Fuzz introspector: parse_options_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
2 7 output_init call site: 00007 perror
2 34 gumbo_realloc call site: 00034 perror
2 135 insert_node call site: 00135 __assert_fail
2 151 maybe_flush_text_node_buffer call site: 00151 get_appropriate_insertion_location
2 300 adjust_mathml_attributes call site: 00300 gumbo_strdup
2 345 insert_foreign_element call site: 00345 parser_add_parse_error
1 27 read_char call site: 00027 add_error
1 87 create_element call site: 00087 insert_element
1 131 destroy_node_callback call site: 00131 destroy_node
1 149 append_node call site: 00149 __assert_fail
1 209 gumbo_token_destroy call site: 00209 gumbo_free
1 340 insert_foreign_element call site: 00340 attribute_matches_case_sensitive

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 OptionsFromHeader(unsigned char const*) [function] [call site] 00001
2 gumbo_normalized_tagname [function] [call site] 00002
3 __assert_fail [call site] 00003
3 __assert_fail [call site] 00004
1 gumbo_parse_with_options [function] [call site] 00005
2 output_init [function] [call site] 00006
3 gumbo_alloc [function] [call site] 00007
4 perror [call site] 00008
4 abort [call site] 00009
3 new_document_node [function] [call site] 00010
4 create_node [function] [call site] 00011
5 gumbo_alloc [function] [call site] 00012
4 gumbo_vector_init [function] [call site] 00013
5 gumbo_alloc [function] [call site] 00014
3 gumbo_init_errors [function] [call site] 00015
4 gumbo_vector_init [function] [call site] 00016
2 gumbo_tokenizer_state_init [function] [call site] 00017
3 gumbo_alloc [function] [call site] 00018
3 gumbo_tokenizer_set_state [function] [call site] 00019
3 gumbo_string_buffer_init [function] [call site] 00020
4 gumbo_alloc [function] [call site] 00021
3 mark_tag_state_as_empty [function] [call site] 00022
3 utf8iterator_init [function] [call site] 00023
4 read_char [function] [call site] 00024
5 decode [function] [call site] 00025
5 __assert_fail [call site] 00026
5 utf8_is_surrogate [function] [call site] 00027
5 add_error [function] [call site] 00028
6 gumbo_add_error [function] [call site] 00029
7 gumbo_alloc [function] [call site] 00030
7 gumbo_vector_add [function] [call site] 00031
8 enlarge_vector_if_full [function] [call site] 00032
9 gumbo_realloc [function] [call site] 00033
10 realloc [call site] 00034
10 perror [call site] 00035
10 abort [call site] 00036
9 gumbo_alloc [function] [call site] 00037
8 __assert_fail [call site] 00038
8 __assert_fail [call site] 00039
5 utf8_is_noncharacter [function] [call site] 00040
5 add_error [function] [call site] 00041
5 utf8_is_control [function] [call site] 00042
5 gumbo_ascii_isspace [function] [call site] 00043
6 gumbo_ascii_isascii [function] [call site] 00044
5 add_error [function] [call site] 00045
5 add_error [function] [call site] 00046
5 add_error [function] [call site] 00047
4 read_char [function] [call site] 00048
3 utf8iterator_get_position [function] [call site] 00049
3 utf8iterator_get_char_pointer [function] [call site] 00050
3 doc_type_state_init [function] [call site] 00051
2 parser_state_init [function] [call site] 00052
3 gumbo_alloc [function] [call site] 00053
3 gumbo_string_buffer_init [function] [call site] 00054
3 gumbo_character_token_buffer_init [function] [call site] 00055
3 gumbo_vector_init [function] [call site] 00056
3 gumbo_vector_init [function] [call site] 00057
3 gumbo_vector_init [function] [call site] 00058
2 fragment_parser_init [function] [call site] 00059
3 __assert_fail [call site] 00060
3 get_document_node [function] [call site] 00061
3 create_fragment_ctx_element [function] [call site] 00062
4 __assert_fail [call site] 00063
4 strlen [call site] 00064
4 gumbo_tagn_enum [function] [call site] 00065
5 gumbo_tag_lookup [function] [call site] 00066
6 hash [function] [call site] 00067
6 gumbo_ascii_strncasecmp [function] [call site] 00068
7 gumbo_ascii_tolower [function] [call site] 00069
