Fuzz introspector: jq_fuzz_parse_stream
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
136 499 scan call site: 00499 jv_object_set
134 301 jv_number_value call site: 00301 jvp_literal_number_to_double
22 2 jv_parser_new call site: 00002 memory_exhausted
12 243 check_literal call site: 00243 check_literal
6 92 jv_array_set call site: 00092 jv_string
6 224 decSetSubnormal call site: 00224 decSetSubnormal
5 171 jv_parser_next call site: 00171 check_literal
4 119 jvp_array_offset call site: 00119 jv_string
4 653 jv_string_vfmt call site: 00653 jv_array_append
3 152 jvp_array_slice call site: 00152 jv_array_get
3 261 parser_reset call site: 00261 jv_free
2 106 jv_string_sized call site: 00106 jv_string

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 jv_parser_new [function] [call site] 00001
2 jv_mem_alloc [function] [call site] 00002
3 memory_exhausted [function] [call site] 00003
4 pthread_once [call site] 00004
4 tsd_init [function] [call site] 00005
5 pthread_key_create [call site] 00006
5 tsd_fini_thread [function] [call site] 00007
5 fprintf [call site] 00008
5 abort [call site] 00009
5 atexit [call site] 00010
5 tsd_fini [function] [call site] 00011
6 pthread_getspecific [call site] 00012
6 pthread_setspecific [call site] 00013
5 fprintf [call site] 00014
5 abort [call site] 00015
4 tsd_init_nomem_handler [function] [call site] 00016
5 pthread_getspecific [call site] 00017
5 calloc [call site] 00018
5 pthread_setspecific [call site] 00019
5 fprintf [call site] 00020
5 abort [call site] 00021
4 pthread_getspecific [call site] 00022
4 fprintf [call site] 00023
4 abort [call site] 00024
2 parser_init [function] [call site] 00025
3 jv_array [function] [call site] 00026
4 jv_array_sized [function] [call site] 00027
5 jvp_array_new [function] [call site] 00028
6 jvp_array_alloc [function] [call site] 00029
7 jv_mem_alloc [function] [call site] 00030
3 jv_invalid [function] [call site] 00031
3 jv_invalid [function] [call site] 00032
3 jv_invalid [function] [call site] 00033
3 jv_mem_alloc [function] [call site] 00034
3 jvp_dtoa_context_init [function] [call site] 00035
1 jv_parser_set_buf [function] [call site] 00036
2 __assert_fail [call site] 00037
1 jv_parser_next [function] [call site] 00038
2 jv_invalid [function] [call site] 00039
2 jv_invalid [function] [call site] 00040
2 jv_invalid [function] [call site] 00041
2 stream_check_done [function] [call site] 00042
3 jv_is_valid [function] [call site] 00043
4 jv_get_kind [function] [call site] 00044
3 jv_copy [function] [call site] 00046
4 jvp_refcnt_inc [function] [call site] 00047
3 jv_array_append [function] [call site] 00048
4 jv_array_length [function] [call site] 00050
5 __assert_fail [call site] 00051
5 jvp_array_length [function] [call site] 00052
6 __assert_fail [call site] 00053
5 jv_free [function] [call site] 00054
6 jvp_refcnt_dec [function] [call site] 00055
6 jvp_array_ptr [function] [call site] 00056
7 __assert_fail [call site] 00057
6 jv_mem_realloc [function] [call site] 00058
7 realloc [call site] 00059
7 memory_exhausted [function] [call site] 00060
6 jv_mem_free [function] [call site] 00061
6 jvp_refcnt_dec [function] [call site] 00062
6 jvp_object_size [function] [call site] 00063
7 __assert_fail [call site] 00064
6 jv_mem_realloc [function] [call site] 00065
6 jvp_object_get_slot [function] [call site] 00066
7 jvp_object_size [function] [call site] 00067
7 __assert_fail [call site] 00068
7 jvp_object_ptr [function] [call site] 00069
8 __assert_fail [call site] 00070
6 jv_get_kind [function] [call site] 00071
6 jvp_string_free [function] [call site] 00072
7 jvp_string_ptr [function] [call site] 00073
