Fuzz introspector: libyaml_scanner_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 2 1 :

['yaml_parser_set_reader_error']

0 2 yaml_parser_update_buffer call site: 00048 /src/libyaml/src/reader.c:463
0 0 None 0 3744 yaml_parser_fetch_next_token call site: 00063 /src/libyaml/src/scanner.c:885
0 0 None 0 511 yaml_parser_fetch_directive call site: 00072 /src/libyaml/src/scanner.c:1374
0 0 None 0 505 yaml_parser_fetch_directive call site: 00073 /src/libyaml/src/scanner.c:1379
0 0 None 0 392 yaml_parser_fetch_flow_scalar call site: 00266 /src/libyaml/src/scanner.c:1864
0 0 None 0 348 yaml_parser_fetch_tag call site: 00205 /src/libyaml/src/scanner.c:1802
0 0 None 0 344 yaml_parser_fetch_plain_scalar call site: 00308 /src/libyaml/src/scanner.c:1895
0 0 None 0 253 yaml_parser_scan_tag_uri call site: 00118 /src/libyaml/src/scanner.c:2632
0 0 None 0 193 yaml_parser_fetch_anchor call site: 00193 /src/libyaml/src/scanner.c:1772
0 0 None 0 50 yaml_parser_fetch_value call site: 00187 /src/libyaml/src/scanner.c:1699
0 0 None 0 45 yaml_parser_initialize call site: 00003 /src/libyaml/src/api.c:182
0 0 None 0 42 yaml_parser_initialize call site: 00004 /src/libyaml/src/api.c:184

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 yaml_parser_initialize [function] [call site] 00001
2 __assert_fail [call site] 00002
2 yaml_malloc [function] [call site] 00003
2 yaml_malloc [function] [call site] 00004
2 yaml_malloc [function] [call site] 00005
2 yaml_malloc [function] [call site] 00006
2 yaml_malloc [function] [call site] 00007
2 yaml_malloc [function] [call site] 00008
2 yaml_malloc [function] [call site] 00009
2 yaml_malloc [function] [call site] 00010
2 yaml_free [function] [call site] 00011
2 yaml_free [function] [call site] 00012
2 yaml_free [function] [call site] 00013
2 yaml_free [function] [call site] 00014
2 yaml_free [function] [call site] 00015
2 yaml_free [function] [call site] 00016
2 yaml_free [function] [call site] 00017
2 yaml_free [function] [call site] 00018
1 yaml_parser_set_input_string [function] [call site] 00019
2 __assert_fail [call site] 00020
2 __assert_fail [call site] 00021
2 __assert_fail [call site] 00022
1 yaml_parser_scan [function] [call site] 00023
2 __assert_fail [call site] 00024
2 __assert_fail [call site] 00025
2 yaml_parser_fetch_more_tokens [function] [call site] 00026
3 yaml_parser_stale_simple_keys [function] [call site] 00027
4 yaml_parser_set_scanner_error [function] [call site] 00028
3 yaml_parser_fetch_next_token [function] [call site] 00029
4 yaml_parser_update_buffer [function] [call site] 00030
5 __assert_fail [call site] 00031
5 yaml_parser_determine_encoding [function] [call site] 00032
6 yaml_parser_update_raw_buffer [function] [call site] 00033
7 yaml_parser_set_reader_error [function] [call site] 00034
6 memcmp [call site] 00035
6 memcmp [call site] 00036
6 memcmp [call site] 00037
5 yaml_parser_update_raw_buffer [function] [call site] 00038
5 yaml_parser_set_reader_error [function] [call site] 00039
5 yaml_parser_set_reader_error [function] [call site] 00040
5 yaml_parser_set_reader_error [function] [call site] 00041
5 yaml_parser_set_reader_error [function] [call site] 00042
5 yaml_parser_set_reader_error [function] [call site] 00043
5 yaml_parser_set_reader_error [function] [call site] 00044
5 yaml_parser_set_reader_error [function] [call site] 00045
5 yaml_parser_set_reader_error [function] [call site] 00046
5 yaml_parser_set_reader_error [function] [call site] 00047
5 yaml_parser_set_reader_error [function] [call site] 00048
5 yaml_parser_set_reader_error [function] [call site] 00049
4 yaml_parser_fetch_stream_start [function] [call site] 00050
5 yaml_stack_extend [function] [call site] 00051
6 yaml_realloc [function] [call site] 00052
7 realloc [call site] 00053
5 yaml_queue_extend [function] [call site] 00054
6 yaml_realloc [function] [call site] 00055
4 yaml_parser_scan_to_next_token [function] [call site] 00056
