Fuzz introspector: fuzz_libunwind
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
33 301 _ULx86_64_access_reg call site: 00301 eval_location_expr
24 348 _ULx86_64_step call site: 00348 _unw_step_fallback
14 261 run_cfi_program call site: 00261 read_regnum
12 335 apply_reg_state call site: 00335 _ULx86_64_stash_frame
11 16 unw_init_page_size call site: 00016 __errno_location
9 233 run_cfi_program call site: 00233 push_rstate_stack
7 224 read_regnum call site: 00224 _ULx86_64_dwarf_read_encoded_pointer
6 86 get_rs_cache call site: 00086 syscall
6 163 _UIx86_64__mempool_alloc call site: 00163 pthread_mutex_unlock
5 32 expand call site: 00032 _UIx86_64__sos_alloc
5 173 _ULx86_64_dwarf_find_proc_info call site: 00173 dwarf_find_eh_frame_section
5 195 _ULx86_64_dwarf_callback call site: 00195 linear_search

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 dispatch [function] [call site] 00001
2 recurse1 [function] [call site] 00002
3 get_proc_name [function] [call site] 00003
4 _Ux86_64_getcontext [call site] 00004
4 _ULx86_64_init_local [function] [call site] 00005
5 unw_init_local_common [function] [call site] 00006
6 _ULx86_64_init [function] [call site] 00007
7 sigfillset [call site] 00008
7 pthread_sigmask [call site] 00009
7 sigprocmask [call site] 00010
7 pthread_mutex_lock [call site] 00011
7 sigfillset [call site] 00012
7 _UIx86_64_mi_init [function] [call site] 00013
8 unw_init_page_size [function] [call site] 00014
9 __errno_location [call site] 00015
9 sysconf [call site] 00016
9 __errno_location [call site] 00017
9 strlen [call site] 00018
9 write [call site] 00019
9 __errno_location [call site] 00020
9 strerror [call site] 00021
9 strlen [call site] 00022
9 write [call site] 00023
9 strlen [call site] 00024
9 write [call site] 00025
9 strlen [call site] 00026
9 write [call site] 00027
7 _Ux86_64_dwarf_init [function] [call site] 00028
8 _UIx86_64__mempool_init [function] [call site] 00029
9 pthread_mutex_init [call site] 00030
9 expand [function] [call site] 00031
10 syscall [call site] 00032
10 syscall [call site] 00033
10 _UIx86_64__sos_alloc [function] [call site] 00034
11 __assert_fail [call site] 00035
11 __assert_fail [call site] 00036
11 __assert_fail [call site] 00037
10 add_memory [function] [call site] 00038
11 free_object [function] [call site] 00039
8 _UIx86_64__mempool_init [function] [call site] 00040
7 _ULx86_64_local_addr_space_init [function] [call site] 00041
8 _Ux86_64_flush_cache [function] [call site] 00042
9 syscall [call site] 00043
9 syscall [call site] 00044
9 syscall [call site] 00045
7 pthread_mutex_unlock [call site] 00046
7 pthread_sigmask [call site] 00047
7 sigprocmask [call site] 00048
6 dwarf_build_as_arg [function] [call site] 00049
7 __assert_fail [call site] 00050
6 common_init [function] [call site] 00051
7 dwarf_get_uc [function] [call site] 00052
8 __assert_fail [call site] 00053
7 dwarf_get_uc [function] [call site] 00054
7 dwarf_get_uc [function] [call site] 00055
7 dwarf_get_uc [function] [call site] 00056
7 dwarf_get_uc [function] [call site] 00057
7 dwarf_get_uc [function] [call site] 00058
7 dwarf_get_uc [function] [call site] 00059
7 dwarf_get_uc [function] [call site] 00060
7 dwarf_get_uc [function] [call site] 00061
7 dwarf_get_uc [function] [call site] 00062
7 dwarf_get_uc [function] [call site] 00063
