Fuzz introspector: jq_fuzz_parse_stream
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
136 503 scan call site: 00503 jv_object_set
134 305 jv_number_value call site: 00305 jvp_literal_number_to_double
22 2 jv_parser_new call site: 00002 memory_exhausted
12 247 check_literal call site: 00247 check_literal
6 92 jv_array_set call site: 00092 jv_string
6 228 decSetSubnormal call site: 00228 decSetSubnormal
5 175 jv_parser_next call site: 00175 check_literal
4 122 jvp_array_offset call site: 00122 jv_string
4 657 jv_string_vfmt call site: 00657 jv_array_append
3 156 jvp_array_slice call site: 00156 jv_array_get
3 265 parser_reset call site: 00265 jv_free
2 109 jv_string_sized call site: 00109 jv_string

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 jv_parser_new [function] [call site] 00001
2 jv_mem_alloc [function] [call site] 00002
3 memory_exhausted [function] [call site] 00003
4 pthread_once [call site] 00004
4 tsd_init [function] [call site] 00005
5 pthread_key_create [call site] 00006
5 tsd_fini_thread [function] [call site] 00007
5 fprintf [call site] 00008
5 abort [call site] 00009
5 atexit [call site] 00010
5 tsd_fini [function] [call site] 00011
6 pthread_getspecific [call site] 00012
6 pthread_setspecific [call site] 00013
5 fprintf [call site] 00014
5 abort [call site] 00015
4 tsd_init_nomem_handler [function] [call site] 00016
5 pthread_getspecific [call site] 00017
5 calloc [call site] 00018
5 pthread_setspecific [call site] 00019
5 fprintf [call site] 00020
5 abort [call site] 00021
4 pthread_getspecific [call site] 00022
4 fprintf [call site] 00023
4 abort [call site] 00024
2 parser_init [function] [call site] 00025
3 jv_array [function] [call site] 00026
4 jv_array_sized [function] [call site] 00027
5 jvp_array_new [function] [call site] 00028
6 jvp_array_alloc [function] [call site] 00029
7 jv_mem_alloc [function] [call site] 00030
3 jv_invalid [function] [call site] 00031
3 jv_invalid [function] [call site] 00032
3 jv_invalid [function] [call site] 00033
3 jv_mem_alloc [function] [call site] 00034
3 jvp_dtoa_context_init [function] [call site] 00035
1 jv_parser_set_buf [function] [call site] 00036
2 __assert_fail [call site] 00037
1 jv_parser_next [function] [call site] 00038
2 jv_invalid [function] [call site] 00039
2 jv_invalid [function] [call site] 00040
2 jv_invalid [function] [call site] 00041
2 stream_check_done [function] [call site] 00042
3 jv_is_valid [function] [call site] 00043
4 jv_get_kind [function] [call site] 00044
3 jv_copy [function] [call site] 00046
4 jvp_refcnt_inc [function] [call site] 00047
3 jv_array_append [function] [call site] 00048
4 jv_array_length [function] [call site] 00050
5 __assert_fail [call site] 00051
5 jvp_array_length [function] [call site] 00052
6 __assert_fail [call site] 00053
5 jv_free [function] [call site] 00054
6 jvp_refcnt_dec [function] [call site] 00055
6 jvp_array_ptr [function] [call site] 00056
7 __assert_fail [call site] 00057
6 jv_mem_realloc [function] [call site] 00058
7 realloc [call site] 00059
7 memory_exhausted [function] [call site] 00060
6 jv_mem_free [function] [call site] 00061
6 jvp_refcnt_dec [function] [call site] 00062
6 jvp_object_size [function] [call site] 00063
7 __assert_fail [call site] 00064
6 jv_mem_realloc [function] [call site] 00065
6 jvp_object_get_slot [function] [call site] 00066
7 jvp_object_size [function] [call site] 00067
7 __assert_fail [call site] 00068
7 jvp_object_ptr [function] [call site] 00069
8 __assert_fail [call site] 00070
6 jv_get_kind [function] [call site] 00071
6 jvp_string_free [function] [call site] 00072
7 jvp_string_ptr [function] [call site] 00073
