Fuzz introspector: mod_auth_openidc/test/fuzz/fuzz_json.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
481 0 EP call site: 00000 oidc_json_decode_object

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 LLVMFuzzerInitialize [function] [call site] 00001
2 oidc_test_setup [function] [call site] 00002
3 apr_initialize [function] [call site] 00003
3 oidc_pre_config_init [function] [call site] 00004
4 ERR_load_crypto_strings [function] [call site] 00005
4 OpenSSL_add_all_algorithms [function] [call site] 00006
4 OpenSSL_add_all_digests [function] [call site] 00007
4 OPENSSL_init_crypto [function] [call site] 00008
3 oidc_test_set_auth_type [function] [call site] 00009
3 apr_pool_create [function] [call site] 00010
3 oidc_test_request_init [function] [call site] 00011
4 apr_pcalloc [function] [call site] 00012
4 apr_pool_create [function] [call site] 00013
4 apr_table_make [function] [call site] 00014
4 apr_table_make [function] [call site] 00015
4 apr_table_make [function] [call site] 00016
4 apr_table_make [function] [call site] 00017
4 apr_table_set [function] [call site] 00018
4 apr_table_set [function] [call site] 00019
4 apr_table_set [function] [call site] 00020
4 apr_pcalloc [function] [call site] 00021
4 apr_pcalloc [function] [call site] 00022
4 apr_pool_create [function] [call site] 00023
4 apr_pool_create [function] [call site] 00024
4 apr_pcalloc [function] [call site] 00025
4 apr_bucket_alloc_create [function] [call site] 00026
4 apr_pcalloc [function] [call site] 00027
4 apr_pcalloc [function] [call site] 00028
4 apr_pool_userdata_set [function] [call site] 00029
4 apr_uri_parse [function] [call site] 00030
4 oidc_cfg_server_create [function] [call site] 00031
5 oidc_cfg_server_alloc [function] [call site] 00032
6 apr_pcalloc [function] [call site] 00033
6 apr_pcalloc [function] [call site] 00034
6 apr_pool_pre_cleanup_register [function] [call site] 00035
5 OIDC_SVR_CFG_SIMPLE_MEMBERS [function] [call site] 00036
5 oidc_cfg_provider_create [function] [call site] 00037
6 apr_pcalloc [function] [call site] 00038
6 oidc_cfg_provider_init [function] [call site] 00039
7 OIDC_PROVIDER_CFG_SIMPLE_MEMBERS [function] [call site] 00040
5 oidc_cfg_oauth_create [function] [call site] 00041
6 apr_pcalloc [function] [call site] 00042
6 OIDC_OAUTH_CFG_SIMPLE_MEMBERS [function] [call site] 00043
5 oidc_cfg_cache_create_server_config [function] [call site] 00044
6 OIDC_CACHE_CFG_SIMPLE_MEMBERS [function] [call site] 00045
4 oidc_cfg_provider_issuer_set [function] [call site] 00046
4 oidc_cfg_provider_get [function] [call site] 00047
4 oidc_cfg_provider_authorization_endpoint_url_set [function] [call site] 00048
4 oidc_cfg_provider_get [function] [call site] 00049
4 oidc_cfg_provider_client_id_set [function] [call site] 00050
4 oidc_cfg_provider_get [function] [call site] 00051
4 oidc_cfg_dir_config_create [function] [call site] 00052
5 apr_pcalloc [function] [call site] 00053
5 OIDC_DIR_CFG_SIMPLE_MEMBERS [function] [call site] 00054
5 apr_hash_make [function] [call site] 00055
4 apr_pcalloc [function] [call site] 00056
4 apr_pcalloc [function] [call site] 00057
4 ap_set_module_config [function] [call site] 00058
4 ap_set_module_config [function] [call site] 00059
4 apr_array_make [function] [call site] 00060
4 apr_array_make [function] [call site] 00061
4 oidc_test_crypto_passphrase_derive_keys_cached [function] [call site] 00062
5 oidc_test_key_derive_cached [function] [call site] 00065
6 _oidc_memcpy [function] [call site] 00068
6 oidc_util_key_derive_passphrase_key [function] [call site] 00069
7 _oidc_strlen [function] [call site] 00070
7 PKCS5_PBKDF2_HMAC [function] [call site] 00071
7 _oidc_strlen [function] [call site] 00072
