Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
20	93	_ssh_log	call site: 00093	_ssh_log
14	170	ssh_free	call site: 00170	ssh_message_free
13	79	ssh_socket_close	call site: 00079	ssh_poll_free
13	310	ssh_buffer_unpack_va	call site: 00310	_ssh_log
8	62	ssh_free	call site: 00062	ssh_channel_do_free
8	130	ssh_string_len	call site: 00130	ssh_string_burn
7	298	ssh_buffer_unpack_va	call site: 00298	ssh_buffer_get_ssh_string
6	123	crypto_free	call site: 00123	ssh_key_clean
6	325	sftp_parse_attr_3	call site: 00325	sftp_parse_longname
4	147	crypto_free	call site: 00147	deflateEnd
4	290	ssh_buffer_unpack_va	call site: 00290	ssh_buffer_get_u8
2	22	ssh_buffer_new	call site: 00022	buffer_shift

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           nalloc_start

[function] [call site] 00001


             nalloc_random_update

[function] [call site] 00002


           __assert_fail

[call site] 00003


           ssh_new

[function] [call site] 00004


             calloc

[function] [call site] 00005


               nalloc_fail

[function] [call site] 00006


                 nalloc_random_update

[function] [call site] 00007


                 nalloc_random_update

[function] [call site] 00008


                 nalloc_random_update

[function] [call site] 00009


                 nalloc_backtrace_exclude

[function] [call site] 00010


                   fprintf

[call site] 00011


               __errno_location

[call site] 00012


               __libc_calloc

[call site] 00013


             crypto_new

[function] [call site] 00014


               calloc

[function] [call site] 00015


             ssh_socket_new

[function] [call site] 00016


               calloc

[function] [call site] 00017


               _ssh_set_error_oom

[function] [call site] 00018


                 snprintf

[call site] 00019


               ssh_buffer_new

[function] [call site] 00020


                 calloc

[function] [call site] 00021


                 ssh_buffer_allocate_size

[function] [call site] 00022


                   buffer_shift

[function] [call site] 00023


                     explicit_bzero

[call site] 00024


                   realloc_buffer

[function] [call site] 00025


                     explicit_bzero

[call site] 00026


                     realloc

[function] [call site] 00027


                       nalloc_fail

[function] [call site] 00028


                       __errno_location

[call site] 00029


                       __libc_realloc

[call site] 00030


               _ssh_set_error_oom

[function] [call site] 00031


               ssh_buffer_new

[function] [call site] 00032


               _ssh_set_error_oom

[function] [call site] 00033


               ssh_buffer_free

[function] [call site] 00034


                 explicit_bzero

[call site] 00035


                 explicit_bzero

[call site] 00036


             ssh_buffer_new

[function] [call site] 00037


             ssh_buffer_new

[function] [call site] 00038


             ssh_list_new

[function] [call site] 00039


             ssh_set_blocking

[function] [call site] 00040


             ssh_agent_new

[function] [call site] 00041


               calloc

[function] [call site] 00042


               ssh_socket_new

[function] [call site] 00043


             ssh_pki_ctx_new

[function] [call site] 00044


               calloc

[function] [call site] 00045


             ssh_list_new

[function] [call site] 00046


             ssh_list_new

[function] [call site] 00047


             ssh_list_new

[function] [call site] 00048


             ssh_list_new

[function] [call site] 00049


             ssh_list_new

[function] [call site] 00050


             ssh_list_new

[function] [call site] 00051


             ssh_list_new

[function] [call site] 00052


             ssh_list_new

[function] [call site] 00053


             strdup

[call site] 00054


             ssh_list_append

[function] [call site] 00055


               ssh_iterator_new

[function] [call site] 00056


             strdup

[call site] 00057


             ssh_list_append

[function] [call site] 00058


             strdup

[call site] 00059


             ssh_list_append

[function] [call site] 00060


             ssh_free

[function] [call site] 00061


               ssh_list_get_iterator

[function] [call site] 00062


               ssh_channel_do_free

[function] [call site] 00063


                 ssh_list_find

[function] [call site] 00064


                   ssh_list_get_iterator

[function] [call site] 00065


                 ssh_list_remove

[function] [call site] 00066


                 ssh_buffer_free

[function] [call site] 00067


                 ssh_buffer_free

[function] [call site] 00068


                 ssh_list_free

[function] [call site] 00069


               ssh_list_remove

[function] [call site] 00070


               ssh_list_get_iterator

[function] [call site] 00071


               ssh_list_free

[function] [call site] 00072


               ssh_pcap_context_free

[function] [call site] 00073


               ssh_socket_free

[function] [call site] 00074


                 ssh_socket_close

[function] [call site] 00075


                   ssh_socket_is_open

[function] [call site] 00076


                   close

[call site] 00077


                   __errno_location

[call site] 00078


                   ssh_poll_is_locked

[function] [call site] 00079


                   ssh_poll_free

[function] [call site] 00080


                     ssh_poll_ctx_remove