8 __assert_fail [call site] 00074
7 jvp_refcnt_dec [function] [call site] 00075
7 jv_mem_free [function] [call site] 00076
6 jvp_object_ptr [function] [call site] 00077
6 jv_mem_free [function] [call site] 00078
6 jvp_refcnt_dec [function] [call site] 00079
6 jv_mem_realloc [function] [call site] 00080
6 jv_mem_free [function] [call site] 00081
6 jvp_string_free [function] [call site] 00082
6 jvp_number_free [function] [call site] 00083
7 __assert_fail [call site] 00084
7 jvp_refcnt_dec [function] [call site] 00085
7 jvp_literal_number_ptr [function] [call site] 00086
8 __assert_fail [call site] 00087
7 jv_mem_free [function] [call site] 00088
7 jv_mem_free [function] [call site] 00089
6 jv_mem_free [function] [call site] 00090
4 jv_array_set [function] [call site] 00091
5 __assert_fail [call site] 00092
5 jvp_array_length [function] [call site] 00093
5 jv_string [function] [call site] 00096
6 strlen [call site] 00097
6 jv_string_sized [function] [call site] 00098
7 jvp_utf8_is_valid [function] [call site] 00099
8 jvp_utf8_next [function] [call site] 00100
9 __assert_fail [call site] 00101
9 jvp_utf8_next_multibyte [function] [call site] 00102
10 __assert_fail [call site] 00103
10 __assert_fail [call site] 00104
10 __assert_fail [call site] 00105
7 jvp_string_new [function] [call site] 00106
8 jvp_string_alloc [function] [call site] 00107
9 jv_mem_alloc [function] [call site] 00108
7 jvp_string_copy_replace_bad [function] [call site] 00109
8 jv_string [function] [call site] 00110
8 jv_invalid_with_msg [function] [call site] 00111
9 jv_mem_alloc [function] [call site] 00112
8 jvp_string_alloc [function] [call site] 00113
8 jvp_utf8_next [function] [call site] 00114
8 jvp_utf8_encode [function] [call site] 00115
9 __assert_fail [call site] 00116
9 jvp_utf8_encode_length [function] [call site] 00117
9 __assert_fail [call site] 00118
8 __assert_fail [call site] 00119
5 jv_invalid_with_msg [function] [call site] 00120
5 jvp_array_offset [function] [call site] 00121
6 __assert_fail [call site] 00122
5 jv_string [function] [call site] 00125
5 jv_invalid_with_msg [function] [call site] 00126
5 jvp_array_write [function] [call site] 00127
6 __assert_fail [call site] 00128
6 jvp_array_ptr [function] [call site] 00129
6 jvp_array_offset [function] [call site] 00130
6 jvp_refcnt_unshared [function] [call site] 00131
7 __assert_fail [call site] 00132
6 jvp_array_length [function] [call site] 00135
6 jvp_array_alloc [function] [call site] 00137
6 jvp_array_length [function] [call site] 00138
6 jvp_array_offset [function] [call site] 00139
3 jv_invalid [function] [call site] 00143
3 jv_is_valid [function] [call site] 00144
3 jv_array_length [function] [call site] 00146
3 jv_array_slice [function] [call site] 00148
4 __assert_fail [call site] 00149
4 jvp_array_slice [function] [call site] 00150
5 __assert_fail [call site] 00151
5 jvp_array_length [function] [call site] 00152
5 jvp_clamp_slice_params [function] [call site] 00153
5 __assert_fail [call site] 00154
5 jv_array_sized [function] [call site] 00157
5 jv_array_get [function] [call site] 00159
6 __assert_fail [call site] 00160
6 jvp_array_read [function] [call site] 00161
7 __assert_fail [call site] 00162
7 jvp_array_length [function] [call site] 00163
7 jvp_array_ptr [function] [call site] 00164
7 jvp_array_offset [function] [call site] 00165
7 __assert_fail [call site] 00166
7 jvp_array_offset [function] [call site] 00167
6 jv_invalid [function] [call site] 00169
5 jv_array_append [function] [call site] 00171
3 jv_array_slice [function] [call site] 00173
3 jv_invalid [function] [call site] 00174
2 scan [function] [call site] 00175
3 stream_seq_check_truncation [function] [call site] 00176
