Fuzz introspector: fuzz_response_header
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
100 228 _oidc_strstr call site: 00228 oidc_metrics_counter_set_or_update
88 139 oidc_cfg_post_config call site: 00139 oidc_metrics_thread_run
18 36 oidc_cfg_server_alloc call site: 00036 oidc_cfg_server_destroy
8 114 oidc_cache_mutex_global_create call site: 00114 ap_log_error_
5 74 _oidc_strnatcasecmp call site: 00074 _oidc_strnatcasecmp
5 335 oidc_cfg_parse_option call site: 00335 oidc_cfg_parse_options_flatten
4 134 oidc_cache_mutex_global_create call site: 00134 ap_log_error_
4 348 oidc_http_curl_pool_init call site: 00348 oidc_http_curl_pool_cleanup
3 103 oidc_test_crypto_passphrase_derive_keys_cached call site: 00103 oidc_test_key_derive_cached
3 125 oidc_cache_mutex_global_create call site: 00125 ap_log_error_
3 129 oidc_cache_mutex_global_create call site: 00129 ap_log_error_
3 369 oidc_http_response_header call site: 00369 fprintf

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 LLVMFuzzerInitialize [function] [call site] 00001
2 oidc_test_setup [function] [call site] 00002
3 apr_initialize [call site] 00003
3 oidc_pre_config_init [function] [call site] 00004
4 OPENSSL_init_crypto [call site] 00005
4 OPENSSL_init_crypto [call site] 00006
4 OPENSSL_init_crypto [call site] 00007
3 oidc_test_set_auth_type [function] [call site] 00008
3 apr_pool_create_ex [call site] 00009
3 oidc_test_request_init [function] [call site] 00010
4 apr_palloc [call site] 00011
4 apr_pool_create_ex [call site] 00012
4 apr_table_make [call site] 00013
4 apr_table_make [call site] 00014
4 apr_table_make [call site] 00015
4 apr_table_make [call site] 00016
4 apr_table_make [call site] 00017
4 apr_table_set [call site] 00018
4 apr_table_set [call site] 00019
4 apr_table_set [call site] 00020
4 apr_palloc [call site] 00021
4 apr_palloc [call site] 00022
4 apr_pool_create_ex [call site] 00023
4 apr_pool_create_ex [call site] 00024
4 apr_palloc [call site] 00025
4 apr_bucket_alloc_create [call site] 00026
4 apr_palloc [call site] 00027
4 apr_palloc [call site] 00028
4 apr_pool_userdata_set [call site] 00029
4 apr_uri_parse [call site] 00030
4 oidc_cfg_server_create [function] [call site] 00031
5 oidc_cfg_server_alloc [function] [call site] 00032
6 apr_palloc [call site] 00033
6 apr_palloc [call site] 00034
6 apr_pool_pre_cleanup_register [call site] 00035
6 oidc_cfg_server_cleanup [function] [call site] 00036
7 oidc_cfg_server_destroy [function] [call site] 00037
8 oidc_cfg_provider_destroy [function] [call site] 00038
9 oidc_jwk_list_destroy [function] [call site] 00039
10 apr_array_pop [call site] 00040
10 oidc_jwk_destroy [function] [call site] 00041
11 cjose_jwk_release [function] [call site] 00042
12 cjose_get_dealloc [function] [call site] 00043
9 oidc_jwk_list_destroy [function] [call site] 00044
9 oidc_jwk_list_destroy [function] [call site] 00045
8 oidc_cfg_oauth_destroy [function] [call site] 00046
9 oidc_jwk_list_destroy [function] [call site] 00047
9 oidc_jwk_list_destroy_hash [function] [call site] 00048
10 apr_hash_first [call site] 00049
10 apr_hash_this [call site] 00050
10 oidc_jwk_destroy [function] [call site] 00051
10 apr_hash_set [call site] 00052
10 apr_hash_next [call site] 00053
9 oidc_jwk_list_destroy_hash [function] [call site] 00054
5 oidc_cfg_provider_create [function] [call site] 00055
6 apr_palloc [call site] 00056
6 oidc_cfg_provider_init [function] [call site] 00057
5 oidc_cfg_oauth_create [function] [call site] 00058
6 apr_palloc [call site] 00059