7 EVP_sha256 [function] [call site] 00073
6 _oidc_strlen [function] [call site] 00074
6 _oidc_strcpy [function] [call site] 00075
6 _oidc_memcpy [function] [call site] 00076
5 _oidc_strlen [function] [call site] 00077
5 oidc_test_key_derive_cached [function] [call site] 00078
4 oidc_cfg_post_config [function] [call site] 00081
5 ap_hook_post_config [function] [call site] 00082
5 oidc_cache_mutex_create [function] [call site] 00083
6 apr_pcalloc [function] [call site] 00084
5 oidc_cache_mutex_post_config [function] [call site] 00085
6 oidc_cache_mutex_global_create [function] [call site] 00086
7 apr_temp_dir_get [function] [call site] 00087
7 oidc_serror [function] [call site] 00088
7 oidc_cache_status2str [function] [call site] 00089
8 apr_strerror [function] [call site] 00090
8 apr_pstrdup [function] [call site] 00091
7 apr_psprintf [function] [call site] 00092
7 apr_global_mutex_create [function] [call site] 00094
7 oidc_serror [function] [call site] 00095
7 oidc_cache_status2str [function] [call site] 00096
7 ap_unixd_set_global_mutex_perms [function] [call site] 00097
7 oidc_serror [function] [call site] 00098
7 oidc_cache_status2str [function] [call site] 00099
7 oidc_slog [function] [call site] 00100
6 apr_thread_mutex_create [function] [call site] 00101
6 oidc_serror [function] [call site] 00102
6 oidc_cache_status2str [function] [call site] 00103
5 oidc_metrics_post_config [function] [call site] 00104
6 apr_shm_create [function] [call site] 00105
6 _oidc_metrics_shm_size [function] [call site] 00106
7 _oidc_metrics_get_env_int [function] [call site] 00107
8 _oidc_str_to_int [function] [call site] 00108
9 _oidc_str_to_int_checked [function] [call site] 00109
7 oidc_serror [function] [call site] 00112
6 apr_shm_baseaddr_get [function] [call site] 00113
6 _oidc_memset [function] [call site] 00114
6 _oidc_metrics_shm_size [function] [call site] 00115
6 apr_thread_create [function] [call site] 00116
6 apr_hash_make [function] [call site] 00118
6 apr_hash_make [function] [call site] 00119
6 oidc_cache_mutex_create [function] [call site] 00120
6 oidc_cache_mutex_post_config [function] [call site] 00121
6 oidc_cache_mutex_create [function] [call site] 00122
6 oidc_cache_mutex_post_config [function] [call site] 00123
4 oidc_cfg_dir_post_config [function] [call site] 00126
5 apr_array_make [function] [call site] 00127
5 oidc_cfg_dir_parse_pass_userinfo_as [function] [call site] 00128
6 apr_pstrndup [function] [call site] 00131
6 oidc_cfg_parse_option [function] [call site] 00132
7 oidc_cfg_parse_option_impl [function] [call site] 00133
8 apr_psprintf [function] [call site] 00135
8 oidc_cfg_parse_options_flatten [function] [call site] 00136
9 apr_psprintf [function] [call site] 00137
9 apr_psprintf [function] [call site] 00138
9 apr_psprintf [function] [call site] 00139
6 OIDC_CFG_OPTIONS_SIZE [function] [call site] 00140
6 apr_pcalloc [function] [call site] 00141
6 apr_pstrdup [function] [call site] 00142
4 oidc_http_curl_pool_init [function] [call site] 00145
5 apr_thread_mutex_create [function] [call site] 00146
5 apr_pool_cleanup_register [function] [call site] 00147
1 apr_pool_create [function] [call site] 00148
1 oidc_test_pool_get [function] [call site] 00149
1 oidc_test_request_get [function] [call site] 00150
1 apr_pstrmemdup [function] [call site] 00151
1 oidc_json_decode_object [function] [call site] 00152
2 oidc_json_decode_object_err [function] [call site] 00153
3 oidc_json_parse [function] [call site] 00154
4 apr_pstrdup [function] [call site] 00155
4 json_loads [function] [call site] 00156
5 jsonp_error_init [function] [call site] 00157
6 jsonp_error_set_source [function] [call site] 00158
5 error_set [function] [call site] 00163
