Fuzz introspector: fuzz_strings
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
30 141 oidc_cfg_post_config call site: 00141 oidc_cache_mutex_post_config
20 36 oidc_cfg_server_alloc call site: 00036 oidc_cfg_server_destroy
8 116 oidc_cache_mutex_global_create call site: 00116 ap_log_error_
5 179 oidc_cfg_parse_option call site: 00179 oidc_cfg_parse_options_flatten
5 341 oidc_http_hdr_in_get call site: 00341 ap_log_rerror_
4 136 oidc_cache_mutex_global_create call site: 00136 ap_log_error_
4 192 oidc_http_curl_pool_init call site: 00192 oidc_http_curl_pool_cleanup
4 356 oidc_jose_hash_bytes call site: 00356 _oidc_jose_error_set
3 105 oidc_test_crypto_passphrase_derive_keys_cached call site: 00105 oidc_test_key_derive_cached
3 127 oidc_cache_mutex_global_create call site: 00127 ap_log_error_
3 131 oidc_cache_mutex_global_create call site: 00131 ap_log_error_
3 337 oidc_state_browser_fingerprint call site: 00337 oidc_http_hdr_in_x_forwarded_for_get

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 LLVMFuzzerInitialize [function] [call site] 00001
2 oidc_test_setup [function] [call site] 00002
3 apr_initialize [call site] 00003
3 oidc_pre_config_init [function] [call site] 00004
4 OPENSSL_init_crypto [call site] 00005
4 OPENSSL_init_crypto [call site] 00006
4 OPENSSL_init_crypto [call site] 00007
3 oidc_test_set_auth_type [function] [call site] 00008
3 apr_pool_create_ex [call site] 00009
3 oidc_test_request_init [function] [call site] 00010
4 apr_palloc [call site] 00011
4 apr_pool_create_ex [call site] 00012
4 apr_table_make [call site] 00013
4 apr_table_make [call site] 00014
4 apr_table_make [call site] 00015
4 apr_table_make [call site] 00016
4 apr_table_make [call site] 00017
4 apr_table_set [call site] 00018
4 apr_table_set [call site] 00019
4 apr_table_set [call site] 00020
4 apr_palloc [call site] 00021
4 apr_palloc [call site] 00022
4 apr_pool_create_ex [call site] 00023
4 apr_pool_create_ex [call site] 00024
4 apr_palloc [call site] 00025
4 apr_bucket_alloc_create [call site] 00026
4 apr_palloc [call site] 00027
4 apr_palloc [call site] 00028
4 apr_pool_userdata_set [call site] 00029
4 apr_uri_parse [call site] 00030
4 oidc_cfg_server_create [function] [call site] 00031
5 oidc_cfg_server_alloc [function] [call site] 00032
6 apr_palloc [call site] 00033
6 apr_palloc [call site] 00034
6 apr_pool_pre_cleanup_register [call site] 00035
6 oidc_cfg_server_cleanup [function] [call site] 00036
7 oidc_cfg_server_destroy [function] [call site] 00037
8 oidc_cfg_provider_destroy [function] [call site] 00038
9 oidc_jwk_list_destroy [function] [call site] 00039
10 apr_array_pop [call site] 00040
10 oidc_jwk_destroy [function] [call site] 00041
11 cjose_jwk_release [function] [call site] 00042
12 cjose_get_dealloc [function] [call site] 00043
9 oidc_jwk_list_destroy [function] [call site] 00044
9 oidc_jwk_list_destroy [function] [call site] 00045
8 oidc_cfg_oauth_destroy [function] [call site] 00046
9 oidc_jwk_list_destroy [function] [call site] 00047
9 oidc_jwk_list_destroy_hash [function] [call site] 00048
10 apr_hash_first [call site] 00049
10 apr_hash_this [call site] 00050
10 oidc_jwk_destroy [function] [call site] 00051
10 apr_hash_set [call site] 00052
