Fuzz introspector: mruby_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
5745 0 EP call site: {node_id} mrb_load_string

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mrb_open [function] [call site] 00001
2 mrb_open_allocf [function] [call site] 00002
3 mrb_open_core [function] [call site] 00003
4 mrb_default_allocf [function] [call site] 00004
5 realloc [call site] 00005
4 mrb_core_init_protect [function] [call site] 00006
5 _setjmp [call site] 00007
5 mrb_print_error [function] [call site] 00008
6 _setjmp [call site] 00009
6 mrb_print_backtrace [function] [call site] 00010
7 mrb_unpack_backtrace [function] [call site] 00011
8 mrb_ary_new_capa [function] [call site] 00012
9 ary_new_capa [function] [call site] 00013
10 ary_check_too_big [function] [call site] 00014
11 ary_too_big [function] [call site] 00015
12 mrb_exc_get_id [function] [call site] 00016
13 mrb_obj_value [function] [call site] 00017
13 mrb_const_get [function] [call site] 00018
14 mod_const_check [function] [call site] 00019
15 mrb_type [function] [call site] 00020
16 mrb_val_union [function] [call site] 00021
15 mrb_exc_get_id [function] [call site] 00022
16 mrb_val_union [function] [call site] 00023
16 mrb_raise [function] [call site] 00024
17 mrb_str_new_cstr [function] [call site] 00025
18 strlen [call site] 00026
18 str_new [function] [call site] 00027
19 str_check_length [function] [call site] 00028
20 mrb_exc_get_id [function] [call site] 00029
21 mrb_val_union [function] [call site] 00030
20 mrb_raise [function] [call site] 00031
21 mrb_exc_new_str [function] [call site] 00032
22 mrb_ensure_string_type [function] [call site] 00033
23 mrb_val_union [function] [call site] 00034
23 mrb_exc_get_id [function] [call site] 00035
23 mrb_raisef [function] [call site] 00036
24 error_va [function] [call site] 00037
25 mrb_vformat [function] [call site] 00038
26 mrb_str_new_capa [function] [call site] 00039
27 mrb_obj_alloc [function] [call site] 00040
28 mrb_exc_get_id [function] [call site] 00041
28 mrb_raise [function] [call site] 00042
28 mrb_exc_get_id [function] [call site] 00043
28 mrb_raisef [function] [call site] 00044
29 mrb_exc_raise [function] [call site] 00045
30 mrb_val_union [function] [call site] 00046
30 mrb_val_union [function] [call site] 00047
30 mrb_type [function] [call site] 00048
30 mrb_exc_get_id [function] [call site] 00049
30 mrb_raise [function] [call site] 00050
30 mrb_exc_set [function] [call site] 00051
31 mrb_val_union [function] [call site] 00052
31 mrb_keep_backtrace [function] [call site] 00053
32 mrb_val_union [function] [call site] 00054
32 packed_backtrace [function] [call site] 00055
33 each_backtrace [function] [call site] 00056
33 mrb_data_object_alloc [function] [call site] 00057
34 mrb_obj_alloc [function] [call site] 00058
35 mrb_exc_get_id [function] [call site] 00059
35 mrb_raisef [function] [call site] 00060
35 mrb_incremental_gc [function] [call site] 00061
36 incremental_gc_finish [function] [call site] 00062
37 incremental_gc [function] [call site] 00063
38 root_scan_phase [function] [call site] 00064
39 mrb_gc_mark_gv [function] [call site] 00065
40 mark_tbl [function] [call site] 00066
41 iv_foreach [function] [call site] 00067
39 mrb_gc_mark [function] [call site] 00068
40 add_gray_list [function] [call site] 00069
39 mrb_gc_mark [function] [call site] 00070
39 mrb_gc_mark [function] [call site] 00071
39 mrb_gc_mark [function] [call site] 00072
39 mrb_gc_mark [function] [call site] 00073
39 mrb_gc_mark [function] [call site] 00074
39 mrb_gc_mark [function] [call site] 00075
39 mrb_gc_mark [function] [call site] 00076