6 vsnprintf [function] [call site] 00165
6 strbuffer_value [function] [call site] 00167
6 jsonp_error_set [function] [call site] 00170
7 jsonp_error_vset [function] [call site] 00172
8 vsnprintf [function] [call site] 00173
5 lex_init [function] [call site] 00175
6 stream_init [function] [call site] 00176
6 strbuffer_init [function] [call site] 00177
7 jsonp_malloc [function] [call site] 00178
5 parse_json [function] [call site] 00179
6 lex_scan [function] [call site] 00180
7 strbuffer_clear [function] [call site] 00181
7 lex_free_string [function] [call site] 00182
8 jsonp_free [function] [call site] 00183
7 lex_get [function] [call site] 00184
8 stream_get [function] [call site] 00185
9 oidc_test_authz_provider_get [function] [call site] 00186
9 utf8_check_first [function] [call site] 00187
9 oidc_test_authz_provider_get [function] [call site] 00189
9 utf8_check_full [function] [call site] 00190
9 utf8_check_first [function] [call site] 00191
9 error_set [function] [call site] 00192
9 stream_to_lex [function] [call site] 00193
7 lex_save [function] [call site] 00194
8 strbuffer_append_byte [function] [call site] 00195
9 strbuffer_append_bytes [function] [call site] 00196
7 lex_scan_string [function] [call site] 00201
8 lex_get_save [function] [call site] 00202
8 error_set [function] [call site] 00205
8 lex_unget_unsave [function] [call site] 00206
9 stream_unget [function] [call site] 00207
10 utf8_check_first [function] [call site] 00208
9 strbuffer_pop [function] [call site] 00211
8 error_set [function] [call site] 00213
8 error_set [function] [call site] 00214
8 lex_get_save [function] [call site] 00215
8 lex_get_save [function] [call site] 00216
8 l_isxdigit [function] [call site] 00217
8 error_set [function] [call site] 00218
8 lex_get_save [function] [call site] 00219
8 lex_get_save [function] [call site] 00220
8 error_set [function] [call site] 00221
8 lex_get_save [function] [call site] 00222
8 jsonp_malloc [function] [call site] 00223
8 strbuffer_value [function] [call site] 00224
8 decode_unicode_escape [function] [call site] 00225
8 error_set [function] [call site] 00230
8 decode_unicode_escape [function] [call site] 00231
8 error_set [function] [call site] 00232
8 error_set [function] [call site] 00233
8 error_set [function] [call site] 00234
8 error_set [function] [call site] 00235
8 utf8_encode [function] [call site] 00236
8 lex_free_string [function] [call site] 00239
7 l_isdigit [function] [call site] 00240
7 lex_scan_number [function] [call site] 00241
8 lex_get_save [function] [call site] 00242
8 lex_get_save [function] [call site] 00243
8 l_isdigit [function] [call site] 00244
8 lex_unget_unsave [function] [call site] 00245
8 l_isdigit [function] [call site] 00246
8 lex_get_save [function] [call site] 00247
8 l_isdigit [function] [call site] 00248
8 lex_unget_unsave [function] [call site] 00249
8 lex_unget_unsave [function] [call site] 00250
8 strbuffer_value [function] [call site] 00251
8 json_strtoint [function] [call site] 00252
8 error_set [function] [call site] 00253
8 error_set [function] [call site] 00254
8 l_isdigit [function] [call site] 00257
8 lex_unget [function] [call site] 00258
9 stream_unget [function] [call site] 00259
8 lex_get_save [function] [call site] 00261
8 l_isdigit [function] [call site] 00262
8 lex_get_save [function] [call site] 00263
8 lex_get_save [function] [call site] 00264
8 l_isdigit [function] [call site] 00265
8 lex_unget_unsave [function] [call site] 00266
8 lex_get_save [function] [call site] 00267
8 l_isdigit [function] [call site] 00268
8 lex_unget_unsave [function] [call site] 00269
8 error_set [function] [call site] 00277
7 l_isalpha [function] [call site] 00278
7 lex_get_save [function] [call site] 00279
