The followings are the branches where fuzzer fails to bypass.
Unique non-covered Complexity | Unique Reachable Complexities | Unique Reachable Functions | All non-covered Complexity | All Reachable Complexity | Function Name | Function Callsite | Blocked Branch |
---|---|---|---|---|---|---|---|
21 | 21 |
4 :
['ssh_threads_finalize', 'ssh_socket_cleanup', 'ssh_crypto_finalize', 'ssh_dh_finalize'] |
21 | 33 | _ssh_finalize | call site: 00362 | /src/libssh/src/init.c:165 |
10 | 10 |
1 :
['ssh_pki_key_ecdsa_name'] |
10 | 140 | pki_import_pubkey_buffer | call site: 00282 | /src/libssh/src/pki.c:1346 |
10 | 10 |
1 :
['ssh_dh_finalize'] |
10 | 10 | ssh_dh_init | call site: 00044 | /src/libssh/src/dh.c:260 |
7 | 42 |
3 :
['ssh_strerror', '_ssh_log', '__errno_location'] |
7 | 42 | ssh_known_hosts_read_entries | call site: 00058 | /src/libssh/src/knownhosts.c:236 |
6 | 6 |
1 :
['buffer_shift'] |
6 | 19 | ssh_buffer_add_data | call site: 00096 | /src/libssh/src/buffer.c:318 |
6 | 6 |
1 :
['buffer_shift'] |
6 | 19 | ssh_buffer_allocate_size | call site: 00082 | /src/libssh/src/buffer.c:347 |
6 | 6 |
2 :
['BN_cmp', 'EC_KEY_get0_private_key'] |
6 | 6 | pki_key_compare | call site: 00346 | /src/libssh/src/pki_crypto.c:841 |
4 | 39 |
3 :
['_ssh_log', 'OpenSSL_version_num', 'OpenSSL_version'] |
4 | 39 | ssh_crypto_init | call site: 00016 | /src/libssh/src/libcrypto.c:1381 |
4 | 4 |
1 :
['ssh_key_is_private'] |
6 | 70 | ssh_key_cmp | call site: 00330 | /src/libssh/src/pki.c:686 |
4 | 4 |
2 :
['EVP_PKEY_free', 'RSA_free'] |
4 | 4 | pki_pubkey_build_rsa | call site: 00248 | /src/libssh/src/pki_crypto.c:1272 |
2 | 2 |
1 :
['explicit_bzero'] |
2 | 28 | ssh_key_clean | call site: 00303 | /src/libssh/src/pki.c:160 |
2 | 2 |
1 :
['abort'] |
2 | 2 | ssh_buffer_unpack_va | call site: 00232 | /src/libssh/src/buffer.c:1258 |
LLVMFuzzerTestOneInput
[function]
[call site]
00000
memchr
[call site]
00001
getpid
[call site]
00002
fopen
[call site]
00003
fwrite
[call site]
00004
fclose
[call site]
00005
ssh_init
[function]
[call site]
00006
_ssh_init
[function]
[call site]
00007
ssh_mutex_lock
[function]
[call site]
00008
ssh_threads_init
[function]
[call site]
00012
ssh_threads_get_default
[function]
[call site]
00013
crypto_thread_init
[function]
[call site]
00014
ssh_crypto_init
[function]
[call site]
00015
OpenSSL_version_num
[call site]
00016
OpenSSL_version_num
[call site]
00017
_ssh_log
[function]
[call site]
00018
ssh_get_log_level
[function]
[call site]
00019
ssh_vlog
[function]
[call site]
00020
vsnprintf
[call site]
00021
ssh_log_function
[function]
[call site]
00022
ssh_get_log_callback
[function]
[call site]
00023
ssh_log_custom
[function]
[call site]
00024
snprintf
[call site]
00025
ssh_get_log_userdata
[function]
[call site]
00026
ssh_log_stderr
[function]
[call site]
00027
current_timestring
[function]
[call site]
00028
gettimeofday
[call site]
00029
localtime
[call site]
00030
strftime
[call site]
00031
snprintf
[call site]
00032
strftime
[call site]
00033
snprintf
[call site]
00034
fprintf
[call site]
00035
fprintf
[call site]
00036
fprintf
[call site]
00037
ssh_dh_init
[function]
[call site]
00038
BN_new
[call site]
00039
BN_set_word
[call site]
00040
BN_new
[call site]
00041
BN_new
[call site]
00042
