv_invalid [function] [call site] 00039
2 jv_invalid [function] [call site] 00040
2 jv_string [function] [call site] 00041
3 strlen [call site] 00042
3 jv_string_sized [function] [call site] 00043
4 jvp_utf8_is_valid [function] [call site] 00044
5 jvp_utf8_next [function] [call site] 00045
6 __assert_fail [call site] 00046
6 __assert_fail [call site] 00047
4 jvp_string_new [function] [call site] 00048
5 jvp_string_alloc [function] [call site] 00049
6 jv_mem_alloc [function] [call site] 00050
4 jvp_string_copy_replace_bad [function] [call site] 00051
5 jv_string [function] [call site] 00052
5 jv_invalid_with_msg [function] [call site] 00053
6 jv_mem_alloc [function] [call site] 00054
5 jvp_string_alloc [function] [call site] 00055
5 jvp_utf8_next [function] [call site] 00056
5 jvp_utf8_encode [function] [call site] 00057
6 __assert_fail [call site] 00058
6 jvp_utf8_encode_length [function] [call site] 00059
6 __assert_fail [call site] 00060
5 __assert_fail [call site] 00061
2 jv_invalid_with_msg [function] [call site] 00062
2 parser_reset [function] [call site] 00063
3 jv_free [function] [call site] 00064
4 jvp_refcnt_dec [function] [call site] 00065
4 jvp_array_ptr [function] [call site] 00066
5 __assert_fail [call site] 00067
4 jv_mem_realloc [function] [call site] 00068
5 realloc [call site] 00069
5 memory_exhausted [function] [call site] 00070
4 jv_mem_free [function] [call site] 00071
4 jvp_refcnt_dec [function] [call site] 00072
4 jvp_object_size [function] [call site] 00073
5 __assert_fail [call site] 00074
4 jv_mem_realloc [function] [call site] 00075
4 jvp_object_get_slot [function] [call site] 00076
5 jvp_object_size [function] [call site] 00077
5 __assert_fail [call site] 00078
5 jvp_object_ptr [function] [call site] 00079
6 __assert_fail [call site] 00080
4 jv_get_kind [function] [call site] 00081
4 jvp_string_free [function] [call site] 00082
5 jvp_string_ptr [function] [call site] 00083
6 __assert_fail [call site] 00084
5 jvp_refcnt_dec [function] [call site] 00085
5 jv_mem_free [function] [call site] 00086
4 jvp_object_ptr [function] [call site] 00087
4 jv_mem_free [function] [call site] 00088
4 jvp_refcnt_dec [function] [call site] 00089
4 jv_mem_realloc [function] [call site] 00090
4 jv_mem_free [function] [call site] 00091
4 jvp_string_free [function] [call site] 00092
4 jvp_number_free [function] [call site] 00093
5 __assert_fail [call site] 00094
5 jvp_refcnt_dec [function] [call site] 00095
5 jvp_literal_number_ptr [function] [call site] 00096
6 __assert_fail [call site] 00097
5 jv_mem_free [function] [call site] 00098
5 jv_mem_free [function] [call site] 00099
4 jv_mem_free [function] [call site] 00100
3 jv_invalid [function] [call site] 00103
3 jv_invalid [function] [call site] 00105
2 jv_invalid [function] [call site] 00107
2 stream_check_done [function] [call site] 00108
3 jv_is_valid [function] [call site] 00109
4 jv_get_kind [function] [call site] 00110
3 jv_copy [function] [call site] 00112
4 jvp_refcnt_inc [function] [call site] 00113
3 jv_array_append [function] [call site] 00114
4 jv_array_length [function] [call site] 00116
5 __assert_fail [call site] 00117
5 jvp_array_length [function] [call site] 00118
6 __assert_fail [call site] 00119
4 jv_array_set [function] [call site] 00121
5 __assert_fail [call site] 00122
5 jvp_array_length [function] [call site] 00123
5 jv_string [function] [call site] 00126
5 jv_invalid_with_msg [function] [call site] 00127
5 jvp_array_offset [function] [call site] 00128
6 __assert_fail [call site] 00129
5 jv_string [function] [call site] 00132
5 jv_invalid_with_msg [function] [call site] 00133
5 jvp_array_write [function] [call site] 00134
6 __assert_fail [call site] 00135
6 jvp_array_ptr [function] [call site] 00136
6 jvp_array_offset [function] [call site] 00137
6 jvp_refcnt_unshared [function] [call site] 00138
6 jvp_array_length [function] [call site] 00141
6 jvp_array_alloc [function] [call site] 00143