10 apr_hash_next [call site] 00053
9 oidc_jwk_list_destroy_hash [function] [call site] 00054
8 oidc_jwk_list_destroy [function] [call site] 00055
8 oidc_jwk_list_destroy [function] [call site] 00056
5 oidc_cfg_provider_create [function] [call site] 00057
6 apr_palloc [call site] 00058
6 oidc_cfg_provider_init [function] [call site] 00059
5 oidc_cfg_oauth_create [function] [call site] 00060
6 apr_palloc [call site] 00061
5 oidc_cfg_cache_create_server_config [function] [call site] 00062
4 oidc_cfg_provider_get [function] [call site] 00063
4 oidc_cfg_provider_issuer_set [function] [call site] 00064
5 apr_pstrdup [call site] 00065
4 oidc_cfg_provider_get [function] [call site] 00066
4 oidc_cfg_provider_authorization_endpoint_url_set [function] [call site] 00067
5 oidc_cfg_provider_authorization_endpoint_url_valid [function] [call site] 00068
6 oidc_cfg_parse_is_valid_http_url [function] [call site] 00069
7 oidc_cfg_parse_is_valid_url_scheme [function] [call site] 00070
8 apr_psprintf [call site] 00071
8 apr_uri_parse [call site] 00072
8 apr_psprintf [call site] 00073
8 apr_psprintf [call site] 00074
8 _oidc_strnatcasecmp [function] [call site] 00075
9 apr_strnatcasecmp [call site] 00076
8 _oidc_strnatcasecmp [function] [call site] 00077
8 apr_psprintf [call site] 00078
8 apr_psprintf [call site] 00079
8 apr_psprintf [call site] 00080
5 apr_pstrdup [call site] 00081
4 oidc_cfg_provider_get [function] [call site] 00082
4 oidc_cfg_provider_client_id_set [function] [call site] 00083
5 apr_pstrdup [call site] 00084
4 oidc_cfg_dir_config_create [function] [call site] 00085
5 apr_palloc [call site] 00086
5 apr_hash_make [call site] 00087
4 apr_palloc [call site] 00088
4 apr_palloc [call site] 00089
4 apr_array_make [call site] 00090
4 apr_array_make [call site] 00091
4 oidc_test_crypto_passphrase_derive_keys_cached [function] [call site] 00092
5 _oidc_strlen [function] [call site] 00093
6 strlen [call site] 00094
5 oidc_test_key_derive_cached [function] [call site] 00095
6 _oidc_strcmp [function] [call site] 00096
7 strcmp [call site] 00097
6 oidc_util_key_derive_passphrase_key [function] [call site] 00098
7 _oidc_strlen [function] [call site] 00099
7 _oidc_strlen [function] [call site] 00100
7 EVP_sha256 [call site] 00101
7 PKCS5_PBKDF2_HMAC [call site] 00102
6 _oidc_strlen [function] [call site] 00103
6 strcpy [call site] 00104
5 _oidc_strlen [function] [call site] 00105
5 oidc_test_key_derive_cached [function] [call site] 00106
4 fprintf [call site] 00107
4 exit [call site] 00108
4 getenv [call site] 00109
4 __isoc23_strtol [call site] 00110
4 oidc_cfg_post_config [function] [call site] 00111
5 oidc_cache_mutex_create [function] [call site] 00112
6 apr_palloc [call site] 00113
5 oidc_cache_mutex_post_config [function] [call site] 00114
6 oidc_cache_mutex_global_create [function] [call site] 00115
7 apr_temp_dir_get [call site] 00116
7 oidc_cache_status2str [function] [call site] 00117
8 apr_strerror [call site] 00118
8 apr_pstrdup [call site] 00119
7 apr_psprintf [call site] 00120
7 ap_log_error_ [function] [call site] 00121
8 fprintf [call site] 00122
8 vfprintf [call site] 00123
8 fprintf [call site] 00124
7 getpid [call site] 00125
7 apr_psprintf [call site] 00126
7 apr_global_mutex_create [call site] 00127
