Fuzz introspector: broker_fuzz_queue_msg
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
18 4 LLVMFuzzerTestOneInput call site: 00004 mosquitto_fopen
17 44 subhier_clean call site: 00044 sub__tree_print
14 69 db__msg_store_clean call site: 00069 db__msg_store_remove
7 34 LLVMFuzzerTestOneInput call site: 00034 trigger_alloc_mismatch
4 29 LLVMFuzzerTestOneInput call site: 00029 UNUSED
1 1 LLVMFuzzerTestOneInput call site: 00001
1 66 db__close call site: 00066 UNUSED

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mosquitto_pub_topic_check2 [function] [call site] 00001
2 LibMosquittoCommonMock::get_mock [function] [call site] 00002
1 log__init [function] [call site] 00004
2 OpenEventLog [function] [call site] 00006
2 mosquitto_fopen [function] [call site] 00007
3 LibMosquittoCommonMock::get_mock [function] [call site] 00008
2 DLT_REGISTER_APP [function] [call site] 00021
2 dlt_register_context [function] [call site] 00022
1 db__open [function] [call site] 00023
2 sub__init [function] [call site] 00024
2 retain__init [function] [call site] 00025
2 persist__restore [function] [call site] 00026
1 free [function] [call site] 00034
2 malloc_usable_size [function] [call site] 00035
2 check_alloc_marker [function] [call site] 00036
2 __libc_free [function] [call site] 00038
2 trigger_alloc_mismatch [function] [call site] 00039
1 db__close [function] [call site] 00042
2 subhier_clean [function] [call site] 00043
3 HASH_ITER [function] [call site] 00044
4 MQTT_SUB_OPT_GET_QOS [function] [call site] 00048
4 MQTT_SUB_OPT_GET_QOS [function] [call site] 00050
4 sub__tree_print [function] [call site] 00052
5 MQTT_SUB_OPT_GET_QOS [function] [call site] 00056
5 MQTT_SUB_OPT_GET_QOS [function] [call site] 00058
5 sub__tree_print [function] [call site] 00060
3 mosquitto_FREE [function] [call site] 00061
3 subhier_clean [function] [call site] 00062
3 HASH_DELETE [function] [call site] 00063
3 mosquitto_FREE [function] [call site] 00064
2 subhier_clean [function] [call site] 00065
2 retain__clean [function] [call site] 00066
2 db__msg_store_clean [function] [call site] 00068
3 HASH_ITER [function] [call site] 00069
3 db__msg_store_remove [function] [call site] 00070
4 HASH_DELETE [function] [call site] 00071
4 plugin_persist__handle_base_msg_delete [function] [call site] 00072
4 db__msg_store_free [function] [call site] 00074
5 mosquitto_FREE [function] [call site] 00075
5 mosquitto_FREE [function] [call site] 00076
5 mosquitto_FREE [function] [call site] 00077
5 mosquitto_FREE [function] [call site] 00078
5 mosquitto_FREE [function] [call site] 00079
5 mosquitto_property_free_all [function] [call site] 00080
6 LibMosquittoCommonMock::get_mock [function] [call site] 00081
5 mosquitto_FREE [function] [call site] 00082
5 mosquitto_FREE [function] [call site] 00083