Fuzz introspector: libtasn1_parser2tree_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
3 3 1 :

['safe_memset']

3 3 _asn1_remove_node call site: 00293 /src/libtasn1/lib/parser_aux.c:503
2 2 1 :

['strcpy']

2 2 _asn1_check_identifier call site: 00231 /src/libtasn1/lib/parser_aux.c:1032
0 0 None 28 1016 _asn1_yyparse call site: 00198 /src/libtasn1/lib/ASN1.c:1533
0 0 None 28 1016 _asn1_yyparse call site: 00198 /src/libtasn1/lib/ASN1.c:1541
0 0 None 28 1016 _asn1_yyparse call site: 00198 /src/libtasn1/lib/ASN1.c:1618
0 0 None 28 1016 _asn1_yyparse call site: 00199 /src/libtasn1/lib/ASN1.c:2601
0 0 None 28 1016 _asn1_yyparse call site: 00207 /src/libtasn1/lib/ASN1.c:2630
0 0 None 4 299 _asn1_expand_object_id call site: 00283 /src/libtasn1/lib/parser_aux.c:769
0 0 None 4 299 _asn1_expand_object_id call site: 00307 /src/libtasn1/lib/parser_aux.c:833
0 0 None 2 104 _asn1_expand_object_id call site: 00320 /src/libtasn1/lib/parser_aux.c:908
0 0 None 0 40 _asn1_change_integer_value call site: 00269 /src/libtasn1/lib/parser_aux.c:691
0 0 None 0 39 _asn1_delete_structure call site: 00286 /src/libtasn1/lib/structure.c:339

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 asn1_parser2tree [function] [call site] 00001
2 fopen [function] [call site] 00002
3 dlsym [call site] 00003
3 strcmp [call site] 00004
3 fmemopen [call site] 00005
2 _asn1_yyparse [function] [call site] 00006
3 _asn1_yylex [function] [call site] 00007
4 fgetc [call site] 00008
4 snprintf [call site] 00009
4 fgetc [call site] 00010
4 ungetc [call site] 00011
4 fgetc [call site] 00012
4 snprintf [call site] 00013
4 fgetc [call site] 00014
4 ungetc [call site] 00015
4 snprintf [call site] 00016
4 c_isdigit [function] [call site] 00017
4 snprintf [call site] 00018
4 strcmp [call site] 00019
4 snprintf [call site] 00020
3 _asn1_add_static_node [function] [call site] 00021
4 calloc [call site] 00022
3 _asn1_get_name [function] [call site] 00023
3 _asn1_set_name [function] [call site] 00024
4 _asn1_str_cpy [function] [call site] 00025
5 strlen [call site] 00026
5 strcpy [call site] 00027
4 _asn1_hash_name [function] [call site] 00028
3 _asn1_set_name [function] [call site] 00029
3 _asn1_set_right [function] [call site] 00030
3 _asn1_set_down [function] [call site] 00031
3 snprintf [call site] 00032
3 snprintf [call site] 00033
3 snprintf [call site] 00034
3 snprintf [call site] 00035
3 snprintf [call site] 00036
3 snprintf [call site] 00037
3 snprintf [call site] 00038
3 snprintf [call site] 00039
3 snprintf [call site] 00040
3 snprintf [call site] 00041
3 snprintf [call site] 00042
3 snprintf [call site] 00043
3 _asn1_add_static_node [function] [call site] 00044
3 strlen [call site] 00045
3 _asn1_set_value [function] [call site] 00046
3 _asn1_add_static_node [function] [call site] 00047
3 _asn1_set_name [function] [call site] 00048
3 strlen [call site] 00049
3 _asn1_set_value [function] [call site] 00050
3 _asn1_get_last_right [function] [call site] 00051
3 _asn1_add_static_node [function] [call site] 00052
3 strlen [call site] 00053
3 _asn1_set_value [function] [call site] 00054
3 _asn1_add_static_node [function] [call site] 00055
3 _asn1_set_name [function] [call site] 00056
3 strlen [call site] 00057
3 _asn1_set_value [function] [call site] 00058
3 _asn1_get_last_right [function] [call site] 00059
3 _asn1_add_static_node [function] [call site] 00060
3 strlen [call site] 00061
3 _asn1_set_value [function] [call site] 00062
3 _asn1_add_static_node [function] [call site] 00063
3 strlen [call site] 00064
3 _asn1_set_value [function] [call site] 00065
3 _asn1_mod_type [function] [call site] 00066
3 _asn1_mod_type [function] [call site] 00067
3 _asn1_add_static_node [function] [call site] 00068
3 strlen [call site] 00069
3 _asn1_set_value [function] [call site] 00070
3 _asn1_add_static_node [function] [call site] 00071
3 _asn1_add_static_node [function] [call site] 00072
