Fuzz introspector: tokener_parse_ex_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
35 35 2 :

['get_dev_random_seed', 'get_time_seed']

35 35 json_c_get_random_seed call site: 00000 /src/json-c/random_seed.c:337
19 19 2 :

['__errno_location', '_json_c_strerror']

19 19 get_getrandom_seed call site: 00000 /src/json-c/random_seed.c:190
7 7 1 :

['json_abort']

7 7 json_object_array_shrink call site: 00160 /src/json-c/json_object.c:1566
2 2 1 :

['__errno_location']

2 2 printbuf_memappend call site: 00037 /src/json-c/printbuf.c:100
2 2 1 :

['__errno_location']

2 2 printbuf_extend call site: 00039 /src/json-c/printbuf.c:73
0 9 1 :

['array_list_expand_internal']

0 9 array_list_shrink call site: 00165 /src/json-c/arraylist.c:116
0 0 None 93 1678 json_tokener_parse_ex call site: 00106 /src/json-c/json_tokener.c:827
0 0 None 93 1678 json_tokener_parse_ex call site: 00118 /src/json-c/json_tokener.c:942
0 0 None 4 43 json_tokener_parse_ex call site: 00042 /src/json-c/json_tokener.c:414
0 0 None 4 43 json_tokener_parse_ex call site: 00056 /src/json-c/json_tokener.c:424
0 0 None 4 43 json_tokener_parse_ex call site: 00071 /src/json-c/json_tokener.c:530
0 0 None 4 43 json_tokener_parse_ex call site: 00078 /src/json-c/json_tokener.c:566