6 jvp_array_length [function] [call site] 00144
6 jvp_array_offset [function] [call site] 00145
3 jv_invalid [function] [call site] 00149
3 jv_is_valid [function] [call site] 00150
3 jv_array_length [function] [call site] 00152
3 jv_array_slice [function] [call site] 00154
4 __assert_fail [call site] 00155
4 jvp_array_slice [function] [call site] 00156
5 __assert_fail [call site] 00157
5 jvp_array_length [function] [call site] 00158
5 jvp_clamp_slice_params [function] [call site] 00159
5 __assert_fail [call site] 00160
5 jv_array_sized [function] [call site] 00163
5 jv_array_get [function] [call site] 00165
6 __assert_fail [call site] 00166
6 jvp_array_read [function] [call site] 00167
7 __assert_fail [call site] 00168
7 jvp_array_length [function] [call site] 00169
7 jvp_array_ptr [function] [call site] 00170
7 jvp_array_offset [function] [call site] 00171
7 __assert_fail [call site] 00172
7 jvp_array_offset [function] [call site] 00173
6 jv_invalid [function] [call site] 00175
5 jv_array_append [function] [call site] 00177
3 jv_array_slice [function] [call site] 00179
3 jv_invalid [function] [call site] 00180
2 scan [function] [call site] 00181
3 stream_seq_check_truncation [function] [call site] 00182
4 jv_get_kind [function] [call site] 00183
3 seq_check_truncation [function] [call site] 00184
4 jv_get_kind [function] [call site] 00185
3 check_literal [function] [call site] 00186
4 jv_number_with_literal [function] [call site] 00196
5 jvp_literal_number_new [function] [call site] 00197
6 strlen [call site] 00198
6 jvp_literal_number_alloc [function] [call site] 00199
7 jv_mem_alloc [function] [call site] 00200
6 tsd_dec_ctx_get [function] [call site] 00201
7 pthread_once [call site] 00202
7 jv_tsd_dec_ctx_init [function] [call site] 00203
8 pthread_key_create [call site] 00204
8 jv_mem_free [function] [call site] 00205
8 fprintf [call site] 00206
8 abort [call site] 00207
8 atexit [call site] 00208
8 jv_tsd_dec_ctx_fini [function] [call site] 00209
9 pthread_getspecific [call site] 00210
9 jv_mem_free [function] [call site] 00211
9 pthread_setspecific [call site] 00212
7 pthread_getspecific [call site] 00213
7 decContextDefault [function] [call site] 00214
8 decContextSetStatus [function] [call site] 00215
9 raise [call site] 00216
7 pthread_setspecific [call site] 00217
7 fprintf [call site] 00218
7 abort [call site] 00219
6 decContextClearStatus [function] [call site] 00220
6 decNumberFromString [function] [call site] 00221
7 decNumberZero [function] [call site] 00222
7 decSetCoeff [function] [call site] 00225
7 decFinalize [function] [call site] 00226
8 decSetSubnormal [function] [call site] 00227
9 decSetCoeff [function] [call site] 00228
9 decApplyRound [function] [call site] 00229
10 decSetOverflow [function] [call site] 00230
11 decNumberZero [function] [call site] 00231
11 decSetMaxValue [function] [call site] 00232
10 decUnitAddSub [function] [call site] 00233
9 decShiftToMost [function] [call site] 00234
8 decNumberZero [function] [call site] 00235
8 decCompare [function] [call site] 00236
9 decUnitCompare [function] [call site] 00237
10 decUnitAddSub [function] [call site] 00238
8 decApplyRound [function] [call site] 00239
8 decSetSubnormal [function] [call site] 00240
8 decApplyRound [function] [call site] 00241
8 decSetOverflow [function] [call site] 00242
8 decShiftToMost [function] [call site] 00243
7 decFinalize [function] [call site] 00244
7 decStatus [function] [call site] 00245
8 decNumberZero [function] [call site] 00246
8 decContextSetStatus [function] [call site] 00247
6 jv_mem_free [function] [call site] 00248
6 jv_mem_free [function] [call site] 00249
6 jv_mem_free [function] [call site] 00250
6 jv_number [function] [call site] 00251
4 jv_get_kind [function] [call site] 00252
3 stream_is_top_num [function] [call site] 00254
4 jv_get_kind [function] [call site] 00255
3 parse_is_top_num [function] [call site] 00256
4 jv_get_kind [function] [call site] 00257