7 oidc_cache_status2str [function] [call site] 00128
7 apr_psprintf [call site] 00129
7 ap_log_error_ [function] [call site] 00130
7 ap_unixd_set_global_mutex_perms [function] [call site] 00131
7 oidc_cache_status2str [function] [call site] 00132
7 apr_psprintf [call site] 00133
7 ap_log_error_ [function] [call site] 00134
7 apr_psprintf [call site] 00135
7 ap_log_error_ [function] [call site] 00136
6 apr_thread_mutex_create [call site] 00137
6 oidc_cache_status2str [function] [call site] 00138
6 apr_psprintf [call site] 00139
6 ap_log_error_ [function] [call site] 00140
5 oidc_metrics_post_config [function] [call site] 00141
6 _oidc_metrics_shm_size [function] [call site] 00142
7 oidc_cfg_metrics_cache_json_max_get [function] [call site] 00143
7 _oidc_metrics_get_env_int [function] [call site] 00144
8 getenv [call site] 00145
8 _oidc_str_to_int [function] [call site] 00146
9 _oidc_str_to_int_checked [function] [call site] 00147
10 __errno_location [call site] 00148
10 __isoc23_strtol [call site] 00149
10 __errno_location [call site] 00150
7 apr_psprintf [call site] 00151
7 ap_log_error_ [function] [call site] 00152
6 apr_shm_create [call site] 00153
6 apr_shm_baseaddr_get [call site] 00154
6 _oidc_metrics_shm_size [function] [call site] 00155
6 oidc_metrics_local_reset [function] [call site] 00156
7 apr_pool_create_ex [call site] 00157
7 apr_psprintf [call site] 00158
7 ap_log_error_ [function] [call site] 00159
7 apr_pool_clear [call site] 00160
7 apr_pool_cleanup_register [call site] 00161
7 oidc_metrics_local_pool_cleanup [function] [call site] 00162
7 apr_pool_cleanup_null [call site] 00163
7 apr_hash_make [call site] 00164
7 apr_hash_make [call site] 00165
6 oidc_cache_mutex_create [function] [call site] 00166
6 oidc_cache_mutex_post_config [function] [call site] 00167
6 oidc_cache_mutex_create [function] [call site] 00168
6 oidc_cache_mutex_post_config [function] [call site] 00169
4 fprintf [call site] 00170
4 exit [call site] 00171
4 oidc_cfg_dir_post_config [function] [call site] 00172
5 apr_array_make [call site] 00173
5 oidc_cfg_dir_parse_pass_userinfo_as [function] [call site] 00174
6 _oidc_strstr [function] [call site] 00175
7 strstr [call site] 00176
6 apr_pstrndup [call site] 00177
6 oidc_cfg_parse_option [function] [call site] 00178
7 oidc_cfg_parse_option_impl [function] [call site] 00179
8 oidc_cfg_parse_options_flatten [function] [call site] 00180
9 apr_psprintf [call site] 00181
9 apr_psprintf [call site] 00182
9 apr_psprintf [call site] 00183
8 apr_psprintf [call site] 00184
7 _oidc_strcmp [function] [call site] 00185
6 apr_palloc [call site] 00186
6 apr_pstrdup [call site] 00187
5 apr_array_push [call site] 00188
4 fprintf [call site] 00189
4 exit [call site] 00190
4 oidc_http_curl_pool_init [function] [call site] 00191
5 apr_thread_mutex_create [call site] 00192
5 apr_pool_cleanup_register [call site] 00193
5 oidc_http_curl_pool_cleanup [function] [call site] 00194
6 curl_easy_cleanup [call site] 00195
5 apr_pool_cleanup_null [call site] 00196
1 oidc_test_pool_get [function] [call site] 00197
1 apr_pool_create_ex [call site] 00198
1 oidc_test_request_get [function] [call site] 00199
1 apr_table_make [call site] 00200
1 fuzz_strndup [function] [call site] 00201