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 json_tokener_new [function] [call site] 00001
2 json_tokener_new_ex [function] [call site] 00002
3 calloc [call site] 00003
3 calloc [call site] 00004
3 printbuf_new [function] [call site] 00005
4 calloc [call site] 00006
3 json_tokener_reset [function] [call site] 00007
4 json_tokener_reset_level [function] [call site] 00008
5 json_object_put [function] [call site] 00009
6 __assert_fail [call site] 00010
6 json_object_object_delete [function] [call site] 00011
7 JC_OBJECT [function] [call site] 00012
7 lh_table_free [function] [call site] 00013
7 json_object_generic_delete [function] [call site] 00014
8 printbuf_free [function] [call site] 00015
6 json_object_array_delete [function] [call site] 00016
7 array_list_free [function] [call site] 00018
7 json_object_generic_delete [function] [call site] 00019
6 json_object_string_delete [function] [call site] 00020
7 JC_STRING [function] [call site] 00021
7 JC_STRING [function] [call site] 00022
7 json_object_generic_delete [function] [call site] 00023
6 json_object_generic_delete [function] [call site] 00024
1 json_tokener_parse_ex [function] [call site] 00025
2 uselocale [call site] 00026
2 strlen [call site] 00027
2 duplocale [call site] 00028
2 __errno_location [call site] 00029
2 newlocale [call site] 00030
2 freelocale [call site] 00031
2 uselocale [call site] 00032
2 json_tokener_validate_utf8 [function] [call site] 00033
2 is_ws_char [function] [call site] 00034
2 json_tokener_validate_utf8 [function] [call site] 00035
2 printbuf_reset [function] [call site] 00036
2 printbuf_memappend [function] [call site] 00037
3 __errno_location [call site] 00038
3 printbuf_extend [function] [call site] 00039
4 __errno_location [call site] 00040
4 realloc [call site] 00041
2 json_object_new_object [function] [call site] 00042
3 json_object_new [function] [call site] 00043
3 lh_kchar_table_new [function] [call site] 00044
4 lh_table_new [function] [call site] 00045
5 __assert_fail [call site] 00046
5 calloc [call site] 00047
5 calloc [call site] 00048
3 json_object_lh_entry_free [function] [call site] 00049
4 lh_entry_k_is_constant [function] [call site] 00050
4 lh_entry_k [function] [call site] 00051
4 lh_entry_v [function] [call site] 00052
4 json_object_put [function] [call site] 00053
3 json_object_generic_delete [function] [call site] 00054
3 __errno_location [call site] 00055
2 json_object_new_array [function] [call site] 00056
3 json_object_new_array_ext [function] [call site] 00057
4 json_object_new [function] [call site] 00058
4 array_list_new2 [function] [call site] 00059
4 json_object_array_entry_free [function] [call site] 00060
5 json_object_put [function] [call site] 00061
2 printbuf_reset [function] [call site] 00062
2 printbuf_reset [function] [call site] 00063
2 printbuf_reset [function] [call site] 00064
2 printbuf_reset [function] [call site] 00065
2 printbuf_reset [function] [call site] 00066
2 json_object_get [function] [call site] 00067
3 __assert_fail [call site] 00068
2 json_tokener_reset_level [function] [call site] 00069
2 json_tokener_validate_utf8 [function] [call site] 00070
2 json_object_new_double [function] [call site] 00071
3 json_object_new [function] [call site] 00072
2 printbuf_memappend [function] [call site] 00073
2 strncasecmp [call site] 00074
2 strncmp [call site] 00075
2 strncasecmp [call site] 00076
2 strncmp [call site] 00077
2 json_object_new_double [function] [call site] 00078
2 printbuf_memappend [function] [call site] 00079
2 json_tokener_validate_utf8 [function] [call site] 00080
2 printbuf_memappend [function] [call site] 00081
2 printbuf_memappend [function] [call site] 00082
2 json_tokener_validate_utf8 [function] [call site] 00083
2 printbuf_memappend [function] [call site] 00084
2 printbuf_memappend [function] [call site] 00085
2 printbuf_memappend [function] [call site] 00086
2 printbuf_memappend [function] [call site] 00087
2 json_object_new_string_len [function] [call site] 00088
3 _json_object_new_string [function] [call site] 00089
4 json_object_new [function] [call site] 00090
2 printbuf_memappend [function] [call site] 00091
2 json_tokener_validate_utf8 [function] [call site] 00092
2 printbuf_memappend [function] [call site] 00093
2 printbuf_memappend [function] [call site] 00094
2 printbuf_memappend [function] [call site] 00095
2 printbuf_memappend [function] [call site] 00096
2 printbuf_memappend [function] [call site] 00097
2 printbuf_memappend [function] [call site] 00098
2 printbuf_memappend [function] [call site] 00099
2 is_hex_char [function] [call site] 00100
2 json_tokener_validate_utf8 [function] [call site] 00101
2 printbuf_memappend [function] [call site] 00102
2 printbuf_memappend [function] [call site] 00103
2 printbuf_memappend [function] [call site] 00104
2 printbuf_memappend [function] [call site] 00105
2 printbuf_memappend [function] [call site] 00106
2 printbuf_memappend [function] [call site] 00107
2 printbuf_memappend [function] [call site] 00108
2 printbuf_memappend [function] [call site] 00109
2 printbuf_memappend [function] [call site] 00110
2 printbuf_memappend [function] [call site] 00111
2 strncasecmp [call site] 00112
2 strncmp [call site] 00113
2 json_object_new_boolean [function] [call site] 00114
3 json_object_new [function] [call site] 00115
2 strncasecmp [call site] 00116
2 strncmp [call site] 00117
2 json_object_new_boolean [function] [call site] 00118
2 strchr [call site] 00119
2 strchr [call site] 00120
2 json_tokener_validate_utf8 [function] [call site] 00121
2 printbuf_memappend [function] [call site] 00122
2 is_ws_char [function] [call site] 00123
2 printbuf_memappend [function] [call site] 00124
2 json_parse_int64 [function] [call site] 00125
3 __errno_location [call site] 00126
3 strtoll [call site] 00127
3 __errno_location [call site] 00128
3 __errno_location [call site] 00129
2 __errno_location [call site] 00130
2 json_object_new_int64 [function] [call site] 00131
3 json_object_new [function] [call site] 00132
2 json_parse_uint64 [function] [call site] 00133
3 __errno_location [call site] 00134
3 strtoull [call site] 00135
3 __errno_location [call site] 00136
3 __errno_location [call site] 00137
2 __errno_location [call site] 00138
2 json_object_new_int64 [function] [call site] 00139
2 json_object_new_uint64 [function] [call site] 00140
3 json_object_new [function] [call site] 00141
2 json_tokener_parse_double [function] [call site] 00142
3 strtod [call site] 00143
2 json_object_new_double_s [function] [call site] 00144
3 json_object_new_double [function] [call site] 00145
3 strdup [call site] 00146
3 json_object_generic_delete [function] [call site] 00147
3 __errno_location [call site] 00148
3 json_object_set_serializer [function] [call site] 00149
4 json_object_set_userdata [function] [call site] 00150
5 __assert_fail [call site] 00151
2 json_tokener_reset_level [function] [call site] 00152
2 json_object_array_add [function] [call site] 00153
3 json_object_get_type [function] [call site] 00154
3 __assert_fail [call site] 00155
3 array_list_add [function] [call site] 00157
4 array_list_expand_internal [function] [call site] 00158
5 realloc [call site] 00159
2 json_object_array_shrink [function] [call site] 00160
3 json_abort [function] [call site] 00161
4 fprintf [call site] 00162
4 abort [call site] 00163
3 array_list_shrink [function] [call site] 00165
4 array_list_expand_internal [function] [call site] 00166
4 realloc [call site] 00167
2 printbuf_reset [function] [call site] 00168
2 printbuf_memappend [function] [call site] 00169
2 strdup [call site] 00170
2 printbuf_memappend [function] [call site] 00171
2 json_tokener_validate_utf8 [function] [call site] 00172
2 printbuf_memappend [function] [call site] 00173
2 json_tokener_reset_level [function] [call site] 00174
2 json_object_object_add [function] [call site] 00175
3 json_object_object_add_ex [function] [call site] 00176
4 json_object_get_type [function] [call site] 00177
4 __assert_fail [call site] 00178
4 JC_OBJECT [function] [call site] 00179
4 lh_get_hash [function] [call site] 00180
4 JC_OBJECT [function] [call site] 00181
4 lh_table_lookup_entry_w_hash [function] [call site] 00182
4 strdup [call site] 00183
4 JC_OBJECT [function] [call site] 00184
4 lh_table_insert_w_hash [function] [call site] 00185
5 lh_table_resize [function] [call site] 00186
6 lh_table_new [function] [call site] 00187
6 lh_get_hash [function] [call site] 00188
6 lh_table_insert_w_hash [function] [call site] 00189
6 lh_table_free [function] [call site] 00190
4 lh_entry_v [function] [call site] 00191
4 json_object_put [function] [call site] 00192
4 lh_entry_set_val [function] [call site] 00193
2 uselocale [call site] 00194
2 freelocale [call site] 00195
2 json_object_get [function] [call site] 00196
2 json_tokener_reset_level [function] [call site] 00197
1 json_object_put [function] [call site] 00198
1 json_tokener_free [function] [call site] 00199
2 json_tokener_reset [function] [call site] 00200
2 printbuf_free [function] [call site] 00201