Fuzz introspector: fuzz_unpickle
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
14 78 jsonpickle.unpickler.Unpickler._restore_reduce call site: 00078 jsonpickle.unpickler.Unpickler._swapref
14 114 jsonpickle.util.items call site: 00114 jsonpickle.unpickler.Unpickler._restore
14 224 jsonpickle.unpickler.Unpickler._restore_object_instance_variables call site: 00224 jsonpickle.unpickler.Unpickler._restore_state
7 145 jsonpickle.unpickler.Unpickler._restore call site: 00145 jsonpickle.unpickler.loadrepr
6 15 jsonpickle.unpickler.Unpickler.restore call site: 00015 jsonpickle.unpickler.Unpickler.register_classes
5 209 jsonpickle.unpickler.Unpickler._restore_from_dict call site: 00209 .setattr
4 25 jsonpickle.util.translate_module_name call site: 00025 jsonpickle.util.importable_name
4 154 jsonpickle.unpickler.Unpickler._restore_object call site: 00154 jsonpickle.unpickler.Unpickler._mkref
4 175 jsonpickle.unpickler.getargs call site: 00175 jsonpickle.unpickler.Unpickler._restore
4 203 jsonpickle.unpickler.Unpickler._restore_from_dict call site: 00203 .hasattr
3 7 jsonpickle.unpickler.decode call site: 00007 jsonpickle.util._is_function
3 72 jsonpickle.unpickler.Unpickler._restore_reduce call site: 00072 jsonpickle.unpickler.Unpickler._restore

Fuzzer calltree

0 ...jsonpickle.fuzzing.fuzz-targets.fuzz_unpickle.TestOneInput [function] [call site] 00000
1 atheris.FuzzedDataProvider [function] [call site] 00001
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00002
1 fdp.remaining_bytes [function] [call site] 00003
1 fdp.ConsumeIntInRange [function] [call site] 00004
1 jsonpickle.unpickler.decode [function] [call site] 00005
2 <builtin>.isinstance [function] [call site] 00006
2 on_missing.lower [function] [call site] 00007
2 jsonpickle.util._is_function [function] [call site] 00008
3 <builtin>.type [function] [call site] 00009
2 warnings.warn [function] [call site] 00010
2 jsonpickle.unpickler.Unpickler.__init__ [function] [call site] 00011
3 jsonpickle.unpickler.Unpickler.reset [function] [call site] 00012
2 backend.decode [function] [call site] 00013
2 jsonpickle.unpickler.Unpickler.restore [function] [call site] 00014
3 jsonpickle.unpickler.Unpickler.reset [function] [call site] 00015
3 jsonpickle.unpickler.Unpickler.register_classes [function] [call site] 00016
4 <builtin>.isinstance [function] [call site] 00017
4 jsonpickle.unpickler.Unpickler.register_classes [function] [call site] 00018
4 <builtin>.isinstance [function] [call site] 00019
4 <builtin>.isinstance [function] [call site] 00020
4 jsonpickle.util.importable_name [function] [call site] 00021
5 <builtin>.getattr [function] [call site] 00022
5 jsonpickle.util.translate_module_name [function] [call site] 00023
6 <builtin>.dict [function] [call site] 00024
6 lookup.get [function] [call site] 00025
5 <builtin>.hasattr [function] [call site] 00026
5 <builtin>.hasattr [function] [call site] 00027
4 classes.items [function] [call site] 00028
4 jsonpickle.util.importable_name [function] [call site] 00029
3 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00030
4 <builtin>.isinstance [function] [call site] 00031
4 jsonpickle.unpickler.Unpickler._restore_tags [function] [call site] 00032
5 <builtin>.set [function] [call site] 00033
5 <builtin>.type [function] [call site] 00034
5 <builtin>.type [function] [call site] 00035
5 <builtin>.type [function] [call site] 00036
4 jsonpickle.unpickler.Unpickler._restore_base85 [function] [call site] 00037
5 jsonpickle.util.b85decode [function] [call site] 00038
6 base64.b85decode [function] [call site] 00039
4 jsonpickle.unpickler.Unpickler._restore_set [function] [call site] 00040
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00041
5 <builtin>.set [function] [call site] 00042
4 jsonpickle.unpickler.Unpickler._restore_repr_safe [function] [call site] 00043
5 jsonpickle.unpickler._loadmodule [function] [call site] 00044