2 apr_palloc [call site] 00202
1 oidc_http_url_decode [function] [call site] 00203
2 _oidc_strlen [function] [call site] 00204
2 oidc_http_url_decode_hex_digit [function] [call site] 00205
2 oidc_http_url_decode_hex_digit [function] [call site] 00206
1 oidc_http_url_encode [function] [call site] 00207
2 _oidc_strlen [function] [call site] 00208
2 apr_palloc [call site] 00209
1 oidc_http_url_encode [function] [call site] 00210
1 oidc_http_url_decode [function] [call site] 00211
1 oidc_util_html_escape [function] [call site] 00212
2 oidc_util_html_escape_with [function] [call site] 00213
3 apr_palloc [call site] 00214
3 _oidc_strlen [function] [call site] 00215
3 strcpy [call site] 00216
2 oidc_util_html_escape_char [function] [call site] 00217
1 oidc_util_html_javascript_escape [function] [call site] 00218
2 oidc_util_html_escape_with [function] [call site] 00219
2 oidc_util_html_javascript_escape_char [function] [call site] 00220
1 oidc_http_hdr_normalize_name [function] [call site] 00221
2 apr_pstrdup [call site] 00222
2 _oidc_strlen [function] [call site] 00223
2 strchr [call site] 00224
1 oidc_util_cookie_domain_valid [function] [call site] 00225
2 oidc_util_hostname_endswith [function] [call site] 00226
3 _oidc_strlen [function] [call site] 00227
3 _oidc_strlen [function] [call site] 00228
3 _oidc_strcasecmp [function] [call site] 00229
4 _oidc_ascii_tolower [function] [call site] 00230
4 _oidc_ascii_tolower [function] [call site] 00231
1 oidc_util_cookie_domain_valid [function] [call site] 00232
1 oidc_util_hostname_endswith [function] [call site] 00233
1 oidc_util_hostname_endswith [function] [call site] 00234
1 oidc_util_strcasestr [function] [call site] 00235
2 tolower [call site] 00236
1 oidc_util_strcasestr [function] [call site] 00237
1 oidc_util_issuer_match [function] [call site] 00238
2 _oidc_strcmp [function] [call site] 00239
2 _oidc_strlen [function] [call site] 00240
2 _oidc_strlen [function] [call site] 00241
2 _oidc_strncmp [function] [call site] 00242
3 strncmp [call site] 00243
1 oidc_util_issuer_match [function] [call site] 00244
1 oidc_util_spaced_string_equals [function] [call site] 00245
2 oidc_util_spaced_string_to_hashtable [function] [call site] 00246
3 apr_pstrdup [call site] 00247
3 apr_hash_make [call site] 00248
3 ap_getword_white [function] [call site] 00249
4 __ctype_b_loc [call site] 00250
4 apr_pstrmemdup [call site] 00251
4 __ctype_b_loc [call site] 00252
3 apr_hash_set [call site] 00253
2 oidc_util_spaced_string_to_hashtable [function] [call site] 00254
2 apr_hash_count [call site] 00255
2 apr_hash_first [call site] 00256
2 apr_hash_this [call site] 00257
2 apr_hash_get [call site] 00258
2 apr_hash_next [call site] 00259
1 oidc_util_spaced_string_contains [function] [call site] 00260
2 oidc_util_spaced_string_to_hashtable [function] [call site] 00261
2 apr_hash_get [call site] 00262
1 oidc_util_spaced_string_to_hashtable [function] [call site] 00263
1 oidc_util_strcmp_const_time [function] [call site] 00264
2 _oidc_strlen [function] [call site] 00265
2 _oidc_strlen [function] [call site] 00266
2 CRYPTO_memcmp [call site] 00267
1 apr_table_make [call site] 00268
1 oidc_util_table_add_query_encoded_params [function] [call site] 00269