7 dwarf_get_uc [function] [call site] 00064
7 dwarf_get_uc [function] [call site] 00065
7 dwarf_get_uc [function] [call site] 00066
7 dwarf_get_uc [function] [call site] 00067
7 dwarf_get_uc [function] [call site] 00068
7 dwarf_get_uc [function] [call site] 00069
7 dwarf_get [function] [call site] 00070
8 __assert_fail [call site] 00071
7 dwarf_get_uc [function] [call site] 00072
7 _ULx86_64_r_uc_addr [function] [call site] 00073
7 dwarf_get [function] [call site] 00074
4 _ULx86_64_step [function] [call site] 00075
5 dwarf_get_validate [function] [call site] 00076
6 __assert_fail [call site] 00077
5 dwarf_set_validate [function] [call site] 00078
6 __assert_fail [call site] 00079
5 _ULx86_64_dwarf_step [function] [call site] 00080
6 find_reg_state [function] [call site] 00081
7 get_rs_cache [function] [call site] 00082
8 pthread_sigmask [call site] 00083
8 sigprocmask [call site] 00084
8 pthread_mutex_lock [call site] 00085
8 _ULx86_64_dwarf_flush_rs_cache [function] [call site] 00086
9 syscall [call site] 00087
9 syscall [call site] 00088
9 syscall [call site] 00089
9 syscall [call site] 00090
9 syscall [call site] 00091
9 syscall [call site] 00092
7 put_rs_cache [function] [call site] 00097
8 __assert_fail [call site] 00098
8 pthread_mutex_unlock [call site] 00099
8 pthread_sigmask [call site] 00100
8 sigprocmask [call site] 00101
7 __assert_fail [call site] 00102
7 fetch_proc_info [function] [call site] 00103
8 _ULx86_64_Ifind_dynamic_proc_info [function] [call site] 00104
9 local_find_proc_info [function] [call site] 00105
10 _U_dyn_info_list_addr [function] [call site] 00106
10 _ULx86_64_Iextract_dynamic_proc_info [function] [call site] 00107
11 _ULx86_64_dwarf_search_unwind_table [function] [call site] 00108
12 is_remote_table [function] [call site] 00109
12 __assert_fail [call site] 00110
12 __assert_fail [call site] 00111
12 is_remote_table [function] [call site] 00112
12 __assert_fail [call site] 00113
12 _Ux86_64_get_accessors [function] [call site] 00114
13 _ULx86_64_init [function] [call site] 00115
12 lookup64 [function] [call site] 00116
12 _ULx86_64_dwarf_extract_proc_info_from_fde [function] [call site] 00118
13 dwarf_readu32 [function] [call site] 00119
13 dwarf_reads32 [function] [call site] 00120
13 is_cie_id [function] [call site] 00121
13 dwarf_readu64 [function] [call site] 00122
13 dwarf_reads64 [function] [call site] 00123
13 is_cie_id [function] [call site] 00124
13 parse_cie [function] [call site] 00125
14 dwarf_readu32 [function] [call site] 00126
14 dwarf_readu32 [function] [call site] 00127
14 dwarf_readu64 [function] [call site] 00128
14 dwarf_readu64 [function] [call site] 00129
14 dwarf_readu8 [function] [call site] 00130
14 dwarf_readu8 [function] [call site] 00131
14 dwarf_readu8 [function] [call site] 00132
14 dwarf_readu8 [function] [call site] 00133
14 dwarf_read_uleb128 [function] [call site] 00134
15 dwarf_readu8 [function] [call site] 00135
14 dwarf_read_sleb128 [function] [call site] 00136
15 dwarf_readu8 [function] [call site] 00137
14 dwarf_readu8 [function] [call site] 00138
14 dwarf_read_uleb128 [function] [call site] 00139
14 dwarf_read_uleb128 [function] [call site] 00140
14 dwarf_readu8 [function] [call site] 00141
14 dwarf_readu8 [function] [call site] 00142
14 dwarf_readu8 [function] [call site] 00143
14 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00144
