Fuzz introspector: fuzz
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
196 125 LLVMFuzzerTestOneInput call site: {node_id} mg_vxprintf
89 375 fn(mg_connection*, int, void*) call site: {node_id} mg_http_serve_file
51 322 LLVMFuzzerTestOneInput call site: {node_id} mg_connect
22 13 LLVMFuzzerTestOneInput call site: {node_id} mg_http_get_header
11 43 LLVMFuzzerTestOneInput call site: {node_id} mg_url_decode
10 1 LLVMFuzzerTestOneInput call site: {node_id} mg_dns_parse_rr
10 113 LLVMFuzzerTestOneInput call site: {node_id} mg_random
9 95 LLVMFuzzerTestOneInput call site: {node_id} memcmp
7 82 LLVMFuzzerTestOneInput call site: {node_id} mg_base64_final
4 70 LLVMFuzzerTestOneInput call site: {node_id} mg_ntohl
4 76 LLVMFuzzerTestOneInput call site: {node_id}
3 109 LLVMFuzzerTestOneInput call site: {node_id} epoll_create1

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mg_dns_parse [function] [call site] 00001
2 mg_dns_parse_rr [function] [call site] 00006
3 mg_dns_parse_name(unsigned char const*, unsigned long, unsigned long, char*, unsigned long) [function] [call site] 00007
4 mg_dns_parse_name_depth(unsigned char const*, unsigned long, unsigned long, char*, unsigned long, unsigned long, int) [function] [call site] 00008
5 mg_dns_parse_name_depth(unsigned char const*, unsigned long, unsigned long, char*, unsigned long, unsigned long, int) [function] [call site] 00009
2 mg_dns_parse_rr [function] [call site] 00010
2 mg_dns_parse_name(unsigned char const*, unsigned long, unsigned long, char*, unsigned long) [function] [call site] 00011
1 mg_dns_parse [function] [call site] 00012
1 mg_http_parse [function] [call site] 00013
2 mg_http_get_request_len [function] [call site] 00014
3 isok(unsigned char) [function] [call site] 00015
2 clen(char const*, char const*) [function] [call site] 00016
3 vcb(unsigned char) [function] [call site] 00017
3 vcb(unsigned char) [function] [call site] 00018
3 vcb(unsigned char) [function] [call site] 00019
2 clen(char const*, char const*) [function] [call site] 00020
2 skiptorn(char const*, char const*, mg_str*) [function] [call site] 00021
2 memchr [call site] 00022
2 mg_http_parse_headers(char const*, char const*, mg_http_header*, unsigned long) [function] [call site] 00023
3 clen(char const*, char const*) [function] [call site] 00024
3 clen(char const*, char const*) [function] [call site] 00025
3 skiptorn(char const*, char const*, mg_str*) [function] [call site] 00026
2 mg_http_get_header [function] [call site] 00027
3 strlen [call site] 00028
3 mg_ncasecmp(char const*, char const*, unsigned long) [function] [call site] 00029
2 mg_to_size_t(mg_str, unsigned long*) [function] [call site] 00030
2 mg_ncasecmp(char const*, char const*, unsigned long) [function] [call site] 00031
2 mg_str_s [function] [call site] 00032
3 strlen [call site] 00033
1 mg_http_parse [function] [call site] 00041
1 mg_http_get_var [function] [call site] 00043
2 mg_http_var [function] [call site] 00045
3 mg_ncasecmp(char const*, char const*, unsigned long) [function] [call site] 00051
2 mg_url_decode [function] [call site] 00052
1 mg_http_get_var [function] [call site] 00055
1 mg_url_decode [function] [call site] 00056
1 mg_url_decode [function] [call site] 00057
1 mg_url_decode [function] [call site] 00058
1 mg_mqtt_parse [function] [call site] 00059
2 decode_varint(unsigned char const*, unsigned long, unsigned long*) [function] [call site] 00060
1 mg_mqtt_parse [function] [call site] 00064
1 mg_mqtt_parse [function] [call site] 00065
1 mg_mqtt_parse [function] [call site] 00069
1 mg_sntp_parse [function] [call site] 00070
2 gettimestamp(unsigned int const*) [function] [call site] 00071
2 gettimestamp(unsigned int const*) [function] [call site] 00073
2 gettimestamp(unsigned int const*) [function] [call site] 00074
1 mg_sntp_parse [function] [call site] 00075
1 mg_base64_decode [function] [call site] 00076
2 mg_base64_decode_single(int) [function] [call site] 00077
2 mg_base64_decode_single(int) [function] [call site] 00078
2 mg_base64_decode_single(int) [function] [call site] 00079