3 _asn1_add_static_node [function] [call site] 00073
3 _asn1_add_static_node [function] [call site] 00074
3 _asn1_set_down [function] [call site] 00075
3 _asn1_add_static_node [function] [call site] 00076
3 _asn1_add_static_node [function] [call site] 00077
3 _asn1_add_static_node [function] [call site] 00078
3 _asn1_add_static_node [function] [call site] 00079
3 strlen [call site] 00080
3 _asn1_set_value [function] [call site] 00081
3 _asn1_add_static_node [function] [call site] 00082
3 strlen [call site] 00083
3 _asn1_set_value [function] [call site] 00084
3 _asn1_set_name [function] [call site] 00085
3 _asn1_add_static_node [function] [call site] 00086
3 _asn1_add_static_node [function] [call site] 00087
3 _asn1_set_down [function] [call site] 00088
3 _asn1_add_static_node [function] [call site] 00089
3 _asn1_add_static_node [function] [call site] 00090
3 _asn1_set_down [function] [call site] 00091
3 _asn1_add_static_node [function] [call site] 00092
3 _asn1_add_static_node [function] [call site] 00093
3 _asn1_set_down [function] [call site] 00094
3 _asn1_add_static_node [function] [call site] 00095
3 _asn1_add_static_node [function] [call site] 00096
3 _asn1_set_down [function] [call site] 00097
3 _asn1_add_static_node [function] [call site] 00098
3 _asn1_add_static_node [function] [call site] 00099
3 _asn1_set_down [function] [call site] 00100
3 _asn1_add_static_node [function] [call site] 00101
3 _asn1_add_static_node [function] [call site] 00102
3 _asn1_set_down [function] [call site] 00103
3 _asn1_add_static_node [function] [call site] 00104
3 _asn1_add_static_node [function] [call site] 00105
3 _asn1_set_down [function] [call site] 00106
3 _asn1_add_static_node [function] [call site] 00107
3 _asn1_add_static_node [function] [call site] 00108
3 _asn1_set_down [function] [call site] 00109
3 _asn1_add_static_node [function] [call site] 00110
3 _asn1_add_static_node [function] [call site] 00111
3 _asn1_set_down [function] [call site] 00112
3 _asn1_add_static_node [function] [call site] 00113
3 _asn1_add_static_node [function] [call site] 00114
3 _asn1_set_down [function] [call site] 00115
3 _asn1_add_static_node [function] [call site] 00116
3 _asn1_set_name [function] [call site] 00117
3 strlen [call site] 00118
3 _asn1_set_value [function] [call site] 00119
3 _asn1_get_last_right [function] [call site] 00120
3 _asn1_add_static_node [function] [call site] 00121
3 _asn1_add_static_node [function] [call site] 00122
3 _asn1_set_down [function] [call site] 00123
3 _asn1_add_static_node [function] [call site] 00124
3 _asn1_set_down [function] [call site] 00125
3 _asn1_add_static_node [function] [call site] 00126
3 _asn1_set_down [function] [call site] 00127
3 _asn1_add_static_node [function] [call site] 00128
3 _asn1_add_static_node [function] [call site] 00129
3 strlen [call site] 00130
3 _asn1_set_value [function] [call site] 00131
3 _asn1_add_static_node [function] [call site] 00132
3 strlen [call site] 00133
3 _asn1_set_value [function] [call site] 00134
3 _asn1_set_down [function] [call site] 00135
3 _asn1_add_static_node [function] [call site] 00136
3 _asn1_mod_type [function] [call site] 00137
3 _asn1_get_down [function] [call site] 00138
3 _asn1_set_right [function] [call site] 00139
3 _asn1_set_down [function] [call site] 00140
3 _asn1_mod_type [function] [call site] 00141
3 _asn1_get_down [function] [call site] 00142
3 _asn1_set_right [function] [call site] 00143
3 _asn1_set_down [function] [call site] 00144
3 _asn1_mod_type [function] [call site] 00145
3 _asn1_set_name [function] [call site] 00146
3 _asn1_get_last_right [function] [call site] 00147
3 _asn1_add_static_node [function] [call site] 00148
3 _asn1_set_down [function] [call site] 00149
3 _asn1_add_static_node [function] [call site] 00150
3 _asn1_set_down [function] [call site] 00151
3 _asn1_add_static_node [function] [call site] 00152
