Fuzz introspector: broker_fuzz_read_handle
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
45 52 mosquitto_realloc call site: 00052 config__bridge_cleanup
17 3 fuzz_packet_read_base call site: 00003 log__printf
12 122 context__cleanup call site: 00122 tmp_remove_subs
11 139 db__messages_delete_list call site: 00139 context__send_will
8 33 fuzz_packet_read_base call site: 00033 free
6 172 context__cleanup call site: 00172 HASH_FIND
4 42 fuzz_packet_read_base call site: 00042 bridge__cleanup
3 106 context__cleanup call site: 00106 DL_DELETE2
3 182 context__cleanup call site: 00182 mosquitto_FREE
2 112 context__cleanup_out_packets call site: 00112 UNUSED
2 119 context__cleanup call site: 00119 UNUSED
2 152 db__msg_store_free call site: 00152 mosquitto_FREE

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_packet_read_base [function] [call site] 00001
2 calloc [function] [call site] 00002
2 log__init [function] [call site] 00003
3 openlog [function] [call site] 00004
3 OpenEventLog [function] [call site] 00005
3 mosquitto_fopen [function] [call site] 00006
3 setvbuf [function] [call site] 00007
3 log__printf [function] [call site] 00008
4 UNUSED [function] [call site] 00009
4 UNUSED [function] [call site] 00010
4 UNUSED [function] [call site] 00011
3 setvbuf [function] [call site] 00012
3 dlt_fifo_check [function] [call site] 00013
4 memset [function] [call site] 00014
4 stat [function] [call site] 00015
4 S_ISFIFO [function] [call site] 00016
4 open [function] [call site] 00017
4 close [function] [call site] 00018
3 DLT_REGISTER_APP [function] [call site] 00019
3 dlt_register_context [function] [call site] 00020
2 memset [function] [call site] 00021
2 memset [function] [call site] 00022
2 memset [function] [call site] 00023
2 context__init [function] [call site] 00024
3 mosquitto_calloc [function] [call site] 00025
4 mosquitto_malloc [function] [call site] 00026
4 memset [function] [call site] 00027
2 malloc [function] [call site] 00028
2 memcpy [function] [call site] 00029
2 fuzz_packet_read_init [function] [call site] 00030
3 strdup [function] [call site] 00031
2 packet_func [function] [call site] 00032
2 fuzz_packet_read_cleanup [function] [call site] 00033
3 free [function] [call site] 00034
4 malloc_usable_size [function] [call site] 00035
4 check_alloc_marker [function] [call site] 00036
5 strncmp [function] [call site] 00037
4 __libc_free [function] [call site] 00038
4 trigger_alloc_mismatch [function] [call site] 00039
5 strncmp [function] [call site] 00040
5 abort [function] [call site] 00041
2 context__cleanup [function] [call site] 00042
3 bridge__cleanup [function] [call site] 00043
4 assert [function] [call site] 00044
4 mosquitto_FREE [function] [call site] 00045
4 mosquitto_realloc [function] [call site] 00046
5 malloc_usable_size [function] [call site] 00047
5 check_alloc_marker [function] [call site] 00048
5 realloc [function] [call site] 00049
5 trigger_alloc_mismatch [function] [call site] 00050
5 malloc_usable_size [function] [call site] 00051
5 set_alloc_marker [function] [call site] 00052
6 memcpy [function] [call site] 00053
4 mosquitto_FREE [function] [call site] 00054
4 mosquitto_FREE [function] [call site] 00055
4 mosquitto_FREE [function] [call site] 00056
4 mosquitto_FREE [function] [call site] 00057
4 mosquitto_FREE [function] [call site] 00058
4 mosquitto_FREE [function] [call site] 00059
4 mosquitto_FREE [function] [call site] 00060
4 mosquitto_FREE [function] [call site] 00061
4 mosquitto_FREE [function] [call site] 00062
4 SSL_CTX_free [function] [call site] 00063
4 mosquitto_FREE [function] [call site] 00064
4 mosquitto_FREE [function] [call site] 00065
4 config__bridge_cleanup [function] [call site] 00066
5 mosquitto_FREE [function] [call site] 00067
5 mosquitto_FREE [function] [call site] 00068
5 mosquitto_FREE [function] [call site] 00069
5 mosquitto_FREE [function] [call site] 00070
5 mosquitto_FREE [function] [call site] 00071
5 mosquitto_FREE [function] [call site] 00072
5 mosquitto_FREE [function] [call site] 00073
5 mosquitto_FREE [function] [call site] 00074
5 mosquitto_FREE [function] [call site] 00075
5 mosquitto_FREE [function] [call site] 00076
5 LL_FOREACH_SAFE [function] [call site] 00077
5 mosquitto_FREE [function] [call site] 00078
5 mosquitto_FREE [function] [call site] 00079
5 mosquitto_FREE [function] [call site] 00080
5 mosquitto_FREE [function] [call site] 00081
5 mosquitto_FREE [function] [call site] 00082
5 LL_DELETE [function] [call site] 00083
5 mosquitto_FREE [function] [call site] 00084
5 mosquitto_FREE [function] [call site] 00085
5 mosquitto_FREE [function] [call site] 00086
5 mosquitto_FREE [function] [call site] 00087
5 mosquitto_FREE [function] [call site] 00088
