Fuzz introspector: /src/inspector/light/source_files/src/parse_query_fuzzer.cc
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1930 1930 1 :

['evdns_resolv_set_defaults']

1930 1930 evdns_base_resolv_conf_parse_impl call site: 00000 /src/libevent/evdns.c:4555
310 313 2 :

['evdns_tcp_disconnect', 'event_mm_free_']

310 313 disconnect_and_free_connection call site: 00000 /src/libevent/evdns.c:651
142 170 6 :

['evutil_socketpair', 'event_warn', 'evutil_fast_socket_nonblocking', 'pipe', 'close', 'evutil_fast_socket_closeonexec']

142 170 evutil_make_internal_pipe_ call site: 00000 /src/libevent/evutil.c:3102
76 80 4 :

['event_mm_malloc_', 'event_debug_map_HT_FIND', 'event_err', 'event_debug_map_HT_INSERT']

76 80 event_debug_note_setup_ call site: 00000 /src/libevent/event.c:247
68 72 4 :

['socket', 'evutil_closesocket', 'evutil_fast_socket_closeonexec', 'evutil_fast_socket_nonblocking']

68 72 evutil_socket_ call site: 00000 /src/libevent/evutil.c:2848
37 37 2 :

['evutil_make_socket_closeonexec', 'epoll_create']

47 391 epoll_init call site: 00000 /src/libevent/epoll.c:183
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_assert_not_added_ call site: 00000 /src/libevent/event.c:365
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_assert_is_setup_ call site: 00000 /src/libevent/event.c:344
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_note_add_ call site: 00000 /src/libevent/event.c:292
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_note_del_ call site: 00000 /src/libevent/event.c:318
34 34 1 :

['event_sock_err']

34 34 evsig_init_ call site: 00000 /src/libevent/signal.c:183
24 30 2 :

['evbuffer_enable_locking', 'bufferevent_get_underlying']

24 30 bufferevent_enable_locking_ call site: 00000 /src/libevent/bufferevent.c:851

