Fuzz introspector: broker_fuzz_handle_connect
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
55 78 fuzz_packet_read_base call site: 00078 bridge__cleanup
53 3 fuzz_packet_read_base call site: 00003 mosquitto_fopen
17 175 db__messages_delete_list call site: 00175 context__send_will
12 158 context__cleanup call site: 00158 tmp_remove_subs
8 69 fuzz_packet_read_base call site: 00069 free
6 208 context__cleanup call site: 00208 HASH_FIND
3 142 context__cleanup call site: 00142 DL_DELETE2
3 198 mosquitto_property_free call site: 00198 mosquitto_FREE
3 218 context__cleanup call site: 00218 mosquitto_FREE
2 148 context__cleanup_out_packets call site: 00148 UNUSED
2 155 context__cleanup call site: 00155 UNUSED
1 60 fuzz_packet_read_base call site: 00060 mosquitto_calloc

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_packet_read_base [function] [call site] 00001
2 calloc [function] [call site] 00002
2 log__init [function] [call site] 00003
3 openlog [function] [call site] 00004
3 OpenEventLog [function] [call site] 00005
3 mosquitto_fopen [function] [call site] 00006
4 ExpandEnvironmentStringsA [function] [call site] 00007
4 GetUserNameA [function] [call site] 00008
4 InitializeSecurityDescriptor [function] [call site] 00009
4 BuildExplicitAccessWithNameA [function] [call site] 00010
4 SetEntriesInAclA [function] [call site] 00011
4 SetSecurityDescriptorDacl [function] [call site] 00012
4 LocalFree [function] [call site] 00013
4 memset [function] [call site] 00014
4 CreateFileA [function] [call site] 00015
4 LocalFree [function] [call site] 00016
4 _open_osfhandle [function] [call site] 00017
4 _fdopen [function] [call site] 00018
4 _close [function] [call site] 00019
4 fseek [function] [call site] 00020
4 fopen [function] [call site] 00021
4 umask [function] [call site] 00022
4 strlen [function] [call site] 00023
4 open [function] [call site] 00024
4 fdopen [function] [call site] 00025
4 umask [function] [call site] 00026
4 fopen [function] [call site] 00027
4 fstat [function] [call site] 00028
4 fileno [function] [call site] 00029
4 fclose [function] [call site] 00030
4 fprintf [function] [call site] 00031
4 getuid [function] [call site] 00032
4 getpwuid_r [function] [call site] 00033
4 getuid [function] [call site] 00034
4 fprintf [function] [call site] 00035
4 getgid [function] [call site] 00036
4 getgrgid_r [function] [call site] 00037
4 getgid [function] [call site] 00038
4 fprintf [function] [call site] 00039
4 S_ISREG [function] [call site] 00040
4 fprintf [function] [call site] 00041
4 fclose [function] [call site] 00042
3 setvbuf [function] [call site] 00043
3 log__printf [function] [call site] 00044
4 UNUSED [function] [call site] 00045
4 UNUSED [function] [call site] 00046
4 UNUSED [function] [call site] 00047
3 setvbuf [function] [call site] 00048
3 dlt_fifo_check [function] [call site] 00049
4 memset [function] [call site] 00050
4 stat [function] [call site] 00051
4 S_ISFIFO [function] [call site] 00052
4 open [function] [call site] 00053
4 close [function] [call site] 00054
3 DLT_REGISTER_APP [function] [call site] 00055
3 dlt_register_context [function] [call site] 00056
2 memset [function] [call site] 00057
2 memset [function] [call site] 00058
2 memset [function] [call site] 00059
2 context__init [function] [call site] 00060
3 mosquitto_calloc [function] [call site] 00061
4 mosquitto_malloc [function] [call site] 00062
4 memset [function] [call site] 00063
2 malloc [function] [call site] 00064
2 memcpy [function] [call site] 00065
2 fuzz_packet_read_init [function] [call site] 00066
3 strdup [function] [call site] 00067
2 packet_func [function] [call site] 00068