15 dwarf_readw [function] [call site] 00145
16 dwarf_readu64 [function] [call site] 00146
15 dwarf_read_uleb128 [function] [call site] 00147
15 dwarf_readu16 [function] [call site] 00148
15 dwarf_readu32 [function] [call site] 00149
15 dwarf_readu64 [function] [call site] 00150
15 dwarf_reads16 [function] [call site] 00151
15 dwarf_reads32 [function] [call site] 00152
15 dwarf_reads64 [function] [call site] 00153
13 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00154
13 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00155
13 dwarf_read_uleb128 [function] [call site] 00156
13 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00157
13 _UIx86_64__mempool_alloc [function] [call site] 00158
14 pthread_sigmask [call site] 00159
14 sigprocmask [call site] 00160
14 pthread_mutex_lock [call site] 00161
14 __assert_fail [call site] 00163
14 pthread_mutex_unlock [call site] 00164
14 pthread_sigmask [call site] 00165
14 sigprocmask [call site] 00166
13 dwarf_readu16 [function] [call site] 00167
13 dwarf_readu16 [function] [call site] 00168
9 remote_find_proc_info [function] [call site] 00169
8 _ULx86_64_dwarf_find_proc_info [function] [call site] 00170
9 pthread_sigmask [call site] 00171
9 sigprocmask [call site] 00172
9 _ULx86_64_dwarf_callback [function] [call site] 00173
10 dwarf_find_eh_frame_section [function] [call site] 00174
11 strlen [call site] 00175
11 _Ux86_64_get_exe_image_path [function] [call site] 00176
12 strcpy [call site] 00177
11 elf_map_image [function] [call site] 00178
12 open [call site] 00179
12 fstat [call site] 00180
12 close [call site] 00181
12 syscall [call site] 00182
12 close [call site] 00183
12 _Uelf64_valid_object [function] [call site] 00184
13 memcmp [call site] 00185
12 syscall [call site] 00186
11 _Uelf64_find_section [function] [call site] 00187
12 _Uelf64_valid_object [function] [call site] 00188
12 _Uelf64_section_table [function] [call site] 00189
12 _Uelf64_string_table [function] [call site] 00190
12 strcmp [call site] 00191
11 syscall [call site] 00192
10 _Ux86_64_get_accessors [function] [call site] 00193
10 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00194
10 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00195
10 abort [call site] 00196
10 linear_search [function] [call site] 00197
11 _Ux86_64_get_accessors [function] [call site] 00198
11 _ULx86_64_dwarf_extract_proc_info_from_fde [function] [call site] 00199
11 _ULx86_64_dwarf_extract_proc_info_from_fde [function] [call site] 00200
10 __assert_fail [call site] 00201
9 pthread_sigmask [call site] 00202
9 sigprocmask [call site] 00203
9 _ULx86_64_dwarf_search_unwind_table [function] [call site] 00204
9 _ULx86_64_dwarf_search_unwind_table [function] [call site] 00205
8 _ULx86_64_fetch_frame [function] [call site] 00206
9 __assert_fail [call site] 00207
9 __assert_fail [call site] 00208
7 __assert_fail [call site] 00209
7 create_state_record_for [function] [call site] 00210
8 setup_fde [function] [call site] 00211
9 __assert_fail [call site] 00212
9 run_cfi_program [function] [call site] 00215
10 _Ux86_64_get_accessors [function] [call site] 00216
10 dwarf_readu8 [function] [call site] 00217
10 dwarf_readu8 [function] [call site] 00218
10 dwarf_readu16 [function] [call site] 00219
10 dwarf_readu32 [function] [call site] 00220