8 __assert_fail [call site] 00074
7 jvp_refcnt_dec [function] [call site] 00075
7 jv_mem_free [function] [call site] 00076
6 jvp_object_ptr [function] [call site] 00077
6 jv_mem_free [function] [call site] 00078
6 jvp_refcnt_dec [function] [call site] 00079
6 jv_mem_realloc [function] [call site] 00080
6 jv_mem_free [function] [call site] 00081
6 jvp_string_free [function] [call site] 00082
6 jvp_number_free [function] [call site] 00083
7 __assert_fail [call site] 00084
7 jvp_refcnt_dec [function] [call site] 00085
7 jvp_literal_number_ptr [function] [call site] 00086
8 __assert_fail [call site] 00087
7 jv_mem_free [function] [call site] 00088
7 jv_mem_free [function] [call site] 00089
6 jv_mem_free [function] [call site] 00090
4 jv_array_set [function] [call site] 00091
5 __assert_fail [call site] 00092
5 jvp_array_length [function] [call site] 00093
5 jv_string [function] [call site] 00096
6 strlen [call site] 00097
6 jv_string_sized [function] [call site] 00098
7 jvp_utf8_is_valid [function] [call site] 00099
8 jvp_utf8_next [function] [call site] 00100
9 __assert_fail [call site] 00101
9 __assert_fail [call site] 00102
7 jvp_string_new [function] [call site] 00103
8 jvp_string_alloc [function] [call site] 00104
9 jv_mem_alloc [function] [call site] 00105
7 jvp_string_copy_replace_bad [function] [call site] 00106
8 jv_string [function] [call site] 00107
8 jv_invalid_with_msg [function] [call site] 00108
9 jv_mem_alloc [function] [call site] 00109
8 jvp_string_alloc [function] [call site] 00110
8 jvp_utf8_next [function] [call site] 00111
8 jvp_utf8_encode [function] [call site] 00112
9 __assert_fail [call site] 00113
9 jvp_utf8_encode_length [function] [call site] 00114
9 __assert_fail [call site] 00115
8 __assert_fail [call site] 00116
5 jv_invalid_with_msg [function] [call site] 00117
5 jvp_array_offset [function] [call site] 00118
6 __assert_fail [call site] 00119
5 jv_string [function] [call site] 00122
5 jv_invalid_with_msg [function] [call site] 00123
5 jvp_array_write [function] [call site] 00124
6 __assert_fail [call site] 00125
6 jvp_array_ptr [function] [call site] 00126
6 jvp_array_offset [function] [call site] 00127
6 jvp_refcnt_unshared [function] [call site] 00128
6 jvp_array_length [function] [call site] 00131
6 jvp_array_alloc [function] [call site] 00133
6 jvp_array_length [function] [call site] 00134
6 jvp_array_offset [function] [call site] 00135
3 jv_invalid [function] [call site] 00139
3 jv_is_valid [function] [call site] 00140
3 jv_array_length [function] [call site] 00142
3 jv_array_slice [function] [call site] 00144
4 __assert_fail [call site] 00145
4 jvp_array_slice [function] [call site] 00146
5 __assert_fail [call site] 00147
5 jvp_array_length [function] [call site] 00148
5 jvp_clamp_slice_params [function] [call site] 00149
5 __assert_fail [call site] 00150
5 jv_array_sized [function] [call site] 00153
5 jv_array_get [function] [call site] 00155
6 __assert_fail [call site] 00156
6 jvp_array_read [function] [call site] 00157
7 __assert_fail [call site] 00158
7 jvp_array_length [function] [call site] 00159
7 jvp_array_ptr [function] [call site] 00160
7 jvp_array_offset [function] [call site] 00161
7 __assert_fail [call site] 00162
7 jvp_array_offset [function] [call site] 00163
6 jv_invalid [function] [call site] 00165
5 jv_array_append [function] [call site] 00167
3 jv_array_slice [function] [call site] 00169
3 jv_invalid [function] [call site] 00170
2 scan [function] [call site] 00171
3 stream_seq_check_truncation [function] [call site] 00172
4 jv_get_kind [function] [call site] 00173
3 seq_check_truncation [function] [call site] 00174