39 mrb_gc_mark [function] [call site] 00077
39 mrb_gc_mark [function] [call site] 00078
39 mrb_gc_mark [function] [call site] 00079
39 mrb_gc_mark [function] [call site] 00080
39 mrb_gc_mark [function] [call site] 00081
39 mrb_gc_mark [function] [call site] 00082
39 mrb_gc_mark [function] [call site] 00083
39 mrb_gc_mark [function] [call site] 00084
39 mrb_gc_mark [function] [call site] 00085
39 mrb_gc_mark [function] [call site] 00086
39 mrb_gc_mark [function] [call site] 00087
39 mrb_gc_mark [function] [call site] 00088
39 mark_context [function] [call site] 00089
40 mark_context_stack [function] [call site] 00090
41 mrb_ci_nregs [function] [call site] 00091
41 mrb_val_union [function] [call site] 00094
41 mrb_gc_mark [function] [call site] 00095
41 mrb_nil_value [function] [call site] 00096
40 mrb_gc_mark [function] [call site] 00097
40 mrb_gc_mark [function] [call site] 00098
40 mrb_gc_mark [function] [call site] 00099
39 mark_context [function] [call site] 00100
38 incremental_marking_phase [function] [call site] 00101
39 gc_mark_children [function] [call site] 00102
40 mrb_gc_mark [function] [call site] 00103
40 mrb_gc_mark_mt [function] [call site] 00104
41 mrb_gc_mark [function] [call site] 00105
40 mrb_gc_mark [function] [call site] 00106
40 mrb_gc_mark_mt [function] [call site] 00107
40 mrb_gc_mark [function] [call site] 00108
40 mrb_gc_mark_iv [function] [call site] 00109
41 mark_tbl [function] [call site] 00110
40 mrb_gc_mark [function] [call site] 00111
40 mrb_gc_mark [function] [call site] 00112
40 mrb_gc_mark [function] [call site] 00113
40 mrb_val_union [function] [call site] 00114
40 mrb_gc_mark [function] [call site] 00115
40 mark_context [function] [call site] 00116
40 mrb_val_union [function] [call site] 00117
40 mrb_gc_mark [function] [call site] 00118
40 mrb_gc_mark_iv [function] [call site] 00119
40 mrb_gc_mark_hash [function] [call site] 00120
41 mrb_val_union [function] [call site] 00122
41 mrb_gc_mark [function] [call site] 00123
40 mrb_gc_mark [function] [call site] 00124
40 mrb_gc_mark_range [function] [call site] 00125
41 mrb_val_union [function] [call site] 00126
41 mrb_gc_mark [function] [call site] 00127
41 mrb_val_union [function] [call site] 00128
41 mrb_gc_mark [function] [call site] 00129
40 mrb_gc_mark [function] [call site] 00130
40 mrb_val_union [function] [call site] 00131
40 mrb_gc_mark [function] [call site] 00132
40 mrb_gc_mark_iv [function] [call site] 00133
40 mrb_gc_mark [function] [call site] 00134
40 mrb_gc_mark [function] [call site] 00135
39 gc_gray_counts [function] [call site] 00136
40 mrb_gc_mark_iv_size [function] [call site] 00137
40 mrb_gc_mark_mt_size [function] [call site] 00139
40 mrb_gc_mark_iv_size [function] [call site] 00140
40 mrb_ci_nregs [function] [call site] 00141
40 mrb_gc_mark_iv_size [function] [call site] 00142
40 mrb_gc_mark_hash_size [function] [call site] 00143
40 mrb_gc_mark_iv_size [function] [call site] 00145
38 final_marking_phase [function] [call site] 00146
39 mrb_gc_mark [function] [call site] 00147
39 mrb_gc_mark_gv [function] [call site] 00148
39 mark_context [function] [call site] 00149
39 mark_context [function] [call site] 00150
39 mrb_gc_mark [function] [call site] 00151
39 clear_error_object [function] [call site] 00152
40 mrb_gc_mark [function] [call site] 00153
40 mrb_gc_free_iv [function] [call site] 00154
39 clear_error_object [function] [call site] 00158
39 gc_mark_gray_list [function] [call site] 00159
40 gc_mark_children [function] [call site] 00160
39 gc_mark_gray_list [function] [call site] 00161
38 prepare_incremental_sweep [function] [call site] 00162
38 incremental_sweep_phase [function] [call site] 00163
