Fuzz introspector: bplist_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
3 58 node_attach call site: 00058 node_destroy
3 102 parse_string_node call site: 00102 plist_free_data
3 188 parse_dict_node call site: 00188 plist_free
2 20 plist_from_bin call site: 00020 fprintf
2 91 parse_data_node call site: 00091 plist_free_data
2 97 _plist_free_data call site: 00097 node_create
2 123 parse_array_node call site: 00123 plist_free_data
2 166 parse_dict_node call site: 00166 plist_free_data
1 18 plist_from_bin call site: 00018 fprintf
1 27 parse_bin_node_at_index call site: 00027 fprintf
1 45 plist_new_plist_data call site: 00045 fprintf
1 48 node_create call site: 00048 node_attach

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 plist_from_bin [function] [call site] 00001
2 fprintf [call site] 00002
2 memcmp [call site] 00003
2 fprintf [call site] 00004
2 memcmp [call site] 00005
2 fprintf [call site] 00006
2 __bswap_64 [function] [call site] 00007
2 __bswap_64 [function] [call site] 00008
2 __bswap_64 [function] [call site] 00009
2 fprintf [call site] 00010
2 fprintf [call site] 00011
2 fprintf [call site] 00012
2 fprintf [call site] 00013
2 fprintf [call site] 00014
2 fprintf [call site] 00015
2 fprintf [call site] 00016
2 fprintf [call site] 00017
2 ptr_array_new [function] [call site] 00018
2 fprintf [call site] 00019
2 parse_bin_node_at_index [function] [call site] 00020
3 fprintf [call site] 00021
3 fprintf [call site] 00022
3 __bswap_64 [function] [call site] 00023
3 __bswap_32 [function] [call site] 00024
3 __bswap_16 [function] [call site] 00025
3 fprintf [call site] 00026
3 fprintf [call site] 00027
3 fprintf [call site] 00028
3 ptr_array_size [function] [call site] 00029
3 ptr_array_size [function] [call site] 00030
3 ptr_array_add [function] [call site] 00031
4 ptr_array_insert [function] [call site] 00032
5 realloc [call site] 00033
3 ptr_array_set [function] [call site] 00034
3 ptr_array_index [function] [call site] 00035
3 ptr_array_index [function] [call site] 00036
3 fprintf [call site] 00037
3 parse_bin_node [function] [call site] 00038
4 fprintf [call site] 00039
4 fprintf [call site] 00040
4 __bswap_64 [function] [call site] 00041
4 __bswap_32 [function] [call site] 00042
4 __bswap_16 [function] [call site] 00043
4 plist_new_plist_data [function] [call site] 00044
5 calloc [call site] 00045
4 fprintf [call site] 00046
4 node_create [function] [call site] 00047
5 calloc [call site] 00048
5 node_attach [function] [call site] 00049
6 would_create_cycle [function] [call site] 00050
6 node_depth_from_root [function] [call site] 00051
6 node_subtree_max_depth [function] [call site] 00052
7 node_first_child [function] [call site] 00053
7 realloc [call site] 00054
7 node_next_sibling [function] [call site] 00055
6 node_list_create [function] [call site] 00056
7 calloc [call site] 00057
6 node_list_add [function] [call site] 00058
5 node_destroy [function] [call site] 00059
6 node_list_remove [function] [call site] 00060
6 node_destroy [function] [call site] 00061
7 node_list_destroy [function] [call site] 00062
4 plist_new_plist_data [function] [call site] 00063
4 fprintf [call site] 00064
4 node_create [function] [call site] 00065
4 plist_new_plist_data [function] [call site] 00066
4 fprintf [call site] 00067
4 node_create [function] [call site] 00068
4 fprintf [call site] 00069
4 parse_int_node [function] [call site] 00070
5 plist_new_plist_data [function] [call site] 00071
5 fprintf [call site] 00072
5 fprintf [call site] 00073
5 __bswap_64 [function] [call site] 00074
5 __bswap_32 [function] [call site] 00075
5 __bswap_16 [function] [call site] 00076
5 node_create [function] [call site] 00077
4 fprintf [call site] 00078
4 parse_real_node [function] [call site] 00079
5 plist_new_plist_data [function] [call site] 00080
5 fprintf [call site] 00081
5 fprintf [call site] 00082
5 node_create [function] [call site] 00083
4 fprintf [call site] 00084
4 fprintf [call site] 00085
4 parse_date_node [function] [call site] 00086
5 parse_real_node [function] [call site] 00087
5 plist_get_data [function] [call site] 00088
4 fprintf [call site] 00089
4 parse_data_node [function] [call site] 00090
5 plist_new_plist_data [function] [call site] 00091
5 fprintf [call site] 00092
5 plist_free_data [function] [call site] 00093