5 oidc_cfg_cache_create_server_config [function] [call site] 00060
4 oidc_cfg_provider_get [function] [call site] 00061
4 oidc_cfg_provider_issuer_set [function] [call site] 00062
5 apr_pstrdup [call site] 00063
4 oidc_cfg_provider_get [function] [call site] 00064
4 oidc_cfg_provider_authorization_endpoint_url_set [function] [call site] 00065
5 oidc_cfg_provider_authorization_endpoint_url_valid [function] [call site] 00066
6 oidc_cfg_parse_is_valid_http_url [function] [call site] 00067
7 oidc_cfg_parse_is_valid_url_scheme [function] [call site] 00068
8 apr_psprintf [call site] 00069
8 apr_uri_parse [call site] 00070
8 apr_psprintf [call site] 00071
8 apr_psprintf [call site] 00072
8 _oidc_strnatcasecmp [function] [call site] 00073
9 apr_strnatcasecmp [call site] 00074
8 _oidc_strnatcasecmp [function] [call site] 00075
8 apr_psprintf [call site] 00076
8 apr_psprintf [call site] 00077
8 apr_psprintf [call site] 00078
5 apr_pstrdup [call site] 00079
4 oidc_cfg_provider_get [function] [call site] 00080
4 oidc_cfg_provider_client_id_set [function] [call site] 00081
5 apr_pstrdup [call site] 00082
4 oidc_cfg_dir_config_create [function] [call site] 00083
5 apr_palloc [call site] 00084
5 apr_hash_make [call site] 00085
4 apr_palloc [call site] 00086
4 apr_palloc [call site] 00087
4 apr_array_make [call site] 00088
4 apr_array_make [call site] 00089
4 oidc_test_crypto_passphrase_derive_keys_cached [function] [call site] 00090
5 _oidc_strlen [function] [call site] 00091
6 strlen [call site] 00092
5 oidc_test_key_derive_cached [function] [call site] 00093
6 _oidc_strcmp [function] [call site] 00094
7 strcmp [call site] 00095
6 oidc_util_key_derive_passphrase_key [function] [call site] 00096
7 _oidc_strlen [function] [call site] 00097
7 _oidc_strlen [function] [call site] 00098
7 EVP_sha256 [call site] 00099
7 PKCS5_PBKDF2_HMAC [call site] 00100
6 _oidc_strlen [function] [call site] 00101
6 strcpy [call site] 00102
5 _oidc_strlen [function] [call site] 00103
5 oidc_test_key_derive_cached [function] [call site] 00104
4 fprintf [call site] 00105
4 exit [call site] 00106
4 getenv [call site] 00107
4 __isoc23_strtol [call site] 00108
4 oidc_cfg_post_config [function] [call site] 00109
5 oidc_cache_mutex_create [function] [call site] 00110
6 apr_palloc [call site] 00111
5 oidc_cache_mutex_post_config [function] [call site] 00112
6 oidc_cache_mutex_global_create [function] [call site] 00113
7 apr_temp_dir_get [call site] 00114
7 oidc_cache_status2str [function] [call site] 00115
8 apr_strerror [call site] 00116
8 apr_pstrdup [call site] 00117
7 apr_psprintf [call site] 00118
7 ap_log_error_ [function] [call site] 00119
8 fprintf [call site] 00120
8 vfprintf [call site] 00121
8 fprintf [call site] 00122
7 getpid [call site] 00123
7 apr_psprintf [call site] 00124
7 apr_global_mutex_create [call site] 00125
7 oidc_cache_status2str [function] [call site] 00126
7 apr_psprintf [call site] 00127
7 ap_log_error_ [function] [call site] 00128
7 ap_unixd_set_global_mutex_perms [function] [call site] 00129
7 oidc_cache_status2str [function] [call site] 00130
7 apr_psprintf [call site] 00131
7 ap_log_error_ [function] [call site] 00132
7 apr_psprintf [call site] 00133
7 ap_log_error_ [function] [call site] 00134
6 apr_thread_mutex_create [call site] 00135
6 oidc_cache_status2str [function] [call site] 00136
6 apr_psprintf [call site] 00137
6 ap_log_error_ [function] [call site] 00138
5 oidc_metrics_post_config [function] [call site] 00139
6 _oidc_metrics_shm_size [function] [call site] 00140
