Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
20	91	_ssh_log	call site: 00091	_ssh_log
14	168	ssh_free	call site: 00168	ssh_message_free
13	77	ssh_socket_close	call site: 00077	ssh_poll_free
13	301	ssh_buffer_unpack_va	call site: 00301	_ssh_log
8	60	ssh_free	call site: 00060	ssh_channel_do_free
8	128	ssh_string_len	call site: 00128	ssh_string_burn
7	289	ssh_buffer_unpack_va	call site: 00289	ssh_buffer_get_ssh_string
6	121	crypto_free	call site: 00121	ssh_key_clean
6	316	sftp_parse_attr_3	call site: 00316	sftp_parse_longname
4	145	crypto_free	call site: 00145	deflateEnd
4	281	ssh_buffer_unpack_va	call site: 00281	ssh_buffer_get_u8
2	22	ssh_buffer_new	call site: 00022	buffer_shift

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           nalloc_start

[function] [call site] 00001


             nalloc_random_update

[function] [call site] 00002


           __assert_fail

[call site] 00003


           ssh_new

[function] [call site] 00004


             calloc

[function] [call site] 00005


               nalloc_fail

[function] [call site] 00006


                 nalloc_random_update

[function] [call site] 00007


                 nalloc_random_update

[function] [call site] 00008


                 nalloc_random_update

[function] [call site] 00009


                 nalloc_backtrace_exclude

[function] [call site] 00010


                   fprintf

[call site] 00011


               __errno_location

[call site] 00012


               __libc_calloc

[call site] 00013


             crypto_new

[function] [call site] 00014


               calloc

[function] [call site] 00015


             ssh_socket_new

[function] [call site] 00016


               calloc

[function] [call site] 00017


               _ssh_set_error_oom

[function] [call site] 00018


                 snprintf

[call site] 00019


               ssh_buffer_new

[function] [call site] 00020


                 calloc

[function] [call site] 00021


                 ssh_buffer_allocate_size

[function] [call site] 00022


                   buffer_shift

[function] [call site] 00023


                     explicit_bzero

[call site] 00024


                   realloc_buffer

[function] [call site] 00025


                     explicit_bzero

[call site] 00026


                     realloc

[function] [call site] 00027


                       nalloc_fail

[function] [call site] 00028


                       __errno_location

[call site] 00029


                       __libc_realloc

[call site] 00030


               _ssh_set_error_oom

[function] [call site] 00031


               ssh_buffer_new

[function] [call site] 00032


               _ssh_set_error_oom

[function] [call site] 00033


               ssh_buffer_free

[function] [call site] 00034


                 explicit_bzero

[call site] 00035


                 explicit_bzero

[call site] 00036


             ssh_buffer_new

[function] [call site] 00037


             ssh_buffer_new

[function] [call site] 00038


             ssh_list_new

[function] [call site] 00039


             ssh_set_blocking

[function] [call site] 00040


             ssh_agent_new

[function] [call site] 00041


               calloc

[function] [call site] 00042


               ssh_socket_new

[function] [call site] 00043


             ssh_pki_ctx_new

[function] [call site] 00044


               calloc

[function] [call site] 00045


             ssh_list_new

[function] [call site] 00046


             ssh_list_new

[function] [call site] 00047


             ssh_list_new

[function] [call site] 00048


             ssh_list_new

[function] [call site] 00049


             ssh_list_new

[function] [call site] 00050


             ssh_list_new

[function] [call site] 00051


             strdup

[call site] 00052


             ssh_list_append

[function] [call site] 00053


               ssh_iterator_new

[function] [call site] 00054


             strdup

[call site] 00055


             ssh_list_append

[function] [call site] 00056


             strdup

[call site] 00057


             ssh_list_append

[function] [call site] 00058


             ssh_free

[function] [call site] 00059


               ssh_list_get_iterator

[function] [call site] 00060


               ssh_channel_do_free

[function] [call site] 00061


                 ssh_list_find

[function] [call site] 00062


                   ssh_list_get_iterator

[function] [call site] 00063


                 ssh_list_remove

[function] [call site] 00064


                 ssh_buffer_free

[function] [call site] 00065


                 ssh_buffer_free

[function] [call site] 00066


                 ssh_list_free

[function] [call site] 00067


               ssh_list_remove

[function] [call site] 00068


               ssh_list_get_iterator

[function] [call site] 00069


               ssh_list_free

[function] [call site] 00070


               ssh_pcap_context_free

[function] [call site] 00071


               ssh_socket_free

[function] [call site] 00072


                 ssh_socket_close

[function] [call site] 00073


                   ssh_socket_is_open

[function] [call site] 00074


                   close

[call site] 00075


                   __errno_location

[call site] 00076


                   ssh_poll_is_locked

[function] [call site] 00077


                   ssh_poll_free

[function] [call site] 00078


