Fuzz introspector: fuzz_sv_subscriber
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
7 67 SVReceiver_destroy call site: 00067 SVReceiver_stopThreadless
2 78 SVSubscriber_destroy call site: 00078 Thread_destroy
1 3 Memory_calloc call site: 00003 noMemoryAvailableHandler
1 6 LinkedList_create call site: 00006 noMemoryAvailableHandler
1 44 handleSVApdu call site: 00044 memcmp

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 SVReceiver_create [function] [call site] 00001
2 Memory_calloc [function] [call site] 00002
3 calloc [call site] 00003
3 noMemoryAvailableHandler [function] [call site] 00004
2 LinkedList_create [function] [call site] 00005
3 Memory_malloc [function] [call site] 00006
4 noMemoryAvailableHandler [function] [call site] 00007
2 Memory_malloc [function] [call site] 00008
2 Semaphore_create [function] [call site] 00009
3 Memory_malloc [function] [call site] 00010
3 sem_init [call site] 00011
1 SVReceiver_disableDestAddrCheck [function] [call site] 00012
1 SVSubscriber_create [function] [call site] 00013
2 Memory_calloc [function] [call site] 00014
1 SVSubscriber_setListener [function] [call site] 00015
1 svListener [function] [call site] 00016
2 SVSubscriber_ASDU_getSmpCnt [function] [call site] 00017
2 SVSubscriber_ASDU_getConfRev [function] [call site] 00018
3 memcpy_reverse [function] [call site] 00019
2 SVSubscriber_ASDU_getSmpSynch [function] [call site] 00020
2 SVSubscriber_ASDU_getSmpMod [function] [call site] 00021
2 SVSubscriber_ASDU_getSmpRate [function] [call site] 00022
3 memcpy_reverse [function] [call site] 00023
2 SVSubscriber_ASDU_hasRefrTm [function] [call site] 00024
2 SVSubscriber_ASDU_getRefrTmAsMs [function] [call site] 00025
3 decodeUtcTimeToNsTime [function] [call site] 00026
2 SVSubscriber_ASDU_getRefrTmAsNs [function] [call site] 00027
3 decodeUtcTimeToNsTime [function] [call site] 00028
2 SVSubscriber_ASDU_getSvId [function] [call site] 00029
2 SVSubscriber_ASDU_getDataSize [function] [call site] 00030
1 SVReceiver_addSubscriber [function] [call site] 00031
2 Semaphore_wait [function] [call site] 00032
3 sem_wait [call site] 00033
2 LinkedList_add [function] [call site] 00034
3 LinkedList_create [function] [call site] 00035
3 LinkedList_getLastElement [function] [call site] 00036
2 Semaphore_post [function] [call site] 00037
3 sem_post [call site] 00038
1 SVReceiver_handleL2Message [function] [call site] 00039
2 parseSVMessage [function] [call site] 00040
3 handleSVApdu [function] [call site] 00041
4 Semaphore_wait [function] [call site] 00042
4 LinkedList_getNext [function] [call site] 00043
4 LinkedList_getData [function] [call site] 00044
4 memcmp [call site] 00045
4 LinkedList_getNext [function] [call site] 00046
4 Semaphore_post [function] [call site] 00047
4 parseSVPayload [function] [call site] 00048
5 BerDecoder_decodeLength [function] [call site] 00049
6 BerDecoder_decodeLengthRecursive [function] [call site] 00050
7 getIndefiniteLength [function] [call site] 00051
8 BerDecoder_decodeLengthRecursive [function] [call site] 00052
5 BerDecoder_decodeLength [function] [call site] 00053
5 parseSequenceOfASDU [function] [call site] 00054
6 BerDecoder_decodeLength [function] [call site] 00055
6 parseASDU [function] [call site] 00056
7 BerDecoder_decodeLength [function] [call site] 00057
7 fieldTooLong [function] [call site] 00058
7 fieldTooLong [function] [call site] 00059
7 invalidFieldSize [function] [call site] 00060
7 invalidFieldSize [function] [call site] 00061
7 invalidFieldSize [function] [call site] 00062
7 invalidFieldSize [function] [call site] 00063
7 invalidFieldSize [function] [call site] 00064
7 invalidFieldSize [function] [call site] 00065
1 SVReceiver_destroy [function] [call site] 00066
2 SVReceiver_stop [function] [call site] 00067
3 Thread_destroy [function] [call site] 00068
4 pthread_join [call site] 00069
4 Memory_free [function] [call site] 00070
3 SVReceiver_stopThreadless [function] [call site] 00071
4 Ethernet_destroySocket [function] [call site] 00072
5 close [call site] 00073
5 Memory_free [function] [call site] 00074
2 LinkedList_destroyDeep [function] [call site] 00075
3 Memory_free [function] [call site] 00076
2 SVSubscriber_destroy [function] [call site] 00077
3 Memory_free [function] [call site] 00078
2 Memory_free [function] [call site] 00079
2 Thread_destroy [function] [call site] 00080
2 Semaphore_destroy [function] [call site] 00081
3 sem_destroy [call site] 00082
3 Memory_free [function] [call site] 00083
2 Memory_free [function] [call site] 00084
2 Memory_free [function] [call site] 00085