7 oidc_cfg_metrics_cache_json_max_get [function] [call site] 00141
7 _oidc_metrics_get_env_int [function] [call site] 00142
8 getenv [call site] 00143
8 _oidc_str_to_int [function] [call site] 00144
9 _oidc_str_to_int_checked [function] [call site] 00145
10 __errno_location [call site] 00146
10 __isoc23_strtol [call site] 00147
10 __errno_location [call site] 00148
7 apr_psprintf [call site] 00149
7 ap_log_error_ [function] [call site] 00150
6 apr_shm_create [call site] 00151
6 apr_shm_baseaddr_get [call site] 00152
6 _oidc_metrics_shm_size [function] [call site] 00153
6 oidc_metrics_local_reset [function] [call site] 00154
7 apr_pool_create_ex [call site] 00155
7 apr_psprintf [call site] 00156
7 ap_log_error_ [function] [call site] 00157
7 apr_pool_clear [call site] 00158
7 apr_hash_make [call site] 00159
7 apr_hash_make [call site] 00160
6 oidc_cache_mutex_create [function] [call site] 00161
6 oidc_cache_mutex_post_config [function] [call site] 00162
6 oidc_cache_mutex_create [function] [call site] 00163
6 oidc_cache_mutex_post_config [function] [call site] 00164
6 apr_thread_create [call site] 00165
6 oidc_metrics_thread_run [function] [call site] 00166
7 oidc_util_rand_int [function] [call site] 00167
8 _oidc_util_rand [function] [call site] 00168
9 apr_generate_random_bytes [call site] 00169
7 apr_sleep [call site] 00170
7 _oidc_metrics_interval [function] [call site] 00171
8 oidc_cfg_metrics_cache_storage_interval_get [function] [call site] 00172
8 _oidc_metrics_get_env_int [function] [call site] 00173
7 apr_atomic_read32 [call site] 00174
7 apr_sleep [call site] 00175
7 apr_atomic_read32 [call site] 00176
7 oidc_cache_mutex_lock [function] [call site] 00177
8 apr_global_mutex_lock [call site] 00178
8 apr_thread_mutex_lock [call site] 00179
8 oidc_cache_status2str [function] [call site] 00180
8 apr_psprintf [call site] 00181
8 ap_log_error_ [function] [call site] 00182
7 oidc_metrics_store [function] [call site] 00183
8 apr_hash_count [call site] 00184
8 apr_pool_create_ex [call site] 00185
8 apr_psprintf [call site] 00186
8 ap_log_error_ [function] [call site] 00187
8 oidc_cache_mutex_lock [function] [call site] 00188
8 apr_pool_destroy [call site] 00189
8 _oidc_metrics_storage_get [function] [call site] 00190
9 _oidc_metrics_shm_json [function] [call site] 00191
10 apr_shm_baseaddr_get [call site] 00192
9 _oidc_metrics_shm_size [function] [call site] 00193
9 apr_pstrndup [call site] 00194
8 oidc_metrics_json_parse_s [function] [call site] 00195
9 oidc_metrics_json_load [function] [call site] 00196
10 oidc_json_parse [function] [call site] 00197
11 apr_pstrdup [call site] 00198
11 oidc_json_flags2backend [function] [call site] 00199
11 json_loads [call site] 00200
11 json_error_code [function] [call site] 00201
11 apr_pstrdup [call site] 00202
11 apr_pstrndup [call site] 00203
11 apr_psprintf [call site] 00204
9 apr_psprintf [call site] 00205
9 ap_log_error_ [function] [call site] 00206
8 oidc_json_object [function] [call site] 00207
9 json_object [call site] 00208
8 oidc_metrics_store_counters [function] [call site] 00209
9 apr_hash_first [call site] 00210
9 apr_hash_this [call site] 00211
9 oidc_metrics_server_get [function] [call site] 00212
10 oidc_json_object_get [function] [call site] 00213
11 json_object_get [call site] 00214
10 oidc_json_object [function] [call site] 00215
10 oidc_json_object [function] [call site] 00216
10 oidc_json_object_set_new [function] [call site] 00217
11 json_object_set_new [call site] 00218
10 oidc_json_object [function] [call site] 00219