5 yaml_parser_update_buffer [function] [call site] 00057
5 yaml_parser_update_buffer [function] [call site] 00058
5 yaml_parser_update_buffer [function] [call site] 00059
5 yaml_parser_update_buffer [function] [call site] 00060
5 yaml_parser_update_buffer [function] [call site] 00061
4 yaml_parser_stale_simple_keys [function] [call site] 00062
4 yaml_parser_unroll_indent [function] [call site] 00063
5 yaml_queue_extend [function] [call site] 00064
4 yaml_parser_update_buffer [function] [call site] 00065
4 yaml_parser_fetch_stream_end [function] [call site] 00066
5 yaml_parser_unroll_indent [function] [call site] 00067
5 yaml_parser_remove_simple_key [function] [call site] 00068
6 yaml_parser_set_scanner_error [function] [call site] 00069
5 yaml_queue_extend [function] [call site] 00070
4 yaml_parser_fetch_directive [function] [call site] 00071
5 yaml_parser_unroll_indent [function] [call site] 00072
5 yaml_parser_remove_simple_key [function] [call site] 00073
5 yaml_parser_scan_directive [function] [call site] 00074
6 yaml_parser_scan_directive_name [function] [call site] 00075
7 yaml_malloc [function] [call site] 00076
7 yaml_parser_update_buffer [function] [call site] 00077
7 yaml_string_extend [function] [call site] 00078
8 yaml_realloc [function] [call site] 00079
7 yaml_parser_update_buffer [function] [call site] 00080
7 yaml_parser_set_scanner_error [function] [call site] 00081
7 yaml_parser_set_scanner_error [function] [call site] 00082
7 yaml_free [function] [call site] 00083
6 strcmp [call site] 00084
6 yaml_parser_scan_version_directive_value [function] [call site] 00085
7 yaml_parser_update_buffer [function] [call site] 00086
7 yaml_parser_update_buffer [function] [call site] 00087
7 yaml_parser_scan_version_directive_number [function] [call site] 00088
8 yaml_parser_update_buffer [function] [call site] 00089
8 yaml_parser_set_scanner_error [function] [call site] 00090
8 yaml_parser_update_buffer [function] [call site] 00091
8 yaml_parser_set_scanner_error [function] [call site] 00092
7 yaml_parser_set_scanner_error [function] [call site] 00093
7 yaml_parser_scan_version_directive_number [function] [call site] 00094
6 strcmp [call site] 00095
6 yaml_parser_scan_tag_directive_value [function] [call site] 00096
7 yaml_parser_update_buffer [function] [call site] 00097
7 yaml_parser_update_buffer [function] [call site] 00098
7 yaml_parser_scan_tag_handle [function] [call site] 00099
8 yaml_malloc [function] [call site] 00100
8 yaml_parser_update_buffer [function] [call site] 00101
8 yaml_parser_set_scanner_error [function] [call site] 00102
8 yaml_string_extend [function] [call site] 00103
8 yaml_parser_update_buffer [function] [call site] 00104
8 yaml_string_extend [function] [call site] 00105
8 yaml_parser_update_buffer [function] [call site] 00106
8 yaml_string_extend [function] [call site] 00107
8 yaml_parser_set_scanner_error [function] [call site] 00108
8 yaml_free [function] [call site] 00109
7 yaml_parser_update_buffer [function] [call site] 00110
7 yaml_parser_set_scanner_error [function] [call site] 00111
7 yaml_parser_update_buffer [function] [call site] 00112
7 yaml_parser_scan_tag_uri [function] [call site] 00113
8 strlen [call site] 00114
8 yaml_malloc [function] [call site] 00115
8 yaml_string_extend [function] [call site] 00116
8 yaml_parser_update_buffer [function] [call site] 00117
8 yaml_string_extend [function] [call site] 00118
8 yaml_parser_scan_uri_escapes [function] [call site] 00119
9 yaml_parser_update_buffer [function] [call site] 00120
9 yaml_parser_set_scanner_error [function] [call site] 00121
9 yaml_parser_set_scanner_error [function] [call site] 00122
9 yaml_parser_set_scanner_error [function] [call site] 00123
8 yaml_string_extend [function] [call site] 00124
8 yaml_parser_update_buffer [function] [call site] 00125
8 yaml_string_extend [function] [call site] 00126
