Fuzz introspector: fuzz_json
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
21 106 oidc_cfg_post_config call site: 00106 _oidc_metrics_shm_size
15 335 seed_from_urandom call site: 00335 seed_from_windows_cryptoapi
7 148 oidc_http_curl_pool_init call site: 00148 oidc_cfg_server_create
7 367 parse_object call site: 00367 json_object_getn
5 136 oidc_cfg_parse_option_impl call site: 00136 oidc_cfg_parse_options_flatten
4 89 oidc_cache_mutex_global_create call site: 00089 oidc_serror
3 77 oidc_test_crypto_passphrase_derive_keys_cached call site: 00077 oidc_test_key_derive_cached
3 102 oidc_cache_mutex_global_create call site: 00102 oidc_serror
3 143 oidc_cfg_dir_parse_pass_userinfo_as call site: 00143
3 168 jsonp_error_set_source call site: 00168 error_set
3 302 jsonp_stringn_nocheck_own call site: 00302 jsonp_strndup
3 331 seed_from_urandom call site: 00331

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 LLVMFuzzerInitialize [function] [call site] 00001
2 oidc_test_setup [function] [call site] 00002
3 apr_initialize [function] [call site] 00003
3 oidc_pre_config_init [function] [call site] 00004
4 ERR_load_crypto_strings [function] [call site] 00005
4 OpenSSL_add_all_algorithms [function] [call site] 00006
4 OpenSSL_add_all_digests [function] [call site] 00007
4 OPENSSL_init_crypto [function] [call site] 00008
3 oidc_test_set_auth_type [function] [call site] 00009
3 apr_pool_create [function] [call site] 00010
3 oidc_test_request_init [function] [call site] 00011
4 apr_pcalloc [function] [call site] 00012
4 apr_pool_create [function] [call site] 00013
4 apr_table_make [function] [call site] 00014
4 apr_table_make [function] [call site] 00015
4 apr_table_make [function] [call site] 00016
4 apr_table_make [function] [call site] 00017
4 apr_table_set [function] [call site] 00018
4 apr_table_set [function] [call site] 00019
4 apr_table_set [function] [call site] 00020
4 apr_pcalloc [function] [call site] 00021
4 apr_pcalloc [function] [call site] 00022
4 apr_pool_create [function] [call site] 00023
4 apr_pool_create [function] [call site] 00024
4 apr_pcalloc [function] [call site] 00025
4 apr_bucket_alloc_create [function] [call site] 00026
4 apr_pcalloc [function] [call site] 00027
4 apr_pcalloc [function] [call site] 00028
4 apr_pool_userdata_set [function] [call site] 00029
4 apr_uri_parse [function] [call site] 00030
4 oidc_cfg_server_create [function] [call site] 00031
5 oidc_cfg_server_alloc [function] [call site] 00032
6 apr_pcalloc [function] [call site] 00033
6 apr_pcalloc [function] [call site] 00034
6 apr_pool_pre_cleanup_register [function] [call site] 00035
5 OIDC_SVR_CFG_SIMPLE_MEMBERS [function] [call site] 00036
5 oidc_cfg_provider_create [function] [call site] 00037
6 apr_pcalloc [function] [call site] 00038
6 oidc_cfg_provider_init [function] [call site] 00039
7 OIDC_PROVIDER_CFG_SIMPLE_MEMBERS [function] [call site] 00040
5 oidc_cfg_oauth_create [function] [call site] 00041
6 apr_pcalloc [function] [call site] 00042
6 OIDC_OAUTH_CFG_SIMPLE_MEMBERS [function] [call site] 00043
5 oidc_cfg_cache_create_server_config [function] [call site] 00044
6 OIDC_CACHE_CFG_SIMPLE_MEMBERS [function] [call site] 00045
4 oidc_cfg_provider_issuer_set [function] [call site] 00046
4 oidc_cfg_provider_get [function] [call site] 00047
4 oidc_cfg_provider_authorization_endpoint_url_set [function] [call site] 00048
4 oidc_cfg_provider_get [function] [call site] 00049
4 oidc_cfg_provider_client_id_set [function] [call site] 00050
4 oidc_cfg_provider_get [function] [call site] 00051
4 oidc_cfg_dir_config_create [function] [call site] 00052
5 apr_pcalloc [function] [call site] 00053
5 OIDC_DIR_CFG_SIMPLE_MEMBERS [function] [call site] 00054
5 apr_hash_make [function] [call site] 00055
4 apr_pcalloc [function] [call site] 00056
4 apr_pcalloc [function] [call site] 00057
4 ap_set_module_config [function] [call site] 00058