4 jv_get_kind [function] [call site] 00177
3 seq_check_truncation [function] [call site] 00178
4 jv_get_kind [function] [call site] 00179
3 check_literal [function] [call site] 00180
4 jv_number_with_literal [function] [call site] 00190
5 jvp_literal_number_new [function] [call site] 00191
6 strlen [call site] 00192
6 jvp_literal_number_alloc [function] [call site] 00193
7 jv_mem_alloc [function] [call site] 00194
6 tsd_dec_ctx_get [function] [call site] 00195
7 pthread_once [call site] 00196
7 jv_tsd_dec_ctx_init [function] [call site] 00197
8 pthread_key_create [call site] 00198
8 jv_mem_free [function] [call site] 00199
8 fprintf [call site] 00200
8 abort [call site] 00201
8 atexit [call site] 00202
8 jv_tsd_dec_ctx_fini [function] [call site] 00203
9 pthread_getspecific [call site] 00204
9 jv_mem_free [function] [call site] 00205
9 pthread_setspecific [call site] 00206
7 pthread_getspecific [call site] 00207
7 decContextDefault [function] [call site] 00208
8 decContextSetStatus [function] [call site] 00209
9 raise [call site] 00210
7 pthread_setspecific [call site] 00211
7 fprintf [call site] 00212
7 abort [call site] 00213
6 decContextClearStatus [function] [call site] 00214
6 decNumberFromString [function] [call site] 00215
7 decNumberZero [function] [call site] 00216
7 decSetCoeff [function] [call site] 00219
7 decFinalize [function] [call site] 00220
8 decSetSubnormal [function] [call site] 00221
9 decSetCoeff [function] [call site] 00222
9 decApplyRound [function] [call site] 00223
10 decSetOverflow [function] [call site] 00224
11 decNumberZero [function] [call site] 00225
11 decSetMaxValue [function] [call site] 00226
10 decUnitAddSub [function] [call site] 00227
9 decShiftToMost [function] [call site] 00228
8 decNumberZero [function] [call site] 00229
8 decCompare [function] [call site] 00230
9 decUnitCompare [function] [call site] 00231
10 decUnitAddSub [function] [call site] 00232
8 decApplyRound [function] [call site] 00233
8 decSetSubnormal [function] [call site] 00234
8 decApplyRound [function] [call site] 00235
8 decSetOverflow [function] [call site] 00236
8 decShiftToMost [function] [call site] 00237
7 decFinalize [function] [call site] 00238
7 decStatus [function] [call site] 00239
8 decNumberZero [function] [call site] 00240
8 decContextSetStatus [function] [call site] 00241
6 jv_mem_free [function] [call site] 00242
6 jv_mem_free [function] [call site] 00243
6 jv_mem_free [function] [call site] 00244
6 jv_number [function] [call site] 00245
4 jv_get_kind [function] [call site] 00246
3 stream_is_top_num [function] [call site] 00248
4 jv_get_kind [function] [call site] 00249
3 parse_is_top_num [function] [call site] 00250
4 jv_get_kind [function] [call site] 00251
3 check_literal [function] [call site] 00252
3 stream_check_done [function] [call site] 00253
3 parse_check_done [function] [call site] 00254
4 jv_is_valid [function] [call site] 00255
4 jv_invalid [function] [call site] 00256
3 jv_is_valid [function] [call site] 00257
3 __assert_fail [call site] 00258
3 jv_invalid [function] [call site] 00268
3 check_literal [function] [call site] 00270
3 stream_check_done [function] [call site] 00271
3 parse_check_done [function] [call site] 00272
3 tokenadd [function] [call site] 00273
4 __assert_fail [call site] 00274
4 jv_mem_realloc [function] [call site] 00275
4 __assert_fail [call site] 00276
3 stream_token [function] [call site] 00277
4 jv_is_valid [function] [call site] 00278
4 jv_array_get [function] [call site] 00280
4 jv_get_kind [function] [call site] 00281
4 jv_number [function] [call site] 00283
4 jv_array_append [function] [call site] 00284