[function] [call site] 00081


                       ssh_poll_ctx_resize

[function] [call site] 00082


                         realloc

[function] [call site] 00083


                         realloc

[function] [call site] 00084


                         realloc

[function] [call site] 00085


                   kill

[call site] 00086


                   waitpid

[call site] 00087


                   __errno_location

[call site] 00088


                   __errno_location

[call site] 00089


                   ssh_strerror

[function] [call site] 00090


                     __xpg_strerror_r

[call site] 00091


                   _ssh_log

[function] [call site] 00092


                     ssh_get_log_level

[function] [call site] 00093


                     ssh_vlog

[function] [call site] 00094


                       vsnprintf

[call site] 00095


                       ssh_log_function

[function] [call site] 00096


                         ssh_get_log_callback

[function] [call site] 00097


                         ssh_log_custom

[function] [call site] 00098


                           snprintf

[call site] 00099


                           ssh_get_log_userdata

[function] [call site] 00100


                         ssh_log_stderr

[function] [call site] 00101


                           current_timestring

[function] [call site] 00102


                             gettimeofday

[call site] 00103


                             localtime_r

[call site] 00104


                             strftime

[call site] 00105


                             snprintf

[call site] 00106


                             strftime

[call site] 00107


                             snprintf

[call site] 00108


                           fprintf

[call site] 00109


                           fprintf

[call site] 00110


                           fprintf

[call site] 00111


                   _ssh_log

[function] [call site] 00112


                   _ssh_log

[function] [call site] 00113


                 ssh_buffer_free

[function] [call site] 00114


                 ssh_buffer_free

[function] [call site] 00115


               ssh_poll_ctx_free

[function] [call site] 00116


                 ssh_poll_free

[function] [call site] 00117


               ssh_buffer_free

[function] [call site] 00118


               ssh_buffer_free

[function] [call site] 00119


               ssh_buffer_free

[function] [call site] 00120


               ssh_buffer_free

[function] [call site] 00121


               crypto_free

[function] [call site] 00122


                 ssh_key_free

[function] [call site] 00123


                   ssh_key_clean

[function] [call site] 00124


                     pki_key_clean

[function] [call site] 00125


                       EVP_PKEY_free

[call site] 00126


                     ssh_buffer_free

[function] [call site] 00127


                     ssh_string_burn

[function] [call site] 00128


                       ssh_string_len

[function] [call site] 00129


                         ntohl

[call site] 00130


                       explicit_bzero

[call site] 00131


                     ssh_string_free

[function] [call site] 00132


                     ssh_string_burn

[function] [call site] 00133


                     ssh_string_free

[function] [call site] 00134


                     ssh_string_burn

[function] [call site] 00135


                     ssh_string_free

[function] [call site] 00136


                     ssh_string_burn

[function] [call site] 00137


                     ssh_string_free

[function] [call site] 00138


                 ssh_dh_cleanup

[function] [call site] 00139


                   DH_free

[call site] 00140


                   DH_free

[call site] 00141


                 BN_clear_free

[call site] 00142


                 EC_KEY_free

[call site] 00143


                 EVP_PKEY_free

[call site] 00144


                 explicit_bzero

[call site] 00145


                 explicit_bzero

[call site] 00146


                 compress_cleanup

[function] [call site] 00147


                   deflateEnd

[call site] 00148


                   inflateEnd

[call site] 00149


                 explicit_bzero

[call site] 00150


                 explicit_bzero

[call site] 00151


                 cipher_free

[function] [call site] 00152


                   ssh_cipher_clear

[function] [call site] 00153


                 cipher_free

[function] [call site] 00154


                 explicit_bzero

[call site] 00155


                 ssh_string_burn

[function] [call site] 00156


                 ssh_string_free

[function] [call site] 00157


                 ssh_string_free

[function] [call site] 00158


                 ssh_string_free

[function] [call site] 00159


                 explicit_bzero

[call site] 00160


               crypto_free

[function] [call site] 00161


               ssh_agent_free

[function] [call site] 00162


                 ssh_buffer_free

[function] [call site] 00163


                 ssh_agent_close

[function] [call site] 00164


                   ssh_socket_close

[function] [call site] 00165


                 ssh_socket_free

[function] [call site] 00166


               ssh_pki_ctx_free

[function] [call site] 00167


               ssh_key_free

[function] [call site] 00168


               ssh_key_free

[function] [call site] 00169


               ssh_key_free

[function] [call site] 00170


               _ssh_list_pop_head

[function] [call site] 00171