4 ap_set_module_config [function] [call site] 00059
4 apr_array_make [function] [call site] 00060
4 apr_array_make [function] [call site] 00061
4 oidc_test_crypto_passphrase_derive_keys_cached [function] [call site] 00062
5 oidc_test_key_derive_cached [function] [call site] 00065
6 _oidc_memcpy [function] [call site] 00068
6 oidc_util_key_derive_passphrase_key [function] [call site] 00069
7 _oidc_strlen [function] [call site] 00070
7 PKCS5_PBKDF2_HMAC [function] [call site] 00071
7 _oidc_strlen [function] [call site] 00072
7 EVP_sha256 [function] [call site] 00073
6 _oidc_strlen [function] [call site] 00074
6 _oidc_strcpy [function] [call site] 00075
6 _oidc_memcpy [function] [call site] 00076
5 _oidc_strlen [function] [call site] 00077
5 oidc_test_key_derive_cached [function] [call site] 00078
4 oidc_cfg_post_config [function] [call site] 00083
5 ap_hook_post_config [function] [call site] 00084
5 oidc_cache_mutex_create [function] [call site] 00085
6 apr_pcalloc [function] [call site] 00086
5 oidc_cache_mutex_post_config [function] [call site] 00087
6 oidc_cache_mutex_global_create [function] [call site] 00088
7 apr_temp_dir_get [function] [call site] 00089
7 oidc_serror [function] [call site] 00090
7 oidc_cache_status2str [function] [call site] 00091
8 apr_strerror [function] [call site] 00092
8 apr_pstrdup [function] [call site] 00093
7 apr_psprintf [function] [call site] 00094
7 apr_global_mutex_create [function] [call site] 00096
7 oidc_serror [function] [call site] 00097
7 oidc_cache_status2str [function] [call site] 00098
7 ap_unixd_set_global_mutex_perms [function] [call site] 00099
7 oidc_serror [function] [call site] 00100
7 oidc_cache_status2str [function] [call site] 00101
7 oidc_slog [function] [call site] 00102
6 apr_thread_mutex_create [function] [call site] 00103
6 oidc_serror [function] [call site] 00104
6 oidc_cache_status2str [function] [call site] 00105
5 oidc_metrics_post_config [function] [call site] 00106
6 apr_shm_create [function] [call site] 00107
6 _oidc_metrics_shm_size [function] [call site] 00108
7 _oidc_metrics_get_env_int [function] [call site] 00109
8 _oidc_str_to_int [function] [call site] 00110
9 _oidc_str_to_int_checked [function] [call site] 00111
7 oidc_serror [function] [call site] 00114
6 apr_shm_baseaddr_get [function] [call site] 00115
6 _oidc_memset [function] [call site] 00116
6 _oidc_metrics_shm_size [function] [call site] 00117
6 apr_thread_create [function] [call site] 00118
6 apr_hash_make [function] [call site] 00120
6 apr_hash_make [function] [call site] 00121
6 oidc_cache_mutex_create [function] [call site] 00122
6 oidc_cache_mutex_post_config [function] [call site] 00123
6 oidc_cache_mutex_create [function] [call site] 00124
6 oidc_cache_mutex_post_config [function] [call site] 00125
4 oidc_cfg_dir_post_config [function] [call site] 00128
5 apr_array_make [function] [call site] 00129
5 oidc_cfg_dir_parse_pass_userinfo_as [function] [call site] 00130
6 apr_pstrndup [function] [call site] 00133
6 oidc_cfg_parse_option [function] [call site] 00134
7 oidc_cfg_parse_option_impl [function] [call site] 00135
8 apr_psprintf [function] [call site] 00137
8 oidc_cfg_parse_options_flatten [function] [call site] 00138
9 apr_psprintf [function] [call site] 00139
9 apr_psprintf [function] [call site] 00140
9 apr_psprintf [function] [call site] 00141
6 OIDC_CFG_OPTIONS_SIZE [function] [call site] 00142
6 apr_pcalloc [function] [call site] 00143
6 apr_pstrdup [function] [call site] 00144
4 oidc_http_curl_pool_init [function] [call site] 00147
5 apr_thread_mutex_create [function] [call site] 00148
5 apr_pool_cleanup_register [function] [call site] 00149
2 oidc_test_pool_get [function] [call site] 00150
2 oidc_cfg_server_create [function] [call site] 00151
2 oidc_test_request_get [function] [call site] 00152
2 apr_hash_make [function] [call site] 00153
2 apr_hash_set [function] [call site] 00154
2 apr_hash_set [function] [call site] 00155