3 _asn1_set_right [function] [call site] 00153
3 _asn1_set_down [function] [call site] 00154
3 _asn1_add_static_node [function] [call site] 00155
3 _asn1_set_down [function] [call site] 00156
3 _asn1_add_static_node [function] [call site] 00157
3 _asn1_set_down [function] [call site] 00158
3 _asn1_add_static_node [function] [call site] 00159
3 _asn1_set_right [function] [call site] 00160
3 _asn1_set_down [function] [call site] 00161
3 _asn1_add_static_node [function] [call site] 00162
3 _asn1_set_down [function] [call site] 00163
3 _asn1_add_static_node [function] [call site] 00164
3 _asn1_add_static_node [function] [call site] 00165
3 _asn1_add_static_node [function] [call site] 00166
3 _asn1_set_down [function] [call site] 00167
3 _asn1_get_down [function] [call site] 00168
3 _asn1_set_name [function] [call site] 00169
3 snprintf [call site] 00170
3 snprintf [call site] 00171
3 snprintf [call site] 00172
3 snprintf [call site] 00173
3 snprintf [call site] 00174
3 snprintf [call site] 00175
3 snprintf [call site] 00176
3 snprintf [call site] 00177
3 _asn1_set_name [function] [call site] 00178
3 _asn1_add_static_node [function] [call site] 00179
3 _asn1_set_name [function] [call site] 00180
3 _asn1_set_down [function] [call site] 00181
3 _asn1_add_static_node [function] [call site] 00182
3 _asn1_set_name [function] [call site] 00183
3 strlen [call site] 00184
3 _asn1_set_value [function] [call site] 00185
3 _asn1_set_down [function] [call site] 00186
3 _asn1_add_static_node [function] [call site] 00187
3 _asn1_set_name [function] [call site] 00188
3 strlen [call site] 00189
3 _asn1_set_value [function] [call site] 00190
3 _asn1_get_last_right [function] [call site] 00191
3 _asn1_add_static_node [function] [call site] 00192
3 _asn1_set_down [function] [call site] 00193
3 _asn1_set_name [function] [call site] 00194
3 _asn1_add_static_node [function] [call site] 00195
3 _asn1_set_name [function] [call site] 00196
3 _asn1_add_static_node [function] [call site] 00197
3 _asn1_set_name [function] [call site] 00198
3 yysyntax_error [function] [call site] 00199
4 yytnamerr [function] [call site] 00200
5 stpcpy [call site] 00201
5 strlen [call site] 00202
4 yytnamerr [function] [call site] 00203
4 strlen [call site] 00204
4 yytnamerr [function] [call site] 00205
3 yysyntax_error [function] [call site] 00206
3 _asn1_yyerror [function] [call site] 00207
4 snprintf [call site] 00208
3 yydestruct [function] [call site] 00209
3 yydestruct [function] [call site] 00210
3 _asn1_yyerror [function] [call site] 00211
3 yydestruct [function] [call site] 00212
3 yydestruct [function] [call site] 00213
2 fclose [call site] 00214
2 _asn1_set_default_tag [function] [call site] 00215
3 type_field [function] [call site] 00216
3 type_field [function] [call site] 00217
3 _asn1_find_up [function] [call site] 00218
2 _asn1_type_set_config [function] [call site] 00219
3 type_field [function] [call site] 00220
3 type_field [function] [call site] 00221
3 _asn1_find_up [function] [call site] 00222
2 _asn1_check_identifier [function] [call site] 00223
3 type_field [function] [call site] 00224
3 _asn1_str_cpy [function] [call site] 00225
3 _asn1_str_cat [function] [call site] 00226
4 strlen [call site] 00227
4 strlen [call site] 00228
4 strcat [call site] 00229
3 _asn1_str_cat [function] [call site] 00230
3 asn1_find_node [function] [call site] 00231
4 strchr [call site] 00232
4 strchr [call site] 00233
4 _asn1_hash_name [function] [call site] 00234
4 _asn1_str_cpy [function] [call site] 00235
4 _asn1_hash_name [function] [call site] 00236
4 strcmp [call site] 00237
4 strchr [call site] 00238
4 _asn1_hash_name [function] [call site] 00239
4 _asn1_str_cpy [function] [call site] 00240
4 strcmp [call site] 00241
3 _asn1_str_cpy [function] [call site] 00242
3 strcpy [call site] 00243
3 type_field [function] [call site] 00244