                     ssh_poll_ctx_remove

[function] [call site] 00079


                       ssh_poll_ctx_resize

[function] [call site] 00080


                         realloc

[function] [call site] 00081


                         realloc

[function] [call site] 00082


                         realloc

[function] [call site] 00083


                   kill

[call site] 00084


                   waitpid

[call site] 00085


                   __errno_location

[call site] 00086


                   __errno_location

[call site] 00087


                   ssh_strerror

[function] [call site] 00088


                     __xpg_strerror_r

[call site] 00089


                   _ssh_log

[function] [call site] 00090


                     ssh_get_log_level

[function] [call site] 00091


                     ssh_vlog

[function] [call site] 00092


                       vsnprintf

[call site] 00093


                       ssh_log_function

[function] [call site] 00094


                         ssh_get_log_callback

[function] [call site] 00095


                         ssh_log_custom

[function] [call site] 00096


                           snprintf

[call site] 00097


                           ssh_get_log_userdata

[function] [call site] 00098


                         ssh_log_stderr

[function] [call site] 00099


                           current_timestring

[function] [call site] 00100


                             gettimeofday

[call site] 00101


                             localtime_r

[call site] 00102


                             strftime

[call site] 00103


                             snprintf

[call site] 00104


                             strftime

[call site] 00105


                             snprintf

[call site] 00106


                           fprintf

[call site] 00107


                           fprintf

[call site] 00108


                           fprintf

[call site] 00109


                   _ssh_log

[function] [call site] 00110


                   _ssh_log

[function] [call site] 00111


                 ssh_buffer_free

[function] [call site] 00112


                 ssh_buffer_free

[function] [call site] 00113


               ssh_poll_ctx_free

[function] [call site] 00114


                 ssh_poll_free

[function] [call site] 00115


               ssh_buffer_free

[function] [call site] 00116


               ssh_buffer_free

[function] [call site] 00117


               ssh_buffer_free

[function] [call site] 00118


               ssh_buffer_free

[function] [call site] 00119


               crypto_free

[function] [call site] 00120


                 ssh_key_free

[function] [call site] 00121


                   ssh_key_clean

[function] [call site] 00122


                     pki_key_clean

[function] [call site] 00123


                       EVP_PKEY_free

[call site] 00124


                     ssh_buffer_free

[function] [call site] 00125


                     ssh_string_burn

[function] [call site] 00126


                       ssh_string_len

[function] [call site] 00127


                         ntohl

[call site] 00128


                       explicit_bzero

[call site] 00129


                     ssh_string_free

[function] [call site] 00130


                     ssh_string_burn

[function] [call site] 00131


                     ssh_string_free

[function] [call site] 00132


                     ssh_string_burn

[function] [call site] 00133


                     ssh_string_free

[function] [call site] 00134


                     ssh_string_burn

[function] [call site] 00135


                     ssh_string_free

[function] [call site] 00136


                 ssh_dh_cleanup

[function] [call site] 00137


                   DH_free

[call site] 00138


                   DH_free

[call site] 00139


                 BN_clear_free

[call site] 00140


                 EC_KEY_free

[call site] 00141


                 EVP_PKEY_free

[call site] 00142


                 explicit_bzero

[call site] 00143


                 explicit_bzero

[call site] 00144


                 compress_cleanup

[function] [call site] 00145


                   deflateEnd

[call site] 00146


                   inflateEnd

[call site] 00147


                 explicit_bzero

[call site] 00148


                 explicit_bzero

[call site] 00149


                 cipher_free

[function] [call site] 00150


                   ssh_cipher_clear

[function] [call site] 00151


                 cipher_free

[function] [call site] 00152


                 explicit_bzero

[call site] 00153


                 ssh_string_burn

[function] [call site] 00154


                 ssh_string_free

[function] [call site] 00155


                 ssh_string_free

[function] [call site] 00156


                 ssh_string_free

[function] [call site] 00157


                 explicit_bzero

[call site] 00158


               crypto_free

[function] [call site] 00159


               ssh_agent_free

[function] [call site] 00160


                 ssh_buffer_free

[function] [call site] 00161


                 ssh_agent_close

[function] [call site] 00162


                   ssh_socket_close

[function] [call site] 00163


                 ssh_socket_free

[function] [call site] 00164


               ssh_pki_ctx_free

[function] [call site] 00165


               ssh_key_free

[function] [call site] 00166