4 jv_get_kind [function] [call site] 00175
3 check_literal [function] [call site] 00176
4 jv_number_with_literal [function] [call site] 00186
5 jvp_literal_number_new [function] [call site] 00187
6 strlen [call site] 00188
6 jvp_literal_number_alloc [function] [call site] 00189
7 jv_mem_alloc [function] [call site] 00190
6 tsd_dec_ctx_get [function] [call site] 00191
7 pthread_once [call site] 00192
7 jv_tsd_dec_ctx_init [function] [call site] 00193
8 pthread_key_create [call site] 00194
8 jv_mem_free [function] [call site] 00195
8 fprintf [call site] 00196
8 abort [call site] 00197
8 atexit [call site] 00198
8 jv_tsd_dec_ctx_fini [function] [call site] 00199
9 pthread_getspecific [call site] 00200
9 jv_mem_free [function] [call site] 00201
9 pthread_setspecific [call site] 00202
7 pthread_getspecific [call site] 00203
7 decContextDefault [function] [call site] 00204
8 decContextSetStatus [function] [call site] 00205
9 raise [call site] 00206
7 pthread_setspecific [call site] 00207
7 fprintf [call site] 00208
7 abort [call site] 00209
6 decContextClearStatus [function] [call site] 00210
6 decNumberFromString [function] [call site] 00211
7 decNumberZero [function] [call site] 00212
7 decSetCoeff [function] [call site] 00215
7 decFinalize [function] [call site] 00216
8 decSetSubnormal [function] [call site] 00217
9 decSetCoeff [function] [call site] 00218
9 decApplyRound [function] [call site] 00219
10 decSetOverflow [function] [call site] 00220
11 decNumberZero [function] [call site] 00221
11 decSetMaxValue [function] [call site] 00222
10 decUnitAddSub [function] [call site] 00223
9 decShiftToMost [function] [call site] 00224
8 decNumberZero [function] [call site] 00225
8 decCompare [function] [call site] 00226
9 decUnitCompare [function] [call site] 00227
10 decUnitAddSub [function] [call site] 00228
8 decApplyRound [function] [call site] 00229
8 decSetSubnormal [function] [call site] 00230
8 decApplyRound [function] [call site] 00231
8 decSetOverflow [function] [call site] 00232
8 decShiftToMost [function] [call site] 00233
7 decFinalize [function] [call site] 00234
7 decStatus [function] [call site] 00235
8 decNumberZero [function] [call site] 00236
8 decContextSetStatus [function] [call site] 00237
6 jv_mem_free [function] [call site] 00238
6 jv_mem_free [function] [call site] 00239
6 jv_mem_free [function] [call site] 00240
6 jv_number [function] [call site] 00241
4 jv_get_kind [function] [call site] 00242
3 stream_is_top_num [function] [call site] 00244
4 jv_get_kind [function] [call site] 00245
3 parse_is_top_num [function] [call site] 00246
4 jv_get_kind [function] [call site] 00247
3 check_literal [function] [call site] 00248
3 stream_check_done [function] [call site] 00249
3 parse_check_done [function] [call site] 00250
4 jv_is_valid [function] [call site] 00251
4 jv_invalid [function] [call site] 00252
3 jv_is_valid [function] [call site] 00253
3 __assert_fail [call site] 00254
3 jv_invalid [function] [call site] 00264
3 check_literal [function] [call site] 00266
3 stream_check_done [function] [call site] 00267
3 parse_check_done [function] [call site] 00268
3 tokenadd [function] [call site] 00269
4 __assert_fail [call site] 00270
4 jv_mem_realloc [function] [call site] 00271
4 __assert_fail [call site] 00272
3 stream_token [function] [call site] 00273
4 jv_is_valid [function] [call site] 00274
4 jv_array_get [function] [call site] 00276
4 jv_get_kind [function] [call site] 00277
4 jv_number [function] [call site] 00279
4 jv_array_append [function] [call site] 00280
4 jv_array_get [function] [call site] 00282
4 jv_get_kind [function] [call site] 00283