4 jv_array_get [function] [call site] 00286
4 jv_get_kind [function] [call site] 00287
4 jv_array_append [function] [call site] 00290
4 jv_invalid [function] [call site] 00291
4 jv_array_get [function] [call site] 00293
4 jv_get_kind [function] [call site] 00294
4 jv_is_valid [function] [call site] 00297
4 jv_get_kind [function] [call site] 00298
4 jv_array_set [function] [call site] 00299
4 jv_invalid [function] [call site] 00300
4 jv_array_get [function] [call site] 00302
4 jv_get_kind [function] [call site] 00303
4 jv_number_value [function] [call site] 00304
5 __assert_fail [call site] 00305
5 jvp_literal_number_ptr [function] [call site] 00306
5 jvp_literal_number_to_double [function] [call site] 00307
6 __assert_fail [call site] 00308
6 decContextDefault [function] [call site] 00309
6 jvp_dec_number_ptr [function] [call site] 00310
7 __assert_fail [call site] 00311
6 decNumberReduce [function] [call site] 00312
7 decNaNs [function] [call site] 00313
8 decNumberCopy [function] [call site] 00314
8 decDecap [function] [call site] 00315
9 decGetDigits [function] [call site] 00316
7 decCopyFit [function] [call site] 00317
8 decSetCoeff [function] [call site] 00318
7 decFinalize [function] [call site] 00319
7 decTrim [function] [call site] 00320
8 decShiftToLeast [function] [call site] 00321
7 decStatus [function] [call site] 00322
6 decNumberToString [function] [call site] 00323
7 decToString [function] [call site] 00324
8 strcpy [call site] 00325
8 strcpy [call site] 00326
8 strcpy [call site] 00327
6 tsd_dtoa_context_get [function] [call site] 00328
7 pthread_once [call site] 00329
7 jv_tsd_dtoa_ctx_init [function] [call site] 00330
8 pthread_key_create [call site] 00331
8 tsd_dtoa_ctx_dtor [function] [call site] 00332
9 jvp_dtoa_context_free [function] [call site] 00333
10 jv_mem_free [function] [call site] 00336
9 jv_mem_free [function] [call site] 00337
8 fprintf [call site] 00338
8 abort [call site] 00339
8 atexit [call site] 00340
8 jv_tsd_dtoa_ctx_fini [function] [call site] 00341
9 pthread_getspecific [call site] 00342
9 tsd_dtoa_ctx_dtor [function] [call site] 00343
9 pthread_setspecific [call site] 00344
7 pthread_getspecific [call site] 00345
7 jv_mem_alloc [function] [call site] 00346
7 jvp_dtoa_context_init [function] [call site] 00347
7 pthread_setspecific [call site] 00348
7 jv_mem_free [function] [call site] 00349
7 fprintf [call site] 00350
7 abort [call site] 00351
6 jvp_strtod [function] [call site] 00352
4 jv_is_valid [function] [call site] 00440
4 jv_array_append [function] [call site] 00443
4 jv_invalid [function] [call site] 00444
4 jv_number [function] [call site] 00445
4 jv_array_set [function] [call site] 00446
4 jv_is_valid [function] [call site] 00447
4 jv_array_append [function] [call site] 00450
4 jv_invalid [function] [call site] 00451
4 jv_array_set [function] [call site] 00453
4 __assert_fail [call site] 00454
4 jv_is_valid [function] [call site] 00457
4 __assert_fail [call site] 00458
4 jv_array_get [function] [call site] 00460
4 jv_get_kind [function] [call site] 00461
4 jv_is_valid [function] [call site] 00463
4 jv_array_append [function] [call site] 00466
4 jv_invalid [function] [call site] 00468
4 jv_array_append [function] [call site] 00471
4 jv_array_slice [function] [call site] 00472
4 jv_invalid [function] [call site] 00474
4 jv_array_append [function] [call site] 00477
4 jv_is_valid [function] [call site] 00478
4 __assert_fail [call site] 00479
4 jv_array_get [function] [call site] 00481
4 jv_get_kind [function] [call site] 00482
4 jv_is_valid [function] [call site] 00484
4 jv_array_append [function] [call site] 00487
4 jv_invalid [function] [call site] 00489