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 evhttp_parse_query [function] [call site] 00001
2 evhttp_parse_query_impl [function] [call site] 00002
3 evhttp_uri_parse [function] [call site] 00003
4 evhttp_uri_parse_with_flags [function] [call site] 00004
5 event_mm_calloc_ [function] [call site] 00005
6 calloc [call site] 00006
6 __errno_location [call site] 00007
5 event_mm_strdup_ [function] [call site] 00008
6 __errno_location [call site] 00009
6 strlen [call site] 00010
6 strdup [call site] 00011
6 __errno_location [call site] 00012
5 strchr [call site] 00013
5 scheme_ok [function] [call site] 00014
6 EVUTIL_ISALPHA_ [function] [call site] 00015
6 EVUTIL_ISALNUM_ [function] [call site] 00016
5 event_mm_strdup_ [function] [call site] 00017
5 end_of_authority [function] [call site] 00018
5 parse_authority [function] [call site] 00019
6 event_mm_strdup_ [function] [call site] 00020
6 event_warn [function] [call site] 00021
7 __errno_location [call site] 00022
7 strerror [call site] 00023
7 event_logv_ [function] [call site] 00024
8 evutil_vsnprintf [function] [call site] 00025
9 vsnprintf [call site] 00026
8 strlen [call site] 00027
8 evutil_snprintf [function] [call site] 00028
9 evutil_vsnprintf [function] [call site] 00029
8 event_log [function] [call site] 00030
9 fprintf [call site] 00031
6 strchr [call site] 00032
6 userinfo_ok [function] [call site] 00033
7 EVUTIL_ISXDIGIT_ [function] [call site] 00034
7 EVUTIL_ISXDIGIT_ [function] [call site] 00035
6 event_mm_strdup_ [function] [call site] 00036
6 event_warn [function] [call site] 00037
6 strncmp [call site] 00038
6 strchr [call site] 00039
6 event_mm_strdup_ [function] [call site] 00040
6 EVUTIL_ISDIGIT_ [function] [call site] 00041
6 parse_port [function] [call site] 00042
7 EVUTIL_ISDIGIT_ [function] [call site] 00043
6 bracket_addr_ok [function] [call site] 00044
7 EVUTIL_ISXDIGIT_ [function] [call site] 00045
7 EVUTIL_ISXDIGIT_ [function] [call site] 00046
7 evutil_inet_pton [function] [call site] 00047
8 __isoc99_sscanf [call site] 00048
8 __bswap_32 [function] [call site] 00049
8 strchr [call site] 00050
8 strlen [call site] 00051
8 EVUTIL_ISDIGIT_ [function] [call site] 00052
8 __isoc99_sscanf [call site] 00053
8 EVUTIL_ISXDIGIT_ [function] [call site] 00054
8 strtol [call site] 00055
6 regname_ok [function] [call site] 00056
7 EVUTIL_ISXDIGIT_ [function] [call site] 00057
7 EVUTIL_ISXDIGIT_ [function] [call site] 00058
6 event_mm_malloc_ [function] [call site] 00059
6 event_warn [function] [call site] 00060
5 end_of_path [function] [call site] 00061
6 EVUTIL_ISXDIGIT_ [function] [call site] 00062
6 EVUTIL_ISXDIGIT_ [function] [call site] 00063
6 strlen [call site] 00064
5 end_of_path [function] [call site] 00065
5 end_of_path [function] [call site] 00066
5 path_matches_noscheme [function] [call site] 00067
5 event_mm_strdup_ [function] [call site] 00068
5 event_mm_strdup_ [function] [call site] 00069
5 event_mm_strdup_ [function] [call site] 00070
5 event_mm_free_ [function] [call site] 00071
5 event_warn [function] [call site] 00072
5 event_warn [function] [call site] 00073
5 evhttp_uri_free [function] [call site] 00074
6 event_mm_free_ [function] [call site] 00075
6 event_mm_free_ [function] [call site] 00076
6 event_mm_free_ [function] [call site] 00077
6 event_mm_free_ [function] [call site] 00078
6 event_mm_free_ [function] [call site] 00079
6 event_mm_free_ [function] [call site] 00080
6 event_mm_free_ [function] [call site] 00081
6 event_mm_free_ [function] [call site] 00082
5 event_warn [function] [call site] 00083
5 event_mm_free_ [function] [call site] 00084
3 evhttp_uri_get_query [function] [call site] 00085
3 event_mm_strdup_ [function] [call site] 00086
3 event_warn [function] [call site] 00087
3 strsep [call site] 00088
3 strsep [call site] 00089
3 strlen [call site] 00090
3 event_mm_malloc_ [function] [call site] 00091
3 strlen [call site] 00092
3 evhttp_decode_uri_internal [function] [call site] 00093
4 EVUTIL_ISXDIGIT_ [function] [call site] 00094
4 strtol [call site] 00095
3 event_debugx_ [function] [call site] 00096
4 event_logv_ [function] [call site] 00097
3 evhttp_remove_header [function] [call site] 00098
4 evutil_ascii_strcasecmp [function] [call site] 00099
5 EVUTIL_TOLOWER_ [function] [call site] 00100
5 EVUTIL_TOLOWER_ [function] [call site] 00101
4 event_mm_free_ [function] [call site] 00102
4 event_mm_free_ [function] [call site] 00103
4 event_mm_free_ [function] [call site] 00104
3 evhttp_add_header_internal [function] [call site] 00105
4 event_mm_calloc_ [function] [call site] 00106
4 event_warn [function] [call site] 00107
4 event_mm_strdup_ [function] [call site] 00108
4 event_mm_free_ [function] [call site] 00109
4 event_warn [function] [call site] 00110
4 event_mm_strdup_ [function] [call site] 00111
4 event_mm_free_ [function] [call site] 00112
4 event_mm_free_ [function] [call site] 00113
4 event_warn [function] [call site] 00114
3 event_mm_free_ [function] [call site] 00115
3 event_warn [function] [call site] 00116
3 evhttp_clear_headers [function] [call site] 00117
4 event_mm_free_ [function] [call site] 00118
4 event_mm_free_ [function] [call site] 00119
4 event_mm_free_ [function] [call site] 00120
3 event_mm_free_ [function] [call site] 00121
3 evhttp_uri_free [function] [call site] 00122
1 evhttp_clear_headers [function] [call site] 00123
1 evhttp_parse_query_str_flags [function] [call site] 00124
2 evhttp_parse_query_impl [function] [call site] 00125
1 evhttp_clear_headers [function] [call site] 00126