2 mg_base64_decode_single(int) [function] [call site] 00080
1 mg_base64_decode [function] [call site] 00081
1 mg_base64_encode [function] [call site] 00082
2 mg_base64_update [function] [call site] 00083
3 mg_base64_encode_single(int) [function] [call site] 00084
3 mg_base64_encode_single(int) [function] [call site] 00085
3 mg_base64_encode_single(int) [function] [call site] 00086
3 mg_base64_encode_single(int) [function] [call site] 00087
2 mg_base64_final [function] [call site] 00088
3 mg_base64_update [function] [call site] 00089
1 mg_base64_encode [function] [call site] 00090
1 mg_json_get [function] [call site] 00095
2 memcmp [call site] 00096
2 memcmp [call site] 00097
2 memcmp [call site] 00098
2 mg_atod(char const*, int, int*) [function] [call site] 00099
2 mg_pass_string(char const*, int) [function] [call site] 00100
3 json_esc(int, int) [function] [call site] 00101
4 escapeseq(int) [function] [call site] 00102
2 mg_pass_string(char const*, int) [function] [call site] 00103
2 strncmp [call site] 00104
1 mg_json_get [function] [call site] 00106
1 mg_json_get [function] [call site] 00108
1 mg_mgr_init [function] [call site] 00109
2 epoll_create1 [call site] 00110
2 signal [call site] 00111
2 mg_tls_ctx_init [function] [call site] 00112
1 mg_tcpip_init [function] [call site] 00113
2 mg_random [function] [call site] 00114
3 fopen [call site] 00115
3 fread [call site] 00116
3 fclose [call site] 00117
3 rand [call site] 00118
2 calloc [call site] 00119
2 calloc [call site] 00120
2 mg_millis [function] [call site] 00121
3 clock_gettime [call site] 00122
2 mg_random [function] [call site] 00123
1 mg_tcpip_rx(mg_tcpip_if*, void*, unsigned long) [function] [call site] 00125
2 memcmp [call site] 00126
2 memcmp [call site] 00127
2 memcmp [call site] 00129
2 rx_arp(mg_tcpip_if*, pkt*) [function] [call site] 00131
3 ether_output(mg_tcpip_if*, unsigned long) [function] [call site] 00135
3 memcmp [call site] 00137
3 getpeer(mg_mgr*, pkt*, bool) [function] [call site] 00138
4 memcmp [call site] 00139
3 send_syn(mg_connection*) [function] [call site] 00140
4 tx_tcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned char, unsigned short, unsigned short, unsigned int, unsigned int, void const*, unsigned long) [function] [call site] 00142
5 tx_ip(mg_tcpip_if*, unsigned char*, unsigned char, unsigned int, unsigned int, unsigned long) [function] [call site] 00143
6 ipcsum(void const*, unsigned long) [function] [call site] 00146
7 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00147
7 csumfin(unsigned int) [function] [call site] 00148
5 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00151
5 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00152
5 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00153
5 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00154
5 csumfin(unsigned int) [function] [call site] 00155
5 ether_output(mg_tcpip_if*, unsigned long) [function] [call site] 00156
3 settmout(mg_connection*, unsigned char) [function] [call site] 00157
2 mkpay(pkt*, void*) [function] [call site] 00159
2 rx_ip6(mg_tcpip_if*, pkt*) [function] [call site] 00160
3 mkpay(pkt*, void*) [function] [call site] 00161
3 rx_icmp(mg_tcpip_if*, pkt*) [function] [call site] 00162
4 tx_ip(mg_tcpip_if*, unsigned char*, unsigned char, unsigned int, unsigned int, unsigned long) [function] [call site] 00163
4 ipcsum(void const*, unsigned long) [function] [call site] 00164
4 ether_output(mg_tcpip_if*, unsigned long) [function] [call site] 00165
3 mkpay(pkt*, void*) [function] [call site] 00166
2 mkpay(pkt*, void*) [function] [call site] 00170
2 rx_ip(mg_tcpip_if*, pkt*) [function] [call site] 00171
3 getpeer(mg_mgr*, pkt*, bool) [function] [call site] 00172
3 mg_error [function] [call site] 00173
4 mg_vsnprintf [function] [call site] 00174
5 mg_vxprintf [function] [call site] 00175
6 is_digit(int) [function] [call site] 00176
6 is_digit(int) [function] [call site] 00177
6 mg_dtoa(char*, unsigned long, double, int, bool) [function] [call site] 00178
7 mg_snprintf [function] [call site] 00179
8 mg_vsnprintf [function] [call site] 00180