BN_new
[call site]
00043
BN_new
[call site]
00044
ssh_dh_finalize
[function]
[call site]
00045
BN_clear_free
[call site]
00046
BN_clear_free
[call site]
00047
BN_clear_free
[call site]
00048
BN_clear_free
[call site]
00049
BN_clear_free
[call site]
00050
ssh_socket_init
[function]
[call site]
00051
ssh_poll_init
[function]
[call site]
00052
ssh_mutex_unlock
[function]
[call site]
00053
ssh_known_hosts_read_entries
[function]
[call site]
00057
fopen
[call site]
00058
ssh_strerror
[function]
[call site]
00059
__xpg_strerror_r
[call site]
00060
_ssh_log
[function]
[call site]
00061
ssh_list_new
[function]
[call site]
00062
known_hosts_read_line
[function]
[call site]
00063
fgets
[call site]
00064
strlen
[call site]
00065
feof
[call site]
00066
__errno_location
[call site]
00067
strcspn
[call site]
00068
__ctype_b_loc
[call site]
00069
ssh_known_hosts_parse_line
[function]
[call site]
00070
strdup
[call site]
00071
strtok_r
[call site]
00072
calloc
[call site]
00073
match_hashed_hostname
[function]
[call site]
00074
strdup
[call site]
00075
strchr
[call site]
00076
base64_to_bin
[function]
[call site]
00077
get_equals
[function]
[call site]
00078
strchr
[call site]
00079
ssh_buffer_new
[function]
[call site]
00080
calloc
[call site]
00081
ssh_buffer_allocate_size
[function]
[call site]
00082
buffer_shift
[function]
[call site]
00083
explicit_bzero
[call site]
00084
realloc_buffer
[function]
[call site]
00085
explicit_bzero
[call site]
00086
realloc
[call site]
00087
ssh_buffer_set_secure
[function]
[call site]
00088
strlen
[call site]
00089
_base64_to_bin
[function]
[call site]
00090
to_block4
[function]
[call site]
00091
strchr
[call site]
00092
strchr
[call site]
00093
strchr
[call site]
00094
strchr
[call site]
00095
ssh_buffer_add_data
[function]
[call site]
00096
buffer_shift
[function]
[call site]
00097
realloc_buffer
[function]
[call site]
00098
_base64_to_bin
[function]
[call site]
00099
ssh_buffer_add_data
[function]
[call site]
00100
_base64_to_bin
[function]
[call site]
00101
ssh_buffer_add_data
[function]
[call site]
00102
_base64_to_bin
[function]
[call site]
00103
ssh_buffer_add_data
[function]
[call site]
00104
ssh_buffer_free
[function]
[call site]
00105
explicit_bzero
[call site]
00106
explicit_bzero
[call site]
00107
base64_to_bin
[function]
[call site]
00108
ssh_buffer_get
[function]
[call site]
00109
ssh_buffer_get_len
[function]
[call site]
00110
hash_hostname
[function]
[call site]
00111
hmac_init
[function]
[call site]
00112
EVP_MD_CTX_new
[call site]
00113
EVP_PKEY_new_mac_key
[call site]
00114
EVP_sha1
[call site]
00115
EVP_sha256
[call site]
00116
EVP_sha512
[call site]
00117
EVP_md5
[call site]
00118
EVP_PKEY_free
[call site]
00119
EVP_MD_CTX_free
[call site]
00120
strlen
[call site]
00121
hmac_update
[function]
[call site]
00122
EVP_DigestUpdate
[call site]
00123
hmac_final
[function]
[call site]
00124
EVP_DigestSignFinal
[call site]
00125
EVP_MD_CTX_free
[call site]
00126
ssh_buffer_get_len
[function]
[call site]
00127
memcmp
[call site]
00128
ssh_buffer_free
[function]
[call site]
00129
ssh_buffer_free
[function]
[call site]
00130
strtok_r
[call site]
00131
ssh_hostport
[function]
[call site]
00132
snprintf
[call site]
00133
strlen
[call site]
00134