3 check_literal [function] [call site] 00258
3 stream_check_done [function] [call site] 00259
3 parse_check_done [function] [call site] 00260
4 jv_is_valid [function] [call site] 00261
4 jv_invalid [function] [call site] 00262
3 jv_is_valid [function] [call site] 00263
3 __assert_fail [call site] 00264
3 parser_reset [function] [call site] 00265
3 jv_invalid [function] [call site] 00267
3 check_literal [function] [call site] 00269
3 stream_check_done [function] [call site] 00270
3 parse_check_done [function] [call site] 00271
3 tokenadd [function] [call site] 00272
4 __assert_fail [call site] 00273
4 jv_mem_realloc [function] [call site] 00274
4 __assert_fail [call site] 00275
3 stream_token [function] [call site] 00276
4 jv_is_valid [function] [call site] 00277
4 jv_array_get [function] [call site] 00279
4 jv_get_kind [function] [call site] 00280
4 jv_number [function] [call site] 00282
4 jv_array_append [function] [call site] 00283
4 jv_array_get [function] [call site] 00285
4 jv_get_kind [function] [call site] 00286
4 jv_array_append [function] [call site] 00289
4 jv_invalid [function] [call site] 00290
4 jv_array_get [function] [call site] 00292
4 jv_get_kind [function] [call site] 00293
4 jv_is_valid [function] [call site] 00296
4 jv_get_kind [function] [call site] 00297
4 jv_array_set [function] [call site] 00298
4 jv_invalid [function] [call site] 00299
4 jv_array_get [function] [call site] 00301
4 jv_get_kind [function] [call site] 00302
4 jv_number_value [function] [call site] 00303
5 __assert_fail [call site] 00304
5 jvp_literal_number_ptr [function] [call site] 00305
5 jvp_literal_number_to_double [function] [call site] 00306
6 __assert_fail [call site] 00307
6 decContextDefault [function] [call site] 00308
6 jvp_dec_number_ptr [function] [call site] 00309
7 __assert_fail [call site] 00310
6 decNumberReduce [function] [call site] 00311
7 decNaNs [function] [call site] 00312
8 decNumberCopy [function] [call site] 00313
8 decDecap [function] [call site] 00314
9 decGetDigits [function] [call site] 00315
7 decCopyFit [function] [call site] 00316
8 decSetCoeff [function] [call site] 00317
7 decFinalize [function] [call site] 00318
7 decTrim [function] [call site] 00319
8 decShiftToLeast [function] [call site] 00320
7 decStatus [function] [call site] 00321
6 decNumberToString [function] [call site] 00322
7 decToString [function] [call site] 00323
8 strcpy [call site] 00324
8 strcpy [call site] 00325
8 strcpy [call site] 00326
6 tsd_dtoa_context_get [function] [call site] 00327
7 pthread_once [call site] 00328
7 jv_tsd_dtoa_ctx_init [function] [call site] 00329
8 pthread_key_create [call site] 00330
8 tsd_dtoa_ctx_dtor [function] [call site] 00331
9 jvp_dtoa_context_free [function] [call site] 00332
10 jv_mem_free [function] [call site] 00335
9 jv_mem_free [function] [call site] 00336
8 fprintf [call site] 00337
8 abort [call site] 00338
8 atexit [call site] 00339
8 jv_tsd_dtoa_ctx_fini [function] [call site] 00340
9 pthread_getspecific [call site] 00341
9 tsd_dtoa_ctx_dtor [function] [call site] 00342
9 pthread_setspecific [call site] 00343
7 pthread_getspecific [call site] 00344
7 jv_mem_alloc [function] [call site] 00345
7 jvp_dtoa_context_init [function] [call site] 00346
7 pthread_setspecific [call site] 00347
7 jv_mem_free [function] [call site] 00348
7 fprintf [call site] 00349
7 abort [call site] 00350
6 jvp_strtod [function] [call site] 00351
4 jv_is_valid [function] [call site] 00439
4 jv_array_append [function] [call site] 00442
4 jv_invalid [function] [call site] 00443
4 jv_number [function] [call site] 00444
4 jv_array_set [function] [call site] 00445
4 jv_is_valid [function] [call site] 00446
4 jv_array_append [function] [call site] 00449
4 jv_invalid [function] [call site] 00450
4 jv_array_set [function] [call site] 00452
4 __assert_fail [call site] 00453
4 jv_is_valid [function] [call site] 00456
4 __assert_fail [call site] 00457