39 obj_free [function] [call site] 00164
40 mrb_gc_free_iv [function] [call site] 00165
40 mrb_gc_free_iv [function] [call site] 00166
40 mrb_gc_free_mt [function] [call site] 00167
40 mrb_gc_free_iv [function] [call site] 00171
40 mrb_mc_clear_by_class [function] [call site] 00172
40 mrb_gc_free_mt [function] [call site] 00173
40 mrb_mc_clear_by_class [function] [call site] 00174
40 mrb_free [function] [call site] 00175
40 mrb_free_context [function] [call site] 00176
40 mrb_ary_decref [function] [call site] 00180
41 mrb_free [function] [call site] 00181
40 mrb_free [function] [call site] 00182
40 mrb_gc_free_iv [function] [call site] 00183
40 mrb_gc_free_hash [function] [call site] 00184
41 h_free_table [function] [call site] 00185
40 mrb_gc_free_str [function] [call site] 00187
41 str_decref [function] [call site] 00188
41 mrb_free [function] [call site] 00191
40 mrb_irep_cutref [function] [call site] 00192
41 mrb_irep_decref [function] [call site] 00193
42 mrb_irep_free [function] [call site] 00194
43 mrb_free [function] [call site] 00195
43 mrb_free [function] [call site] 00196
43 mrb_free [function] [call site] 00197
43 mrb_free [function] [call site] 00198
43 mrb_irep_decref [function] [call site] 00199
43 mrb_free [function] [call site] 00200
43 mrb_free [function] [call site] 00201
43 mrb_debug_info_free [function] [call site] 00202
43 mrb_free [function] [call site] 00207
40 mrb_irep_decref [function] [call site] 00208
40 mrb_gc_free_iv [function] [call site] 00209
40 mrb_gc_free_bint [function] [call site] 00210
41 mpz_clear [function] [call site] 00211
42 mrb_free [function] [call site] 00212
39 mrb_free [function] [call site] 00213
36 incremental_gc_step [function] [call site] 00214
37 incremental_gc [function] [call site] 00215
36 mrb_full_gc [function] [call site] 00216
37 clear_all_old [function] [call site] 00217
38 incremental_gc_finish [function] [call site] 00218
38 prepare_incremental_sweep [function] [call site] 00219
38 incremental_gc_finish [function] [call site] 00220
37 incremental_gc_finish [function] [call site] 00221
37 incremental_gc_finish [function] [call site] 00222
36 clear_all_old [function] [call site] 00223
35 add_heap [function] [call site] 00224
36 mrb_calloc [function] [call site] 00225
37 mrb_malloc [function] [call site] 00226
38 mrb_realloc [function] [call site] 00227
39 mrb_realloc_simple [function] [call site] 00228
40 mrb_full_gc [function] [call site] 00229
39 mrb_raise_nomemory [function] [call site] 00230
40 mrb_obj_value [function] [call site] 00231
40 mrb_exc_raise [function] [call site] 00232
41 exc_throw [function] [call site] 00233
42 mrb_print_error [function] [call site] 00234
43 mrb_print_backtrace [function] [call site] 00235
44 print_backtrace [function] [call site] 00236
45 fputs [call site] 00237
45 mrb_val_union [function] [call site] 00238
45 fprintf [call site] 00239
45 fwrite [call site] 00240
45 fputc [call site] 00241
45 mrb_val_union [function] [call site] 00242
45 mrb_val_union [function] [call site] 00243
45 fwrite [call site] 00244
45 fputs [call site] 00245
45 fputs [call site] 00246
45 fwrite [call site] 00247
45 mrb_obj_value [function] [call site] 00248
45 mrb_exc_inspect [function] [call site] 00249
46 mrb_obj_class [function] [call site] 00250
47 mrb_class [function] [call site] 00251
48 mrb_val_union [function] [call site] 00252
48 mrb_type [function] [call site] 00253
47 mrb_class_real [function] [call site] 00254
46 mrb_obj_value [function] [call site] 00255
46 mrb_val_union [function] [call site] 00256
46 mrb_exc_mesg_get [function] [call site] 00257