4 jv_array_append [function] [call site] 00286
4 jv_invalid [function] [call site] 00287
4 jv_array_get [function] [call site] 00289
4 jv_get_kind [function] [call site] 00290
4 jv_is_valid [function] [call site] 00293
4 jv_get_kind [function] [call site] 00294
4 jv_array_set [function] [call site] 00295
4 jv_invalid [function] [call site] 00296
4 jv_array_get [function] [call site] 00298
4 jv_get_kind [function] [call site] 00299
4 jv_number_value [function] [call site] 00300
5 __assert_fail [call site] 00301
5 jvp_literal_number_ptr [function] [call site] 00302
5 jvp_literal_number_to_double [function] [call site] 00303
6 __assert_fail [call site] 00304
6 decContextDefault [function] [call site] 00305
6 jvp_dec_number_ptr [function] [call site] 00306
7 __assert_fail [call site] 00307
6 decNumberReduce [function] [call site] 00308
7 decNaNs [function] [call site] 00309
8 decNumberCopy [function] [call site] 00310
8 decDecap [function] [call site] 00311
9 decGetDigits [function] [call site] 00312
7 decCopyFit [function] [call site] 00313
8 decSetCoeff [function] [call site] 00314
7 decFinalize [function] [call site] 00315
7 decTrim [function] [call site] 00316
8 decShiftToLeast [function] [call site] 00317
7 decStatus [function] [call site] 00318
6 decNumberToString [function] [call site] 00319
7 decToString [function] [call site] 00320
8 strcpy [call site] 00321
8 strcpy [call site] 00322
8 strcpy [call site] 00323
6 tsd_dtoa_context_get [function] [call site] 00324
7 pthread_once [call site] 00325
7 jv_tsd_dtoa_ctx_init [function] [call site] 00326
8 pthread_key_create [call site] 00327
8 tsd_dtoa_ctx_dtor [function] [call site] 00328
9 jvp_dtoa_context_free [function] [call site] 00329
10 jv_mem_free [function] [call site] 00332
9 jv_mem_free [function] [call site] 00333
8 fprintf [call site] 00334
8 abort [call site] 00335
8 atexit [call site] 00336
8 jv_tsd_dtoa_ctx_fini [function] [call site] 00337
9 pthread_getspecific [call site] 00338
9 tsd_dtoa_ctx_dtor [function] [call site] 00339
9 pthread_setspecific [call site] 00340
7 pthread_getspecific [call site] 00341
7 jv_mem_alloc [function] [call site] 00342
7 jvp_dtoa_context_init [function] [call site] 00343
7 pthread_setspecific [call site] 00344
7 jv_mem_free [function] [call site] 00345
7 fprintf [call site] 00346
7 abort [call site] 00347
6 jvp_strtod [function] [call site] 00348
4 jv_is_valid [function] [call site] 00436
4 jv_array_append [function] [call site] 00439
4 jv_invalid [function] [call site] 00440
4 jv_number [function] [call site] 00441
4 jv_array_set [function] [call site] 00442
4 jv_is_valid [function] [call site] 00443
4 jv_array_append [function] [call site] 00446
4 jv_invalid [function] [call site] 00447
4 jv_array_set [function] [call site] 00449
4 __assert_fail [call site] 00450
4 jv_is_valid [function] [call site] 00453
4 __assert_fail [call site] 00454
4 jv_array_get [function] [call site] 00456
4 jv_get_kind [function] [call site] 00457
4 jv_is_valid [function] [call site] 00459
4 jv_array_append [function] [call site] 00462
4 jv_invalid [function] [call site] 00464
4 jv_array_append [function] [call site] 00467
4 jv_array_slice [function] [call site] 00468
4 jv_invalid [function] [call site] 00470
4 jv_array_append [function] [call site] 00473
4 jv_is_valid [function] [call site] 00474
4 __assert_fail [call site] 00475
4 jv_array_get [function] [call site] 00477
4 jv_get_kind [function] [call site] 00478
4 jv_is_valid [function] [call site] 00480
4 jv_array_append [function] [call site] 00483
4 jv_invalid [function] [call site] 00485
4 jv_array_append [function] [call site] 00488