7 l_isalpha [function] [call site] 00280
7 lex_unget_unsave [function] [call site] 00281
7 strbuffer_value [function] [call site] 00282
7 lex_save_cached [function] [call site] 00286
6 error_set [function] [call site] 00288
6 parse_value [function] [call site] 00289
7 error_set [function] [call site] 00290
7 error_set [function] [call site] 00292
7 jsonp_stringn_nocheck_own [function] [call site] 00293
8 string_create [function] [call site] 00294
9 jsonp_strndup [function] [call site] 00295
10 jsonp_malloc [function] [call site] 00296
9 jsonp_malloc [function] [call site] 00298
9 jsonp_free [function] [call site] 00299
9 json_init [function] [call site] 00300
7 json_integer [function] [call site] 00301
8 jsonp_malloc [function] [call site] 00302
8 json_init [function] [call site] 00303
7 json_true [function] [call site] 00311
7 json_false [function] [call site] 00312
7 json_null [function] [call site] 00313
7 parse_object [function] [call site] 00314
8 json_object [function] [call site] 00315
9 jsonp_malloc [function] [call site] 00316
9 json_object_seed [function] [call site] 00317
10 __atomic_test_and_set [function] [call site] 00318
10 generate_seed [function] [call site] 00319
11 seed_from_windows_cryptoapi [function] [call site] 00328
12 GetModuleHandle [function] [call site] 00329
12 GetProcAddress [function] [call site] 00331
12 GetProcAddress [function] [call site] 00332
12 GetProcAddress [function] [call site] 00333
12 pCryptAcquireContext [function] [call site] 00334
12 pCryptGenRandom [function] [call site] 00335
12 pCryptReleaseContext [function] [call site] 00336
12 buf_to_uint32 [function] [call site] 00337
11 seed_from_timestamp_and_pid [function] [call site] 00338
12 gettimeofday [function] [call site] 00339
12 GetCurrentProcessId [function] [call site] 00341
10 __atomic_store_n [function] [call site] 00343
10 sched_yield [function] [call site] 00344
10 __atomic_load_n [function] [call site] 00345
9 json_init [function] [call site] 00346
9 hashtable_init [function] [call site] 00347
10 jsonp_malloc [function] [call site] 00348
10 hashsize [function] [call site] 00349
10 list_init [function] [call site] 00350
10 list_init [function] [call site] 00351
10 hashsize [function] [call site] 00352
9 jsonp_free [function] [call site] 00353
8 error_set [function] [call site] 00355
8 lex_steal_string [function] [call site] 00356
8 jsonp_free [function] [call site] 00358
8 error_set [function] [call site] 00359
8 json_object_getn [function] [call site] 00360
9 json_is_object [function] [call site] 00361
9 json_to_object [function] [call site] 00362
9 hashtable_get [function] [call site] 00363
10 hash_str [function] [call site] 00364
10 hashmask [function] [call site] 00365
10 hashtable_find_pair [function] [call site] 00366
11 bucket_is_empty [function] [call site] 00367
11 list_to_pair [function] [call site] 00368
8 jsonp_free [function] [call site] 00370
8 error_set [function] [call site] 00371
8 jsonp_free [function] [call site] 00373
8 error_set [function] [call site] 00374
8 parse_value [function] [call site] 00376
8 jsonp_free [function] [call site] 00377
8 json_object_setn_new_nocheck [function] [call site] 00378
9 json_is_object [function] [call site] 00379
9 json_decref [function] [call site] 00380
10 JSON_INTERNAL_DECREF [function] [call site] 00381
10 json_delete [function] [call site] 00382
11 json_typeof [function] [call site] 00383
11 json_delete_object [function] [call site] 00384
12 hashtable_close [function] [call site] 00385
13 hashtable_do_clear [function] [call site] 00386
14 list_to_pair [function] [call site] 00387
14 json_decref [function] [call site] 00388
14 jsonp_free [function] [call site] 00389
