Fuzz introspector: xplist_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
14 326 plist_get_type_and_value call site: 00326 plist_set_uid_val
12 280 plist_dict_set_item call site: 00280 plist_free_node
4 263 node_list_insert call site: 00263 node_insert
4 319 plist_dict_get_size call site: 00319 plist_dict_get_item
3 6 find_next call site: 00006 find_char
3 59 node_attach call site: 00059 node_first_child
3 65 node_attach call site: 00065 node_destroy
3 232 plist_dict_set_item call site: 00232 fprintf
3 294 plist_array_append_item call site: 00294 fprintf
2 132 text_parts_get_content call site: 00132 text_parts_free
2 150 node_from_xml call site: 00150 text_parts_free
2 205 node_from_xml call site: 00205 text_parts_free

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 plist_from_xml [function] [call site] 00001
2 node_from_xml [function] [call site] 00002
3 parse_skip_ws [function] [call site] 00003
4 is_xml_ws [function] [call site] 00004
3 find_next [function] [call site] 00005
4 find_char [function] [call site] 00006
5 find_char [function] [call site] 00007
6 fprintf [call site] 00008
6 fprintf [call site] 00009
4 fprintf [call site] 00010
4 fprintf [call site] 00011
3 fprintf [call site] 00012
3 fprintf [call site] 00013
3 find_str [function] [call site] 00014
4 strncmp [call site] 00015
4 find_char [function] [call site] 00016
4 fprintf [call site] 00017
4 fprintf [call site] 00018
3 fprintf [call site] 00019
3 strncmp [call site] 00020
3 fprintf [call site] 00021
3 strncmp [call site] 00022
3 strncmp [call site] 00024
3 fprintf [call site] 00025
3 strncmp [call site] 00026
3 find_next [function] [call site] 00027
3 fprintf [call site] 00028
3 parse_skip_ws [function] [call site] 00029
3 strncmp [call site] 00031
3 fprintf [call site] 00032
3 find_next [function] [call site] 00033
3 fprintf [call site] 00034
3 find_next [function] [call site] 00035
3 fprintf [call site] 00036
3 fprintf [call site] 00037
3 find_next [function] [call site] 00038
3 fprintf [call site] 00039
3 fprintf [call site] 00040
3 strcmp [call site] 00041
3 fprintf [call site] 00042
3 fprintf [call site] 00043
3 fprintf [call site] 00044
3 strcmp [call site] 00045
3 fprintf [call site] 00046
3 fprintf [call site] 00047
3 strcmp [call site] 00048
3 fprintf [call site] 00049
3 plist_new_plist_data [function] [call site] 00050
4 calloc [call site] 00051
3 fprintf [call site] 00052
3 plist_new_node [function] [call site] 00053
4 node_create [function] [call site] 00054
5 calloc [call site] 00055
5 node_attach [function] [call site] 00056
6 would_create_cycle [function] [call site] 00057
6 node_depth_from_root [function] [call site] 00058
6 node_subtree_max_depth [function] [call site] 00059
7 node_first_child [function] [call site] 00060
7 realloc [call site] 00061
7 node_next_sibling [function] [call site] 00062
6 node_list_create [function] [call site] 00063
7 calloc [call site] 00064
6 node_list_add [function] [call site] 00065
5 node_destroy [function] [call site] 00066
6 node_list_remove [function] [call site] 00067
6 node_destroy [function] [call site] 00068
7 node_list_destroy [function] [call site] 00069
3 fprintf [call site] 00070
3 strcmp [call site] 00071
3 strcmp [call site] 00072
3 strcmp [call site] 00073
3 get_text_parts [function] [call site] 00074
4 parse_skip_ws [function] [call site] 00075
4 find_char [function] [call site] 00076
4 fprintf [call site] 00077
4 fprintf [call site] 00078
4 fprintf [call site] 00079
4 text_part_append [function] [call site] 00080
5 __assert_fail [call site] 00081