2 ap_getword [function] [call site] 00270
3 apr_pstrmemdup [call site] 00271
2 ap_getword [function] [call site] 00272
2 apr_pstrdup [call site] 00273
2 ap_unescape_url [function] [call site] 00274
2 apr_pstrdup [call site] 00275
2 ap_unescape_url [function] [call site] 00276
2 apr_table_addn [call site] 00277
1 oidc_proto_jwt_header_peek [function] [call site] 00278
2 _oidc_strstr [function] [call site] 00279
2 apr_psprintf [call site] 00280
2 ap_log_rerror_ [function] [call site] 00281
3 fprintf [call site] 00282
3 vfprintf [call site] 00283
3 fprintf [call site] 00284
2 _oidc_strlen [function] [call site] 00285
2 apr_pstrmemdup [call site] 00286
2 oidc_util_base64url_decode [function] [call site] 00287
3 apr_pstrdup [call site] 00288
3 _oidc_strlen [function] [call site] 00289
3 apr_pstrcat [call site] 00290
3 apr_pstrcat [call site] 00291
3 oidc_util_base64_decode [function] [call site] 00292
4 apr_psprintf [call site] 00293
4 apr_base64_decode_len [call site] 00294
4 apr_palloc [call site] 00295
4 apr_base64_decode [call site] 00296
2 apr_psprintf [call site] 00297
2 ap_log_rerror_ [function] [call site] 00298
2 oidc_json_decode_object [function] [call site] 00299
3 oidc_json_decode_object_err [function] [call site] 00300
4 oidc_json_parse [function] [call site] 00301
5 apr_pstrdup [call site] 00302
5 oidc_json_flags2backend [function] [call site] 00303
5 json_loads [call site] 00304
5 json_error_code [function] [call site] 00305
5 apr_pstrdup [call site] 00306
5 apr_pstrndup [call site] 00307
5 apr_psprintf [call site] 00308
4 apr_psprintf [call site] 00309
4 ap_log_rerror_ [function] [call site] 00310
4 oidc_json_is_object [function] [call site] 00311
4 apr_psprintf [call site] 00312
4 ap_log_rerror_ [function] [call site] 00313
4 oidc_json_decref [function] [call site] 00314
5 json_decref [function] [call site] 00315
6 json_delete [call site] 00316
2 oidc_json_object_get [function] [call site] 00317
3 json_object_get [call site] 00318
2 oidc_json_string_value [function] [call site] 00319
3 json_string_value [call site] 00320
2 apr_pstrdup [call site] 00321
2 oidc_json_object_get [function] [call site] 00322
2 oidc_json_string_value [function] [call site] 00323
2 apr_pstrdup [call site] 00324
2 oidc_json_object_get [function] [call site] 00325
2 oidc_json_string_value [function] [call site] 00326
2 apr_pstrdup [call site] 00327
2 oidc_json_decref [function] [call site] 00328
1 oidc_proto_jwt_header_peek [function] [call site] 00329
1 apr_table_set [call site] 00330
1 apr_table_set [call site] 00331
1 apr_table_set [call site] 00332
1 oidc_test_cfg_get [function] [call site] 00333
1 oidc_state_browser_fingerprint [function] [call site] 00334
2 apr_psprintf [call site] 00335
2 ap_log_rerror_ [function] [call site] 00336
2 oidc_cfg_state_input_headers_get [function] [call site] 00337
2 oidc_http_hdr_in_x_forwarded_for_get [function] [call site] 00338
3 oidc_http_hdr_in_get_left_most_only [function] [call site] 00339
4 oidc_http_hdr_in_get [function] [call site] 00340
5 apr_table_get [call site] 00341
5 apr_psprintf [call site] 00342
5 ap_log_rerror_ [function] [call site] 00343
4 apr_pstrdup [call site] 00344
4 apr_strtok [call site] 00345
2 apr_pstrcat [call site] 00346