match_hostname
[function]
[call site]
00135
match_pattern_list
[function]
[call site]
00136
__ctype_b_loc
[call site]
00137
tolower
[call site]
00138
match_pattern
[function]
[call site]
00139
match_pattern
[function]
[call site]
00140
match_pattern
[function]
[call site]
00141
strlen
[call site]
00142
match_hostname
[function]
[call site]
00143
strtok_r
[call site]
00144
strdup
[call site]
00145
strdup
[call site]
00146
strtok_r
[call site]
00147
strdup
[call site]
00148
strtok_r
[call site]
00149
ssh_key_type_from_name
[function]
[call site]
00150
strcmp
[call site]
00151
strcmp
[call site]
00152
strcmp
[call site]
00153
strcmp
[call site]
00154
strcmp
[call site]
00155
strcmp
[call site]
00156
strcmp
[call site]
00157
strcmp
[call site]
00158
strcmp
[call site]
00159
strcmp
[call site]
00160
strcmp
[call site]
00161
strcmp
[call site]
00162
strcmp
[call site]
00163
strcmp
[call site]
00164
strcmp
[call site]
00165
strcmp
[call site]
00166
strcmp
[call site]
00167
_ssh_log
[function]
[call site]
00168
strtok_r
[call site]
00169
ssh_pki_import_pubkey_base64
[function]
[call site]
00170
base64_to_bin
[function]
[call site]
00171
ssh_buffer_get_ssh_string
[function]
[call site]
00172
ssh_buffer_get_u32
[function]
[call site]
00173
ssh_buffer_get_data
[function]
[call site]
00174
ssh_buffer_validate_length
[function]
[call site]
00175
ntohl
[call site]
00176
ssh_buffer_validate_length
[function]
[call site]
00177
ssh_string_new
[function]
[call site]
00178
__errno_location
[call site]
00179
htonl
[call site]
00180
ssh_string_data
[function]
[call site]
00181
ssh_buffer_get_data
[function]
[call site]
00182
ssh_buffer_free
[function]
[call site]
00183
ssh_string_free
[function]
[call site]
00184
pki_import_cert_buffer
[function]
[call site]
00185
ssh_buffer_new
[function]
[call site]
00186
ssh_key_type_to_char
[function]
[call site]
00187
ssh_string_from_char
[function]
[call site]
00188
__errno_location
[call site]
00189
strlen
[call site]
00190
ssh_string_new
[function]
[call site]
00191
ssh_buffer_add_ssh_string
[function]
[call site]
00192
ssh_string_len
[function]
[call site]
00193
ntohl
[call site]
00194
ssh_buffer_add_data
[function]
[call site]
00195
ssh_string_free
[function]
[call site]
00196
ssh_buffer_add_buffer
[function]
[call site]
00197
ssh_buffer_get
[function]
[call site]
00198
ssh_buffer_get_len
[function]
[call site]
00199
ssh_buffer_add_data
[function]
[call site]
00200
ssh_buffer_get_ssh_string
[function]
[call site]
00201
ssh_string_free
[function]
[call site]
00202
pki_import_pubkey_buffer
[function]
[call site]
00203
ssh_key_new
[function]
[call site]
00204
ssh_key_type_to_char
[function]
[call site]
00205
_ssh_buffer_unpack
[function]
[call site]
00206
ssh_buffer_unpack_va
[function]
[call site]
00207
ssh_buffer_get_len
[function]
[call site]
00208
ssh_buffer_get_u8
[function]
[call site]
00209
ssh_buffer_get_data
[function]
[call site]
00210
ssh_buffer_get_data
[function]
[call site]
00211
ntohs
[call site]
00212
ssh_buffer_get_u32
[function]
[call site]
00213
ntohl
[call site]
00214
ssh_buffer_get_u64
[function]
[call site]
00215
ssh_buffer_get_data
[function]
[call site]
00216
ntohl
[call site]
00217
ssh_buffer_get_ssh_string
[function]
[call site]
00218
ssh_make_string_bn