9 mg_putchar_iobuf_static(char, void*) [function] [call site] 00181
10 mg_pfn_iobuf_private(char, void*, bool) [function] [call site] 00182
11 mg_iobuf_resize [function] [call site] 00183
12 roundup(unsigned long, unsigned long) [function] [call site] 00184
12 mg_bzero [function] [call site] 00185
12 mg_bzero [function] [call site] 00186
7 xisinf(double) [function] [call site] 00187
7 mg_snprintf [function] [call site] 00188
7 xisnan(double) [function] [call site] 00189
7 mg_snprintf [function] [call site] 00190
7 mg_dtoa(char*, unsigned long, double, int, bool) [function] [call site] 00191
8 addexp(char*, int, int) [function] [call site] 00192
8 mg_snprintf [function] [call site] 00193
8 mg_dtoa(char*, unsigned long, double, int, bool) [function] [call site] 00194
9 addexp(char*, int, int) [function] [call site] 00195
9 mg_snprintf [function] [call site] 00196
9 mg_snprintf [function] [call site] 00197
6 mg_lld(char*, long, bool, bool) [function] [call site] 00198
6 mg_lld(char*, long, bool, bool) [function] [call site] 00199
6 mg_lld(char*, long, bool, bool) [function] [call site] 00200
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00201
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00202
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00203
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00204
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00205
6 strlen [call site] 00206
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00207
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00208
6 scpy(void (*)(char, void*), void*, char*, unsigned long) [function] [call site] 00209
3 mkpay(pkt*, void*) [function] [call site] 00211
3 rx_icmp(mg_tcpip_if*, pkt*) [function] [call site] 00212
3 mkpay(pkt*, void*) [function] [call site] 00213
3 mkpay(pkt*, void*) [function] [call site] 00215
3 rx_dhcp_client(mg_tcpip_if*, pkt*) [function] [call site] 00216
4 memcmp [call site] 00217
4 tx_dhcp_request_sel(mg_tcpip_if*, unsigned int, unsigned int) [function] [call site] 00219
5 tx_dhcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned int, unsigned char*, unsigned long, bool) [function] [call site] 00220
6 tx_udp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned short, unsigned int, unsigned short, void const*, unsigned long) [function] [call site] 00223
7 tx_ip(mg_tcpip_if*, unsigned char*, unsigned char, unsigned int, unsigned int, unsigned long) [function] [call site] 00224
7 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00226
7 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00227
7 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00228
7 csumup(unsigned int, void const*, unsigned long) [function] [call site] 00229
7 csumfin(unsigned int) [function] [call site] 00230
7 ether_output(mg_tcpip_if*, unsigned long) [function] [call site] 00231
4 mg_random [function] [call site] 00232
4 mg_millis [function] [call site] 00233
4 srand [call site] 00234
4 mg_tcpip_call(mg_tcpip_if*, int, void*) [function] [call site] 00235
4 mg_tcpip_call(mg_tcpip_if*, int, void*) [function] [call site] 00236
4 onstatechange(mg_tcpip_if*) [function] [call site] 00237
5 arp_ask(mg_tcpip_if*, unsigned int) [function] [call site] 00238
6 ether_output(mg_tcpip_if*, unsigned long) [function] [call site] 00242
5 mg_millis [function] [call site] 00243
5 srand [call site] 00244
5 mg_tcpip_call(mg_tcpip_if*, int, void*) [function] [call site] 00245
3 mkpay(pkt*, void*) [function] [call site] 00247
3 rx_dhcp_server(mg_tcpip_if*, pkt*) [function] [call site] 00248
4 tx_udp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned short, unsigned int, unsigned short, void const*, unsigned long) [function] [call site] 00251
3 rx_udp(mg_tcpip_if*, pkt*) [function] [call site] 00252
4 getpeer(mg_mgr*, pkt*, bool) [function] [call site] 00253
4 mg_iobuf_resize [function] [call site] 00255
3 mkpay(pkt*, void*) [function] [call site] 00258
3 rx_tcp(mg_tcpip_if*, pkt*) [function] [call site] 00260
4 getpeer(mg_mgr*, pkt*, bool) [function] [call site] 00261
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00263