               ssh_key_free

[function] [call site] 00167


               ssh_key_free

[function] [call site] 00168


               _ssh_list_pop_head

[function] [call site] 00169


               ssh_message_free

[function] [call site] 00170


                 strlen

[call site] 00171


                 explicit_bzero

[call site] 00172


                 ssh_key_free

[function] [call site] 00173


                 ssh_key_free

[function] [call site] 00174


               _ssh_list_pop_head

[function] [call site] 00175


               ssh_list_free

[function] [call site] 00176


               ssh_kbdint_free

[function] [call site] 00177


                 strlen

[call site] 00178


                 explicit_bzero

[call site] 00179


                 strlen

[call site] 00180


                 explicit_bzero

[call site] 00181


               ssh_list_free

[function] [call site] 00182


               _ssh_list_pop_head

[function] [call site] 00183


               _ssh_list_pop_head

[function] [call site] 00184


               ssh_list_free

[function] [call site] 00185


               _ssh_list_pop_head

[function] [call site] 00186


               _ssh_list_pop_head

[function] [call site] 00187


               ssh_list_free

[function] [call site] 00188


               _ssh_list_pop_head

[function] [call site] 00189


               _ssh_list_pop_head

[function] [call site] 00190


               ssh_list_free

[function] [call site] 00191


               _ssh_list_pop_head

[function] [call site] 00192


               _ssh_list_pop_head

[function] [call site] 00193


               ssh_list_free

[function] [call site] 00194


               ssh_proxyjumps_free

[function] [call site] 00195


                 _ssh_list_pop_head

[function] [call site] 00196


                 _ssh_list_pop_head

[function] [call site] 00197


               ssh_list_free

[function] [call site] 00198


               ssh_list_free

[function] [call site] 00199


               _ssh_list_pop_head

[function] [call site] 00200


               ssh_buffer_free

[function] [call site] 00201


               ssh_list_free

[function] [call site] 00202


               ssh_agent_state_free

[function] [call site] 00203


                 ssh_string_free_char

[function] [call site] 00204


                 ssh_key_free

[function] [call site] 00205


               _ssh_remove_legacy_log_cb

[function] [call site] 00206


                 ssh_get_log_callback

[function] [call site] 00207


                 _ssh_reset_log_cb

[function] [call site] 00208


                 ssh_set_log_userdata

[function] [call site] 00209


               explicit_bzero

[call site] 00210


           create_minimal_sftp_session

[function] [call site] 00211


             calloc

[function] [call site] 00212


           ssh_buffer_new

[function] [call site] 00213


           ssh_buffer_reinit

[function] [call site] 00214


             explicit_bzero

[call site] 00215


             realloc_buffer

[function] [call site] 00216


           ssh_buffer_add_data

[function] [call site] 00217


             buffer_shift

[function] [call site] 00218


             realloc_buffer

[function] [call site] 00219


           sftp_parse_attr

[function] [call site] 00220


             sftp_parse_attr_4

[function] [call site] 00221


               calloc

[function] [call site] 00222


               _ssh_set_error_oom

[function] [call site] 00223


               sftp_set_error

[function] [call site] 00224


               ssh_buffer_get_u32

[function] [call site] 00225


                 ssh_buffer_get_data

[function] [call site] 00226


                   ssh_buffer_validate_length

[function] [call site] 00227


               ntohl

[call site] 00228


               ssh_buffer_get_u64

[function] [call site] 00229


                 ssh_buffer_get_data

[function] [call site] 00230


               ntohl

[call site] 00231


               ssh_buffer_get_ssh_string

[function] [call site] 00232


                 ssh_buffer_get_u32

[function] [call site] 00233


                 ntohl

[call site] 00234


                 ssh_buffer_validate_length

[function] [call site] 00235


                 ssh_string_new

[function] [call site] 00236


                   __errno_location

[call site] 00237


                   htonl

[call site] 00238


                 ssh_string_data

[function] [call site] 00239


                 ssh_buffer_get_data

[function] [call site] 00240


               ssh_string_to_char

[function] [call site] 00241


                 ssh_string_len

[function] [call site] 00242


               ssh_string_free

[function] [call site] 00243


               ssh_buffer_get_ssh_string

[function] [call site] 00244


               ssh_string_to_char

[function] [call site] 00245


               ssh_string_free

[function] [call site] 00246


               ssh_buffer_get_u32

[function] [call site] 00247


               ntohl

[call site] 00248


               ssh_buffer_get_u64

[function] [call site] 00249


               ntohl

[call site] 00250


               ssh_buffer_get_u32

[function] [call site] 00251


               ntohl

[call site] 00252


               ssh_buffer_get_u64

[function] [call site] 00253


               ntohl

[call site] 00254


               ssh_buffer_get_u32

[function] [call site] 00255


