Fuzz introspector: /src/inspector/light/source_files/src/buffer_add_file_fuzzer.cc
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1930 1930 1 :

['evdns_resolv_set_defaults']

1930 1930 evdns_base_resolv_conf_parse_impl call site: 00000 /src/libevent/evdns.c:4555
310 313 2 :

['evdns_tcp_disconnect', 'event_mm_free_']

310 313 disconnect_and_free_connection call site: 00000 /src/libevent/evdns.c:651
142 170 6 :

['evutil_socketpair', 'event_warn', 'evutil_fast_socket_nonblocking', 'pipe', 'close', 'evutil_fast_socket_closeonexec']

142 170 evutil_make_internal_pipe_ call site: 00000 /src/libevent/evutil.c:3102
76 80 4 :

['event_mm_malloc_', 'event_debug_map_HT_FIND', 'event_err', 'event_debug_map_HT_INSERT']

76 80 event_debug_note_setup_ call site: 00000 /src/libevent/event.c:247
68 72 4 :

['socket', 'evutil_closesocket', 'evutil_fast_socket_closeonexec', 'evutil_fast_socket_nonblocking']

68 72 evutil_socket_ call site: 00000 /src/libevent/evutil.c:2848
37 37 2 :

['evutil_make_socket_closeonexec', 'epoll_create']

47 391 epoll_init call site: 00000 /src/libevent/epoll.c:183
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_assert_not_added_ call site: 00000 /src/libevent/event.c:365
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_assert_is_setup_ call site: 00000 /src/libevent/event.c:344
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_note_add_ call site: 00000 /src/libevent/event.c:292
37 37 2 :

['event_errx', 'event_debug_map_HT_FIND']

37 37 event_debug_note_del_ call site: 00080 /src/libevent/event.c:318
34 34 1 :

['event_sock_err']

34 34 evsig_init_ call site: 00000 /src/libevent/signal.c:183
24 30 2 :

['evbuffer_enable_locking', 'bufferevent_get_underlying']

24 30 bufferevent_enable_locking_ call site: 00000 /src/libevent/bufferevent.c:851