6 module_str.split [function] [call site] 00045
6 <builtin>.__import__ [function] [call site] 00046
6 identifier.split [function] [call site] 00047
6 module.startswith [function] [call site] 00048
6 <builtin>.getattr [function] [call site] 00049
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00050
6 <builtin>.id [function] [call site] 00051
6 <builtin>.len [function] [call site] 00052
6 jsonpickle.unpickler.Unpickler._refname [function] [call site] 00053
4 jsonpickle.unpickler.Unpickler._restore_id [function] [call site] 00054
5 jsonpickle.unpickler._IDProxy.__init__ [function] [call site] 00055
4 jsonpickle.unpickler.Unpickler._restore_module [function] [call site] 00056
5 jsonpickle.unpickler._loadmodule [function] [call site] 00057
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00058
4 jsonpickle.unpickler.Unpickler._restore_reduce [function] [call site] 00059
5 jsonpickle.unpickler._Proxy.__init__ [function] [call site] 00060
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00061
5 <builtin>.map [function] [call site] 00062
5 <builtin>.list [function] [call site] 00063
5 jsonpickle.unpickler._Proxy.reset [function] [call site] 00064
5 jsonpickle.unpickler.Unpickler._swapref [function] [call site] 00065
6 <builtin>.id [function] [call site] 00066
6 <builtin>.id [function] [call site] 00067
6 jsonpickle.unpickler.Unpickler._refname [function] [call site] 00068
5 <builtin>.len [function] [call site] 00069
5 <builtin>.len [function] [call site] 00070
5 reduce_val.extend [function] [call site] 00071
5 <builtin>.getattr [function] [call site] 00072
5 <builtin>.isinstance [function] [call site] 00073
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00074
5 cls.__new__ [function] [call site] 00075
5 <builtin>.callable [function] [call site] 00076
5 jsonpickle.unpickler._Proxy.reset [function] [call site] 00077
5 jsonpickle.unpickler.Unpickler._swapref [function] [call site] 00078
5 f.__new__ [function] [call site] 00079
5 stage1.__setstate__ [function] [call site] 00080
5 stage1.__dict__.items [function] [call site] 00081
5 state.setdefault [function] [call site] 00082
5 state.items [function] [call site] 00083
5 <builtin>.setattr [function] [call site] 00084
5 stage1.__dict__.update [function] [call site] 00085
5 slots_state.items [function] [call site] 00086
5 <builtin>.setattr [function] [call site] 00087
5 stage1.extend [function] [call site] 00088
5 stage1.append [function] [call site] 00089
5 stage1.__setitem__ [function] [call site] 00090
5 jsonpickle.unpickler._Proxy.reset [function] [call site] 00091
5 jsonpickle.unpickler.Unpickler._swapref [function] [call site] 00092
4 jsonpickle.unpickler.Unpickler._restore_function [function] [call site] 00093
5 jsonpickle.unpickler.loadclass [function] [call site] 00094
6 module_and_name.rsplit [function] [call site] 00095
6 module_and_name.split [function] [call site] 00096
6 <builtin>.len [function] [call site] 00097
6 <builtin>.range [function] [call site] 00098
6 jsonpickle.util.untranslate_module_name [function] [call site] 00099
7 jsonpickle.util._0_9_6_compat_untranslate [function] [call site] 00100
8 <builtin>.dict [function] [call site] 00101
8 lookup.get [function] [call site] 00102
6 <builtin>.__import__ [function] [call site] 00103
6 <builtin>.getattr [function] [call site] 00104
6 <builtin>.type [function] [call site] 00105
4 jsonpickle.unpickler.Unpickler._restore_type [function] [call site] 00106
5 jsonpickle.unpickler.loadclass [function] [call site] 00107
4 jsonpickle.unpickler.Unpickler._restore_tuple [function] [call site] 00108
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00109
5 <builtin>.tuple [function] [call site] 00110
4 jsonpickle.unpickler.Unpickler._restore_dict [function] [call site] 00111
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00112
5 jsonpickle.util.items [function] [call site] 00113