               ntohl

[call site] 00256


               ssh_buffer_get_u64

[function] [call site] 00257


               ntohl

[call site] 00258


               ssh_buffer_get_u32

[function] [call site] 00259


               ntohl

[call site] 00260


               ssh_buffer_get_ssh_string

[function] [call site] 00261


               ssh_buffer_get_u32

[function] [call site] 00262


               ntohl

[call site] 00263


               ssh_buffer_get_ssh_string

[function] [call site] 00264


               ssh_buffer_get_ssh_string

[function] [call site] 00265


               ssh_string_free

[function] [call site] 00266


               ssh_string_free

[function] [call site] 00267


               ssh_string_free

[function] [call site] 00268


               ssh_string_free

[function] [call site] 00269


               ssh_string_free

[function] [call site] 00270


               _ssh_set_error

[function] [call site] 00271


                 vsnprintf

[call site] 00272


                 ssh_get_log_level

[function] [call site] 00273


                 ssh_log_function

[function] [call site] 00274


             sftp_parse_attr_3

[function] [call site] 00275


               calloc

[function] [call site] 00276


               _ssh_set_error_oom

[function] [call site] 00277


               sftp_set_error

[function] [call site] 00278


               _ssh_buffer_unpack

[function] [call site] 00279


                 ssh_buffer_unpack_va

[function] [call site] 00280


                   ssh_buffer_get_len

[function] [call site] 00281


                   ssh_buffer_get_u8

[function] [call site] 00282


                     ssh_buffer_get_data

[function] [call site] 00283


                   ssh_buffer_get_data

[function] [call site] 00284


                   ntohs

[call site] 00285


                   ssh_buffer_get_u32

[function] [call site] 00286


                   ntohl

[call site] 00287


                   ssh_buffer_get_u64

[function] [call site] 00288


                   ntohl

[call site] 00289


                   ssh_buffer_get_ssh_string

[function] [call site] 00290


                   ssh_make_string_bn

[function] [call site] 00291


                     ssh_string_len

[function] [call site] 00292


                     BN_new

[call site] 00293


                     BN_bin2bn

[call site] 00294


                   ssh_string_burn

[function] [call site] 00295


                   ssh_string_free

[function] [call site] 00296


                   ssh_buffer_get_ssh_string

[function] [call site] 00297


                   ssh_buffer_get_u32

[function] [call site] 00298


                   ntohl

[call site] 00299


                   ssh_buffer_validate_length

[function] [call site] 00300


                   ssh_buffer_get_data

[function] [call site] 00301


                   ssh_buffer_validate_length

[function] [call site] 00302


                   ssh_buffer_get_data

[function] [call site] 00303


                   _ssh_log

[function] [call site] 00304


                   abort

[call site] 00305


                   explicit_bzero

[call site] 00306


                   explicit_bzero

[call site] 00307


                   explicit_bzero

[call site] 00308


                   explicit_bzero

[call site] 00309


                   BN_clear_free

[call site] 00310


                   ssh_string_burn

[function] [call site] 00311


                   strlen

[call site] 00312


                   explicit_bzero

[call site] 00313


                   explicit_bzero

[call site] 00314


               _ssh_log

[function] [call site] 00315


               ssh_get_openssh_version

[function] [call site] 00316


               sftp_parse_longname

[function] [call site] 00317


                 __ctype_b_loc

[call site] 00318


                 __ctype_b_loc

[call site] 00319


                 __ctype_b_loc

[call site] 00320


                 strndup

[call site] 00321


               sftp_parse_longname

[function] [call site] 00322


               _ssh_buffer_unpack

[function] [call site] 00323


               _ssh_log

[function] [call site] 00324


               _ssh_buffer_unpack

[function] [call site] 00325


               _ssh_log

[function] [call site] 00326


               _ssh_buffer_unpack

[function] [call site] 00327


               _ssh_buffer_unpack

[function] [call site] 00328


               _ssh_buffer_unpack

[function] [call site] 00329


               _ssh_buffer_unpack

[function] [call site] 00330


               _ssh_buffer_unpack

[function] [call site] 00331


               _ssh_buffer_unpack

[function] [call site] 00332


               ssh_string_free

[function] [call site] 00333


               ssh_string_free

[function] [call site] 00334


               _ssh_set_error

[function] [call site] 00335


               sftp_set_error

[function] [call site] 00336


             _ssh_set_error

[function] [call site] 00337


           sftp_attributes_free

[function] [call site] 00338


             ssh_string_free

[function] [call site] 00339


             ssh_string_free

[function] [call site] 00340


             ssh_string_free

[function] [call site] 00341


           ssh_buffer_free

[function] [call site] 00342


           ssh_free

[function] [call site] 00343


           nalloc_end

[function] [call site] 00344