8 gumbo_ascii_isupper [function] [call site] 00070
7 gumbo_ascii_tolower [function] [call site] 00071
4 create_node [function] [call site] 00072
4 gumbo_vector_init [function] [call site] 00073
4 gumbo_alloc [function] [call site] 00074
4 gumbo_vector_add [function] [call site] 00075
3 gumbo_tokenizer_set_state [function] [call site] 00076
3 gumbo_tokenizer_set_state [function] [call site] 00077
3 gumbo_tokenizer_set_state [function] [call site] 00078
3 gumbo_tokenizer_set_state [function] [call site] 00079
3 gumbo_tokenizer_set_state [function] [call site] 00080
3 insert_element_of_tag_type [function] [call site] 00081
4 create_element [function] [call site] 00082
5 __assert_fail [call site] 00083
5 create_node [function] [call site] 00084
5 gumbo_vector_init [function] [call site] 00085
5 gumbo_vector_init [function] [call site] 00086
5 gumbo_normalized_tagname [function] [call site] 00087
4 insert_element [function] [call site] 00088
5 maybe_flush_text_node_buffer [function] [call site] 00089
6 __assert_fail [call site] 00090
6 create_node [function] [call site] 00091
6 gumbo_string_buffer_to_string [function] [call site] 00092
7 gumbo_alloc [function] [call site] 00093
6 gumbo_debug [function] [call site] 00094
6 get_appropriate_insertion_location [function] [call site] 00095
7 get_current_node [function] [call site] 00096
8 __assert_fail [call site] 00097
8 __assert_fail [call site] 00098
8 __assert_fail [call site] 00099
7 get_document_node [function] [call site] 00100
7 node_tag_in_set [function] [call site] 00101
8 __assert_fail [call site] 00102
8 tagset_includes [function] [call site] 00103
7 node_html_tag_is [function] [call site] 00104
8 node_qualified_tag_is [function] [call site] 00105
9 __assert_fail [call site] 00106
9 __assert_fail [call site] 00107
9 __assert_fail [call site] 00108
7 node_html_tag_is [function] [call site] 00109
6 strlen [call site] 00110
6 strlen [call site] 00111
6 gumbo_alloc [function] [call site] 00112
6 gumbo_free [function] [call site] 00113
6 destroy_node [function] [call site] 00114
7 tree_traverse [function] [call site] 00115
8 __assert_fail [call site] 00116
8 __assert_fail [call site] 00117
7 destroy_node_callback [function] [call site] 00118
8 gumbo_free [function] [call site] 00119
8 gumbo_free [function] [call site] 00120
8 gumbo_free [function] [call site] 00121
8 gumbo_free [function] [call site] 00122
8 gumbo_destroy_attribute [function] [call site] 00123
9 gumbo_free [function] [call site] 00124
9 gumbo_free [function] [call site] 00125
9 gumbo_free [function] [call site] 00126
8 gumbo_free [function] [call site] 00127
8 gumbo_free [function] [call site] 00128
8 gumbo_free [function] [call site] 00129
8 gumbo_free [function] [call site] 00130
8 gumbo_free [function] [call site] 00131
6 destroy_node [function] [call site] 00132
6 insert_node [function] [call site] 00133
7 __assert_fail [call site] 00134
7 __assert_fail [call site] 00135
7 __assert_fail [call site] 00136
7 __assert_fail [call site] 00137
7 __assert_fail [call site] 00138
7 __assert_fail [call site] 00139
7 gumbo_vector_insert_at [function] [call site] 00140
8 __assert_fail [call site] 00141
8 enlarge_vector_if_full [function] [call site] 00142
7 __assert_fail [call site] 00143
7 __assert_fail [call site] 00144
7 append_node [function] [call site] 00145
8 __assert_fail [call site] 00146
8 __assert_fail [call site] 00147
8 __assert_fail [call site] 00148
8 gumbo_vector_add [function] [call site] 00149
8 __assert_fail [call site] 00150
6 gumbo_string_buffer_clear [function] [call site] 00151
6 __assert_fail [call site] 00152
5 get_appropriate_insertion_location [function] [call site] 00153
5 insert_node [function] [call site] 00154
5 gumbo_vector_add [function] [call site] 00155
4 gumbo_normalized_tagname [function] [call site] 00156
4 gumbo_debug [function] [call site] 00157
3 push_template_insertion_mode [function] [call site] 00158