10 oidc_json_object_set_new [function] [call site] 00220
10 oidc_json_object_set_new [function] [call site] 00221
9 oidc_json_object_get [function] [call site] 00222
9 apr_hash_first [call site] 00223
9 apr_hash_this [call site] 00224
9 oidc_metrics_store_counter_entry [function] [call site] 00225
10 apr_pstrdup [call site] 00226
10 _oidc_strstr [function] [call site] 00227
11 strstr [call site] 00228
10 oidc_metrics_counter_set_or_update [function] [call site] 00229
11 oidc_json_object_get [function] [call site] 00230
11 oidc_metrics_counter_update [function] [call site] 00231
12 apr_hash_first [call site] 00232
12 apr_hash_this [call site] 00233
12 _oidc_strcmp [function] [call site] 00234
12 oidc_json_object_get [function] [call site] 00235
12 oidc_json_integer [function] [call site] 00236
13 json_integer [call site] 00237
12 oidc_json_object_set_new [function] [call site] 00238
12 oidc_json_integer_value [function] [call site] 00239
13 json_integer_value [call site] 00240
12 _is_overflow [function] [call site] 00241
13 _json_int2str [function] [call site] 00242
14 apr_psprintf [call site] 00243
13 apr_psprintf [call site] 00244
13 ap_log_error_ [function] [call site] 00245
12 oidc_json_integer_set [function] [call site] 00246
13 json_integer_set [call site] 00247
12 apr_hash_next [call site] 00248
11 oidc_metrics_counter_new [function] [call site] 00249
12 apr_hash_first [call site] 00250
12 apr_hash_this [call site] 00251
12 _oidc_strcmp [function] [call site] 00252
12 oidc_json_integer [function] [call site] 00253
12 oidc_json_object [function] [call site] 00254
12 oidc_json_integer [function] [call site] 00255
12 oidc_json_object_set_new [function] [call site] 00256
12 apr_hash_next [call site] 00257
11 oidc_json_object_set_new [function] [call site] 00258
10 oidc_json_object_get [function] [call site] 00259
10 oidc_json_object [function] [call site] 00260
10 oidc_metrics_counter_new [function] [call site] 00261
10 oidc_json_object_set_new [function] [call site] 00262
10 oidc_json_object_set_new [function] [call site] 00263
10 oidc_metrics_counter_set_or_update [function] [call site] 00264
9 apr_hash_next [call site] 00265
9 apr_hash_next [call site] 00266
8 oidc_metrics_store_timings [function] [call site] 00267
9 apr_hash_first [call site] 00268
9 apr_hash_this [call site] 00269
9 oidc_metrics_server_get [function] [call site] 00270
9 oidc_json_object_get [function] [call site] 00271
9 apr_hash_first [call site] 00272
9 apr_hash_this [call site] 00273
9 oidc_json_object_get [function] [call site] 00274
9 oidc_metrics_timings_update [function] [call site] 00275
10 oidc_json_object_get [function] [call site] 00276
10 oidc_json_integer_value [function] [call site] 00277
10 oidc_json_integer_set [function] [call site] 00278
10 oidc_json_object_get [function] [call site] 00279
10 oidc_json_integer_value [function] [call site] 00280
10 _is_overflow [function] [call site] 00281
10 oidc_json_integer_set [function] [call site] 00282
10 oidc_json_object_get [function] [call site] 00283
10 oidc_json_integer_value [function] [call site] 00284
10 oidc_json_integer_set [function] [call site] 00285
9 oidc_metrics_timings_new [function] [call site] 00286
10 oidc_json_object [function] [call site] 00287
10 oidc_json_integer [function] [call site] 00288
10 oidc_json_object_set_new [function] [call site] 00289
10 oidc_json_integer [function] [call site] 00290
10 oidc_json_object_set_new [function] [call site] 00291
10 oidc_json_integer [function] [call site] 00292