2 fuzz_packet_read_cleanup [function] [call site] 00069
3 free [function] [call site] 00070
4 malloc_usable_size [function] [call site] 00071
4 check_alloc_marker [function] [call site] 00072
5 strncmp [function] [call site] 00073
4 __libc_free [function] [call site] 00074
4 trigger_alloc_mismatch [function] [call site] 00075
5 strncmp [function] [call site] 00076
5 abort [function] [call site] 00077
2 context__cleanup [function] [call site] 00078
3 bridge__cleanup [function] [call site] 00079
4 assert [function] [call site] 00080
4 mosquitto_FREE [function] [call site] 00081
4 mosquitto_realloc [function] [call site] 00082
5 malloc_usable_size [function] [call site] 00083
5 check_alloc_marker [function] [call site] 00084
5 realloc [function] [call site] 00085
5 trigger_alloc_mismatch [function] [call site] 00086
5 malloc_usable_size [function] [call site] 00087
5 set_alloc_marker [function] [call site] 00088
6 memcpy [function] [call site] 00089
4 mosquitto_FREE [function] [call site] 00090
4 mosquitto_FREE [function] [call site] 00091
4 mosquitto_FREE [function] [call site] 00092
4 mosquitto_FREE [function] [call site] 00093
4 mosquitto_FREE [function] [call site] 00094
4 mosquitto_FREE [function] [call site] 00095
4 mosquitto_FREE [function] [call site] 00096
4 mosquitto_FREE [function] [call site] 00097
4 mosquitto_FREE [function] [call site] 00098
4 SSL_CTX_free [function] [call site] 00099
4 mosquitto_FREE [function] [call site] 00100
4 mosquitto_FREE [function] [call site] 00101
4 config__bridge_cleanup [function] [call site] 00102
5 mosquitto_FREE [function] [call site] 00103
5 mosquitto_FREE [function] [call site] 00104
5 mosquitto_FREE [function] [call site] 00105
5 mosquitto_FREE [function] [call site] 00106
5 mosquitto_FREE [function] [call site] 00107
5 mosquitto_FREE [function] [call site] 00108
5 mosquitto_FREE [function] [call site] 00109
5 mosquitto_FREE [function] [call site] 00110
5 mosquitto_FREE [function] [call site] 00111
5 mosquitto_FREE [function] [call site] 00112
5 LL_FOREACH_SAFE [function] [call site] 00113
5 mosquitto_FREE [function] [call site] 00114
5 mosquitto_FREE [function] [call site] 00115
5 mosquitto_FREE [function] [call site] 00116
5 mosquitto_FREE [function] [call site] 00117
5 mosquitto_FREE [function] [call site] 00118
5 LL_DELETE [function] [call site] 00119
5 mosquitto_FREE [function] [call site] 00120
5 mosquitto_FREE [function] [call site] 00121
5 mosquitto_FREE [function] [call site] 00122
5 mosquitto_FREE [function] [call site] 00123
5 mosquitto_FREE [function] [call site] 00124
5 mosquitto_FREE [function] [call site] 00125
5 mosquitto_FREE [function] [call site] 00126
5 mosquitto_FREE [function] [call site] 00127
5 mosquitto_FREE [function] [call site] 00128
5 mosquitto_FREE [function] [call site] 00129
5 mosquitto_FREE [function] [call site] 00130
5 mosquitto_FREE [function] [call site] 00131
5 mosquitto_FREE [function] [call site] 00132
5 mosquitto_FREE [function] [call site] 00133
3 mosquitto_FREE [function] [call site] 00134
3 alias__free_all [function] [call site] 00135
4 alias__free_r2l [function] [call site] 00136
5 mosquitto_FREE [function] [call site] 00137
5 mosquitto_FREE [function] [call site] 00138
4 alias__free_l2r [function] [call site] 00139
5 mosquitto_FREE [function] [call site] 00140
5 mosquitto_FREE [function] [call site] 00141
3 keepalive__remove [function] [call site] 00142
4 calc_index [function] [call site] 00143
4 DL_DELETE2 [function] [call site] 00144
4 UNUSED [function] [call site] 00145
3 context__cleanup_out_packets [function] [call site] 00146
4 mosquitto_free [function] [call site] 00147