10 dwarf_read_uleb128 [function] [call site] 00221
10 read_regnum [function] [call site] 00223
11 dwarf_read_uleb128 [function] [call site] 00224
10 dwarf_read_uleb128 [function] [call site] 00225
10 read_regnum [function] [call site] 00227
10 dwarf_read_sleb128 [function] [call site] 00228
10 dwarf_read_uleb128 [function] [call site] 00230
10 _ULx86_64_dwarf_read_encoded_pointer [function] [call site] 00231
10 read_regnum [function] [call site] 00232
10 read_regnum [function] [call site] 00234
10 read_regnum [function] [call site] 00236
10 dwarf_read_uleb128 [function] [call site] 00237
10 push_rstate_stack [function] [call site] 00239
11 _UIx86_64__mempool_alloc [function] [call site] 00240
10 pop_rstate_stack [function] [call site] 00241
11 _UIx86_64__mempool_free [function] [call site] 00242
12 pthread_sigmask [call site] 00243
12 sigprocmask [call site] 00244
12 pthread_mutex_lock [call site] 00245
12 free_object [function] [call site] 00246
12 pthread_mutex_unlock [call site] 00247
12 pthread_sigmask [call site] 00248
12 sigprocmask [call site] 00249
10 read_regnum [function] [call site] 00250
10 dwarf_read_uleb128 [function] [call site] 00251
10 read_regnum [function] [call site] 00254
10 dwarf_read_sleb128 [function] [call site] 00255
10 read_regnum [function] [call site] 00258
10 dwarf_read_uleb128 [function] [call site] 00260
10 dwarf_read_sleb128 [function] [call site] 00262
10 dwarf_read_uleb128 [function] [call site] 00265
10 read_regnum [function] [call site] 00266
10 dwarf_read_uleb128 [function] [call site] 00268
10 read_regnum [function] [call site] 00269
10 dwarf_read_uleb128 [function] [call site] 00271
10 dwarf_read_uleb128 [function] [call site] 00272
10 read_regnum [function] [call site] 00273
10 dwarf_read_uleb128 [function] [call site] 00274
9 empty_rstate_stack [function] [call site] 00276
10 pop_rstate_stack [function] [call site] 00277
8 parse_fde [function] [call site] 00278
9 run_cfi_program [function] [call site] 00279
9 empty_rstate_stack [function] [call site] 00280
8 parse_dynamic [function] [call site] 00281
7 put_unwind_info [function] [call site] 00282
8 _ULx86_64_Iput_dynamic_unwind_info [function] [call site] 00283
9 _ULx86_64_dwarf_put_unwind_info [function] [call site] 00284
8 _UIx86_64__mempool_free [function] [call site] 00285
7 get_rs_cache [function] [call site] 00286
7 rs_lookup [function] [call site] 00287
7 __assert_fail [call site] 00292
7 _ULx86_64_reuse_frame [function] [call site] 00293
7 put_rs_cache [function] [call site] 00294
6 apply_reg_state [function] [call site] 00295
7 _Ux86_64_get_accessors [function] [call site] 00296
7 _ULx86_64_get_reg [function] [call site] 00297
8 _ULx86_64_access_reg [function] [call site] 00298
9 dwarf_put [function] [call site] 00299
10 __assert_fail [call site] 00300
9 dwarf_get [function] [call site] 00301
7 __assert_fail [call site] 00302
7 eval_location_expr [function] [call site] 00303
8 dwarf_read_uleb128 [function] [call site] 00304
8 _ULx86_64_dwarf_eval_expr [function] [call site] 00305
9 _Ux86_64_get_accessors [function] [call site] 00306
9 dwarf_readu8 [function] [call site] 00307
9 read_operand [function] [call site] 00308
10 dwarf_readu8 [function] [call site] 00309
10 dwarf_readu16 [function] [call site] 00310
10 dwarf_readu32 [function] [call site] 00311
10 dwarf_readu64 [function] [call site] 00312