10 oidc_json_object_set_new [function] [call site] 00293
9 oidc_json_object_set_new [function] [call site] 00294
9 apr_hash_next [call site] 00295
9 apr_hash_next [call site] 00296
8 oidc_json_encode [function] [call site] 00297
9 oidc_json_flags2backend [function] [call site] 00298
9 json_dumps [call site] 00299
9 apr_pstrdup [call site] 00300
8 oidc_json_decref [function] [call site] 00301
9 json_decref [function] [call site] 00302
10 json_delete [call site] 00303
8 _oidc_metrics_storage_set [function] [call site] 00304
9 _oidc_metrics_shm_json [function] [call site] 00305
9 _oidc_strlen [function] [call site] 00306
9 _oidc_metrics_shm_size [function] [call site] 00307
9 _oidc_metrics_shm_hdr [function] [call site] 00308
10 apr_shm_baseaddr_get [call site] 00309
9 apr_atomic_inc32 [call site] 00310
9 _oidc_metrics_shm_size [function] [call site] 00311
9 apr_psprintf [call site] 00312
9 ap_log_error_ [function] [call site] 00313
8 oidc_cache_mutex_unlock [function] [call site] 00314
9 apr_global_mutex_unlock [call site] 00315
9 apr_thread_mutex_unlock [call site] 00316
9 oidc_cache_status2str [function] [call site] 00317
9 apr_psprintf [call site] 00318
9 ap_log_error_ [function] [call site] 00319
8 apr_pool_destroy [call site] 00320
7 _oidc_metrics_shm_hdr [function] [call site] 00321
7 apr_time_now [call site] 00322
7 apr_atomic_set32 [call site] 00323
7 oidc_metrics_local_reset [function] [call site] 00324
7 oidc_cache_mutex_unlock [function] [call site] 00325
6 getpid [call site] 00326
4 fprintf [call site] 00327
4 exit [call site] 00328
4 oidc_cfg_dir_post_config [function] [call site] 00329
5 apr_array_make [call site] 00330
5 oidc_cfg_dir_parse_pass_userinfo_as [function] [call site] 00331
6 _oidc_strstr [function] [call site] 00332
6 apr_pstrndup [call site] 00333
6 oidc_cfg_parse_option [function] [call site] 00334
7 oidc_cfg_parse_option_impl [function] [call site] 00335
8 oidc_cfg_parse_options_flatten [function] [call site] 00336
9 apr_psprintf [call site] 00337
9 apr_psprintf [call site] 00338
9 apr_psprintf [call site] 00339
8 apr_psprintf [call site] 00340
7 _oidc_strcmp [function] [call site] 00341
6 apr_palloc [call site] 00342
6 apr_pstrdup [call site] 00343
5 apr_array_push [call site] 00344
4 fprintf [call site] 00345
4 exit [call site] 00346
4 oidc_http_curl_pool_init [function] [call site] 00347
5 apr_thread_mutex_create [call site] 00348
5 apr_pool_cleanup_register [call site] 00349
5 oidc_http_curl_pool_cleanup [function] [call site] 00350
6 curl_easy_cleanup [call site] 00351
5 apr_pool_cleanup_null [call site] 00352
1 oidc_test_pool_get [function] [call site] 00353
1 apr_pool_create_ex [call site] 00354
1 oidc_test_request_get [function] [call site] 00355
1 apr_hash_make [call site] 00356
1 apr_hash_set [call site] 00357
1 apr_hash_set [call site] 00358
1 oidc_http_response_header [function] [call site] 00359
2 apr_hash_count [call site] 00360
2 apr_pstrndup [call site] 00361
2 _oidc_strstr [function] [call site] 00362
2 _oidc_strlen [function] [call site] 00363
2 _oidc_strlen [function] [call site] 00364
2 apr_hash_first [call site] 00365
2 apr_hash_this [call site] 00366
2 _oidc_strnatcasecmp [function] [call site] 00367
2 apr_psprintf [call site] 00368
2 ap_log_rerror_ [function] [call site] 00369
3 fprintf [call site] 00370
3 vfprintf [call site] 00371
3 fprintf [call site] 00372
2 apr_pstrdup [call site] 00373
2 apr_hash_set [call site] 00374
2 apr_hash_next [call site] 00375
1 apr_pool_destroy [call site] 00376