Fuzz introspector: broker_fuzz_queue_msg
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
53 3 LLVMFuzzerTestOneInput call site: 00003 mosquitto_fopen
19 103 db__msg_store_clean call site: 00103 db__msg_store_remove
17 78 subhier_clean call site: 00078 sub__tree_print
7 68 LLVMFuzzerTestOneInput call site: 00068 trigger_alloc_mismatch
4 63 LLVMFuzzerTestOneInput call site: 00063 UNUSED
1 100 db__close call site: 00100 UNUSED

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mosquitto_pub_topic_check2 [function] [call site] 00001
1 log__init [function] [call site] 00003
2 OpenEventLog [function] [call site] 00005
2 mosquitto_fopen [function] [call site] 00006
2 DLT_REGISTER_APP [function] [call site] 00055
2 dlt_register_context [function] [call site] 00056
1 db__open [function] [call site] 00057
2 sub__init [function] [call site] 00058
2 retain__init [function] [call site] 00059
2 persist__restore [function] [call site] 00060
1 free [function] [call site] 00068
2 malloc_usable_size [function] [call site] 00069
2 check_alloc_marker [function] [call site] 00070
2 __libc_free [function] [call site] 00072
2 trigger_alloc_mismatch [function] [call site] 00073
1 db__close [function] [call site] 00076
2 subhier_clean [function] [call site] 00077
3 HASH_ITER [function] [call site] 00078
4 MQTT_SUB_OPT_GET_QOS [function] [call site] 00082
4 MQTT_SUB_OPT_GET_QOS [function] [call site] 00084
4 sub__tree_print [function] [call site] 00086
5 MQTT_SUB_OPT_GET_QOS [function] [call site] 00090
5 MQTT_SUB_OPT_GET_QOS [function] [call site] 00092
5 sub__tree_print [function] [call site] 00094
3 mosquitto_FREE [function] [call site] 00095
3 subhier_clean [function] [call site] 00096
3 HASH_DELETE [function] [call site] 00097
3 mosquitto_FREE [function] [call site] 00098
2 subhier_clean [function] [call site] 00099
2 retain__clean [function] [call site] 00100
2 db__msg_store_clean [function] [call site] 00102
3 HASH_ITER [function] [call site] 00103
3 db__msg_store_remove [function] [call site] 00104
4 HASH_DELETE [function] [call site] 00105
4 plugin_persist__handle_base_msg_delete [function] [call site] 00106
4 db__msg_store_free [function] [call site] 00108
5 mosquitto_FREE [function] [call site] 00109
5 mosquitto_FREE [function] [call site] 00110
5 mosquitto_FREE [function] [call site] 00111
5 mosquitto_FREE [function] [call site] 00112
5 mosquitto_FREE [function] [call site] 00113
5 mosquitto_property_free_all [function] [call site] 00114
6 mosquitto_property_free [function] [call site] 00115
7 mosquitto_FREE [function] [call site] 00116
7 mosquitto_FREE [function] [call site] 00117
7 mosquitto_FREE [function] [call site] 00118
7 mosquitto_FREE [function] [call site] 00119
7 mosquitto_FREE [function] [call site] 00120
5 mosquitto_FREE [function] [call site] 00121
5 mosquitto_FREE [function] [call site] 00122