3 type_field [function] [call site] 00245
3 _asn1_str_cpy [function] [call site] 00246
3 _asn1_str_cat [function] [call site] 00247
3 _asn1_str_cat [function] [call site] 00248
3 _asn1_str_cpy [function] [call site] 00249
3 strcpy [call site] 00250
3 asn1_find_node [function] [call site] 00251
3 type_field [function] [call site] 00252
3 type_field [function] [call site] 00253
3 type_field [function] [call site] 00254
3 c_isdigit [function] [call site] 00255
3 _asn1_str_cpy [function] [call site] 00256
3 _asn1_str_cat [function] [call site] 00257
3 _asn1_str_cat [function] [call site] 00258
3 _asn1_str_cpy [function] [call site] 00259
3 asn1_find_node [function] [call site] 00260
3 type_field [function] [call site] 00261
3 _asn1_find_up [function] [call site] 00262
2 _asn1_change_integer_value [function] [call site] 00263
3 type_field [function] [call site] 00264
3 _asn1_convert_integer [function] [call site] 00265
4 strtol [call site] 00266
3 asn1_octet_der [function] [call site] 00267
4 asn1_length_der [function] [call site] 00268
3 _asn1_set_value [function] [call site] 00269
3 _asn1_find_up [function] [call site] 00270
2 _asn1_expand_object_id [function] [call site] 00271
3 _asn1_str_cpy [function] [call site] 00272
3 type_field [function] [call site] 00273
3 type_field [function] [call site] 00274
3 c_isdigit [function] [call site] 00275
3 _asn1_str_cpy [function] [call site] 00276
3 _asn1_str_cat [function] [call site] 00277
3 _asn1_str_cat [function] [call site] 00278
3 asn1_find_node [function] [call site] 00279
3 _asn1_is_up [function] [call site] 00280
4 _asn1_find_up [function] [call site] 00281
3 type_field [function] [call site] 00282
3 _asn1_set_down [function] [call site] 00283
3 _asn1_delete_structure [function] [call site] 00284
4 _asn1_find_up [function] [call site] 00285
4 _asn1_set_down [function] [call site] 00286
4 _asn1_delete_node_from_list [function] [call site] 00287
4 _asn1_find_left [function] [call site] 00288
4 _asn1_find_up [function] [call site] 00289
4 _asn1_set_down [function] [call site] 00290
4 _asn1_set_right [function] [call site] 00291
4 _asn1_delete_node_from_list [function] [call site] 00292
4 _asn1_remove_node [function] [call site] 00293
5 safe_memset [function] [call site] 00294
3 _asn1_delete_node_from_list [function] [call site] 00295
3 _asn1_remove_node [function] [call site] 00296
3 type_field [function] [call site] 00297
3 _asn1_add_single_node [function] [call site] 00298
4 calloc [call site] 00299
3 _asn1_set_name [function] [call site] 00300
3 strlen [call site] 00301
3 _asn1_set_value [function] [call site] 00302
3 _asn1_add_static_node2 [function] [call site] 00303
3 _asn1_set_right [function] [call site] 00304
3 _asn1_set_down [function] [call site] 00305
3 _asn1_set_right [function] [call site] 00306
3 _asn1_set_right [function] [call site] 00307
3 _asn1_find_up [function] [call site] 00308
3 type_field [function] [call site] 00309
3 type_field [function] [call site] 00310
3 _asn1_str_cpy [function] [call site] 00311
3 _asn1_str_cat [function] [call site] 00312
3 _asn1_str_cat [function] [call site] 00313
3 asn1_find_node [function] [call site] 00314
3 type_field [function] [call site] 00315
3 type_field [function] [call site] 00316
3 _asn1_str_cat [function] [call site] 00317
3 _asn1_str_cat [function] [call site] 00318
3 strlen [call site] 00319
3 _asn1_set_value [function] [call site] 00320
3 _asn1_find_up [function] [call site] 00321
2 _asn1_delete_list [function] [call site] 00322
2 _asn1_delete_list_and_nodes [function] [call site] 00323
3 _asn1_remove_node [function] [call site] 00324
2 _asn1_create_errorDescription [function] [call site] 00325
3 snprintf [call site] 00326
3 snprintf [call site] 00327
3 snprintf [call site] 00328
3 snprintf [call site] 00329
1 asn1_delete_structure [function] [call site] 00330
2 _asn1_delete_structure [function] [call site] 00331