4 gumbo_vector_add [function] [call site] 00159
3 reset_insertion_mode_appropriately [function] [call site] 00160
4 get_appropriate_insertion_mode [function] [call site] 00161
5 is_fragment_parser [function] [call site] 00162
5 __assert_fail [call site] 00163
5 node_html_tag_is [function] [call site] 00164
5 node_html_tag_is [function] [call site] 00165
5 get_current_template_insertion_mode [function] [call site] 00166
4 set_insertion_mode [function] [call site] 00167
4 __assert_fail [call site] 00168
2 gumbo_debug [function] [call site] 00169
2 get_adjusted_current_node [function] [call site] 00170
3 get_current_node [function] [call site] 00171
2 gumbo_tokenizer_set_is_adjusted_current_node_foreign [function] [call site] 00172
3 gumbo_debug [function] [call site] 00173
2 gumbo_debug [function] [call site] 00174
2 gumbo_lex [function] [call site] 00175
3 emit_char [function] [call site] 00176
4 get_char_token_type [function] [call site] 00177
5 gumbo_debug [function] [call site] 00178
4 finish_token [function] [call site] 00179
5 utf8iterator_next [function] [call site] 00180
6 update_position [function] [call site] 00181
6 read_char [function] [call site] 00182
5 reset_token_start_point [function] [call site] 00183
6 utf8iterator_get_char_pointer [function] [call site] 00184
6 utf8iterator_get_position [function] [call site] 00185
3 maybe_emit_from_mark [function] [call site] 00186
4 utf8iterator_get_char_pointer [function] [call site] 00187
4 __assert_fail [call site] 00188
4 utf8iterator_current [function] [call site] 00189
4 emit_char [function] [call site] 00190
3 __assert_fail [call site] 00191
3 __assert_fail [call site] 00192
3 utf8iterator_current [function] [call site] 00193
3 gumbo_debug [function] [call site] 00194
3 utf8iterator_next [function] [call site] 00195
2 gumbo_normalized_tagname [function] [call site] 00196
2 gumbo_normalized_tagname [function] [call site] 00197
2 gumbo_debug [function] [call site] 00198
2 handle_token [function] [call site] 00199
3 ignore_token [function] [call site] 00200
4 gumbo_debug [function] [call site] 00201
4 gumbo_token_destroy [function] [call site] 00202
5 gumbo_free [function] [call site] 00203
5 gumbo_free [function] [call site] 00204
5 gumbo_free [function] [call site] 00205
5 gumbo_destroy_attribute [function] [call site] 00206
5 gumbo_free [function] [call site] 00207
5 gumbo_free [function] [call site] 00208
5 gumbo_free [function] [call site] 00209
5 gumbo_free [function] [call site] 00210
3 tag_is [function] [call site] 00211
3 tag_is [function] [call site] 00212
3 get_adjusted_current_node [function] [call site] 00213
3 __assert_fail [call site] 00214
3 gumbo_debug [function] [call site] 00215
3 is_mathml_integration_point [function] [call site] 00216
4 node_tag_in_set [function] [call site] 00217
3 tag_in [function] [call site] 00218
3 node_qualified_tag_is [function] [call site] 00219
3 tag_is [function] [call site] 00220
3 is_html_integration_point [function] [call site] 00221
4 node_tag_in_set [function] [call site] 00222
4 node_qualified_tag_is [function] [call site] 00223
4 attribute_matches [function] [call site] 00224
5 gumbo_get_attribute [function] [call site] 00225
6 gumbo_ascii_strcasecmp [function] [call site] 00226
7 gumbo_ascii_tolower [function] [call site] 00227
7 gumbo_ascii_tolower [function] [call site] 00228
5 gumbo_ascii_strcasecmp [function] [call site] 00229
4 attribute_matches [function] [call site] 00230
3 handle_html_content [function] [call site] 00231
3 handle_in_foreign_content [function] [call site] 00232
4 gumbo_debug [function] [call site] 00233
4 parser_add_parse_error [function] [call site] 00234
5 gumbo_debug [function] [call site] 00235
5 gumbo_add_error [function] [call site] 00236
5 gumbo_strdup [function] [call site] 00237
6 strlen [call site] 00238
6 gumbo_alloc [function] [call site] 00239
5 gumbo_strdup [function] [call site] 00240
5 gumbo_vector_init [function] [call site] 00241