47 mrb_nil_value [function] [call site] 00258
47 mrb_obj_value [function] [call site] 00259
46 mrb_val_union [function] [call site] 00260
46 mrb_format [function] [call site] 00261
47 mrb_vformat [function] [call site] 00262
48 mrb_int_value [function] [call site] 00263
49 mrb_boxing_int_value [function] [call site] 00264
50 mrb_fixnum_value [function] [call site] 00265
50 mrb_obj_alloc [function] [call site] 00266
51 gc_protect [function] [call site] 00267
52 mrb_realloc [function] [call site] 00268
48 mrb_float_value [function] [call site] 00269
49 mrb_word_boxing_float_value [function] [call site] 00270
48 mrb_str_new [function] [call site] 00271
49 str_new [function] [call site] 00272
50 mrb_obj_alloc [function] [call site] 00273
50 str_init_embed [function] [call site] 00274
50 mrb_ro_data_p [function] [call site] 00275
50 mrb_obj_alloc [function] [call site] 00276
50 str_init_nofree [function] [call site] 00277
50 mrb_obj_alloc [function] [call site] 00278
50 str_init_normal [function] [call site] 00279
51 str_init_normal_capa [function] [call site] 00280
52 str_check_length [function] [call site] 00281
53 mrb_exc_get_id [function] [call site] 00282
53 mrb_raisef [function] [call site] 00283
52 mrb_malloc [function] [call site] 00284
49 mrb_obj_value [function] [call site] 00285
48 mrb_str_cat [function] [call site] 00286
49 mrb_val_union [function] [call site] 00287
49 mrb_str_modify [function] [call site] 00288
50 mrb_str_modify_keep_ascii [function] [call site] 00289
51 mrb_check_frozen [function] [call site] 00290
52 mrb_frozen_error [function] [call site] 00291
53 mrb_obj_value [function] [call site] 00292
53 frozen_error [function] [call site] 00293
54 mrb_exc_get_id [function] [call site] 00294
54 mrb_raisef [function] [call site] 00295
51 str_modify_keep_ascii [function] [call site] 00296
52 str_init_modifiable [function] [call site] 00297
53 str_init_embed [function] [call site] 00298
53 str_init_normal [function] [call site] 00299
52 str_decref [function] [call site] 00300
52 str_init_modifiable [function] [call site] 00301
49 mrb_int_add_overflow [function] [call site] 00302
49 mrb_exc_get_id [function] [call site] 00303
49 mrb_raise [function] [call site] 00304
49 mrb_int_mul_overflow [function] [call site] 00305
49 resize_capa [function] [call site] 00306
50 str_init_normal_capa [function] [call site] 00307
50 str_check_length [function] [call site] 00308
48 mrb_str_cat [function] [call site] 00309
48 mrb_symbol_value [function] [call site] 00310
48 strlen [call site] 00311
48 mrb_class [function] [call site] 00312
48 mrb_type [function] [call site] 00313
48 strlen [call site] 00314
48 mrb_val_union [function] [call site] 00315
48 mrb_val_union [function] [call site] 00316
48 mrb_obj_value [function] [call site] 00317
48 mrb_obj_class [function] [call site] 00318
48 mrb_exc_get_id [function] [call site] 00319
48 mrb_raisef [function] [call site] 00320
48 mrb_str_cat [function] [call site] 00321
45 mrb_val_union [function] [call site] 00322
45 fwrite [call site] 00323
45 fputc [call site] 00324
42 abort [call site] 00325
42 longjmp [call site] 00326
40 mrb_core_init_abort [function] [call site] 00327
41 mrb_nil_value [function] [call site] 00328
41 exc_throw [function] [call site] 00329
33 mrb_malloc [function] [call site] 00330
33 each_backtrace [function] [call site] 00331
32 store_backtrace [function] [call site] 00332
33 mrb_val_union [function] [call site] 00333
33 mrb_field_write_barrier [function] [call site] 00334
34 add_gray_list [function] [call site] 00335
27 str_init_embed [function] [call site] 00336
27 str_init_normal_capa [function] [call site] 00337