6 obj.items [function] [call site] 00114
5 jsonpickle.unpickler._is_json_key [function] [call site] 00115
6 <builtin>.isinstance [function] [call site] 00116
6 key.startswith [function] [call site] 00117
5 <builtin>.isinstance [function] [call site] 00118
5 k.__str__ [function] [call site] 00119
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00120
5 jsonpickle.util.items [function] [call site] 00121
5 jsonpickle.unpickler._is_json_key [function] [call site] 00122
5 jsonpickle.unpickler.Unpickler._restore_pickled_key [function] [call site] 00123
6 jsonpickle.unpickler._is_json_key [function] [call site] 00124
6 jsonpickle.unpickler.decode [function] [call site] 00125
6 <builtin>.len [function] [call site] 00126
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00127
5 <builtin>.isinstance [function] [call site] 00128
5 jsonpickle.util.items [function] [call site] 00129
5 <builtin>.isinstance [function] [call site] 00130
5 k.__str__ [function] [call site] 00131
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00132
5 <builtin>.isinstance [function] [call site] 00133
4 jsonpickle.unpickler.Unpickler._restore_list [function] [call site] 00134
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00135
5 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00136
5 parent.extend [function] [call site] 00137
5 <builtin>.enumerate [function] [call site] 00138
5 <builtin>.isinstance [function] [call site] 00139
4 jsonpickle.unpickler.Unpickler._restore_iterator [function] [call site] 00140
5 jsonpickle.unpickler.Unpickler._restore_list [function] [call site] 00141
5 <builtin>.iter [function] [call site] 00142
5 <builtin>.iter [function] [call site] 00143
4 jsonpickle.unpickler._passthrough [function] [call site] 00144
4 jsonpickle.unpickler.Unpickler._restore_repr [function] [call site] 00145
5 jsonpickle.unpickler.loadrepr [function] [call site] 00146
6 reprstr.split [function] [call site] 00147
6 <builtin>.locals [function] [call site] 00148
6 module.split [function] [call site] 00149
6 <builtin>.__import__ [function] [call site] 00150
6 <builtin>.eval [function] [call site] 00151
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00152
4 jsonpickle.unpickler.Unpickler._restore_object [function] [call site] 00153
5 jsonpickle.unpickler.loadclass [function] [call site] 00154
5 jsonpickle.unpickler._Proxy.__init__ [function] [call site] 00155
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00156
5 jsonpickle.unpickler._Proxy.reset [function] [call site] 00157
5 jsonpickle.unpickler.Unpickler._swapref [function] [call site] 00158
5 jsonpickle.unpickler.Unpickler._process_missing [function] [call site] 00159
6 warnings.warn [function] [call site] 00160
6 jsonpickle.util._is_function [function] [call site] 00161
5 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00162
5 jsonpickle.unpickler.Unpickler._restore_object_instance [function] [call site] 00163
6 jsonpickle.unpickler._Proxy.__init__ [function] [call site] 00164
6 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00165
6 jsonpickle.unpickler.Unpickler._loadfactory [function] [call site] 00166
7 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00167
6 jsonpickle.unpickler.has_tag [function] [call site] 00168
7 <builtin>.type [function] [call site] 00169
6 jsonpickle.unpickler.getargs [function] [call site] 00170
7 jsonpickle.unpickler.has_tag [function] [call site] 00171
7 jsonpickle.unpickler.has_tag [function] [call site] 00172
7 jsonpickle.unpickler.has_tag [function] [call site] 00173
7 jsonpickle.unpickler.loadclass [function] [call site] 00174
7 <builtin>.hasattr [function] [call site] 00175
7 <builtin>.len [function] [call site] 00176
7 <builtin>.len [function] [call site] 00177
6 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00178
6 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00179
6 <builtin>.isinstance [function] [call site] 00180