[function]
[call site]
00219
ssh_string_len
[function]
[call site]
00220
ssh_string_burn
[function]
[call site]
00221
ssh_string_len
[function]
[call site]
00222
explicit_bzero
[call site]
00223
ssh_string_free
[function]
[call site]
00224
ssh_buffer_get_ssh_string
[function]
[call site]
00225
ssh_buffer_get_u32
[function]
[call site]
00226
ntohl
[call site]
00227
ssh_buffer_validate_length
[function]
[call site]
00228
ssh_buffer_get_data
[function]
[call site]
00229
ssh_buffer_validate_length
[function]
[call site]
00230
ssh_buffer_get_data
[function]
[call site]
00231
_ssh_log
[function]
[call site]
00232
abort
[call site]
00233
explicit_bzero
[call site]
00234
explicit_bzero
[call site]
00235
explicit_bzero
[call site]
00236
explicit_bzero
[call site]
00237
BN_clear_free
[call site]
00238
ssh_string_burn
[function]
[call site]
00239
strlen
[call site]
00240
explicit_bzero
[call site]
00241
_ssh_log
[function]
[call site]
00242
pki_pubkey_build_rsa
[function]
[call site]
00243
RSA_new
[call site]
00244
ssh_make_string_bn
[function]
[call site]
00245
ssh_make_string_bn
[function]
[call site]
00246
RSA_set0_key
[call site]
00247
EVP_PKEY_new
[call site]
00248
RSA_free
[call site]
00249
ssh_string_burn
[function]
[call site]
00250
ssh_string_burn
[function]
[call site]
00251
ssh_string_free
[function]
[call site]
00252
_ssh_log
[function]
[call site]
00253
_ssh_buffer_unpack
[function]
[call site]
00254
_ssh_log
[function]
[call site]
00255
ssh_string_get_char
[function]
[call site]
00256
ssh_string_len
[function]
[call site]
00257
pki_key_ecdsa_nid_from_name
[function]
[call site]
00258
strcmp
[call site]
00259
strcmp
[call site]
00260
ssh_string_free
[function]
[call site]
00261
ssh_string_burn
[function]
[call site]
00262
ssh_string_free
[function]
[call site]
00263
pki_pubkey_build_ecdsa
[function]
[call site]
00264
pki_key_ecdsa_nid_to_name
[function]
[call site]
00265
EC_KEY_new_by_curve_name
[call site]
00266
EC_KEY_get0_group
[call site]
00267
EC_POINT_new
[call site]
00268
EC_KEY_free
[call site]
00269
ssh_string_data
[function]
[call site]
00270
ssh_string_len
[function]
[call site]
00271
EC_POINT_oct2point
[call site]
00272
EC_KEY_free
[call site]
00273
EC_POINT_free
[call site]
00274
EC_KEY_set_public_key
[call site]
00275
EC_POINT_free
[call site]
00276
EC_KEY_free
[call site]
00277
EC_KEY_free
[call site]
00278
EC_KEY_free
[call site]
00279
ssh_string_burn
[function]
[call site]
00280
ssh_string_free
[function]
[call site]
00281
_ssh_log
[function]
[call site]
00282
ssh_pki_key_ecdsa_name
[function]
[call site]
00283
pki_key_ecdsa_nid_to_name
[function]
[call site]
00284
ssh_buffer_get_ssh_string
[function]
[call site]
00285
_ssh_log
[function]
[call site]
00286
ssh_key_type_to_char
[function]
[call site]
00287
ssh_buffer_get_ssh_string
[function]
[call site]
00288
ssh_string_len
[function]
[call site]
00289
_ssh_log
[function]
[call site]
00290
ssh_string_burn
[function]
[call site]
00291
ssh_string_free
[function]
[call site]
00292
ssh_string_burn
[function]
[call site]
00293
ssh_string_free
[function]
[call site]
00294
ssh_string_data
[function]
[call site]
00295
ssh_string_burn
[function]
[call site]
00296
ssh_string_free
[function]
[call site]
00297