27 mrb_obj_value [function] [call site] 00338
25 mrb_exc_new_str [function] [call site] 00339
26 mrb_obj_alloc [function] [call site] 00340
26 mrb_obj_value [function] [call site] 00341
26 mrb_exc_mesg_set [function] [call site] 00342
27 mrb_val_union [function] [call site] 00343
27 mrb_obj_as_string [function] [call site] 00344
28 mrb_type [function] [call site] 00345
28 mrb_sym_str [function] [call site] 00346
29 mrb_sym_name_len [function] [call site] 00347
30 sym2name_len [function] [call site] 00348
31 sym_inline_unpack [function] [call site] 00349
31 presym_sym2name [function] [call site] 00350
31 mrb_packed_int_decode [function] [call site] 00351
31 strlen [call site] 00352
29 mrb_str_new [function] [call site] 00353
29 mrb_str_new_static [function] [call site] 00354
30 str_new_static [function] [call site] 00355
31 mrb_obj_alloc [function] [call site] 00356
31 str_init_embed [function] [call site] 00357
31 mrb_obj_alloc [function] [call site] 00358
31 str_init_nofree [function] [call site] 00359
30 mrb_obj_value [function] [call site] 00360
28 mrb_integer_to_str [function] [call site] 00361
29 mrb_integer_func [function] [call site] 00362
30 mrb_val_union [function] [call site] 00363
29 mrb_exc_get_id [function] [call site] 00364
29 mrb_raisef [function] [call site] 00365
29 mrb_type [function] [call site] 00366
29 mrb_bint_to_s [function] [call site] 00367
30 mrb_val_union [function] [call site] 00368
30 mrb_str_new_static [function] [call site] 00369
30 mpz_sizeinbase [function] [call site] 00370
30 mrb_intern_static [function] [call site] 00372
31 sym_intern [function] [call site] 00373
32 sym_validate_len [function] [call site] 00374
33 mrb_exc_get_id [function] [call site] 00375
33 mrb_raise [function] [call site] 00376
32 find_symbol [function] [call site] 00377
33 presym_find [function] [call site] 00378
34 memcmp [call site] 00379
33 sym_inline_pack [function] [call site] 00380
34 strchr [call site] 00381
33 mrb_byte_hash [function] [call site] 00382
34 mrb_byte_hash_step [function] [call site] 00383
33 sym_check [function] [call site] 00384
34 strlen [call site] 00385
34 mrb_packed_int_decode [function] [call site] 00386
34 memcmp [call site] 00387
33 sym_check [function] [call site] 00388
32 mrb_realloc [function] [call site] 00389
32 mrb_realloc [function] [call site] 00390
32 mrb_ro_data_p [function] [call site] 00391
32 strlen [call site] 00392
32 mrb_packed_int_len [function] [call site] 00393
32 mrb_packed_int_encode [function] [call site] 00394
30 mrb_exc_get_id [function] [call site] 00395
30 mrb_raise [function] [call site] 00396
30 mrb_str_new [function] [call site] 00397
30 mrb_val_union [function] [call site] 00398
30 mrb_val_union [function] [call site] 00404
30 strlen [call site] 00405
29 mrb_int_to_cstr [function] [call site] 00406
29 mrb_str_new_cstr [function] [call site] 00407
30 mrb_obj_value [function] [call site] 00408
28 mrb_mod_to_s [function] [call site] 00409
29 mrb_val_union [function] [call site] 00410
29 mrb_iv_get [function] [call site] 00411
30 mrb_val_union [function] [call site] 00414
30 mrb_obj_iv_get [function] [call site] 00415
31 mrb_nil_value [function] [call site] 00417
30 mrb_nil_value [function] [call site] 00418
29 mrb_str_new_static [function] [call site] 00419
29 class_ptr_p [function] [call site] 00420
29 mrb_inspect [function] [call site] 00421
30 mrb_funcall_argv [function] [call site] 00422
31 mrb_nil_value [function] [call site] 00423
31 mrb_funcall_with_block [function] [call site] 00424
32 _setjmp [call site] 00425
32 mrb_funcall_with_block [function] [call site] 00426
33 cipop