Fuzz introspector: broker_fuzz_handle_auth
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
49 42 fuzz_packet_read_base call site: 00042 bridge__cleanup
21 134 db__messages_delete_list call site: 00134 context__send_will
18 3 fuzz_packet_read_base call site: 00003 mosquitto_fopen
12 117 context__cleanup call site: 00117 tmp_remove_subs
8 161 context__cleanup call site: 00161 context__remove_from_by_id
7 34 fuzz_packet_read_cleanup call site: 00034 trigger_alloc_mismatch
3 100 context__cleanup call site: 00100 DL_DELETE2
3 172 context__cleanup call site: 00172 mosquitto_FREE
2 25 fuzz_packet_read_base call site: 00025 mosquitto_calloc
2 107 context__cleanup_out_packets call site: 00107 UNUSED
2 114 context__cleanup call site: 00114 UNUSED
1 94 alias__free_all call site: 00094 mosquitto_FREE

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_packet_read_base [function] [call site] 00001
2 calloc [function] [call site] 00002
2 log__init [function] [call site] 00003
3 openlog [function] [call site] 00004
3 OpenEventLog [function] [call site] 00005
3 mosquitto_fopen [function] [call site] 00006
4 LibMosquittoCommonMock::get_mock [function] [call site] 00007
3 setvbuf [function] [call site] 00008
3 log__printf [function] [call site] 00009
4 UNUSED [function] [call site] 00010
4 UNUSED [function] [call site] 00011
4 UNUSED [function] [call site] 00012
3 setvbuf [function] [call site] 00013
3 dlt_fifo_check [function] [call site] 00014
4 memset [function] [call site] 00015
4 stat [function] [call site] 00016
4 S_ISFIFO [function] [call site] 00017
4 open [function] [call site] 00018
4 close [function] [call site] 00019
3 DLT_REGISTER_APP [function] [call site] 00020
3 dlt_register_context [function] [call site] 00021
2 memset [function] [call site] 00022
2 memset [function] [call site] 00023
2 memset [function] [call site] 00024
2 context__init [function] [call site] 00025
3 mosquitto_calloc [function] [call site] 00026
4 LibMosquittoCommonMock::get_mock [function] [call site] 00027
2 malloc [function] [call site] 00028
2 memcpy [function] [call site] 00029
2 fuzz_packet_read_init [function] [call site] 00030
3 strdup [function] [call site] 00031
2 packet_func [function] [call site] 00032
2 fuzz_packet_read_cleanup [function] [call site] 00033
3 free [function] [call site] 00034
4 malloc_usable_size [function] [call site] 00035
4 check_alloc_marker [function] [call site] 00036
5 strncmp [function] [call site] 00037
4 __libc_free [function] [call site] 00038
4 trigger_alloc_mismatch [function] [call site] 00039
5 strncmp [function] [call site] 00040
5 abort [function] [call site] 00041
2 context__cleanup [function] [call site] 00042
3 bridge__cleanup [function] [call site] 00043
4 assert [function] [call site] 00044
4 mosquitto_FREE [function] [call site] 00045
4 mosquitto_realloc [function] [call site] 00046
5 LibMosquittoCommonMock::get_mock [function] [call site] 00047
4 mosquitto_FREE [function] [call site] 00048
4 mosquitto_FREE [function] [call site] 00049
4 mosquitto_FREE [function] [call site] 00050
4 mosquitto_FREE [function] [call site] 00051
4 mosquitto_FREE [function] [call site] 00052
4 mosquitto_FREE [function] [call site] 00053
4 mosquitto_FREE [function] [call site] 00054
4 mosquitto_FREE [function] [call site] 00055
4 mosquitto_FREE [function] [call site] 00056
4 SSL_CTX_free [function] [call site] 00057
4 mosquitto_FREE [function] [call site] 00058
4 mosquitto_FREE [function] [call site] 00059
4 config__bridge_cleanup [function] [call site] 00060
5 mosquitto_FREE [function] [call site] 00061
5 mosquitto_FREE [function] [call site] 00062
5 mosquitto_FREE [function] [call site] 00063
5 mosquitto_FREE [function] [call site] 00064
5 mosquitto_FREE [function] [call site] 00065
5 mosquitto_FREE [function] [call site] 00066
5 mosquitto_FREE [function] [call site] 00067
5 mosquitto_FREE [function] [call site] 00068
5 mosquitto_FREE [function] [call site] 00069
5 mosquitto_FREE [function] [call site] 00070
5 LL_FOREACH_SAFE [function] [call site] 00071
5 mosquitto_FREE [function] [call site] 00072
5 mosquitto_FREE [function] [call site] 00073
5 mosquitto_FREE [function] [call site] 00074
5 mosquitto_FREE [function] [call site] 00075
5 mosquitto_FREE [function] [call site] 00076
5 LL_DELETE [function] [call site] 00077
5 mosquitto_FREE [function] [call site] 00078
5 mosquitto_FREE [function] [call site] 00079
5 mosquitto_FREE [function] [call site] 00080
5 mosquitto_FREE [function] [call site] 00081
5 mosquitto_FREE [function] [call site] 00082