4 jv_array_slice [function] [call site] 00489
4 jv_invalid [function] [call site] 00491
4 jv_array_append [function] [call site] 00494
4 jv_object [function] [call site] 00495
5 jvp_object_new [function] [call site] 00496
6 __assert_fail [call site] 00497
6 jv_mem_alloc [function] [call site] 00498
3 parse_token [function] [call site] 00499
4 jv_is_valid [function] [call site] 00500
4 push [function] [call site] 00502
5 __assert_fail [call site] 00503
5 jv_mem_realloc [function] [call site] 00504
5 __assert_fail [call site] 00505
4 jv_is_valid [function] [call site] 00506
4 jv_object [function] [call site] 00507
4 jv_is_valid [function] [call site] 00509
4 jv_get_kind [function] [call site] 00510
4 jv_get_kind [function] [call site] 00511
4 jv_invalid [function] [call site] 00513
4 jv_is_valid [function] [call site] 00514
4 jv_get_kind [function] [call site] 00515
4 jv_array_append [function] [call site] 00516
4 jv_invalid [function] [call site] 00517
4 jv_get_kind [function] [call site] 00518
4 jv_get_kind [function] [call site] 00519
4 __assert_fail [call site] 00520
4 jv_object_set [function] [call site] 00521
5 __assert_fail [call site] 00522
5 __assert_fail [call site] 00523
5 jvp_object_write [function] [call site] 00524
6 jvp_object_unshare [function] [call site] 00525
7 __assert_fail [call site] 00526
7 jvp_refcnt_unshared [function] [call site] 00527
7 jvp_object_size [function] [call site] 00528
7 jvp_object_new [function] [call site] 00529
7 jvp_object_ptr [function] [call site] 00530
7 jvp_object_size [function] [call site] 00531
7 jvp_object_get_slot [function] [call site] 00532
7 jvp_object_get_slot [function] [call site] 00533
7 jv_get_kind [function] [call site] 00534
7 jvp_object_buckets [function] [call site] 00537
8 jvp_object_ptr [function] [call site] 00538
7 jvp_object_buckets [function] [call site] 00539
7 jvp_object_size [function] [call site] 00540
7 jvp_refcnt_unshared [function] [call site] 00542
7 __assert_fail [call site] 00543
6 jvp_object_find_bucket [function] [call site] 00544
7 jvp_object_buckets [function] [call site] 00545
7 jvp_object_mask [function] [call site] 00546
8 __assert_fail [call site] 00547
7 jvp_string_hash [function] [call site] 00548
8 jvp_string_ptr [function] [call site] 00549
8 jvp_string_length [function] [call site] 00550
8 jvp_hash_seed [function] [call site] 00551
9 pthread_once [call site] 00552
9 jvp_hash_seed_init [function] [call site] 00553
10 getentropy [call site] 00554
10 open [call site] 00555
10 read [call site] 00556
10 getpid [call site] 00557
10 time [call site] 00558
10 close [call site] 00559
10 getpid [call site] 00560
10 time [call site] 00561
6 jvp_object_find_slot [function] [call site] 00565
7 jvp_string_hash [function] [call site] 00566
7 jvp_object_get_slot [function] [call site] 00567
7 jvp_string_equal [function] [call site] 00568
8 __assert_fail [call site] 00569
8 __assert_fail [call site] 00570
8 jvp_string_ptr [function] [call site] 00571
8 jvp_string_ptr [function] [call site] 00572
8 jvp_string_length [function] [call site] 00573
8 jvp_string_length [function] [call site] 00574
8 memcmp [call site] 00575
7 jvp_object_next_slot [function] [call site] 00576
8 jvp_object_get_slot [function] [call site] 00577
6 jvp_string_free [function] [call site] 00578
6 jvp_object_add_slot [function] [call site] 00579
7 jvp_object_ptr [function] [call site] 00580
7 jvp_object_size [function] [call site] 00581
7 jvp_object_get_slot [function] [call site] 00582
7 jvp_string_hash [function] [call site] 00583
6 jv_invalid [function] [call site] 00584
6 jvp_object_rehash [function] [call site] 00585