4 jv_array_append [function] [call site] 00492
4 jv_array_slice [function] [call site] 00493
4 jv_invalid [function] [call site] 00495
4 jv_array_append [function] [call site] 00498
4 jv_object [function] [call site] 00499
5 jvp_object_new [function] [call site] 00500
6 __assert_fail [call site] 00501
6 jv_mem_alloc [function] [call site] 00502
3 parse_token [function] [call site] 00503
4 jv_is_valid [function] [call site] 00504
4 push [function] [call site] 00506
5 __assert_fail [call site] 00507
5 jv_mem_realloc [function] [call site] 00508
5 __assert_fail [call site] 00509
4 jv_is_valid [function] [call site] 00510
4 jv_object [function] [call site] 00511
4 jv_is_valid [function] [call site] 00513
4 jv_get_kind [function] [call site] 00514
4 jv_get_kind [function] [call site] 00515
4 jv_invalid [function] [call site] 00517
4 jv_is_valid [function] [call site] 00518
4 jv_get_kind [function] [call site] 00519
4 jv_array_append [function] [call site] 00520
4 jv_invalid [function] [call site] 00521
4 jv_get_kind [function] [call site] 00522
4 jv_get_kind [function] [call site] 00523
4 __assert_fail [call site] 00524
4 jv_object_set [function] [call site] 00525
5 __assert_fail [call site] 00526
5 __assert_fail [call site] 00527
5 jvp_object_write [function] [call site] 00528
6 jvp_object_unshare [function] [call site] 00529
7 __assert_fail [call site] 00530
7 jvp_refcnt_unshared [function] [call site] 00531
7 jvp_object_size [function] [call site] 00532
7 jvp_object_new [function] [call site] 00533
7 jvp_object_ptr [function] [call site] 00534
7 jvp_object_size [function] [call site] 00535
7 jvp_object_get_slot [function] [call site] 00536
7 jvp_object_get_slot [function] [call site] 00537
7 jv_get_kind [function] [call site] 00538
7 jvp_object_buckets [function] [call site] 00541
8 jvp_object_ptr [function] [call site] 00542
7 jvp_object_buckets [function] [call site] 00543
7 jvp_object_size [function] [call site] 00544
7 jvp_refcnt_unshared [function] [call site] 00546
7 __assert_fail [call site] 00547
6 jvp_object_find_bucket [function] [call site] 00548
7 jvp_object_buckets [function] [call site] 00549
7 jvp_object_mask [function] [call site] 00550
8 __assert_fail [call site] 00551
7 jvp_string_hash [function] [call site] 00552
8 jvp_string_ptr [function] [call site] 00553
8 jvp_string_length [function] [call site] 00554
8 jvp_hash_seed [function] [call site] 00555
9 pthread_once [call site] 00556
9 jvp_hash_seed_init [function] [call site] 00557
10 getentropy [call site] 00558
10 open [call site] 00559
10 read [call site] 00560
10 getpid [call site] 00561
10 time [call site] 00562
10 close [call site] 00563
10 getpid [call site] 00564
10 time [call site] 00565
6 jvp_object_find_slot [function] [call site] 00569
7 jvp_string_hash [function] [call site] 00570
7 jvp_object_get_slot [function] [call site] 00571
7 jvp_string_equal [function] [call site] 00572
8 __assert_fail [call site] 00573
8 __assert_fail [call site] 00574
8 jvp_string_ptr [function] [call site] 00575
8 jvp_string_ptr [function] [call site] 00576
8 jvp_string_length [function] [call site] 00577
8 jvp_string_length [function] [call site] 00578
8 memcmp [call site] 00579
7 jvp_object_next_slot [function] [call site] 00580
8 jvp_object_get_slot [function] [call site] 00581
6 jvp_string_free [function] [call site] 00582
6 jvp_object_add_slot [function] [call site] 00583
7 jvp_object_ptr [function] [call site] 00584
7 jvp_object_size [function] [call site] 00585
7 jvp_object_get_slot [function] [call site] 00586
7 jvp_string_hash [function] [call site] 00587
6 jv_invalid [function] [call site] 00588
6 jvp_object_rehash [function] [call site] 00589