4 jv_array_get [function] [call site] 00459
4 jv_get_kind [function] [call site] 00460
4 jv_is_valid [function] [call site] 00462
4 jv_array_append [function] [call site] 00465
4 jv_invalid [function] [call site] 00467
4 jv_array_append [function] [call site] 00470
4 jv_array_slice [function] [call site] 00471
4 jv_invalid [function] [call site] 00473
4 jv_array_append [function] [call site] 00476
4 jv_is_valid [function] [call site] 00477
4 __assert_fail [call site] 00478
4 jv_array_get [function] [call site] 00480
4 jv_get_kind [function] [call site] 00481
4 jv_is_valid [function] [call site] 00483
4 jv_array_append [function] [call site] 00486
4 jv_invalid [function] [call site] 00488
4 jv_array_append [function] [call site] 00491
4 jv_array_slice [function] [call site] 00492
4 jv_invalid [function] [call site] 00494
4 jv_array_append [function] [call site] 00497
4 jv_object [function] [call site] 00498
5 jvp_object_new [function] [call site] 00499
6 __assert_fail [call site] 00500
6 jv_mem_alloc [function] [call site] 00501
3 parse_token [function] [call site] 00502
4 jv_is_valid [function] [call site] 00503
4 push [function] [call site] 00505
5 __assert_fail [call site] 00506
5 jv_mem_realloc [function] [call site] 00507
5 __assert_fail [call site] 00508
4 jv_is_valid [function] [call site] 00509
4 jv_object [function] [call site] 00510
4 jv_is_valid [function] [call site] 00512
4 jv_get_kind [function] [call site] 00513
4 jv_get_kind [function] [call site] 00514
4 jv_invalid [function] [call site] 00516
4 jv_is_valid [function] [call site] 00517
4 jv_get_kind [function] [call site] 00518
4 jv_array_append [function] [call site] 00519
4 jv_invalid [function] [call site] 00520
4 jv_get_kind [function] [call site] 00521
4 jv_get_kind [function] [call site] 00522
4 __assert_fail [call site] 00523
4 jv_object_set [function] [call site] 00524
5 __assert_fail [call site] 00525
5 __assert_fail [call site] 00526
5 jvp_object_write [function] [call site] 00527
6 jvp_object_unshare [function] [call site] 00528
7 __assert_fail [call site] 00529
7 jvp_refcnt_unshared [function] [call site] 00530
7 jvp_object_size [function] [call site] 00531
7 jvp_object_new [function] [call site] 00532
7 jvp_object_ptr [function] [call site] 00533
7 jvp_object_size [function] [call site] 00534
7 jvp_object_get_slot [function] [call site] 00535
7 jvp_object_get_slot [function] [call site] 00536
7 jv_get_kind [function] [call site] 00537
7 jvp_object_buckets [function] [call site] 00540
8 jvp_object_ptr [function] [call site] 00541
7 jvp_object_buckets [function] [call site] 00542
7 jvp_object_size [function] [call site] 00543
7 jvp_refcnt_unshared [function] [call site] 00545
7 __assert_fail [call site] 00546
6 jvp_object_find_bucket [function] [call site] 00547
7 jvp_object_buckets [function] [call site] 00548
7 jvp_object_mask [function] [call site] 00549
8 __assert_fail [call site] 00550
7 jvp_string_hash [function] [call site] 00551
8 jvp_string_ptr [function] [call site] 00552
8 jvp_string_length [function] [call site] 00553
8 jvp_hash_seed [function] [call site] 00554
9 pthread_once [call site] 00555
9 jvp_hash_seed_init [function] [call site] 00556
10 getentropy [call site] 00557
10 getpid [call site] 00558
10 time [call site] 00559
6 jvp_object_find_slot [function] [call site] 00563
7 jvp_string_hash [function] [call site] 00564
7 jvp_object_get_slot [function] [call site] 00565
7 jvp_string_equal [function] [call site] 00566
8 __assert_fail [call site] 00567
8 __assert_fail [call site] 00568
8 jvp_string_ptr [function] [call site] 00569
8 jvp_string_ptr [function] [call site] 00570
8 jvp_string_length [function] [call site] 00571
8 jvp_string_length [function] [call site] 00572
8 memcmp [call site] 00573
7 jvp_object_next_slot [function] [call site] 00574
8 jvp_object_get_slot [function] [call site] 00575
6 jvp_string_free [function] [call site] 00576
6 jvp_object_add_slot [function] [call site] 00577
