Fuzz introspector: fuzz_pcap
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_alloc_pcap_t call site: 00000 /src/libpcap/pcap.c:2498
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_fopen_offline_with_tstamp_precision call site: 00030 /src/libpcap/savefile.c:507
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_check_header call site: 00000 /src/libpcap/sf-pcap.c:185
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_next_packet call site: 00000 /src/libpcap/sf-pcap.c:461
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_next_packet call site: 00000 /src/libpcap/sf-pcap.c:615
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_next_packet call site: 00000 /src/libpcap/sf-pcap.c:646
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_next_packet call site: 00000 /src/libpcap/sf-pcap.c:698
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_ng_check_header call site: 00000 /src/libpcap/sf-pcapng.c:822
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 pcap_ng_check_header call site: 00000 /src/libpcap/sf-pcapng.c:837
15 15 2 :

['pcap_fmt_errmsg_for_errno', '__errno_location']

15 15 read_bytes call site: 00000 /src/libpcap/sf-pcapng.c:265
2 2 1 :

['__errno_location']

2 2 bufferToFile call site: 00009 /src/libpcap/build/../testprogs/fuzz/fuzz_pcap.c:21
0 0 None 38 138 pcap_next_packet call site: 00000 /src/libpcap/sf-pcap.c:606

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fopen [call site] 00001
1 snprintf [call site] 00002
1 mkstemp [call site] 00003
1 close [call site] 00004
1 bufferToFile [function] [call site] 00005
2 remove [call site] 00006
2 __errno_location [call site] 00007
2 __errno_location [call site] 00008
2 fopen [call site] 00009
2 __errno_location [call site] 00010
2 fwrite [call site] 00011
2 fclose [call site] 00012
2 fclose [call site] 00013
1 unlink [call site] 00014
1 pcap_open_offline [function] [call site] 00015
2 pcap_open_offline_with_tstamp_precision [function] [call site] 00016
3 snprintf [call site] 00017
3 snprintf [call site] 00018
3 fopen [call site] 00019
3 __errno_location [call site] 00020
3 pcap_fmt_errmsg_for_errno [function] [call site] 00021
4 pcap_vfmt_errmsg_for_errno [function] [call site] 00022
5 vsnprintf [call site] 00023
5 strlen [call site] 00024
5 strerror_r [call site] 00025
5 snprintf [call site] 00026
3 pcap_fopen_offline_with_tstamp_precision [function] [call site] 00027
4 snprintf [call site] 00028
4 fread [call site] 00029
4 ferror [call site] 00030
4 __errno_location [call site] 00031
4 pcap_fmt_errmsg_for_errno [function] [call site] 00032
4 snprintf [call site] 00033
4 snprintf [call site] 00034
4 fileno [call site] 00035
4 sf_cant_set_rfmon [function] [call site] 00036
4 pcap_offline_read [function] [call site] 00037
5 pcap_filter [function] [call site] 00038
6 pcap_filter_with_aux_data [function] [call site] 00039
7 abort [call site] 00040
7 EXTRACT_BE_U_4 [function] [call site] 00041
8 ntohl [call site] 00042
7 EXTRACT_BE_U_2 [function] [call site] 00043
8 ntohs [call site] 00044
7 EXTRACT_BE_U_4 [function] [call site] 00045
7 EXTRACT_BE_U_2 [function] [call site] 00046
4 sf_inject [function] [call site] 00047
5 pcap_strlcpy [function] [call site] 00048
4 sf_setdirection [function] [call site] 00049
5 snprintf [call site] 00050
4 sf_getnonblock [function] [call site] 00051
4 sf_setnonblock [function] [call site] 00052
5 snprintf [call site] 00053
4 sf_stats [function] [call site] 00054
5 snprintf [call site] 00055
4 pcap_oneshot [function] [call site] 00056
3 fclose [call site] 00057
1 fprintf [call site] 00058
1 unlink [call site] 00059
1 pcap_next_ex [function] [call site] 00060
2 pcap_offline_read [function] [call site] 00061
1 fprintf [call site] 00062
1 pcap_next_ex [function] [call site] 00063
1 pcap_stats [function] [call site] 00064
1 fprintf [call site] 00065
1 pcap_close [function] [call site] 00066