5 __assert_fail [call site] 00242
5 gumbo_strdup [function] [call site] 00243
5 gumbo_vector_add [function] [call site] 00244
4 insert_text_token [function] [call site] 00245
5 __assert_fail [call site] 00246
5 gumbo_string_buffer_append_codepoint [function] [call site] 00247
6 maybe_resize_string_buffer [function] [call site] 00248
7 gumbo_realloc [function] [call site] 00249
5 gumbo_debug [function] [call site] 00250
4 insert_text_token [function] [call site] 00251
4 insert_text_token [function] [call site] 00252
4 set_frameset_not_ok [function] [call site] 00253
5 gumbo_debug [function] [call site] 00254
4 get_current_node [function] [call site] 00255
4 append_comment_node [function] [call site] 00256
5 maybe_flush_text_node_buffer [function] [call site] 00257
5 create_node [function] [call site] 00258
5 append_node [function] [call site] 00259
4 parser_add_parse_error [function] [call site] 00260
4 ignore_token [function] [call site] 00261
4 tag_in [function] [call site] 00262
4 tag_is [function] [call site] 00263
4 token_has_attribute [function] [call site] 00264
5 __assert_fail [call site] 00265
5 gumbo_get_attribute [function] [call site] 00266
4 token_has_attribute [function] [call site] 00267
4 token_has_attribute [function] [call site] 00268
4 tag_in [function] [call site] 00269
4 parser_add_parse_error [function] [call site] 00270
4 get_current_node [function] [call site] 00271
4 is_mathml_integration_point [function] [call site] 00272
4 get_current_node [function] [call site] 00273
4 is_html_integration_point [function] [call site] 00274
4 get_current_node [function] [call site] 00275
4 pop_current_node [function] [call site] 00276
5 maybe_flush_text_node_buffer [function] [call site] 00277
5 node_html_tag_is [function] [call site] 00278
5 __assert_fail [call site] 00279
5 get_current_node [function] [call site] 00280
5 gumbo_normalized_tagname [function] [call site] 00281
5 gumbo_debug [function] [call site] 00282
5 gumbo_vector_pop [function] [call site] 00283
5 __assert_fail [call site] 00284
5 __assert_fail [call site] 00285
5 node_html_tag_is [function] [call site] 00286
5 node_html_tag_is [function] [call site] 00287
5 node_qualified_tagname_is [function] [call site] 00288
6 __assert_fail [call site] 00289
6 __assert_fail [call site] 00290
6 __assert_fail [call site] 00291
6 __assert_fail [call site] 00292
6 __assert_fail [call site] 00293
6 gumbo_ascii_strcasecmp [function] [call site] 00294
5 record_end_of_element [function] [call site] 00295
4 handle_html_content [function] [call site] 00296
4 get_adjusted_current_node [function] [call site] 00297
4 adjust_mathml_attributes [function] [call site] 00298
5 __assert_fail [call site] 00299
5 gumbo_get_attribute [function] [call site] 00300
5 gumbo_free [function] [call site] 00301
5 gumbo_strdup [function] [call site] 00302
4 adjust_svg_tag [function] [call site] 00303
5 __assert_fail [call site] 00304
5 __assert_fail [call site] 00305
5 __assert_fail [call site] 00306
5 strlen [call site] 00307
5 gumbo_get_svg_tag_replacement [function] [call site] 00308
6 hash [function] [call site] 00309
6 gumbo_ascii_strncasecmp [function] [call site] 00310
5 strcpy [call site] 00311
4 adjust_svg_attributes [function] [call site] 00312
5 __assert_fail [call site] 00313
5 gumbo_get_svg_attr_replacement [function] [call site] 00314
6 hash [function] [call site] 00315
6 gumbo_ascii_strncasecmp [function] [call site] 00316
5 gumbo_free [function] [call site] 00317
5 gumbo_strdup [function] [call site] 00318
4 adjust_foreign_attributes [function] [call site] 00319
5 __assert_fail [call site] 00320
5 strlen [call site] 00321
5 gumbo_get_foreign_attr_replacement [function] [call site] 00322
6 hash [function] [call site] 00323
6 memcmp [call site] 00324
5 gumbo_free [function] [call site] 00325
5 gumbo_strdup [function] [call site] 00326
4 insert_foreign_element [function] [call site] 00327
5 __assert_fail [call site] 00328