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 getpid [call site] 00001
1 sprintf [call site] 00002
1 fopen [call site] 00003
1 fwrite [call site] 00004
1 fclose [call site] 00005
1 fopen [call site] 00006
1 fileno [call site] 00007
1 fstat [function] [call site] 00008
2 __fxstat [call site] 00009
1 evbuffer_new [function] [call site] 00010
2 event_mm_calloc_ [function] [call site] 00011
3 calloc [call site] 00012
3 __errno_location [call site] 00013
1 evbuffer_set_flags [function] [call site] 00014
1 evbuffer_add_file [function] [call site] 00015
2 evbuffer_file_segment_new [function] [call site] 00016
3 event_mm_calloc_ [function] [call site] 00017
3 evutil_fd_filesize [function] [call site] 00018
4 fstat [function] [call site] 00019
3 evbuffer_file_segment_materialize [function] [call site] 00020
4 get_page_size [function] [call site] 00021
5 sysconf [call site] 00022
4 mmap64 [call site] 00023
4 event_warn [function] [call site] 00024
5 __errno_location [call site] 00025
5 strerror [call site] 00026
5 event_logv_ [function] [call site] 00027
6 evutil_vsnprintf [function] [call site] 00028
7 vsnprintf [call site] 00029
6 strlen [call site] 00030
6 evutil_snprintf [function] [call site] 00031
7 evutil_vsnprintf [function] [call site] 00032
6 event_log [function] [call site] 00033
7 fprintf [call site] 00034
4 event_mm_malloc_ [function] [call site] 00035
4 pread [call site] 00036
4 event_mm_free_ [function] [call site] 00037
3 event_mm_free_ [function] [call site] 00038
2 evbuffer_add_file_segment [function] [call site] 00039
3 evbuffer_file_segment_materialize [function] [call site] 00040
3 evbuffer_chain_new [function] [call site] 00041
4 event_mm_malloc_ [function] [call site] 00042
3 evbuffer_chain_insert [function] [call site] 00043
4 evbuffer_free_trailing_empty_chains [function] [call site] 00044
5 evbuffer_free_all_chains [function] [call site] 00045
6 evbuffer_chain_free [function] [call site] 00046
7 evbuffer_file_segment_free [function] [call site] 00047
8 get_page_size [function] [call site] 00048
8 munmap [call site] 00049
8 event_warn [function] [call site] 00050
8 event_mm_free_ [function] [call site] 00051
8 close [call site] 00052
8 event_mm_free_ [function] [call site] 00053
7 evbuffer_chain_free [function] [call site] 00054
8 evbuffer_decref_and_unlock_ [function] [call site] 00055
9 evbuffer_chain_free [function] [call site] 00056
10 event_mm_free_ [function] [call site] 00057
9 evbuffer_remove_all_callbacks [function] [call site] 00058
10 event_mm_free_ [function] [call site] 00059
9 event_deferred_cb_cancel_ [function] [call site] 00060
10 event_callback_cancel_ [function] [call site] 00061
11 event_callback_cancel_nolock_ [function] [call site] 00062
12 event_del_nolock_ [function] [call site] 00063
13 event_debugx_ [function] [call site] 00064
14 event_logv_ [function] [call site] 00065
13 min_heap_top_ [function] [call site] 00066
13 event_queue_remove_timeout [function] [call site] 00067
14 is_common_timeout [function] [call site] 00068
14 get_common_timeout_list [function] [call site] 00069
14 min_heap_erase_ [function] [call site] 00070
15 min_heap_shift_up_unconditional_ [function] [call site] 00071
15 min_heap_shift_down_ [function] [call site] 00072
13 event_queue_remove_active [function] [call site] 00073
13 event_queue_remove_active_later [function] [call site] 00074
13 event_queue_remove_inserted [function] [call site] 00075
13 evmap_io_del_ [function] [call site] 00076
13 evmap_signal_del_ [function] [call site] 00077
13 event_haveevents [function] [call site] 00078
13 evthread_notify_base [function] [call site] 00079
13 event_debug_note_del_ [function] [call site] 00080
14 event_debug_map_HT_FIND [function] [call site] 00081
15 event_debug_map_HT_FIND_P_ [function] [call site] 00082
16 hash_debug_entry [function] [call site] 00083
16 eq_debug_entry [function] [call site] 00084
14 event_errx [function] [call site] 00085
15 event_logv_ [function] [call site] 00086
15 event_exit [function] [call site] 00087
16 exit [call site] 00088
16 abort [call site] 00089
16 exit [call site] 00090
12 event_queue_remove_active [function] [call site] 00091
12 event_queue_remove_active_later [function] [call site] 00092
9 event_mm_free_ [function] [call site] 00093
3 evbuffer_invoke_callbacks_ [function] [call site] 00094
4 event_deferred_cb_schedule_ [function] [call site] 00095
5 event_callback_activate_later_nolock_ [function] [call site] 00096
6 event_queue_insert_active_later [function] [call site] 00097
6 evthread_notify_base [function] [call site] 00098
5 event_callback_activate_nolock_ [function] [call site] 00099
6 event_queue_remove_active_later [function] [call site] 00100
6 event_queue_insert_active [function] [call site] 00101
6 evthread_notify_base [function] [call site] 00102
4 evbuffer_incref_and_lock_ [function] [call site] 00103
4 bufferevent_incref [function] [call site] 00104
4 evbuffer_run_callbacks [function] [call site] 00105
3 evbuffer_file_segment_free [function] [call site] 00106
2 evbuffer_file_segment_free [function] [call site] 00107
1 fclose [call site] 00108
1 close [call site] 00109
1 unlink [call site] 00110
1 evbuffer_free [function] [call site] 00111
2 evbuffer_decref_and_unlock_ [function] [call site] 00112