               ssh_message_free

[function] [call site] 00172


                 strlen

[call site] 00173


                 explicit_bzero

[call site] 00174


                 ssh_key_free

[function] [call site] 00175


                 ssh_key_free

[function] [call site] 00176


               _ssh_list_pop_head

[function] [call site] 00177


               ssh_list_free

[function] [call site] 00178


               ssh_kbdint_free

[function] [call site] 00179


                 strlen

[call site] 00180


                 explicit_bzero

[call site] 00181


                 strlen

[call site] 00182


                 explicit_bzero

[call site] 00183


               ssh_list_free

[function] [call site] 00184


               _ssh_list_pop_head

[function] [call site] 00185


               _ssh_list_pop_head

[function] [call site] 00186


               ssh_list_free

[function] [call site] 00187


               _ssh_list_pop_head

[function] [call site] 00188


               _ssh_list_pop_head

[function] [call site] 00189


               ssh_list_free

[function] [call site] 00190


               _ssh_list_pop_head

[function] [call site] 00191


               _ssh_list_pop_head

[function] [call site] 00192


               ssh_list_free

[function] [call site] 00193


               _ssh_list_pop_head

[function] [call site] 00194


               _ssh_list_pop_head

[function] [call site] 00195


               ssh_list_free

[function] [call site] 00196


               ssh_proxyjumps_free

[function] [call site] 00197


                 _ssh_list_pop_head

[function] [call site] 00198


                 _ssh_list_pop_head

[function] [call site] 00199


               ssh_list_free

[function] [call site] 00200


               ssh_list_free

[function] [call site] 00201


               _ssh_list_pop_head

[function] [call site] 00202


               _ssh_list_pop_head

[function] [call site] 00203


               ssh_list_free

[function] [call site] 00204


               _ssh_list_pop_head

[function] [call site] 00205


               ssh_buffer_free

[function] [call site] 00206


               ssh_list_free

[function] [call site] 00207


               ssh_agent_state_free

[function] [call site] 00208


                 ssh_string_free_char

[function] [call site] 00209


                 ssh_key_free

[function] [call site] 00210


               _ssh_list_pop_head

[function] [call site] 00211


               _ssh_list_pop_head

[function] [call site] 00212


               ssh_list_free

[function] [call site] 00213


               _ssh_remove_legacy_log_cb

[function] [call site] 00214


                 ssh_get_log_callback

[function] [call site] 00215


                 _ssh_reset_log_cb

[function] [call site] 00216


                 ssh_set_log_userdata

[function] [call site] 00217


               explicit_bzero

[call site] 00218


           create_minimal_sftp_session

[function] [call site] 00219


             calloc

[function] [call site] 00220


           ssh_buffer_new

[function] [call site] 00221


           ssh_buffer_reinit

[function] [call site] 00222


             explicit_bzero

[call site] 00223


             realloc_buffer

[function] [call site] 00224


           ssh_buffer_add_data

[function] [call site] 00225


             buffer_shift

[function] [call site] 00226


             realloc_buffer

[function] [call site] 00227


           sftp_parse_attr

[function] [call site] 00228


             sftp_parse_attr_4

[function] [call site] 00229


               calloc

[function] [call site] 00230


               _ssh_set_error_oom

[function] [call site] 00231


               sftp_set_error

[function] [call site] 00232


               ssh_buffer_get_u32

[function] [call site] 00233


                 ssh_buffer_get_data

[function] [call site] 00234


                   ssh_buffer_validate_length

[function] [call site] 00235


               ntohl

[call site] 00236


               ssh_buffer_get_u64

[function] [call site] 00237


                 ssh_buffer_get_data

[function] [call site] 00238


               ntohl

[call site] 00239


               ssh_buffer_get_ssh_string

[function] [call site] 00240


                 ssh_buffer_get_u32

[function] [call site] 00241


                 ntohl

[call site] 00242


                 ssh_buffer_validate_length

[function] [call site] 00243


                 ssh_string_new

[function] [call site] 00244


                   __errno_location

[call site] 00245


                   calloc

[function] [call site] 00246


                   htonl

[call site] 00247


                 ssh_string_data

[function] [call site] 00248


                 ssh_buffer_get_data

[function] [call site] 00249


               ssh_string_to_char

[function] [call site] 00250


                 ssh_string_len

[function] [call site] 00251


               ssh_string_free

[function] [call site] 00252


               ssh_buffer_get_ssh_string

[function] [call site] 00253


               ssh_string_to_char

[function] [call site] 00254


               ssh_string_free

[function] [call site] 00255


               ssh_buffer_get_u32

[function] [call site] 00256


               ntohl

[call site] 00257


               ssh_buffer_get_u64

[function] [call site] 00258


               ntohl

[call site] 00259


               ssh_buffer_get_u32

[function] [call site] 00260


               ntohl

[call site] 00261


               ssh_buffer_get_u64