8 yaml_parser_set_scanner_error [function] [call site] 00127
8 yaml_free [function] [call site] 00128
7 yaml_parser_update_buffer [function] [call site] 00129
7 yaml_parser_set_scanner_error [function] [call site] 00130
7 yaml_free [function] [call site] 00131
7 yaml_free [function] [call site] 00132
6 yaml_parser_set_scanner_error [function] [call site] 00133
6 yaml_parser_update_buffer [function] [call site] 00134
6 yaml_parser_update_buffer [function] [call site] 00135
6 yaml_parser_update_buffer [function] [call site] 00136
6 yaml_parser_set_scanner_error [function] [call site] 00137
6 yaml_parser_update_buffer [function] [call site] 00138
6 yaml_free [function] [call site] 00139
6 yaml_free [function] [call site] 00140
6 yaml_free [function] [call site] 00141
6 yaml_free [function] [call site] 00142
5 yaml_queue_extend [function] [call site] 00143
5 yaml_token_delete [function] [call site] 00144
6 __assert_fail [call site] 00145
6 yaml_free [function] [call site] 00146
6 yaml_free [function] [call site] 00147
6 yaml_free [function] [call site] 00148
6 yaml_free [function] [call site] 00149
6 yaml_free [function] [call site] 00150
6 yaml_free [function] [call site] 00151
6 yaml_free [function] [call site] 00152
4 yaml_parser_fetch_document_indicator [function] [call site] 00153
5 yaml_parser_unroll_indent [function] [call site] 00154
5 yaml_parser_remove_simple_key [function] [call site] 00155
5 yaml_queue_extend [function] [call site] 00156
4 yaml_parser_fetch_document_indicator [function] [call site] 00157
4 yaml_parser_fetch_flow_collection_start [function] [call site] 00158
5 yaml_parser_save_simple_key [function] [call site] 00159
6 yaml_parser_remove_simple_key [function] [call site] 00160
5 yaml_parser_increase_flow_level [function] [call site] 00161
6 yaml_stack_extend [function] [call site] 00162
5 yaml_queue_extend [function] [call site] 00163
4 yaml_parser_fetch_flow_collection_start [function] [call site] 00164
4 yaml_parser_fetch_flow_collection_end [function] [call site] 00165
5 yaml_parser_remove_simple_key [function] [call site] 00166
5 yaml_parser_decrease_flow_level [function] [call site] 00167
5 yaml_queue_extend [function] [call site] 00168
4 yaml_parser_fetch_flow_collection_end [function] [call site] 00169
4 yaml_parser_fetch_flow_entry [function] [call site] 00170
5 yaml_parser_remove_simple_key [function] [call site] 00171
5 yaml_queue_extend [function] [call site] 00172
4 yaml_parser_fetch_block_entry [function] [call site] 00173
5 yaml_parser_set_scanner_error [function] [call site] 00174
5 yaml_parser_roll_indent [function] [call site] 00175
6 yaml_stack_extend [function] [call site] 00176
6 yaml_queue_extend [function] [call site] 00177
6 yaml_queue_extend [function] [call site] 00178
5 yaml_parser_remove_simple_key [function] [call site] 00179
5 yaml_queue_extend [function] [call site] 00180
4 yaml_parser_fetch_key [function] [call site] 00181
5 yaml_parser_set_scanner_error [function] [call site] 00182
5 yaml_parser_roll_indent [function] [call site] 00183
5 yaml_parser_remove_simple_key [function] [call site] 00184
5 yaml_queue_extend [function] [call site] 00185
4 yaml_parser_fetch_value [function] [call site] 00186
5 yaml_queue_extend [function] [call site] 00187
5 yaml_parser_roll_indent [function] [call site] 00188
5 yaml_parser_set_scanner_error [function] [call site] 00189
5 yaml_parser_roll_indent [function] [call site] 00190
5 yaml_queue_extend [function] [call site] 00191
4 yaml_parser_fetch_anchor [function] [call site] 00192
5 yaml_parser_save_simple_key [function] [call site] 00193
5 yaml_parser_scan_anchor [function] [call site] 00194
6 yaml_malloc [function] [call site] 00195
6 yaml_parser_update_buffer [function] [call site] 00196
6 yaml_string_extend [function] [call site] 00197
6 yaml_parser_update_buffer [function] [call site] 00198
6 yaml_parser_set_scanner_error [function] [call site] 00199