7 __assert_fail [call site] 00586
7 jvp_refcnt_unshared [function] [call site] 00587
7 __assert_fail [call site] 00588
7 jvp_object_size [function] [call site] 00589
7 jvp_object_new [function] [call site] 00590
7 jvp_object_get_slot [function] [call site] 00591
7 jv_get_kind [function] [call site] 00592
7 jvp_object_find_bucket [function] [call site] 00593
7 jvp_object_find_slot [function] [call site] 00594
7 __assert_fail [call site] 00595
7 jvp_object_add_slot [function] [call site] 00596
7 __assert_fail [call site] 00597
7 jvp_object_ptr [function] [call site] 00598
7 jv_mem_free [function] [call site] 00599
6 jvp_string_free [function] [call site] 00600
6 jvp_object_find_bucket [function] [call site] 00601
6 jvp_object_find_slot [function] [call site] 00602
6 __assert_fail [call site] 00603
6 jvp_object_add_slot [function] [call site] 00604
6 __assert_fail [call site] 00605
6 jv_invalid [function] [call site] 00606
5 jv_string [function] [call site] 00609
5 jv_invalid_with_msg [function] [call site] 00610
4 jv_invalid [function] [call site] 00612
4 jv_get_kind [function] [call site] 00613
4 jv_is_valid [function] [call site] 00614
4 jv_array_append [function] [call site] 00615
4 jv_invalid [function] [call site] 00616
4 jv_array_length [function] [call site] 00618
4 jv_is_valid [function] [call site] 00620
4 jv_get_kind [function] [call site] 00621
4 jv_get_kind [function] [call site] 00622
4 __assert_fail [call site] 00623
4 jv_object_set [function] [call site] 00624
4 jv_invalid [function] [call site] 00625
4 jv_get_kind [function] [call site] 00626
4 jv_object_length [function] [call site] 00628
5 __assert_fail [call site] 00629
5 jvp_object_length [function] [call site] 00630
6 jvp_object_size [function] [call site] 00631
6 jvp_object_get_slot [function] [call site] 00632
6 jv_get_kind [function] [call site] 00633
3 stream_check_done [function] [call site] 00636
3 parse_check_done [function] [call site] 00637
3 found_string [function] [call site] 00638
3 stream_check_done [function] [call site] 00644
3 parse_check_done [function] [call site] 00645
2 make_error [function] [call site] 00648
3 jv_string_vfmt [function] [call site] 00649
4 jv_mem_alloc [function] [call site] 00650
4 vsnprintf [call site] 00651
4 jv_string_sized [function] [call site] 00652
4 jv_mem_free [function] [call site] 00653
4 jv_mem_free [function] [call site] 00654
3 jv_array_append [function] [call site] 00656
3 jv_invalid_with_msg [function] [call site] 00658
2 parser_reset [function] [call site] 00659
2 make_error [function] [call site] 00660
2 parser_reset [function] [call site] 00661
2 __assert_fail [call site] 00662
2 jv_invalid [function] [call site] 00663
2 __assert_fail [call site] 00664
2 make_error [function] [call site] 00666
2 make_error [function] [call site] 00667
2 parser_reset [function] [call site] 00668
2 check_literal [function] [call site] 00669
2 make_error [function] [call site] 00670
2 parser_reset [function] [call site] 00671
2 make_error [function] [call site] 00672
2 parser_reset [function] [call site] 00673
2 jv_is_valid [function] [call site] 00674
2 jv_array_append [function] [call site] 00677
2 jv_invalid [function] [call site] 00678
2 jv_get_kind [function] [call site] 00679
2 make_error [function] [call site] 00681
1 jv_is_valid [function] [call site] 00682
1 jv_parser_free [function] [call site] 00685
2 parser_free [function] [call site] 00686
3 parser_reset [function] [call site] 00687
3 jv_mem_free [function] [call site] 00690
3 jv_mem_free [function] [call site] 00691
3 jvp_dtoa_context_free [function] [call site] 00692
2 jv_mem_free [function] [call site] 00693