[function] [call site] 00262


               ntohl

[call site] 00263


               ssh_buffer_get_u32

[function] [call site] 00264


               ntohl

[call site] 00265


               ssh_buffer_get_u64

[function] [call site] 00266


               ntohl

[call site] 00267


               ssh_buffer_get_u32

[function] [call site] 00268


               ntohl

[call site] 00269


               ssh_buffer_get_ssh_string

[function] [call site] 00270


               ssh_buffer_get_u32

[function] [call site] 00271


               ntohl

[call site] 00272


               ssh_buffer_get_ssh_string

[function] [call site] 00273


               ssh_buffer_get_ssh_string

[function] [call site] 00274


               ssh_string_free

[function] [call site] 00275


               ssh_string_free

[function] [call site] 00276


               ssh_string_free

[function] [call site] 00277


               ssh_string_free

[function] [call site] 00278


               ssh_string_free

[function] [call site] 00279


               _ssh_set_error

[function] [call site] 00280


                 vsnprintf

[call site] 00281


                 ssh_get_log_level

[function] [call site] 00282


                 ssh_log_function

[function] [call site] 00283


             sftp_parse_attr_3

[function] [call site] 00284


               calloc

[function] [call site] 00285


               _ssh_set_error_oom

[function] [call site] 00286


               sftp_set_error

[function] [call site] 00287


               _ssh_buffer_unpack

[function] [call site] 00288


                 ssh_buffer_unpack_va

[function] [call site] 00289


                   ssh_buffer_get_len

[function] [call site] 00290


                   ssh_buffer_get_u8

[function] [call site] 00291


                     ssh_buffer_get_data

[function] [call site] 00292


                   ssh_buffer_get_data

[function] [call site] 00293


                   ntohs

[call site] 00294


                   ssh_buffer_get_u32

[function] [call site] 00295


                   ntohl

[call site] 00296


                   ssh_buffer_get_u64

[function] [call site] 00297


                   ntohl

[call site] 00298


                   ssh_buffer_get_ssh_string

[function] [call site] 00299


                   ssh_make_string_bn

[function] [call site] 00300


                     ssh_string_len

[function] [call site] 00301


                     BN_new

[call site] 00302


                     BN_bin2bn

[call site] 00303


                   ssh_string_burn

[function] [call site] 00304


                   ssh_string_free

[function] [call site] 00305


                   ssh_buffer_get_ssh_string

[function] [call site] 00306


                   ssh_buffer_get_u32

[function] [call site] 00307


                   ntohl

[call site] 00308


                   ssh_buffer_validate_length

[function] [call site] 00309


                   ssh_buffer_get_data

[function] [call site] 00310


                   ssh_buffer_validate_length

[function] [call site] 00311


                   ssh_buffer_get_data

[function] [call site] 00312


                   _ssh_log

[function] [call site] 00313


                   abort

[call site] 00314


                   explicit_bzero

[call site] 00315


                   explicit_bzero

[call site] 00316


                   explicit_bzero

[call site] 00317


                   explicit_bzero

[call site] 00318


                   BN_clear_free

[call site] 00319


                   ssh_string_burn

[function] [call site] 00320


                   strlen

[call site] 00321


                   explicit_bzero

[call site] 00322


                   explicit_bzero

[call site] 00323


               _ssh_log

[function] [call site] 00324


               ssh_get_openssh_version

[function] [call site] 00325


               sftp_parse_longname

[function] [call site] 00326


                 __ctype_b_loc

[call site] 00327


                 __ctype_b_loc

[call site] 00328


                 __ctype_b_loc

[call site] 00329


                 strndup

[call site] 00330


               sftp_parse_longname

[function] [call site] 00331


               _ssh_buffer_unpack

[function] [call site] 00332


               _ssh_log

[function] [call site] 00333


               _ssh_buffer_unpack

[function] [call site] 00334


               _ssh_log

[function] [call site] 00335


               _ssh_buffer_unpack

[function] [call site] 00336


               _ssh_buffer_unpack

[function] [call site] 00337


               _ssh_buffer_unpack

[function] [call site] 00338


               _ssh_buffer_unpack

[function] [call site] 00339


               _ssh_buffer_unpack

[function] [call site] 00340


               _ssh_buffer_unpack

[function] [call site] 00341


               ssh_string_free

[function] [call site] 00342


               ssh_string_free

[function] [call site] 00343


               _ssh_set_error

[function] [call site] 00344


               sftp_set_error

[function] [call site] 00345


             _ssh_set_error

[function] [call site] 00346


           sftp_attributes_free

[function] [call site] 00347


             ssh_string_free

[function] [call site] 00348


             ssh_string_free

[function] [call site] 00349


             ssh_string_free

[function] [call site] 00350


           ssh_buffer_free

[function] [call site] 00351


           ssh_free

[function] [call site] 00352


           nalloc_end

[function] [call site] 00353