5 mosquitto_FREE [function] [call site] 00083
5 mosquitto_FREE [function] [call site] 00084
5 mosquitto_FREE [function] [call site] 00085
5 mosquitto_FREE [function] [call site] 00086
5 mosquitto_FREE [function] [call site] 00087
5 mosquitto_FREE [function] [call site] 00088
5 mosquitto_FREE [function] [call site] 00089
5 mosquitto_FREE [function] [call site] 00090
5 mosquitto_FREE [function] [call site] 00091
3 mosquitto_FREE [function] [call site] 00092
3 alias__free_all [function] [call site] 00093
4 alias__free_r2l [function] [call site] 00094
5 mosquitto_FREE [function] [call site] 00095
5 mosquitto_FREE [function] [call site] 00096
4 alias__free_l2r [function] [call site] 00097
5 mosquitto_FREE [function] [call site] 00098
5 mosquitto_FREE [function] [call site] 00099
3 keepalive__remove [function] [call site] 00100
4 calc_index [function] [call site] 00101
4 DL_DELETE2 [function] [call site] 00102
4 UNUSED [function] [call site] 00103
3 context__cleanup_out_packets [function] [call site] 00104
4 mosquitto_free [function] [call site] 00105
5 LibMosquittoCommonMock::get_mock [function] [call site] 00106
4 metrics__int_dec [function] [call site] 00107
5 UNUSED [function] [call site] 00108
5 UNUSED [function] [call site] 00109
4 metrics__int_dec [function] [call site] 00110
3 mosquitto_FREE [function] [call site] 00111
3 mosquitto_FREE [function] [call site] 00112
3 mosquitto_FREE [function] [call site] 00113
3 net__socket_close [function] [call site] 00114
4 UNUSED [function] [call site] 00115
4 UNUSED [function] [call site] 00116
3 sub__clean_session [function] [call site] 00117
4 plugin_persist__handle_subscription_delete [function] [call site] 00118
5 UNUSED [function] [call site] 00119
5 UNUSED [function] [call site] 00120
4 sub__remove_shared_leaf [function] [call site] 00121
5 DL_DELETE [function] [call site] 00122
5 HASH_DELETE [function] [call site] 00123
5 mosquitto_FREE [function] [call site] 00124
4 DL_DELETE [function] [call site] 00125
4 mosquitto_FREE [function] [call site] 00126
4 tmp_remove_subs [function] [call site] 00127
5 HASH_DELETE [function] [call site] 00128
5 mosquitto_FREE [function] [call site] 00129
4 mosquitto_FREE [function] [call site] 00130
3 db__messages_delete [function] [call site] 00131
4 db__messages_delete_incoming [function] [call site] 00132
5 db__messages_delete_list [function] [call site] 00133
6 DL_FOREACH_SAFE [function] [call site] 00134
7 DL_DELETE [function] [call site] 00135
7 context__send_will [function] [call site] 00136
8 UNUSED [function] [call site] 00137
7 mosquitto_FREE [function] [call site] 00138
6 DL_DELETE [function] [call site] 00139
6 db__msg_store_ref_dec [function] [call site] 00140
7 db__msg_store_remove [function] [call site] 00141
8 HASH_DELETE [function] [call site] 00142
8 plugin_persist__handle_base_msg_delete [function] [call site] 00143
9 UNUSED [function] [call site] 00144
8 db__msg_store_free [function] [call site] 00145
9 mosquitto_FREE [function] [call site] 00146
9 mosquitto_FREE [function] [call site] 00147
9 mosquitto_FREE [function] [call site] 00148
9 mosquitto_FREE [function] [call site] 00149
9 mosquitto_FREE [function] [call site] 00150
9 mosquitto_property_free_all [function] [call site] 00151
10 LibMosquittoCommonMock::get_mock [function] [call site] 00152
9 mosquitto_FREE [function] [call site] 00153
9 mosquitto_FREE [function] [call site] 00154
6 mosquitto_FREE [function] [call site] 00155
5 db__messages_delete_list [function] [call site] 00156
4 db__messages_delete_outgoing [function] [call site] 00157
5 db__messages_delete_list [function] [call site] 00158
5 db__messages_delete_list [function] [call site] 00159
3 mosquitto_FREE [function] [call site] 00160
3 context__send_will [function] [call site] 00161
3 context__remove_from_by_id [function] [call site] 00162
4 HASH_FIND [function] [call site] 00163
4 strlen [function] [call site] 00164
4 HASH_DELETE [function] [call site] 00165
4 HASH_FIND [function] [call site] 00166
4 strlen [function] [call site] 00167
4 HASH_DELETE [function] [call site] 00168
3 mosquitto_FREE [function] [call site] 00169
3 packet__cleanup [function] [call site] 00170
4 mosquitto_FREE [function] [call site] 00171
3 context__cleanup_out_packets [function] [call site] 00172
3 gai_cancel [function] [call site] 00173
3 mosquitto_FREE [function] [call site] 00174
3 mosquitto_FREE [function] [call site] 00175
3 mosquitto_FREE [function] [call site] 00176
3 mosquitto_FREE [function] [call site] 00177
3 mosquitto_FREE [function] [call site] 00178
2 free [function] [call site] 00179