1 apr_pool_create [function] [call site] 00156
1 oidc_test_pool_get [function] [call site] 00157
1 oidc_test_request_get [function] [call site] 00158
1 apr_pstrmemdup [function] [call site] 00159
1 oidc_json_decode_object [function] [call site] 00160
2 oidc_json_decode_object_err [function] [call site] 00161
3 oidc_json_parse [function] [call site] 00162
4 apr_pstrdup [function] [call site] 00163
4 json_loads [function] [call site] 00164
5 jsonp_error_init [function] [call site] 00165
6 jsonp_error_set_source [function] [call site] 00166
5 error_set [function] [call site] 00171
6 vsnprintf [function] [call site] 00173
6 strbuffer_value [function] [call site] 00175
6 jsonp_error_set [function] [call site] 00178
7 jsonp_error_vset [function] [call site] 00180
8 vsnprintf [function] [call site] 00181
5 lex_init [function] [call site] 00183
6 stream_init [function] [call site] 00184
6 strbuffer_init [function] [call site] 00185
7 jsonp_malloc [function] [call site] 00186
5 parse_json [function] [call site] 00187
6 lex_scan [function] [call site] 00188
7 strbuffer_clear [function] [call site] 00189
7 lex_free_string [function] [call site] 00190
8 jsonp_free [function] [call site] 00191
7 lex_get [function] [call site] 00192
8 stream_get [function] [call site] 00193
9 oidc_test_authz_provider_get [function] [call site] 00194
9 utf8_check_first [function] [call site] 00195
9 oidc_test_authz_provider_get [function] [call site] 00197
9 utf8_check_full [function] [call site] 00198
9 utf8_check_first [function] [call site] 00199
9 error_set [function] [call site] 00200
9 stream_to_lex [function] [call site] 00201
7 lex_save [function] [call site] 00202
8 strbuffer_append_byte [function] [call site] 00203
9 strbuffer_append_bytes [function] [call site] 00204
7 lex_scan_string [function] [call site] 00209
8 lex_get_save [function] [call site] 00210
8 error_set [function] [call site] 00213
8 lex_unget_unsave [function] [call site] 00214
9 stream_unget [function] [call site] 00215
10 utf8_check_first [function] [call site] 00216
9 strbuffer_pop [function] [call site] 00219
8 error_set [function] [call site] 00221
8 error_set [function] [call site] 00222
8 lex_get_save [function] [call site] 00223
8 lex_get_save [function] [call site] 00224
8 l_isxdigit [function] [call site] 00225
8 error_set [function] [call site] 00226
8 lex_get_save [function] [call site] 00227
8 lex_get_save [function] [call site] 00228
8 error_set [function] [call site] 00229
8 lex_get_save [function] [call site] 00230
8 jsonp_malloc [function] [call site] 00231
8 strbuffer_value [function] [call site] 00232
8 decode_unicode_escape [function] [call site] 00233
8 error_set [function] [call site] 00238
8 decode_unicode_escape [function] [call site] 00239
8 error_set [function] [call site] 00240
8 error_set [function] [call site] 00241
8 error_set [function] [call site] 00242
8 error_set [function] [call site] 00243
8 utf8_encode [function] [call site] 00244
8 lex_free_string [function] [call site] 00247
7 l_isdigit [function] [call site] 00248
7 lex_scan_number [function] [call site] 00249
8 lex_get_save [function] [call site] 00250
8 lex_get_save [function] [call site] 00251
8 l_isdigit [function] [call site] 00252
8 lex_unget_unsave [function] [call site] 00253
8 l_isdigit [function] [call site] 00254
8 lex_get_save [function] [call site] 00255
8 l_isdigit [function] [call site] 00256
8 lex_unget_unsave [function] [call site] 00257
8 lex_unget_unsave [function] [call site] 00258
8 strbuffer_value [function] [call site] 00259
8 json_strtoint [function] [call site] 00260
8 error_set [function] [call site] 00261
8 error_set [function] [call site] 00262
8 l_isdigit [function] [call site] 00265
8 lex_unget [function] [call site] 00266
9 stream_unget [function] [call site] 00267
8 lex_get_save [function] [call site] 00269
8 l_isdigit [function] [call site] 00270