ssh_buffer_get_ssh_string
[function]
[call site]
00298
_ssh_log
[function]
[call site]
00299
_ssh_log
[function]
[call site]
00300
ssh_key_free
[function]
[call site]
00301
ssh_key_clean
[function]
[call site]
00302
pki_key_clean
[function]
[call site]
00303
explicit_bzero
[call site]
00304
ssh_buffer_free
[function]
[call site]
00305
ssh_string_burn
[function]
[call site]
00306
ssh_string_free
[function]
[call site]
00307
pki_import_pubkey_buffer
[function]
[call site]
00308
pki_import_pubkey_buffer
[function]
[call site]
00309
pki_import_pubkey_buffer
[function]
[call site]
00310
pki_import_pubkey_buffer
[function]
[call site]
00311
pki_import_pubkey_buffer
[function]
[call site]
00312
pki_import_pubkey_buffer
[function]
[call site]
00313
ssh_key_new
[function]
[call site]
00314
ssh_key_free
[function]
[call site]
00315
ssh_buffer_free
[function]
[call site]
00316
pki_import_pubkey_buffer
[function]
[call site]
00317
ssh_buffer_free
[function]
[call site]
00318
ssh_key_type_to_char
[function]
[call site]
00319
_ssh_log
[function]
[call site]
00320
strtok_r
[call site]
00321
strstr
[call site]
00322
strdup
[call site]
00323
ssh_knownhosts_entry_free
[function]
[call site]
00324
ssh_key_free
[function]
[call site]
00325
ssh_list_get_iterator
[function]
[call site]
00326
ssh_known_hosts_entries_compare
[function]
[call site]
00327
strcmp
[call site]
00328
ssh_key_cmp
[function]
[call site]
00329
_ssh_log
[function]
[call site]
00330
ssh_key_is_private
[function]
[call site]
00331
ssh_key_is_private
[function]
[call site]
00332
ssh_string_get_char
[function]
[call site]
00333
ssh_string_get_char
[function]
[call site]
00334
ssh_string_len
[function]
[call site]
00335
pki_ed25519_key_cmp
[function]
[call site]
00336
memcmp
[call site]
00337
pki_key_compare
[function]
[call site]
00338
EVP_PKEY_get0_EC_KEY
[call site]
00339
EVP_PKEY_get0_EC_KEY
[call site]
00340
EC_KEY_get0_public_key
[call site]
00341
EC_KEY_get0_public_key
[call site]
00342
EC_KEY_get0_group
[call site]
00343
EC_KEY_get0_group
[call site]
00344
EC_GROUP_cmp
[call site]
00345
EC_POINT_cmp
[call site]
00346
EC_KEY_get0_private_key
[call site]
00347
EVP_PKEY_cmp
[call site]
00348
ssh_knownhosts_entry_free
[function]
[call site]
00349
ssh_list_append
[function]
[call site]
00350
ssh_iterator_new
[function]
[call site]
00351
known_hosts_read_line
[function]
[call site]
00352
fclose
[call site]
00353
fclose
[call site]
00354
ssh_list_get_iterator
[function]
[call site]
00355
ssh_knownhosts_entry_free
[function]
[call site]
00356
ssh_list_remove
[function]
[call site]
00357
ssh_list_get_iterator
[function]
[call site]
00358
ssh_list_free
[function]
[call site]
00359
ssh_finalize
[function]
[call site]
00360
_ssh_finalize
[function]
[call site]
00361
ssh_mutex_lock
[function]
[call site]
00362
ssh_mutex_unlock
[function]
[call site]
00363
ssh_mutex_unlock
[function]
[call site]
00364
ssh_dh_finalize
[function]
[call site]
00365
ssh_crypto_finalize
[function]
[call site]
00366
ssh_socket_cleanup
[function]
[call site]
00367
ssh_poll_cleanup
[function]
[call site]
00368
ssh_threads_finalize
[function]
[call site]
00369
crypto_thread_finalize
[function]
[call site]
00370
ssh_mutex_unlock
[function]
[call site]
00371
unlink
[call site]
00372