5 text_part_init [function] [call site] 00082
4 text_part_init [function] [call site] 00083
4 strncmp [call site] 00085
4 fprintf [call site] 00086
4 fprintf [call site] 00087
4 strncmp [call site] 00088
4 text_part_append [function] [call site] 00089
4 text_part_init [function] [call site] 00090
4 strncmp [call site] 00092
4 fprintf [call site] 00093
4 text_part_append [function] [call site] 00094
4 text_part_init [function] [call site] 00095
4 find_next [function] [call site] 00096
4 fprintf [call site] 00097
4 find_next [function] [call site] 00098
4 fprintf [call site] 00099
4 find_next [function] [call site] 00100
4 fprintf [call site] 00101
4 strncmp [call site] 00102
4 fprintf [call site] 00103
4 parse_skip_ws [function] [call site] 00104
4 fprintf [call site] 00105
4 fprintf [call site] 00106
4 text_part_append [function] [call site] 00107
4 text_part_init [function] [call site] 00108
3 fprintf [call site] 00109
3 text_parts_free [function] [call site] 00110
3 text_parts_get_content [function] [call site] 00111
4 __assert_fail [call site] 00112
4 unescape_entities [function] [call site] 00113
5 fprintf [call site] 00114
5 fprintf [call site] 00115
5 memcmp [call site] 00116
5 memcmp [call site] 00117
5 memcmp [call site] 00118
5 memcmp [call site] 00119
5 memcmp [call site] 00120
5 fprintf [call site] 00121
5 fprintf [call site] 00122
5 strtoull [call site] 00123
5 fprintf [call site] 00124
5 strtoull [call site] 00125
5 fprintf [call site] 00126
5 fprintf [call site] 00127
5 fprintf [call site] 00128
5 fprintf [call site] 00129
5 fprintf [call site] 00130
4 is_xml_ws [function] [call site] 00131
4 is_xml_ws [function] [call site] 00132
3 fprintf [call site] 00133
3 text_parts_free [function] [call site] 00134
3 __errno_location [call site] 00135
3 strtoull [call site] 00136
3 __errno_location [call site] 00137
3 fprintf [call site] 00138
3 text_parts_free [function] [call site] 00139
3 fprintf [call site] 00140
3 text_parts_free [function] [call site] 00141
3 fprintf [call site] 00142
3 text_parts_free [function] [call site] 00143
3 text_parts_free [function] [call site] 00144
3 fprintf [call site] 00145
3 strcmp [call site] 00146
3 get_text_parts [function] [call site] 00147
3 fprintf [call site] 00148
3 text_parts_free [function] [call site] 00149
3 text_parts_get_content [function] [call site] 00150
3 fprintf [call site] 00151
3 text_parts_free [function] [call site] 00152
3 __errno_location [call site] 00153
3 strtod [call site] 00154
3 __errno_location [call site] 00155
3 fprintf [call site] 00156
3 text_parts_free [function] [call site] 00157
3 fprintf [call site] 00158
3 text_parts_free [function] [call site] 00159
3 fprintf [call site] 00160
3 text_parts_free [function] [call site] 00161
3 text_parts_free [function] [call site] 00162
3 fprintf [call site] 00163
3 strcmp [call site] 00164
3 get_text_parts [function] [call site] 00165
3 strcmp [call site] 00166
3 get_text_parts [function] [call site] 00167
3 strcmp [call site] 00168
3 get_text_parts [function] [call site] 00169
3 fprintf [call site] 00170
3 text_parts_free [function] [call site] 00171
3 text_parts_get_content [function] [call site] 00172
3 text_parts_free [function] [call site] 00173
3 fprintf [call site] 00174
3 strcmp [call site] 00175
3 plist_get_node_type [function] [call site] 00176
4 plist_get_data [function] [call site] 00177
3 plist_free [function] [call site] 00178
4 plist_free_node [function] [call site] 00179
5 node_detach [function] [call site] 00180
6 node_list_remove [function] [call site] 00181