6 yaml_free [function] [call site] 00200
5 yaml_queue_extend [function] [call site] 00201
5 yaml_token_delete [function] [call site] 00202
4 yaml_parser_fetch_anchor [function] [call site] 00203
4 yaml_parser_fetch_tag [function] [call site] 00204
5 yaml_parser_save_simple_key [function] [call site] 00205
5 yaml_parser_scan_tag [function] [call site] 00206
6 yaml_parser_update_buffer [function] [call site] 00207
6 yaml_malloc [function] [call site] 00208
6 yaml_parser_scan_tag_uri [function] [call site] 00209
6 yaml_parser_set_scanner_error [function] [call site] 00210
6 yaml_parser_scan_tag_handle [function] [call site] 00211
6 strlen [call site] 00212
6 yaml_parser_scan_tag_uri [function] [call site] 00213
6 yaml_parser_scan_tag_uri [function] [call site] 00214
6 yaml_free [function] [call site] 00215
6 yaml_malloc [function] [call site] 00216
6 yaml_parser_update_buffer [function] [call site] 00217
6 yaml_parser_set_scanner_error [function] [call site] 00218
6 yaml_free [function] [call site] 00219
6 yaml_free [function] [call site] 00220
5 yaml_queue_extend [function] [call site] 00221
5 yaml_token_delete [function] [call site] 00222
4 yaml_parser_fetch_block_scalar [function] [call site] 00223
5 yaml_parser_remove_simple_key [function] [call site] 00224
5 yaml_parser_scan_block_scalar [function] [call site] 00225
6 yaml_malloc [function] [call site] 00226
6 yaml_malloc [function] [call site] 00227
6 yaml_malloc [function] [call site] 00228
6 yaml_parser_update_buffer [function] [call site] 00229
6 yaml_parser_update_buffer [function] [call site] 00230
6 yaml_parser_set_scanner_error [function] [call site] 00231
6 yaml_parser_set_scanner_error [function] [call site] 00232
6 yaml_parser_update_buffer [function] [call site] 00233
6 yaml_parser_update_buffer [function] [call site] 00234
6 yaml_parser_update_buffer [function] [call site] 00235
6 yaml_parser_update_buffer [function] [call site] 00236
6 yaml_parser_set_scanner_error [function] [call site] 00237
6 yaml_parser_update_buffer [function] [call site] 00238
6 yaml_parser_scan_block_scalar_breaks [function] [call site] 00239
7 yaml_parser_update_buffer [function] [call site] 00240
7 yaml_parser_update_buffer [function] [call site] 00241
7 yaml_parser_set_scanner_error [function] [call site] 00242
7 yaml_parser_update_buffer [function] [call site] 00243
7 yaml_string_extend [function] [call site] 00244
6 yaml_parser_update_buffer [function] [call site] 00245
6 yaml_string_extend [function] [call site] 00246
6 yaml_string_join [function] [call site] 00247
7 yaml_string_extend [function] [call site] 00248
6 yaml_string_join [function] [call site] 00249
6 yaml_string_extend [function] [call site] 00250
6 yaml_parser_update_buffer [function] [call site] 00251
6 yaml_parser_update_buffer [function] [call site] 00252
6 yaml_string_extend [function] [call site] 00253
6 yaml_parser_scan_block_scalar_breaks [function] [call site] 00254
6 yaml_string_join [function] [call site] 00255
6 yaml_string_join [function] [call site] 00256
6 yaml_free [function] [call site] 00257
6 yaml_free [function] [call site] 00258
6 yaml_free [function] [call site] 00259
6 yaml_free [function] [call site] 00260
6 yaml_free [function] [call site] 00261
5 yaml_queue_extend [function] [call site] 00262
5 yaml_token_delete [function] [call site] 00263
4 yaml_parser_fetch_block_scalar [function] [call site] 00264
4 yaml_parser_fetch_flow_scalar [function] [call site] 00265
5 yaml_parser_save_simple_key [function] [call site] 00266
5 yaml_parser_scan_flow_scalar [function] [call site] 00267
6 yaml_malloc [function] [call site] 00268
6 yaml_malloc [function] [call site] 00269
6 yaml_malloc [function] [call site] 00270
6 yaml_malloc [function] [call site] 00271
6 yaml_parser_update_buffer [function] [call site] 00272
6 yaml_parser_set_scanner_error [function] [call site] 00273