10 dwarf_read_uleb128 [function] [call site] 00313
10 dwarf_read_sleb128 [function] [call site] 00314
9 read_operand [function] [call site] 00315
9 _ULx86_64_get_reg [function] [call site] 00316
9 _ULx86_64_get_reg [function] [call site] 00317
9 dwarf_readw [function] [call site] 00318
9 dwarf_readu8 [function] [call site] 00319
9 dwarf_readu16 [function] [call site] 00320
9 dwarf_readu32 [function] [call site] 00321
9 dwarf_readu64 [function] [call site] 00322
8 dwarf_get_uc [function] [call site] 00331
8 _ULx86_64_r_uc_addr [function] [call site] 00332
7 eval_location_expr [function] [call site] 00333
7 eval_location_expr [function] [call site] 00334
7 dwarf_get [function] [call site] 00335
7 _ULx86_64_stash_frame [function] [call site] 00336
8 _ULx86_64_dwarf_stack_aligned [function] [call site] 00337
9 _Ux86_64_get_accessors [function] [call site] 00338
9 dwarf_read_uleb128 [function] [call site] 00339
9 dwarf_readu8 [function] [call site] 00340
9 read_operand [function] [call site] 00341
9 dwarf_read_uleb128 [function] [call site] 00342
9 dwarf_readu8 [function] [call site] 00343
9 read_operand [function] [call site] 00344
9 dwarf_readu8 [function] [call site] 00345
8 __assert_fail [call site] 00346
8 __assert_fail [call site] 00347
5 dwarf_set_validate [function] [call site] 00348
5 dwarf_get_validate [function] [call site] 00349
5 dwarf_set_validate [function] [call site] 00350
5 _unw_step_fallback [function] [call site] 00351
6 _ULx86_64_os_step [function] [call site] 00352
7 is_vsyscall [function] [call site] 00353
6 _ULx86_64_is_signal_frame [function] [call site] 00354
6 _ULx86_64_handle_signal_frame [function] [call site] 00355
6 _is_plt_entry [function] [call site] 00356
7 _Ux86_64_get_accessors [function] [call site] 00357
6 dwarf_get [function] [call site] 00358
6 dwarf_get [function] [call site] 00359
6 dwarf_get [function] [call site] 00360
6 _try_rip_fixup [function] [call site] 00361
6 _try_rbp_frame_walk [function] [call site] 00367
5 dwarf_set_validate [function] [call site] 00372
4 _ULx86_64_get_proc_name [function] [call site] 00373
5 _ULx86_64_get_proc_name_by_ip [function] [call site] 00374
6 _Ux86_64_get_accessors [function] [call site] 00375
6 _ULx86_64_Ifind_dynamic_proc_info [function] [call site] 00376
6 intern_string [function] [call site] 00377
6 _ULx86_64_Iput_dynamic_unwind_info [function] [call site] 00379
3 dispatch [function] [call site] 00380
4 recurse2 [function] [call site] 00381
5 get_random_reg [function] [call site] 00382
6 _Ux86_64_getcontext [call site] 00383
6 _ULx86_64_init_local [function] [call site] 00384
6 _ULx86_64_step [function] [call site] 00385
6 _ULx86_64_get_reg [function] [call site] 00386
5 dispatch [function] [call site] 00387
6 recurse3 [function] [call site] 00388
7 check_is_signal [function] [call site] 00389
8 _Ux86_64_getcontext [call site] 00390
8 _ULx86_64_init_local [function] [call site] 00391
8 _ULx86_64_step [function] [call site] 00392
8 _ULx86_64_is_signal_frame [function] [call site] 00393
7 dispatch [function] [call site] 00394
8 recurse4 [function] [call site] 00395
9 get_save_loc [function] [call site] 00396
10 _Ux86_64_getcontext [call site] 00397
10 _ULx86_64_init_local [function] [call site] 00398
10 _ULx86_64_step [function] [call site] 00399
10 _ULx86_64_get_save_loc [function] [call site] 00400