6 <builtin>.getattr [function] [call site] 00181
6 <builtin>.hasattr [function] [call site] 00182
6 cls.__new__ [function] [call site] 00183
6 cls.__new__ [function] [call site] 00184
6 object.__new__ [function] [call site] 00185
6 jsonpickle.unpickler.make_blank_classic [function] [call site] 00186
6 jsonpickle.unpickler.Unpickler._process_missing [function] [call site] 00187
6 jsonpickle.unpickler.Unpickler._mkref [function] [call site] 00188
6 jsonpickle.unpickler._Proxy.reset [function] [call site] 00189
6 jsonpickle.unpickler.Unpickler._swapref [function] [call site] 00190
6 <builtin>.isinstance [function] [call site] 00191
6 jsonpickle.unpickler.Unpickler._restore_object_instance_variables [function] [call site] 00192
7 jsonpickle.unpickler.Unpickler._restore_from_dict [function] [call site] 00193
8 jsonpickle.unpickler.Unpickler._restore_key_fn [function] [call site] 00194
8 jsonpickle.util.items [function] [call site] 00195
8 <builtin>.isinstance [function] [call site] 00196
8 k.__str__ [function] [call site] 00197
8 jsonpickle.unpickler.Unpickler._restore_pickled_key [function] [call site] 00198
8 jsonpickle.unpickler._passthrough [function] [call site] 00199
8 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00200
8 jsonpickle.util._is_noncomplex [function] [call site] 00201
9 <builtin>.type [function] [call site] 00202
8 jsonpickle.util._is_dictionary_subclass [function] [call site] 00203
9 <builtin>.hasattr [function] [call site] 00204
9 <builtin>.issubclass [function] [call site] 00205
9 <builtin>.type [function] [call site] 00206
8 <builtin>.setattr [function] [call site] 00207
8 k.startswith [function] [call site] 00208
8 <builtin>.setattr [function] [call site] 00209
8 <builtin>.setattr [function] [call site] 00210
8 object.__setattr__ [function] [call site] 00211
8 <builtin>.hasattr [function] [call site] 00212
8 <builtin>.len [function] [call site] 00213
8 <builtin>.issubclass [function] [call site] 00214
8 <builtin>.setattr [function] [call site] 00215
8 <builtin>.isinstance [function] [call site] 00216
7 jsonpickle.unpickler.has_tag [function] [call site] 00217
7 <builtin>.hasattr [function] [call site] 00218
7 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00219
7 instance.append [function] [call site] 00220
7 <builtin>.hasattr [function] [call site] 00221
7 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00222
7 instance.add [function] [call site] 00223
7 jsonpickle.unpickler.has_tag [function] [call site] 00224
7 jsonpickle.unpickler.Unpickler._restore_state [function] [call site] 00225
8 jsonpickle.unpickler.Unpickler._restore [function] [call site] 00226
8 <builtin>.isinstance [function] [call site] 00227
8 <builtin>.len [function] [call site] 00228
8 <builtin>.isinstance [function] [call site] 00229
8 <builtin>.isinstance [function] [call site] 00230
8 <builtin>.hasattr [function] [call site] 00231
8 instance.__setstate__ [function] [call site] 00232
8 <builtin>.isinstance [function] [call site] 00233
8 jsonpickle.unpickler.Unpickler._restore_from_dict [function] [call site] 00234
8 jsonpickle.unpickler.Unpickler._restore_from_dict [function] [call site] 00235
8 jsonpickle.unpickler.Unpickler._restore_from_dict [function] [call site] 00236
8 <builtin>.hasattr [function] [call site] 00237
8 <builtin>.hasattr [function] [call site] 00238
6 jsonpickle.unpickler._safe_hasattr [function] [call site] 00239
7 object.__getattribute__ [function] [call site] 00240
6 <builtin>.isinstance [function] [call site] 00241
6 instance.default_factory.get [function] [call site] 00242
4 jsonpickle.unpickler.Unpickler._restore_base64 [function] [call site] 00243
5 jsonpickle.util.b64decode [function] [call site] 00244
6 base64.b64decode [function] [call site] 00245
3 jsonpickle.unpickler.Unpickler._swap_proxies [function] [call site] 00246
1 utils.is_expected_error [function] [call site] 00247