6 _plist_free_data [function] [call site] 00094
7 ptr_array_free [function] [call site] 00095
7 __assert_fail [call site] 00096
7 hash_table_destroy [function] [call site] 00097
5 fprintf [call site] 00098
5 node_create [function] [call site] 00099
4 fprintf [call site] 00100
4 parse_string_node [function] [call site] 00101
5 plist_new_plist_data [function] [call site] 00102
5 fprintf [call site] 00103
5 plist_free_data [function] [call site] 00104
5 fprintf [call site] 00105
5 strlen [call site] 00106
5 node_create [function] [call site] 00107
4 fprintf [call site] 00108
4 fprintf [call site] 00109
4 parse_unicode_node [function] [call site] 00110
5 plist_new_plist_data [function] [call site] 00111
5 fprintf [call site] 00112
5 plist_utf16be_to_utf8 [function] [call site] 00113
6 fprintf [call site] 00114
6 __bswap_16 [function] [call site] 00115
6 realloc [call site] 00116
5 plist_free_data [function] [call site] 00117
5 node_create [function] [call site] 00118
4 fprintf [call site] 00119
4 parse_array_node [function] [call site] 00120
5 plist_new_plist_data [function] [call site] 00121
5 fprintf [call site] 00122
5 node_create [function] [call site] 00123
5 plist_free_data [function] [call site] 00124
5 fprintf [call site] 00125
5 plist_free [function] [call site] 00126
6 plist_free_node [function] [call site] 00127
7 node_detach [function] [call site] 00128
8 node_list_remove [function] [call site] 00129
7 plist_free_children [function] [call site] 00130
8 node_first_child [function] [call site] 00131
8 node_first_child [function] [call site] 00132
8 node_detach [function] [call site] 00133
8 realloc [call site] 00134
8 node_first_child [function] [call site] 00135
8 node_detach [function] [call site] 00136
8 realloc [call site] 00137
8 plist_get_data [function] [call site] 00138
8 plist_free_data [function] [call site] 00139
8 node_destroy [function] [call site] 00140
7 plist_get_data [function] [call site] 00141
7 plist_free_data [function] [call site] 00142
7 node_destroy [function] [call site] 00143
5 fprintf [call site] 00144
5 __bswap_64 [function] [call site] 00145
5 __bswap_32 [function] [call site] 00146
5 __bswap_16 [function] [call site] 00147
5 plist_free [function] [call site] 00148
5 fprintf [call site] 00149
5 parse_bin_node_at_index [function] [call site] 00150
5 plist_free [function] [call site] 00151
5 node_attach [function] [call site] 00152
4 fprintf [call site] 00153
4 parse_uid_node [function] [call site] 00154
5 plist_new_plist_data [function] [call site] 00155
5 fprintf [call site] 00156
5 __bswap_64 [function] [call site] 00157
5 __bswap_32 [function] [call site] 00158
5 __bswap_16 [function] [call site] 00159
5 fprintf [call site] 00160
5 node_create [function] [call site] 00161
4 fprintf [call site] 00162
4 parse_dict_node [function] [call site] 00163
5 plist_new_plist_data [function] [call site] 00164
5 fprintf [call site] 00165
5 node_create [function] [call site] 00166
5 plist_free_data [function] [call site] 00167
5 fprintf [call site] 00168
5 plist_free [function] [call site] 00169
5 fprintf [call site] 00170
5 __bswap_64 [function] [call site] 00171
5 __bswap_32 [function] [call site] 00172
5 __bswap_16 [function] [call site] 00173
5 __bswap_64 [function] [call site] 00174
5 __bswap_32 [function] [call site] 00175
5 __bswap_16 [function] [call site] 00176
5 plist_free [function] [call site] 00177
5 fprintf [call site] 00178
5 plist_free [function] [call site] 00179
5 fprintf [call site] 00180
5 parse_bin_node_at_index [function] [call site] 00181
5 plist_free [function] [call site] 00182
5 plist_get_data [function] [call site] 00183
5 fprintf [call site] 00184
5 plist_free [function] [call site] 00185
5 plist_free [function] [call site] 00186
5 plist_get_data [function] [call site] 00187
5 plist_get_data [function] [call site] 00188
5 fprintf [call site] 00189
5 plist_free [function] [call site] 00190
5 plist_free [function] [call site] 00191
5 parse_bin_node_at_index [function] [call site] 00192
5 plist_free [function] [call site] 00193
5 plist_free [function] [call site] 00194
5 node_attach [function] [call site] 00195
5 node_attach [function] [call site] 00196
4 fprintf [call site] 00197
2 ptr_array_free [function] [call site] 00198
1 plist_free [function] [call site] 00199