5 tx_tcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned char, unsigned short, unsigned short, unsigned int, unsigned int, void const*, unsigned long) [function] [call site] 00265
4 settmout(mg_connection*, unsigned char) [function] [call site] 00266
4 mg_tls_handshake [function] [call site] 00268
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00269
4 settmout(mg_connection*, unsigned char) [function] [call site] 00271
4 read_conn(mg_connection*, pkt*) [function] [call site] 00272
5 settmout(mg_connection*, unsigned char) [function] [call site] 00277
5 tx_tcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned char, unsigned short, unsigned short, unsigned int, unsigned int, void const*, unsigned long) [function] [call site] 00279
5 tx_tcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned char, unsigned short, unsigned short, unsigned int, unsigned int, void const*, unsigned long) [function] [call site] 00282
5 mg_iobuf_resize [function] [call site] 00283
5 tx_tcp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned char, unsigned short, unsigned short, unsigned int, unsigned int, void const*, unsigned long) [function] [call site] 00287
5 settmout(mg_connection*, unsigned char) [function] [call site] 00288
5 settmout(mg_connection*, unsigned char) [function] [call site] 00289
5 mg_tls_handshake [function] [call site] 00290
5 mg_iobuf_resize [function] [call site] 00291
5 handle_tls_recv(mg_connection*, mg_iobuf*) [function] [call site] 00293
4 getpeer(mg_mgr*, pkt*, bool) [function] [call site] 00298
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00299
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00302
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00303
4 accept_conn(mg_connection*, pkt*) [function] [call site] 00305
5 mg_alloc_conn [function] [call site] 00306
6 calloc [call site] 00307
5 settmout(mg_connection*, unsigned char) [function] [call site] 00309
4 tx_tcp_pkt(mg_tcpip_if*, pkt*, unsigned char, unsigned int, void const*, unsigned long) [function] [call site] 00312
2 mg_hexdump [function] [call site] 00313
3 logs(char const*, unsigned long) [function] [call site] 00314
4 logc(unsigned char) [function] [call site] 00315
3 nibble(unsigned int) [function] [call site] 00316
3 nibble(unsigned int) [function] [call site] 00317
3 nibble(unsigned int) [function] [call site] 00318
3 logc(unsigned char) [function] [call site] 00319
3 logs(char const*, unsigned long) [function] [call site] 00320
3 logs(char const*, unsigned long) [function] [call site] 00321
1 mg_http_connect [function] [call site] 00322
2 mg_connect [function] [call site] 00323
3 mg_alloc_conn [function] [call site] 00324
3 strncmp [call site] 00325
3 mg_resolve [function] [call site] 00327
4 mg_url_host [function] [call site] 00328
5 urlparse(char const*) [function] [call site] 00329
4 mg_url_port [function] [call site] 00331
5 urlparse(char const*) [function] [call site] 00332
5 strncmp [call site] 00333
5 strncmp [call site] 00334
5 strncmp [call site] 00335
5 strncmp [call site] 00336
5 atoi [call site] 00337
4 mg_aton [function] [call site] 00339
5 mg_atone(mg_str, mg_addr*) [function] [call site] 00340
5 mg_aton6(mg_str, mg_addr*) [function] [call site] 00341
6 mg_v4mapped(mg_str, mg_addr*) [function] [call site] 00342
7 mg_aton4(mg_str, mg_addr*) [function] [call site] 00344
4 mg_connect_resolved [function] [call site] 00347
5 arp_ask(mg_tcpip_if*, unsigned int) [function] [call site] 00350
5 settmout(mg_connection*, unsigned char) [function] [call site] 00351
5 send_syn(mg_connection*) [function] [call site] 00353
5 settmout(mg_connection*, unsigned char) [function] [call site] 00354
4 mg_sendnsreq(mg_connection*, mg_str*, int, mg_dns*, bool) [function] [call site] 00355
5 mg_connect [function] [call site] 00357
5 calloc [call site] 00359
5 mg_millis [function] [call site] 00361
5 mg_dns_send(mg_connection*, mg_str const*, unsigned short, bool) [function] [call site] 00362
6 mg_send [function] [call site] 00366
7 trim_len(mg_connection*, unsigned long) [function] [call site] 00368