8 lex_get_save [function] [call site] 00271
8 lex_get_save [function] [call site] 00272
8 l_isdigit [function] [call site] 00273
8 lex_unget_unsave [function] [call site] 00274
8 lex_get_save [function] [call site] 00275
8 l_isdigit [function] [call site] 00276
8 lex_unget_unsave [function] [call site] 00277
8 error_set [function] [call site] 00285
7 l_isalpha [function] [call site] 00286
7 lex_get_save [function] [call site] 00287
7 l_isalpha [function] [call site] 00288
7 lex_unget_unsave [function] [call site] 00289
7 strbuffer_value [function] [call site] 00290
7 lex_save_cached [function] [call site] 00294
6 error_set [function] [call site] 00296
6 parse_value [function] [call site] 00297
7 error_set [function] [call site] 00298
7 error_set [function] [call site] 00300
7 jsonp_stringn_nocheck_own [function] [call site] 00301
8 string_create [function] [call site] 00302
9 jsonp_strndup [function] [call site] 00303
10 jsonp_malloc [function] [call site] 00304
9 jsonp_malloc [function] [call site] 00306
9 jsonp_free [function] [call site] 00307
9 json_init [function] [call site] 00308
7 json_integer [function] [call site] 00309
8 jsonp_malloc [function] [call site] 00310
8 json_init [function] [call site] 00311
7 json_true [function] [call site] 00319
7 json_false [function] [call site] 00320
7 json_null [function] [call site] 00321
7 parse_object [function] [call site] 00322
8 json_object [function] [call site] 00323
9 jsonp_malloc [function] [call site] 00324
9 json_object_seed [function] [call site] 00325
10 __atomic_test_and_set [function] [call site] 00326
10 generate_seed [function] [call site] 00327
11 seed_from_windows_cryptoapi [function] [call site] 00336
12 GetModuleHandle [function] [call site] 00337
12 GetProcAddress [function] [call site] 00339
12 GetProcAddress [function] [call site] 00340
12 GetProcAddress [function] [call site] 00341
12 pCryptAcquireContext [function] [call site] 00342
12 pCryptGenRandom [function] [call site] 00343
12 pCryptReleaseContext [function] [call site] 00344
12 buf_to_uint32 [function] [call site] 00345
11 seed_from_timestamp_and_pid [function] [call site] 00346
12 gettimeofday [function] [call site] 00347
12 GetCurrentProcessId [function] [call site] 00349
10 __atomic_store_n [function] [call site] 00351
10 sched_yield [function] [call site] 00352
10 __atomic_load_n [function] [call site] 00353
9 json_init [function] [call site] 00354
9 hashtable_init [function] [call site] 00355
10 jsonp_malloc [function] [call site] 00356
10 hashsize [function] [call site] 00357
10 list_init [function] [call site] 00358
10 list_init [function] [call site] 00359
10 hashsize [function] [call site] 00360
9 jsonp_free [function] [call site] 00361
8 error_set [function] [call site] 00363
8 lex_steal_string [function] [call site] 00364
8 jsonp_free [function] [call site] 00366
8 error_set [function] [call site] 00367
8 json_object_getn [function] [call site] 00368
9 json_is_object [function] [call site] 00369
9 json_to_object [function] [call site] 00370
9 hashtable_get [function] [call site] 00371
10 hash_str [function] [call site] 00372
10 hashmask [function] [call site] 00373
10 hashtable_find_pair [function] [call site] 00374
11 bucket_is_empty [function] [call site] 00375
11 list_to_pair [function] [call site] 00376
8 jsonp_free [function] [call site] 00378
8 error_set [function] [call site] 00379
8 jsonp_free [function] [call site] 00381
8 error_set [function] [call site] 00382
8 parse_value [function] [call site] 00384
8 jsonp_free [function] [call site] 00385
8 json_object_setn_new_nocheck [function] [call site] 00386
9 json_is_object [function] [call site] 00387
9 json_decref [function] [call site] 00388
10 JSON_INTERNAL_DECREF [function] [call site] 00389
10 json_delete [function] [call site] 00390
11 json_typeof [function] [call site] 00391
11 json_delete_object [function] [call site] 00392
12 hashtable_close [function] [call site] 00393