2 oidc_cfg_state_input_headers_get [function] [call site] 00347
2 oidc_http_hdr_in_user_agent_get [function] [call site] 00348
3 oidc_http_hdr_in_get [function] [call site] 00349
2 apr_pstrcat [call site] 00350
2 apr_pstrcat [call site] 00351
2 _oidc_strlen [function] [call site] 00352
2 oidc_jose_hash_bytes [function] [call site] 00353
3 EVP_MD_CTX_new [call site] 00354
3 EVP_MD_CTX_reset [call site] 00355
3 EVP_get_digestbyname [call site] 00356
3 _oidc_jose_error_set [function] [call site] 00357
4 snprintf [call site] 00358
4 snprintf [call site] 00359
4 vsnprintf [call site] 00360
3 EVP_DigestInit_ex [call site] 00361
3 ERR_get_error [call site] 00362
3 ERR_error_string [call site] 00363
3 _oidc_jose_error_set [function] [call site] 00364
3 EVP_DigestUpdate [call site] 00365
3 ERR_get_error [call site] 00366
3 ERR_error_string [call site] 00367
3 _oidc_jose_error_set [function] [call site] 00368
3 EVP_DigestFinal [call site] 00369
3 ERR_get_error [call site] 00370
3 ERR_error_string [call site] 00371
3 _oidc_jose_error_set [function] [call site] 00372
3 apr_pmemdup [call site] 00373
3 EVP_MD_CTX_free [call site] 00374
2 apr_psprintf [call site] 00375
2 ap_log_rerror_ [function] [call site] 00376
2 oidc_util_base64url_encode [function] [call site] 00377
3 apr_psprintf [call site] 00378
3 ap_log_rerror_ [function] [call site] 00379
3 apr_base64_encode_len [call site] 00380
3 apr_palloc [call site] 00381
3 apr_base64_encode [call site] 00382
1 oidc_http_hdr_in_accept_contains [function] [call site] 00383
2 oidc_http_hdr_in_contains [function] [call site] 00384
3 oidc_http_hdr_in_get [function] [call site] 00385
3 apr_pstrdup [call site] 00386
3 apr_strtok [call site] 00387
3 _oidc_strlen [function] [call site] 00388
3 _oidc_strncmp [function] [call site] 00389
3 _oidc_strlen [function] [call site] 00390
3 _oidc_strlen [function] [call site] 00391
3 apr_strtok [call site] 00392
1 oidc_cfg_parse_is_valid_url [function] [call site] 00393
2 oidc_cfg_parse_is_valid_url_scheme [function] [call site] 00394
1 oidc_cfg_parse_is_valid_http_url [function] [call site] 00395
1 oidc_http_param_is_sensitive [function] [call site] 00396
2 _oidc_strcmp [function] [call site] 00397
1 oidc_http_redact_body_for_log [function] [call site] 00398
2 oidc_util_log_mask_secrets [function] [call site] 00399
3 oidc_cfg_debug_mask_secrets_get [function] [call site] 00400
2 _oidc_strlen [function] [call site] 00401
2 apr_palloc [call site] 00402
2 strchr [call site] 00403
2 _oidc_strlen [function] [call site] 00404
2 memchr [call site] 00405
2 oidc_http_param_name_is_sensitive [function] [call site] 00406
3 _oidc_strlen [function] [call site] 00407
3 _oidc_strncmp [function] [call site] 00408
1 oidc_http_redact_json_for_log [function] [call site] 00409
2 oidc_util_log_mask_secrets [function] [call site] 00410
2 apr_pstrcat [call site] 00411
2 oidc_http_redact_json_member [function] [call site] 00412
3 _oidc_strlen [function] [call site] 00413
3 _oidc_strlen [function] [call site] 00414
3 apr_palloc [call site] 00415
3 _oidc_strstr [function] [call site] 00416
3 strchr [call site] 00417
3 _oidc_strlen [function] [call site] 00418
3 _oidc_strlen [function] [call site] 00419
1 apr_pool_destroy [call site] 00420