7 __assert_fail [call site] 00590
7 jvp_refcnt_unshared [function] [call site] 00591
7 __assert_fail [call site] 00592
7 jvp_object_size [function] [call site] 00593
7 jvp_object_new [function] [call site] 00594
7 jvp_object_get_slot [function] [call site] 00595
7 jv_get_kind [function] [call site] 00596
7 jvp_object_find_bucket [function] [call site] 00597
7 jvp_object_find_slot [function] [call site] 00598
7 __assert_fail [call site] 00599
7 jvp_object_add_slot [function] [call site] 00600
7 __assert_fail [call site] 00601
7 jvp_object_ptr [function] [call site] 00602
7 jv_mem_free [function] [call site] 00603
6 jvp_string_free [function] [call site] 00604
6 jvp_object_find_bucket [function] [call site] 00605
6 jvp_object_find_slot [function] [call site] 00606
6 __assert_fail [call site] 00607
6 jvp_object_add_slot [function] [call site] 00608
6 __assert_fail [call site] 00609
6 jv_invalid [function] [call site] 00610
5 jv_string [function] [call site] 00613
5 jv_invalid_with_msg [function] [call site] 00614
4 jv_invalid [function] [call site] 00616
4 jv_get_kind [function] [call site] 00617
4 jv_is_valid [function] [call site] 00618
4 jv_array_append [function] [call site] 00619
4 jv_invalid [function] [call site] 00620
4 jv_array_length [function] [call site] 00622
4 jv_is_valid [function] [call site] 00624
4 jv_get_kind [function] [call site] 00625
4 jv_get_kind [function] [call site] 00626
4 __assert_fail [call site] 00627
4 jv_object_set [function] [call site] 00628
4 jv_invalid [function] [call site] 00629
4 jv_get_kind [function] [call site] 00630
4 jv_object_length [function] [call site] 00632
5 __assert_fail [call site] 00633
5 jvp_object_length [function] [call site] 00634
6 jvp_object_size [function] [call site] 00635
6 jvp_object_get_slot [function] [call site] 00636
6 jv_get_kind [function] [call site] 00637
3 stream_check_done [function] [call site] 00640
3 parse_check_done [function] [call site] 00641
3 found_string [function] [call site] 00642
3 stream_check_done [function] [call site] 00648
3 parse_check_done [function] [call site] 00649
2 make_error [function] [call site] 00652
3 jv_string_vfmt [function] [call site] 00653
4 jv_mem_alloc [function] [call site] 00654
4 vsnprintf [call site] 00655
4 jv_string_sized [function] [call site] 00656
4 jv_mem_free [function] [call site] 00657
4 jv_mem_free [function] [call site] 00658
3 jv_array_append [function] [call site] 00660
3 jv_invalid_with_msg [function] [call site] 00662
2 parser_reset [function] [call site] 00663
2 make_error [function] [call site] 00664
2 parser_reset [function] [call site] 00665
2 __assert_fail [call site] 00666
2 jv_invalid [function] [call site] 00667
2 __assert_fail [call site] 00668
2 make_error [function] [call site] 00670
2 make_error [function] [call site] 00671
2 parser_reset [function] [call site] 00672
2 check_literal [function] [call site] 00673
2 make_error [function] [call site] 00674
2 parser_reset [function] [call site] 00675
2 make_error [function] [call site] 00676
2 parser_reset [function] [call site] 00677
2 jv_is_valid [function] [call site] 00678
2 jv_array_append [function] [call site] 00681
2 jv_invalid [function] [call site] 00682
2 jv_get_kind [function] [call site] 00683
2 make_error [function] [call site] 00685
1 jv_is_valid [function] [call site] 00686
1 jv_parser_free [function] [call site] 00689
2 parser_free [function] [call site] 00690
3 parser_reset [function] [call site] 00691
3 jv_mem_free [function] [call site] 00694
3 jv_mem_free [function] [call site] 00695
3 jvp_dtoa_context_free [function] [call site] 00696
2 jv_mem_free [function] [call site] 00697