6 yaml_parser_set_scanner_error [function] [call site] 00274
6 yaml_parser_update_buffer [function] [call site] 00275
6 yaml_string_extend [function] [call site] 00276
6 yaml_parser_update_buffer [function] [call site] 00277
6 yaml_string_extend [function] [call site] 00278
6 yaml_parser_set_scanner_error [function] [call site] 00279
6 yaml_parser_update_buffer [function] [call site] 00280
6 yaml_parser_set_scanner_error [function] [call site] 00281
6 yaml_parser_set_scanner_error [function] [call site] 00282
6 yaml_string_extend [function] [call site] 00283
6 yaml_parser_update_buffer [function] [call site] 00284
6 yaml_parser_update_buffer [function] [call site] 00285
6 yaml_parser_update_buffer [function] [call site] 00286
6 yaml_string_extend [function] [call site] 00287
6 yaml_parser_update_buffer [function] [call site] 00288
6 yaml_string_extend [function] [call site] 00289
6 yaml_string_extend [function] [call site] 00290
6 yaml_parser_update_buffer [function] [call site] 00291
6 yaml_string_extend [function] [call site] 00292
6 yaml_string_join [function] [call site] 00293
6 yaml_string_join [function] [call site] 00294
6 yaml_string_join [function] [call site] 00295
6 yaml_string_join [function] [call site] 00296
6 yaml_free [function] [call site] 00297
6 yaml_free [function] [call site] 00298
6 yaml_free [function] [call site] 00299
6 yaml_free [function] [call site] 00300
6 yaml_free [function] [call site] 00301
6 yaml_free [function] [call site] 00302
6 yaml_free [function] [call site] 00303
5 yaml_queue_extend [function] [call site] 00304
5 yaml_token_delete [function] [call site] 00305
4 yaml_parser_fetch_flow_scalar [function] [call site] 00306
4 yaml_parser_fetch_plain_scalar [function] [call site] 00307
5 yaml_parser_save_simple_key [function] [call site] 00308
5 yaml_parser_scan_plain_scalar [function] [call site] 00309
6 yaml_malloc [function] [call site] 00310
6 yaml_malloc [function] [call site] 00311
6 yaml_malloc [function] [call site] 00312
6 yaml_malloc [function] [call site] 00313
6 yaml_parser_update_buffer [function] [call site] 00314
6 yaml_parser_set_scanner_error [function] [call site] 00315
6 yaml_string_extend [function] [call site] 00316
6 yaml_string_join [function] [call site] 00317
6 yaml_string_join [function] [call site] 00318
6 yaml_string_join [function] [call site] 00319
6 yaml_string_join [function] [call site] 00320
6 yaml_string_extend [function] [call site] 00321
6 yaml_parser_update_buffer [function] [call site] 00322
6 yaml_parser_update_buffer [function] [call site] 00323
6 yaml_parser_set_scanner_error [function] [call site] 00324
6 yaml_string_extend [function] [call site] 00325
6 yaml_parser_update_buffer [function] [call site] 00326
6 yaml_string_extend [function] [call site] 00327
6 yaml_string_extend [function] [call site] 00328
6 yaml_parser_update_buffer [function] [call site] 00329
6 yaml_free [function] [call site] 00330
6 yaml_free [function] [call site] 00331
6 yaml_free [function] [call site] 00332
6 yaml_free [function] [call site] 00333
6 yaml_free [function] [call site] 00334
6 yaml_free [function] [call site] 00335
6 yaml_free [function] [call site] 00336
5 yaml_queue_extend [function] [call site] 00337
5 yaml_token_delete [function] [call site] 00338
4 yaml_parser_set_scanner_error [function] [call site] 00339
1 yaml_token_delete [function] [call site] 00340
1 yaml_parser_delete [function] [call site] 00341
2 __assert_fail [call site] 00342
2 yaml_free [function] [call site] 00343
2 yaml_free [function] [call site] 00344
2 yaml_token_delete [function] [call site] 00345
2 yaml_free [function] [call site] 00346
2 yaml_free [function] [call site] 00347
2 yaml_free [function] [call site] 00348
2 yaml_free [function] [call site] 00349
2 yaml_free [function] [call site] 00350
2 yaml_free [function] [call site] 00351
2 yaml_free [function] [call site] 00352
2 yaml_free [function] [call site] 00353