13 jsonp_free [function] [call site] 00390
12 jsonp_free [function] [call site] 00391
11 json_to_object [function] [call site] 00392
11 json_delete_array [function] [call site] 00393
12 json_decref [function] [call site] 00394
12 jsonp_free [function] [call site] 00395
12 jsonp_free [function] [call site] 00396
11 json_to_array [function] [call site] 00397
11 json_delete_string [function] [call site] 00398
12 jsonp_free [function] [call site] 00399
12 jsonp_free [function] [call site] 00400
11 json_to_string [function] [call site] 00401
11 json_delete_integer [function] [call site] 00402
12 jsonp_free [function] [call site] 00403
11 json_to_integer [function] [call site] 00404
11 json_delete_real [function] [call site] 00405
12 jsonp_free [function] [call site] 00406
11 json_to_real [function] [call site] 00407
9 json_to_object [function] [call site] 00408
9 hashtable_set [function] [call site] 00409
10 hashsize [function] [call site] 00410
10 hashtable_do_rehash [function] [call site] 00411
11 hashsize [function] [call site] 00412
11 jsonp_malloc [function] [call site] 00413
11 jsonp_free [function] [call site] 00414
11 list_init [function] [call site] 00415
11 list_to_pair [function] [call site] 00416
11 insert_to_bucket [function] [call site] 00417
12 bucket_is_empty [function] [call site] 00418
12 list_insert [function] [call site] 00419
12 list_insert [function] [call site] 00420
10 hash_str [function] [call site] 00421
10 hashmask [function] [call site] 00422
10 hashtable_find_pair [function] [call site] 00423
10 json_decref [function] [call site] 00424
10 init_pair [function] [call site] 00425
11 jsonp_malloc [function] [call site] 00426
11 list_init [function] [call site] 00428
11 list_init [function] [call site] 00429
10 insert_to_bucket [function] [call site] 00430
10 list_insert [function] [call site] 00431
9 json_decref [function] [call site] 00432
8 jsonp_free [function] [call site] 00433
8 jsonp_free [function] [call site] 00434
8 error_set [function] [call site] 00437
8 json_decref [function] [call site] 00438
7 parse_array [function] [call site] 00439
8 json_array [function] [call site] 00440
9 jsonp_malloc [function] [call site] 00441
9 json_init [function] [call site] 00442
9 jsonp_malloc [function] [call site] 00443
9 jsonp_free [function] [call site] 00444
8 parse_value [function] [call site] 00446
8 json_array_append_new [function] [call site] 00447
9 json_is_array [function] [call site] 00448
9 json_decref [function] [call site] 00449
9 json_to_array [function] [call site] 00450
9 json_array_grow [function] [call site] 00451
9 json_decref [function] [call site] 00454
8 error_set [function] [call site] 00457
8 json_decref [function] [call site] 00458
7 error_set [function] [call site] 00459
7 error_set [function] [call site] 00460
6 error_set [function] [call site] 00462
6 json_decref [function] [call site] 00463
5 lex_close [function] [call site] 00464
6 lex_free_string [function] [call site] 00465
6 strbuffer_close [function] [call site] 00466
7 jsonp_free [function] [call site] 00467
4 oidc_json_flags2backend [function] [call site] 00468
5 JSON_INDENT [function] [call site] 00469
4 json_error_code [function] [call site] 00470
4 apr_pstrdup [function] [call site] 00471
4 apr_psprintf [function] [call site] 00472
4 apr_pstrndup [function] [call site] 00473
3 oidc_error [function] [call site] 00474
3 oidc_json_is_object [function] [call site] 00475
4 json_is_object [function] [call site] 00476
3 oidc_error [function] [call site] 00477
3 oidc_json_decref [function] [call site] 00478
4 json_decref [function] [call site] 00479
1 oidc_json_decref [function] [call site] 00480
1 apr_pool_destroy [function] [call site] 00481