5 plist_free_children [function] [call site] 00182
6 node_first_child [function] [call site] 00183
6 node_first_child [function] [call site] 00184
6 node_detach [function] [call site] 00185
6 realloc [call site] 00186
6 node_first_child [function] [call site] 00187
6 node_detach [function] [call site] 00188
6 realloc [call site] 00189
6 plist_get_data [function] [call site] 00190
6 plist_free_data [function] [call site] 00191
7 _plist_free_data [function] [call site] 00192
8 ptr_array_free [function] [call site] 00193
8 __assert_fail [call site] 00194
8 hash_table_destroy [function] [call site] 00195
6 node_destroy [function] [call site] 00196
5 plist_get_data [function] [call site] 00197
5 plist_free_data [function] [call site] 00198
5 node_destroy [function] [call site] 00199
3 strdup [call site] 00200
3 strcmp [call site] 00201
3 get_text_parts [function] [call site] 00202
3 fprintf [call site] 00203
3 text_parts_free [function] [call site] 00204
3 text_parts_get_content [function] [call site] 00205
3 fprintf [call site] 00206
3 text_parts_free [function] [call site] 00207
3 base64decode [function] [call site] 00208
4 strlen [call site] 00209
3 text_parts_free [function] [call site] 00210
3 fprintf [call site] 00211
3 text_parts_free [function] [call site] 00212
3 strcmp [call site] 00213
3 get_text_parts [function] [call site] 00214
3 fprintf [call site] 00215
3 text_parts_free [function] [call site] 00216
3 text_parts_get_content [function] [call site] 00217
3 fprintf [call site] 00218
3 text_parts_free [function] [call site] 00219
3 parse_date [function] [call site] 00220
4 strptime [call site] 00221
3 fprintf [call site] 00222
3 text_parts_free [function] [call site] 00223
3 timegm64 [function] [call site] 00224
4 __assert_fail [call site] 00225
3 text_parts_free [function] [call site] 00226
3 fprintf [call site] 00227
3 fprintf [call site] 00228
3 plist_get_node_type [function] [call site] 00229
3 fprintf [call site] 00230
3 plist_dict_set_item [function] [call site] 00231
4 plist_get_node_type [function] [call site] 00232
4 fprintf [call site] 00233
4 __assert_fail [call site] 00234
4 fprintf [call site] 00235
4 plist_dict_get_item [function] [call site] 00236
5 plist_get_node_type [function] [call site] 00237
5 fprintf [call site] 00238
5 plist_get_data [function] [call site] 00239
5 fprintf [call site] 00240
5 strlen [call site] 00241
5 hash_table_lookup [function] [call site] 00242
5 node_first_child [function] [call site] 00243
5 node_next_sibling [function] [call site] 00244
5 plist_get_data [function] [call site] 00245
5 plist_get_node_type [function] [call site] 00246
5 __assert_fail [call site] 00247
5 plist_get_node_type [function] [call site] 00248
5 fprintf [call site] 00249
5 memcmp [call site] 00250
5 node_next_sibling [function] [call site] 00251
4 node_prev_sibling [function] [call site] 00252
4 plist_get_node_type [function] [call site] 00253
4 fprintf [call site] 00254
4 node_detach [function] [call site] 00255
4 fprintf [call site] 00256
4 node_insert [function] [call site] 00257
5 would_create_cycle [function] [call site] 00258
5 node_depth_from_root [function] [call site] 00259
5 node_subtree_max_depth [function] [call site] 00260
5 node_list_create [function] [call site] 00261
5 node_list_insert [function] [call site] 00262
6 node_list_add [function] [call site] 00263
4 node_insert [function] [call site] 00264
4 hash_table_insert [function] [call site] 00265
4 fprintf [call site] 00266
4 hash_table_insert [function] [call site] 00267
4 plist_free_node [function] [call site] 00268