13 hashtable_do_clear [function] [call site] 00394
14 list_to_pair [function] [call site] 00395
14 json_decref [function] [call site] 00396
14 jsonp_free [function] [call site] 00397
13 jsonp_free [function] [call site] 00398
12 jsonp_free [function] [call site] 00399
11 json_to_object [function] [call site] 00400
11 json_delete_array [function] [call site] 00401
12 json_decref [function] [call site] 00402
12 jsonp_free [function] [call site] 00403
12 jsonp_free [function] [call site] 00404
11 json_to_array [function] [call site] 00405
11 json_delete_string [function] [call site] 00406
12 jsonp_free [function] [call site] 00407
12 jsonp_free [function] [call site] 00408
11 json_to_string [function] [call site] 00409
11 json_delete_integer [function] [call site] 00410
12 jsonp_free [function] [call site] 00411
11 json_to_integer [function] [call site] 00412
11 json_delete_real [function] [call site] 00413
12 jsonp_free [function] [call site] 00414
11 json_to_real [function] [call site] 00415
9 json_to_object [function] [call site] 00416
9 hashtable_set [function] [call site] 00417
10 hashsize [function] [call site] 00418
10 hashtable_do_rehash [function] [call site] 00419
11 hashsize [function] [call site] 00420
11 jsonp_malloc [function] [call site] 00421
11 jsonp_free [function] [call site] 00422
11 list_init [function] [call site] 00423
11 list_to_pair [function] [call site] 00424
11 insert_to_bucket [function] [call site] 00425
12 bucket_is_empty [function] [call site] 00426
12 list_insert [function] [call site] 00427
12 list_insert [function] [call site] 00428
10 hash_str [function] [call site] 00429
10 hashmask [function] [call site] 00430
10 hashtable_find_pair [function] [call site] 00431
10 json_decref [function] [call site] 00432
10 init_pair [function] [call site] 00433
11 jsonp_malloc [function] [call site] 00434
11 list_init [function] [call site] 00436
11 list_init [function] [call site] 00437
10 insert_to_bucket [function] [call site] 00438
10 list_insert [function] [call site] 00439
9 json_decref [function] [call site] 00440
8 jsonp_free [function] [call site] 00441
8 jsonp_free [function] [call site] 00442
8 error_set [function] [call site] 00445
8 json_decref [function] [call site] 00446
7 parse_array [function] [call site] 00447
8 json_array [function] [call site] 00448
9 jsonp_malloc [function] [call site] 00449
9 json_init [function] [call site] 00450
9 jsonp_malloc [function] [call site] 00451
9 jsonp_free [function] [call site] 00452
8 parse_value [function] [call site] 00454
8 json_array_append_new [function] [call site] 00455
9 json_is_array [function] [call site] 00456
9 json_decref [function] [call site] 00457
9 json_to_array [function] [call site] 00458
9 json_array_grow [function] [call site] 00459
9 json_decref [function] [call site] 00462
8 error_set [function] [call site] 00465
8 json_decref [function] [call site] 00466
7 error_set [function] [call site] 00467
7 error_set [function] [call site] 00468
6 error_set [function] [call site] 00470
6 json_decref [function] [call site] 00471
5 lex_close [function] [call site] 00472
6 lex_free_string [function] [call site] 00473
6 strbuffer_close [function] [call site] 00474
7 jsonp_free [function] [call site] 00475
4 oidc_json_flags2backend [function] [call site] 00476
5 JSON_INDENT [function] [call site] 00477
4 json_error_code [function] [call site] 00478
4 apr_pstrdup [function] [call site] 00479
4 apr_psprintf [function] [call site] 00480
4 apr_pstrndup [function] [call site] 00481
3 oidc_error [function] [call site] 00482
3 oidc_json_is_object [function] [call site] 00483
4 json_is_object [function] [call site] 00484
3 oidc_error [function] [call site] 00485
3 oidc_json_decref [function] [call site] 00486
4 json_decref [function] [call site] 00487
1 oidc_json_decref [function] [call site] 00488
1 apr_pool_destroy [function] [call site] 00489