Fuzz introspector: snmp_scoped_pdu_parse_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
50 57 asn_parse_string call site: 00057 debugmsg_hex
22 27 snmpv3_scopedPDU_parse call site: 00027 debugmsg
14 110 snmpv3_scopedPDU_parse call site: 00110 asn_parse_string
3 126 snmp_free_pdu call site: 00126 snmp_log
2 53 snmpv3_scopedPDU_parse call site: 00053 snmp_log
2 131 snmp_free_pdu call site: 00131 snmp_free_var
1 4 asn_parse_sequence call site: 00004 snmp_set_detail
1 13 asn_parse_nlength call site: 00013 snmp_set_detail

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 calloc [call site] 00001
1 snmpv3_scopedPDU_parse [function] [call site] 00002
2 asn_parse_sequence [function] [call site] 00003
3 asn_parse_header [function] [call site] 00004
4 snmp_set_detail [function] [call site] 00005
5 strlcpy [function] [call site] 00006
6 strlen [call site] 00007
4 _asn_short_err [function] [call site] 00008
5 snprintf [call site] 00009
5 snmp_set_detail [function] [call site] 00010
4 snmp_set_detail [function] [call site] 00011
4 asn_parse_nlength [function] [call site] 00012
5 asn_parse_length [function] [call site] 00013
6 snmp_set_detail [function] [call site] 00014
6 snprintf [call site] 00015
6 snmp_set_detail [function] [call site] 00016
6 snprintf [call site] 00017
6 snmp_set_detail [function] [call site] 00018
6 snprintf [call site] 00019
6 snmp_set_detail [function] [call site] 00020
4 _asn_short_err [function] [call site] 00021
4 asn_parse_nlength [function] [call site] 00022
4 _asn_short_err [function] [call site] 00023
3 snprintf [call site] 00024
3 snmp_set_detail [function] [call site] 00025
2 snmp_get_do_debugging [function] [call site] 00026
2 debugmsgtoken [function] [call site] 00027
3 debugmsg [function] [call site] 00028
4 debug_is_token_registered [function] [call site] 00029
5 strlen [call site] 00030
5 strncmp [call site] 00031
4 snmp_vlog [function] [call site] 00032
5 vasprintf [call site] 00033
5 snmp_log_string [function] [call site] 00034
6 netsnmp_set_line_buffering [function] [call site] 00035
7 setvbuf [call site] 00036
6 log_handler_stdouterr [function] [call site] 00037
7 netsnmp_ds_get_boolean [function] [call site] 00038
7 sprintf_stamp [function] [call site] 00039
8 time [call site] 00040
8 localtime [call site] 00041
8 sprintf [call site] 00042
8 sprintf [call site] 00043
7 strcpy [call site] 00044
7 strrchr [call site] 00045
7 printf [call site] 00046
7 fprintf [call site] 00047
6 log_handler_stdouterr [function] [call site] 00048
5 snmp_log_string [function] [call site] 00049
2 debug_indent_get [function] [call site] 00051
2 debug_is_token_registered [function] [call site] 00052
2 debug_indent_add [function] [call site] 00053
2 asn_parse_string [function] [call site] 00056
3 snmp_set_detail [function] [call site] 00057
3 _asn_short_err [function] [call site] 00058
3 _asn_type_err [function] [call site] 00059
4 snprintf [call site] 00060
4 snmp_set_detail [function] [call site] 00061
3 asn_parse_nlength [function] [call site] 00062
3 _asn_short_err [function] [call site] 00063
3 _asn_length_err [function] [call site] 00064
4 snprintf [call site] 00065
4 snmp_set_detail [function] [call site] 00066
3 snmp_get_do_debugging [function] [call site] 00067
3 debug_indent_get [function] [call site] 00068
3 debugmsg_hex [function] [call site] 00070
4 sprint_realloc_hexstring [function] [call site] 00071
5 netsnmp_ds_get_int [function] [call site] 00072
5 _sprint_hexstring_line [function] [call site] 00073
6 snmp_realloc [function] [call site] 00074
7 realloc [call site] 00075
6 sprintf [call site] 00076
6 strlen [call site] 00077
6 sprintf [call site] 00078
6 strlen [call site] 00079
6 netsnmp_ds_get_boolean [function] [call site] 00080
6 snmp_realloc [function] [call site] 00081
6 sprintf [call site] 00082
6 strlen [call site] 00083
6 sprint_char [function] [call site] 00084
7 __ctype_b_loc [call site] 00085
7 sprintf [call site] 00086
7 sprintf [call site] 00087
6 sprintf [call site] 00088
6 strlen [call site] 00089
5 _sprint_hexstring_line [function] [call site] 00090
3 debug_is_token_registered [function] [call site] 00093
3 snmp_get_do_debugging [function] [call site] 00094
3 debug_is_token_registered [function] [call site] 00095
3 sprint_realloc_asciistring [function] [call site] 00096
4 __ctype_b_loc [call site] 00097
4 snmp_realloc [function] [call site] 00098
4 snmp_realloc [function] [call site] 00099
4 snmp_realloc [function] [call site] 00100
4 snmp_realloc [function] [call site] 00101
3 snmp_get_do_debugging [function] [call site] 00102
3 snmp_get_do_debugging [function] [call site] 00104
3 snmp_get_do_debugging [function] [call site] 00106
2 snmp_get_do_debugging [function] [call site] 00108
2 debug_indent_add [function] [call site] 00109
2 snmp_set_detail [function] [call site] 00110
2 snmp_get_do_debugging [function] [call site] 00111
2 debugmsgtoken [function] [call site] 00112
2 debug_indent_get [function] [call site] 00114
2 debug_is_token_registered [function] [call site] 00115
2 debug_indent_add [function] [call site] 00116
2 asn_parse_string [function] [call site] 00117
2 snmp_get_do_debugging [function] [call site] 00118
2 debug_indent_add [function] [call site] 00119
2 snmp_set_detail [function] [call site] 00120
2 netsnmp_memdup [function] [call site] 00121
2 strdup [call site] 00122
2 snmp_set_detail [function] [call site] 00123
2 asn_parse_header [function] [call site] 00124
1 snmp_free_pdu [function] [call site] 00125
2 free_securityStateRef [function] [call site] 00126
3 find_sec_mod [function] [call site] 00127
2 find_sec_mod [function] [call site] 00130
2 snmp_free_varbind [function] [call site] 00131
3 snmp_free_var [function] [call site] 00132
4 snmp_free_var_internals [function] [call site] 00133