4 metrics__int_dec [function] [call site] 00148
5 UNUSED [function] [call site] 00149
5 UNUSED [function] [call site] 00150
4 metrics__int_dec [function] [call site] 00151
3 mosquitto_FREE [function] [call site] 00152
3 mosquitto_FREE [function] [call site] 00153
3 mosquitto_FREE [function] [call site] 00154
3 net__socket_close [function] [call site] 00155
4 UNUSED [function] [call site] 00156
4 UNUSED [function] [call site] 00157
3 sub__clean_session [function] [call site] 00158
4 plugin_persist__handle_subscription_delete [function] [call site] 00159
5 UNUSED [function] [call site] 00160
5 UNUSED [function] [call site] 00161
4 sub__remove_shared_leaf [function] [call site] 00162
5 DL_DELETE [function] [call site] 00163
5 HASH_DELETE [function] [call site] 00164
5 mosquitto_FREE [function] [call site] 00165
4 DL_DELETE [function] [call site] 00166
4 mosquitto_FREE [function] [call site] 00167
4 tmp_remove_subs [function] [call site] 00168
5 HASH_DELETE [function] [call site] 00169
5 mosquitto_FREE [function] [call site] 00170
4 mosquitto_FREE [function] [call site] 00171
3 db__messages_delete [function] [call site] 00172
4 db__messages_delete_incoming [function] [call site] 00173
5 db__messages_delete_list [function] [call site] 00174
6 DL_FOREACH_SAFE [function] [call site] 00175
7 DL_DELETE [function] [call site] 00176
7 context__send_will [function] [call site] 00177
8 UNUSED [function] [call site] 00178
7 mosquitto_FREE [function] [call site] 00179
6 DL_DELETE [function] [call site] 00180
6 db__msg_store_ref_dec [function] [call site] 00181
7 db__msg_store_remove [function] [call site] 00182
8 HASH_DELETE [function] [call site] 00183
8 plugin_persist__handle_base_msg_delete [function] [call site] 00184
9 UNUSED [function] [call site] 00185
8 db__msg_store_free [function] [call site] 00186
9 mosquitto_FREE [function] [call site] 00187
9 mosquitto_FREE [function] [call site] 00188
9 mosquitto_FREE [function] [call site] 00189
9 mosquitto_FREE [function] [call site] 00190
9 mosquitto_FREE [function] [call site] 00191
9 mosquitto_property_free_all [function] [call site] 00192
10 mosquitto_property_free [function] [call site] 00193
11 mosquitto_FREE [function] [call site] 00194
11 mosquitto_FREE [function] [call site] 00195
11 mosquitto_FREE [function] [call site] 00196
11 mosquitto_FREE [function] [call site] 00197
11 mosquitto_FREE [function] [call site] 00198
9 mosquitto_FREE [function] [call site] 00199
9 mosquitto_FREE [function] [call site] 00200
6 mosquitto_FREE [function] [call site] 00201
5 db__messages_delete_list [function] [call site] 00202
4 db__messages_delete_outgoing [function] [call site] 00203
5 db__messages_delete_list [function] [call site] 00204
5 db__messages_delete_list [function] [call site] 00205
3 mosquitto_FREE [function] [call site] 00206
3 context__send_will [function] [call site] 00207
3 context__remove_from_by_id [function] [call site] 00208
4 HASH_FIND [function] [call site] 00209
4 strlen [function] [call site] 00210
4 HASH_DELETE [function] [call site] 00211
4 HASH_FIND [function] [call site] 00212
4 strlen [function] [call site] 00213
4 HASH_DELETE [function] [call site] 00214
3 mosquitto_FREE [function] [call site] 00215
3 packet__cleanup [function] [call site] 00216
4 mosquitto_FREE [function] [call site] 00217
3 context__cleanup_out_packets [function] [call site] 00218
3 gai_cancel [function] [call site] 00219
3 mosquitto_FREE [function] [call site] 00220
3 mosquitto_FREE [function] [call site] 00221
3 mosquitto_FREE [function] [call site] 00222
3 mosquitto_FREE [function] [call site] 00223
3 mosquitto_FREE [function] [call site] 00224
2 free [function] [call site] 00225