Fuzz introspector: mpv/subprojects/expat-2.7.1/fuzz/xml_parse_fuzzer.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
186 0 EP call site: {node_id} ParseOneInput

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 XML_ParserCreate [function] [call site] 00001
2 XML_ParserCreate_MM [function] [call site] 00002
3 parserCreate [function] [call site] 00003
4 malloc [call site] 00004
4 MALLOC [call site] 00005
4 FREE [call site] 00006
4 MALLOC [call site] 00007
4 FREE [call site] 00008
4 FREE [call site] 00009
4 MALLOC [call site] 00010
4 FREE [call site] 00011
4 FREE [call site] 00012
4 FREE [call site] 00013
4 dtdCreate [function] [call site] 00014
5 hashTableInit [function] [call site] 00017
5 hashTableInit [function] [call site] 00018
5 hashTableInit [function] [call site] 00019
5 hashTableInit [function] [call site] 00020
5 hashTableInit [function] [call site] 00021
4 FREE [call site] 00022
4 FREE [call site] 00023
4 FREE [call site] 00024
4 FREE [call site] 00025
4 parserInit [function] [call site] 00028
5 XmlPrologStateInit [function] [call site] 00029
5 copyString [function] [call site] 00030
6 memcpy [call site] 00031
5 XmlInitEncoding [call site] 00032
5 memset [call site] 00033
5 memset [call site] 00034
5 getDebugLevel [function] [call site] 00035
6 getenv [call site] 00036
6 strtoul [call site] 00037
5 memset [call site] 00038
5 getDebugLevel [function] [call site] 00039
4 XML_ParserFree [function] [call site] 00040
5 FREE [call site] 00041
5 destroyBindings [function] [call site] 00042
6 FREE [call site] 00043
6 FREE [call site] 00044
5 FREE [call site] 00045
5 FREE [call site] 00046
5 FREE [call site] 00047
5 FREE [call site] 00048
5 destroyBindings [function] [call site] 00049
5 destroyBindings [function] [call site] 00050
5 poolDestroy [function] [call site] 00051
5 poolDestroy [function] [call site] 00052
5 FREE [call site] 00053
5 dtdDestroy [function] [call site] 00054
6 hashTableIterInit [function] [call site] 00055
6 hashTableIterNext [function] [call site] 00056
6 hashTableDestroy [function] [call site] 00057
6 hashTableDestroy [function] [call site] 00058
6 hashTableDestroy [function] [call site] 00059
6 hashTableDestroy [function] [call site] 00060
6 hashTableDestroy [function] [call site] 00061
6 poolDestroy [function] [call site] 00062
6 poolDestroy [function] [call site] 00063
5 FREE [call site] 00064
5 FREE [call site] 00065
5 FREE [call site] 00066
5 FREE [call site] 00067
5 FREE [call site] 00068
5 FREE [call site] 00069
5 FREE [call site] 00070
5 FREE [call site] 00071
4 XmlGetInternalEncodingNS [call site] 00072
4 XmlGetInternalEncoding [call site] 00073
1 xstr [call site] 00074
1 assert [call site] 00075
1 ParseOneInput [call site] 00076
1 XML_ParserCreateNS [function] [call site] 00077
2 XML_ParserCreate_MM [function] [call site] 00078
1 assert [call site] 00079
1 ParseOneInput [call site] 00080
1 XML_ParserFree [function] [call site] 00081
1 XML_ExternalEntityParserCreate [function] [call site] 00082
2 parserCreate [function] [call site] 00083
2 parserCreate [function] [call site] 00084
2 dtdCopy [function] [call site] 00085
3 hashTableIterInit [function] [call site] 00086
3 hashTableIterNext [function] [call site] 00087
3 poolCopyString [function] [call site] 00088
4 poolAppendChar [call site] 00089
4 poolFinish [call site] 00090
3 lookup [function] [call site] 00091
4 memset [call site] 00092
4 hash [call site] 00093
4 hash [call site] 00094
4 PROBE_STEP [call site] 00096
4 memset [call site] 00097
4 hash [call site] 00098
4 PROBE_STEP [call site] 00099
4 PROBE_STEP [call site] 00100
4 memset [call site] 00101
3 hashTableIterInit [function] [call site] 00102
3 hashTableIterNext [function] [call site] 00103
3 poolAppendChar [call site] 00104
3 XML_T [call site] 00105
3 poolCopyString [function] [call site] 00106
3 hashTableIterInit [function] [call site] 00109
3 hashTableIterNext [function] [call site] 00110
3 poolCopyString [function] [call site] 00111
3 poolCopyString [function] [call site] 00116
3 copyEntityTable [function] [call site] 00117
4 hashTableIterInit [function] [call site] 00118
4 hashTableIterNext [function] [call site] 00119
4 poolCopyString [function] [call site] 00120
4 poolCopyString [function] [call site] 00122
4 poolCopyString [function] [call site] 00123
4 poolCopyString [function] [call site] 00124
4 poolCopyStringN [function] [call site] 00125
5 poolGrow [function] [call site] 00126
6 memcpy [call site] 00127
6 poolBytesToAllocateFor [function] [call site] 00128
6 poolBytesToAllocateFor [function] [call site] 00129
6 memcpy [call site] 00130
5 poolAppendChar [call site] 00131
5 poolFinish [call site] 00132
4 poolCopyString [function] [call site] 00133
3 copyEntityTable [function] [call site] 00134
2 setContext [function] [call site] 00135
3 XML_T [call site] 00136
3 XML_T [call site] 00137
3 poolAppendChar [call site] 00138
3 XML_T [call site] 00139
3 poolStart [call site] 00141
3 XML_T [call site] 00142
3 poolDiscard [call site] 00143
3 XML_T [call site] 00144
3 poolLength [call site] 00145
3 poolAppendChar [call site] 00146
3 XML_T [call site] 00147
3 poolStart [call site] 00149
3 poolStart [call site] 00150
3 poolCopyString [function] [call site] 00151
3 poolDiscard [call site] 00152
3 XML_T [call site] 00153
3 poolAppendChar [call site] 00154
3 poolAppendChar [call site] 00155
3 XML_T [call site] 00156
3 addBinding [function] [call site] 00157
4 XML_T [call site] 00158
4 XML_T [call site] 00159
4 XML_T [call site] 00160
4 XML_T [call site] 00161
4 XML_T [call site] 00162
4 XML_T [call site] 00163
4 XML_T [call site] 00164
4 XML_T [call site] 00165
4 is_rfc3986_uri_char [function] [call site] 00166
4 REALLOC [call site] 00167
4 MALLOC [call site] 00168
4 MALLOC [call site] 00169
4 FREE [call site] 00170
4 memcpy [call site] 00171
4 XML_T [call site] 00172
3 poolStart [call site] 00173
3 poolDiscard [call site] 00174
3 XML_T [call site] 00175
3 poolAppendChar [call site] 00176
2 XML_ParserFree [function] [call site] 00177
2 XmlPrologStateInitExternalEntity [function] [call site] 00178
1 assert [call site] 00179
1 ParseOneInput [call site] 00180
1 XML_ParserFree [function] [call site] 00181
1 XML_ExternalEntityParserCreate [function] [call site] 00182
1 assert [call site] 00183
1 ParseOneInput [call site] 00184
1 XML_ParserFree [function] [call site] 00185
1 XML_ParserFree [function] [call site] 00186