4 plist_new_key [function] [call site] 00269
5 plist_new_plist_data [function] [call site] 00270
5 fprintf [call site] 00271
5 strdup [call site] 00272
5 plist_free_data [function] [call site] 00273
5 fprintf [call site] 00274
5 strlen [call site] 00275
5 plist_new_node [function] [call site] 00276
4 node_attach [function] [call site] 00277
4 plist_free_node [function] [call site] 00278
4 fprintf [call site] 00279
4 node_attach [function] [call site] 00280
4 node_detach [function] [call site] 00281
4 plist_free_node [function] [call site] 00282
4 fprintf [call site] 00283
4 hash_table_insert [function] [call site] 00284
4 hash_table_new [function] [call site] 00285
4 dict_key_hash [function] [call site] 00286
4 dict_key_compare [function] [call site] 00287
5 strcmp [call site] 00288
4 node_first_child [function] [call site] 00289
4 node_next_sibling [function] [call site] 00290
4 hash_table_insert [function] [call site] 00291
4 node_next_sibling [function] [call site] 00292
3 plist_array_append_item [function] [call site] 00293
4 plist_get_node_type [function] [call site] 00294
4 fprintf [call site] 00295
4 __assert_fail [call site] 00296
4 fprintf [call site] 00297
4 node_attach [function] [call site] 00298
4 fprintf [call site] 00299
4 _plist_array_post_insert [function] [call site] 00300
5 ptr_array_insert [function] [call site] 00301
6 realloc [call site] 00302
5 ptr_array_new [function] [call site] 00303
5 node_first_child [function] [call site] 00304
5 ptr_array_add [function] [call site] 00305
6 ptr_array_insert [function] [call site] 00306
5 node_next_sibling [function] [call site] 00307
3 fprintf [call site] 00308
3 fprintf [call site] 00309
3 fprintf [call site] 00310
3 fprintf [call site] 00311
3 fprintf [call site] 00312
3 strcmp [call site] 00313
3 fprintf [call site] 00314
3 strcmp [call site] 00315
3 plist_get_node_type [function] [call site] 00316
3 plist_dict_get_size [function] [call site] 00317
4 plist_get_node_type [function] [call site] 00318
4 node_n_children [function] [call site] 00319
3 plist_dict_get_item [function] [call site] 00320
3 plist_get_node_type [function] [call site] 00321
3 fprintf [call site] 00322
3 plist_get_uint_val [function] [call site] 00323
4 plist_get_node_type [function] [call site] 00324
4 plist_get_type_and_value [function] [call site] 00325
5 plist_get_data [function] [call site] 00326
5 strdup [call site] 00327
5 fprintf [call site] 00328
5 fprintf [call site] 00329
4 __assert_fail [call site] 00330
3 plist_set_uid_val [function] [call site] 00331
4 plist_set_element_val [function] [call site] 00332
5 plist_get_data [function] [call site] 00333
5 fprintf [call site] 00334
5 node_first_child [function] [call site] 00335
5 plist_free_children [function] [call site] 00336
5 _plist_free_data [function] [call site] 00337
5 strdup [call site] 00338
5 fprintf [call site] 00339
5 fprintf [call site] 00340
3 plist_free [function] [call site] 00341
3 fprintf [call site] 00342
3 plist_free [function] [call site] 00343
3 plist_free [function] [call site] 00344
3 plist_get_node_type [function] [call site] 00345
3 plist_dict_get_size [function] [call site] 00346
3 plist_dict_get_item [function] [call site] 00347
3 plist_get_node_type [function] [call site] 00348
3 plist_get_uint_val [function] [call site] 00349
3 plist_free [function] [call site] 00350
3 plist_new_uid [function] [call site] 00351
4 plist_new_plist_data [function] [call site] 00352
4 fprintf [call site] 00353
4 plist_new_node [function] [call site] 00354
1 plist_free [function] [call site] 00355