7 tx_udp(mg_tcpip_if*, unsigned char*, unsigned int, unsigned short, unsigned int, unsigned short, void const*, unsigned long) [function] [call site] 00369
7 mg_iobuf_add [function] [call site] 00370
8 roundup(unsigned long, unsigned long) [function] [call site] 00371
8 mg_iobuf_resize [function] [call site] 00372
1 fn(mg_connection*, int, void*) [function] [call site] 00374
2 mg_http_serve_dir [function] [call site] 00375
3 uri_to_path(mg_connection*, mg_http_message*, mg_http_serve_opts const*, char*, unsigned long) [function] [call site] 00376
4 uri_to_path2(mg_connection*, mg_http_message*, mg_fs*, mg_str, mg_str, char*, unsigned long) [function] [call site] 00382
5 mg_snprintf [function] [call site] 00383
5 mg_http_reply [function] [call site] 00384
6 mg_http_status_code_str(int) [function] [call site] 00385
6 mg_printf [function] [call site] 00386
7 mg_vprintf [function] [call site] 00387
8 mg_vxprintf [function] [call site] 00388
8 mg_pfn_iobuf [function] [call site] 00389
9 mg_pfn_iobuf_private(char, void*, bool) [function] [call site] 00390
6 mg_vxprintf [function] [call site] 00391
6 mg_pfn_iobuf [function] [call site] 00392
6 mg_snprintf [function] [call site] 00393
5 mg_url_decode [function] [call site] 00394
5 mg_path_is_sane [function] [call site] 00396
5 mg_http_reply [function] [call site] 00397
5 strlen [call site] 00398
5 mg_printf [function] [call site] 00400
5 mg_snprintf [function] [call site] 00401
5 mg_snprintf [function] [call site] 00402
5 mg_snprintf [function] [call site] 00403
3 listdir(mg_connection*, mg_http_message*, mg_http_serve_opts const*, char*) [function] [call site] 00404
4 mg_url_decode [function] [call site] 00405
4 mg_printf [function] [call site] 00407
4 mg_printf [function] [call site] 00408
4 mg_printf [function] [call site] 00409
4 printdirentry(char const*, void*) [function] [call site] 00410
5 mg_snprintf [function] [call site] 00411
5 mg_snprintf [function] [call site] 00412
5 mg_snprintf [function] [call site] 00413
5 mg_snprintf [function] [call site] 00414
5 strlen [call site] 00415
5 mg_url_encode [function] [call site] 00416
6 mg_is_url_safe(int) [function] [call site] 00417
6 mg_snprintf [function] [call site] 00418
5 mg_printf [function] [call site] 00419
4 mg_printf [function] [call site] 00420
4 mg_snprintf [function] [call site] 00421
3 mg_http_serve_ssi [function] [call site] 00423
4 mg_http_reply [function] [call site] 00424
3 mg_http_serve_file [function] [call site] 00425
4 guess_content_type(mg_str, char const*) [function] [call site] 00427
4 mg_http_get_header [function] [call site] 00433
4 mg_mprintf [function] [call site] 00434
4 strstr [call site] 00435
4 mg_snprintf [function] [call site] 00436
4 mg_fs_open [function] [call site] 00437
5 calloc [call site] 00438
4 mg_fs_open [function] [call site] 00439
4 mg_fs_open [function] [call site] 00440
4 guess_content_type(mg_str, char const*) [function] [call site] 00442
4 mg_http_reply [function] [call site] 00443
4 mg_fs_close [function] [call site] 00444
4 mg_http_etag(char*, unsigned long, unsigned long, long) [function] [call site] 00445
5 mg_snprintf [function] [call site] 00446
4 mg_http_get_header [function] [call site] 00447
4 mg_fs_close [function] [call site] 00449
4 mg_http_reply [function] [call site] 00450
4 mg_http_get_header [function] [call site] 00451
4 getrange(mg_str*, unsigned long*, unsigned long*) [function] [call site] 00452
5 memcmp [call site] 00454
5 mg_to_size_t(mg_str, unsigned long*) [function] [call site] 00456
5 mg_to_size_t(mg_str, unsigned long*) [function] [call site] 00457
5 mg_to_size_t(mg_str, unsigned long*) [function] [call site] 00458
4 mg_snprintf [function] [call site] 00459
4 mg_snprintf [function] [call site] 00460
4 mg_http_status_code_str(int) [function] [call site] 00461
4 mg_printf [function] [call site] 00462
4 mg_fs_close [function] [call site] 00464
1 mg_iobuf_add [function] [call site] 00465
1 mg_mgr_free [function] [call site] 00466
2 close [call site] 00467
2 mg_tls_ctx_free [function] [call site] 00468
1 mg_tcpip_free [function] [call site] 00469