7 jvp_object_ptr [function] [call site] 00578
7 jvp_object_size [function] [call site] 00579
7 jvp_object_get_slot [function] [call site] 00580
7 jvp_string_hash [function] [call site] 00581
6 jv_invalid [function] [call site] 00582
6 jvp_object_rehash [function] [call site] 00583
7 __assert_fail [call site] 00584
7 jvp_refcnt_unshared [function] [call site] 00585
7 __assert_fail [call site] 00586
7 jvp_object_size [function] [call site] 00587
7 jvp_object_new [function] [call site] 00588
7 jvp_object_get_slot [function] [call site] 00589
7 jv_get_kind [function] [call site] 00590
7 jvp_object_find_bucket [function] [call site] 00591
7 jvp_object_find_slot [function] [call site] 00592
7 __assert_fail [call site] 00593
7 jvp_object_add_slot [function] [call site] 00594
7 __assert_fail [call site] 00595
7 jvp_object_ptr [function] [call site] 00596
7 jv_mem_free [function] [call site] 00597
6 jvp_string_free [function] [call site] 00598
6 jvp_object_find_bucket [function] [call site] 00599
6 jvp_object_find_slot [function] [call site] 00600
6 __assert_fail [call site] 00601
6 jvp_object_add_slot [function] [call site] 00602
6 __assert_fail [call site] 00603
6 jv_invalid [function] [call site] 00604
5 jv_string [function] [call site] 00607
5 jv_invalid_with_msg [function] [call site] 00608
4 jv_invalid [function] [call site] 00610
4 jv_get_kind [function] [call site] 00611
4 jv_is_valid [function] [call site] 00612
4 jv_array_append [function] [call site] 00613
4 jv_invalid [function] [call site] 00614
4 jv_array_length [function] [call site] 00616
4 jv_is_valid [function] [call site] 00618
4 jv_get_kind [function] [call site] 00619
4 jv_get_kind [function] [call site] 00620
4 __assert_fail [call site] 00621
4 jv_object_set [function] [call site] 00622
4 jv_invalid [function] [call site] 00623
4 jv_get_kind [function] [call site] 00624
4 jv_object_length [function] [call site] 00626
5 __assert_fail [call site] 00627
5 jvp_object_length [function] [call site] 00628
6 jvp_object_size [function] [call site] 00629
6 jvp_object_get_slot [function] [call site] 00630
6 jv_get_kind [function] [call site] 00631
3 stream_check_done [function] [call site] 00634
3 parse_check_done [function] [call site] 00635
3 found_string [function] [call site] 00636
3 stream_check_done [function] [call site] 00642
3 parse_check_done [function] [call site] 00643
2 make_error [function] [call site] 00646
3 jv_string_vfmt [function] [call site] 00647
4 jv_mem_alloc [function] [call site] 00648
4 vsnprintf [call site] 00649
4 jv_string_sized [function] [call site] 00650
4 jv_mem_free [function] [call site] 00651
4 jv_mem_free [function] [call site] 00652
3 jv_array_append [function] [call site] 00654
3 jv_invalid_with_msg [function] [call site] 00656
2 parser_reset [function] [call site] 00657
2 make_error [function] [call site] 00658
2 parser_reset [function] [call site] 00659
2 __assert_fail [call site] 00660
2 jv_invalid [function] [call site] 00661
2 __assert_fail [call site] 00662
2 make_error [function] [call site] 00664
2 make_error [function] [call site] 00665
2 parser_reset [function] [call site] 00666
2 check_literal [function] [call site] 00667
2 make_error [function] [call site] 00668
2 parser_reset [function] [call site] 00669
2 make_error [function] [call site] 00670
2 parser_reset [function] [call site] 00671
2 jv_is_valid [function] [call site] 00672
2 jv_array_append [function] [call site] 00675
2 jv_invalid [function] [call site] 00676
2 jv_get_kind [function] [call site] 00677
2 make_error [function] [call site] 00679
1 jv_is_valid [function] [call site] 00680
1 jv_parser_free [function] [call site] 00683
2 parser_free [function] [call site] 00684
3 parser_reset [function] [call site] 00685
3 jv_mem_free [function] [call site] 00688
3 jv_mem_free [function] [call site] 00689
3 jvp_dtoa_context_free [function] [call site] 00690
2 jv_mem_free [function] [call site] 00691