5 mosquitto_FREE [function] [call site] 00089
5 mosquitto_FREE [function] [call site] 00090
5 mosquitto_FREE [function] [call site] 00091
5 mosquitto_FREE [function] [call site] 00092
5 mosquitto_FREE [function] [call site] 00093
5 mosquitto_FREE [function] [call site] 00094
5 mosquitto_FREE [function] [call site] 00095
5 mosquitto_FREE [function] [call site] 00096
5 mosquitto_FREE [function] [call site] 00097
3 mosquitto_FREE [function] [call site] 00098
3 alias__free_all [function] [call site] 00099
4 alias__free_r2l [function] [call site] 00100
5 mosquitto_FREE [function] [call site] 00101
5 mosquitto_FREE [function] [call site] 00102
4 alias__free_l2r [function] [call site] 00103
5 mosquitto_FREE [function] [call site] 00104
5 mosquitto_FREE [function] [call site] 00105
3 keepalive__remove [function] [call site] 00106
4 calc_index [function] [call site] 00107
4 DL_DELETE2 [function] [call site] 00108
4 UNUSED [function] [call site] 00109
3 context__cleanup_out_packets [function] [call site] 00110
4 mosquitto_free [function] [call site] 00111
4 metrics__int_dec [function] [call site] 00112
5 UNUSED [function] [call site] 00113
5 UNUSED [function] [call site] 00114
4 metrics__int_dec [function] [call site] 00115
3 mosquitto_FREE [function] [call site] 00116
3 mosquitto_FREE [function] [call site] 00117
3 mosquitto_FREE [function] [call site] 00118
3 net__socket_close [function] [call site] 00119
4 UNUSED [function] [call site] 00120
4 UNUSED [function] [call site] 00121
3 sub__clean_session [function] [call site] 00122
4 plugin_persist__handle_subscription_delete [function] [call site] 00123
5 UNUSED [function] [call site] 00124
5 UNUSED [function] [call site] 00125
4 sub__remove_shared_leaf [function] [call site] 00126
5 DL_DELETE [function] [call site] 00127
5 HASH_DELETE [function] [call site] 00128
5 mosquitto_FREE [function] [call site] 00129
4 DL_DELETE [function] [call site] 00130
4 mosquitto_FREE [function] [call site] 00131
4 tmp_remove_subs [function] [call site] 00132
5 HASH_DELETE [function] [call site] 00133
5 mosquitto_FREE [function] [call site] 00134
4 mosquitto_FREE [function] [call site] 00135
3 db__messages_delete [function] [call site] 00136
4 db__messages_delete_incoming [function] [call site] 00137
5 db__messages_delete_list [function] [call site] 00138
6 DL_FOREACH_SAFE [function] [call site] 00139
7 DL_DELETE [function] [call site] 00140
7 context__send_will [function] [call site] 00141
8 UNUSED [function] [call site] 00142
7 mosquitto_FREE [function] [call site] 00143
6 DL_DELETE [function] [call site] 00144
6 db__msg_store_ref_dec [function] [call site] 00145
7 db__msg_store_remove [function] [call site] 00146
8 HASH_DELETE [function] [call site] 00147
8 plugin_persist__handle_base_msg_delete [function] [call site] 00148
9 UNUSED [function] [call site] 00149
8 db__msg_store_free [function] [call site] 00150
9 mosquitto_FREE [function] [call site] 00151
9 mosquitto_FREE [function] [call site] 00152
9 mosquitto_FREE [function] [call site] 00153
9 mosquitto_FREE [function] [call site] 00154
9 mosquitto_FREE [function] [call site] 00155
9 mosquitto_property_free_all [function] [call site] 00156
10 mosquitto_property_free [function] [call site] 00157
11 mosquitto_FREE [function] [call site] 00158
11 mosquitto_FREE [function] [call site] 00159
11 mosquitto_FREE [function] [call site] 00160
11 mosquitto_FREE [function] [call site] 00161
11 mosquitto_FREE [function] [call site] 00162
9 mosquitto_FREE [function] [call site] 00163
9 mosquitto_FREE [function] [call site] 00164
6 mosquitto_FREE [function] [call site] 00165
5 db__messages_delete_list [function] [call site] 00166
4 db__messages_delete_outgoing [function] [call site] 00167
5 db__messages_delete_list [function] [call site] 00168
5 db__messages_delete_list [function] [call site] 00169
3 mosquitto_FREE [function] [call site] 00170
3 context__send_will [function] [call site] 00171
3 context__remove_from_by_id [function] [call site] 00172
4 HASH_FIND [function] [call site] 00173
4 strlen [function] [call site] 00174
4 HASH_DELETE [function] [call site] 00175
4 HASH_FIND [function] [call site] 00176
4 strlen [function] [call site] 00177
4 HASH_DELETE [function] [call site] 00178
3 mosquitto_FREE [function] [call site] 00179
3 packet__cleanup [function] [call site] 00180
4 mosquitto_FREE [function] [call site] 00181
3 context__cleanup_out_packets [function] [call site] 00182
3 gai_cancel [function] [call site] 00183
3 mosquitto_FREE [function] [call site] 00184
3 mosquitto_FREE [function] [call site] 00185
3 mosquitto_FREE [function] [call site] 00186
3 mosquitto_FREE [function] [call site] 00187
3 mosquitto_FREE [function] [call site] 00188
2 free [function] [call site] 00189