5 create_element_from_token [function] [call site] 00329
6 __assert_fail [call site] 00330
6 create_node [function] [call site] 00331
6 gumbo_vector_init [function] [call site] 00332
6 gumbo_normalized_tagname [function] [call site] 00333
6 __assert_fail [call site] 00334
6 __assert_fail [call site] 00335
6 __assert_fail [call site] 00336
5 insert_element [function] [call site] 00337
5 gumbo_normalized_tagname [function] [call site] 00338
5 gumbo_debug [function] [call site] 00339
5 token_has_attribute [function] [call site] 00340
5 attribute_matches_case_sensitive [function] [call site] 00341
6 gumbo_get_attribute [function] [call site] 00342
6 strcmp [call site] 00343
5 parser_add_parse_error [function] [call site] 00344
5 token_has_attribute [function] [call site] 00345
5 attribute_matches_case_sensitive [function] [call site] 00346
5 parser_add_parse_error [function] [call site] 00347
4 pop_current_node [function] [call site] 00348
4 acknowledge_self_closing_tag [function] [call site] 00349
4 __assert_fail [call site] 00350
4 get_current_node [function] [call site] 00351
4 __assert_fail [call site] 00352
4 node_tagname_is [function] [call site] 00353
5 __assert_fail [call site] 00354
5 node_qualified_tagname_is [function] [call site] 00355
4 parser_add_parse_error [function] [call site] 00356
4 gumbo_debug [function] [call site] 00357
4 node_tagname_is [function] [call site] 00358
4 gumbo_debug [function] [call site] 00359
4 pop_current_node [function] [call site] 00360
4 __assert_fail [call site] 00361
4 handle_html_content [function] [call site] 00362
2 __assert_fail [call site] 00363
2 gumbo_add_error [function] [call site] 00364
2 gumbo_free [function] [call site] 00365
2 __assert_fail [call site] 00366
2 finish_parsing [function] [call site] 00367
3 gumbo_debug [function] [call site] 00368
3 maybe_flush_text_node_buffer [function] [call site] 00369
3 pop_current_node [function] [call site] 00370
3 node_html_tag_is [function] [call site] 00371
3 node_html_tag_is [function] [call site] 00372
3 pop_current_node [function] [call site] 00373
3 pop_current_node [function] [call site] 00374
2 gumbo_strdup [function] [call site] 00375
2 gumbo_strdup [function] [call site] 00376
2 gumbo_strdup [function] [call site] 00377
2 parser_state_destroy [function] [call site] 00378
3 destroy_fragment_ctx_element [function] [call site] 00379
4 __assert_fail [call site] 00380
4 __assert_fail [call site] 00381
4 gumbo_vector_pop [function] [call site] 00382
4 gumbo_free [function] [call site] 00383
4 destroy_node [function] [call site] 00384
3 gumbo_vector_destroy [function] [call site] 00385
4 gumbo_free [function] [call site] 00386
3 gumbo_vector_destroy [function] [call site] 00387
3 gumbo_vector_destroy [function] [call site] 00388
3 gumbo_string_buffer_destroy [function] [call site] 00389
4 gumbo_free [function] [call site] 00390
3 gumbo_character_token_buffer_destroy [function] [call site] 00391
4 gumbo_free [function] [call site] 00392
3 gumbo_free [function] [call site] 00393
2 gumbo_tokenizer_state_destroy [function] [call site] 00394
3 __assert_fail [call site] 00395
3 gumbo_string_buffer_destroy [function] [call site] 00396
3 __assert_fail [call site] 00397
3 gumbo_free [function] [call site] 00398
1 WalkTree(GumboInternalNode const*) [function] [call site] 00399
2 WalkTree(GumboInternalNode const*) [function] [call site] 00400
3 strlen [call site] 00401
3 strlen [call site] 00402
3 WalkTree(GumboInternalNode const*) [function] [call site] 00403
4 strlen [call site] 00404
1 gumbo_destroy_output [function] [call site] 00405
2 destroy_node [function] [call site] 00406
2 gumbo_error_destroy [function] [call site] 00407
3 gumbo_free [function] [call site] 00408
3 gumbo_free [function] [call site] 00409
3 gumbo_vector_destroy [function] [call site] 00410
3 gumbo_free [function] [call site] 00411
2 gumbo_vector_destroy [function] [call site] 00412
2 gumbo_free [function] [call site] 00413