Fuzz introspector: gtp_message_fuzz
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 0 None 85 782 ogs_log_vprintf call site: 00011 /src/open5gs/builddir/../lib/core/ogs-log.c:393
0 0 None 85 782 ogs_log_vprintf call site: 00039 /src/open5gs/builddir/../lib/core/ogs-log.c:414
0 0 None 85 782 ogs_log_vprintf call site: 00044 /src/open5gs/builddir/../lib/core/ogs-log.c:423
0 0 None 0 313 ogs_tlv_parse_msg call site: 00146 /src/open5gs/builddir/../lib/core/ogs-tlv-msg.c:752
0 0 None 0 0 ogs_pkbuf_alloc_debug call site: 00000 /src/open5gs/builddir/../lib/core/ogs-pkbuf.c:227
0 0 None 0 0 ogs_vslprintf call site: 00032 /src/open5gs/builddir/../lib/core/ogs-strings.c:102

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 initialize [function] [call site] 00001
2 ogs_core_initialize [function] [call site] 00002
3 ogs_mem_init [function] [call site] 00003
4 pthread_mutex_init [call site] 00004
4 talloc_enable_null_tracking [call site] 00005
4 talloc_named_const [call site] 00006
3 ogs_log_init [function] [call site] 00007
4 ogs_log_printf [function] [call site] 00009
5 ogs_log_vprintf [function] [call site] 00010
6 ogs_list_first [function] [call site] 00011
6 fprintf [call site] 00012
6 ogs_log_printf [function] [call site] 00013
6 ogs_abort [function] [call site] 00014
7 backtrace [call site] 00015
7 ogs_log_printf [function] [call site] 00016
7 backtrace_symbols [call site] 00017
7 abort [call site] 00018
6 log_timestamp [function] [call site] 00019
7 ogs_gettimeofday [function] [call site] 00020
8 gettimeofday [call site] 00021
8 ogs_log_printf [function] [call site] 00022
8 ogs_abort [function] [call site] 00023
7 ogs_localtime [function] [call site] 00024
8 ogs_log_printf [function] [call site] 00025
8 ogs_abort [function] [call site] 00026
8 localtime_r [call site] 00027
7 strftime [call site] 00028
7 ogs_slprintf [function] [call site] 00029
8 ogs_vslprintf [function] [call site] 00030
9 ogs_log_printf [function] [call site] 00031
9 ogs_abort [function] [call site] 00032
9 ogs_vsnprintf [function] [call site] 00033
10 vsnprintf [call site] 00034
6 log_domain [function] [call site] 00035
7 ogs_slprintf [function] [call site] 00036
6 log_level [function] [call site] 00037
7 ogs_slprintf [function] [call site] 00038
6 log_content [function] [call site] 00039
7 ogs_vslprintf [function] [call site] 00040
6 ogs_strerror [function] [call site] 00041
7 strerror_r [call site] 00042
6 ogs_slprintf [function] [call site] 00043
6 ogs_slprintf [function] [call site] 00044
6 ogs_slprintf [function] [call site] 00045
6 log_linefeed [function] [call site] 00046
7 ogs_slprintf [function] [call site] 00047
6 log_timestamp [function] [call site] 00048
6 log_level [function] [call site] 00049
6 log_content [function] [call site] 00050
6 ogs_slprintf [function] [call site] 00051
6 ogs_slprintf [function] [call site] 00052
6 log_linefeed [function] [call site] 00053
6 fprintf [call site] 00054
6 fflush [call site] 00055
4 ogs_abort [function] [call site] 00056
4 ogs_log_printf [function] [call site] 00058
4 ogs_abort [function] [call site] 00059
4 ogs_log_add_domain [function] [call site] 00061
5 ogs_log_printf [function] [call site] 00062
5 ogs_abort [function] [call site] 00063
5 ogs_log_printf [function] [call site] 00064
5 ogs_abort [function] [call site] 00065
5 ogs_list_add [function] [call site] 00066
4 ogs_log_add_stderr [function] [call site] 00067
5 add_log [function] [call site] 00068
6 ogs_log_printf [function] [call site] 00069
6 ogs_abort [function] [call site] 00070
6 ogs_list_add [function] [call site] 00071
5 ogs_log_printf [function] [call site] 00072
5 ogs_abort [function] [call site] 00073
5 file_writer [function] [call site] 00074
6 fprintf [call site] 00075
6 fflush [call site] 00076
3 ogs_pkbuf_init [function] [call site] 00077
3 ogs_socket_init [function] [call site] 00078
3 ogs_tlv_init [function] [call site] 00079
4 ogs_log_printf [function] [call site] 00081
4 ogs_abort [function] [call site] 00082
3 ogs_log_install_domain [function] [call site] 00084
4 ogs_log_printf [function] [call site] 00085
4 ogs_abort [function] [call site] 00086
4 ogs_log_printf [function] [call site] 00087
4 ogs_abort [function] [call site] 00088
4 ogs_log_find_domain [function] [call site] 00089
5 ogs_log_printf [function] [call site] 00090
5 ogs_abort [function] [call site] 00091
5 ogs_list_first [function] [call site] 00092
5 strcasecmp [call site] 00093
4 ogs_log_printf [function] [call site] 00094
4 ogs_log_printf [function] [call site] 00095
4 ogs_log_set_domain_level [function] [call site] 00096
5 ogs_log_printf [function] [call site] 00098
5 ogs_abort [function] [call site] 00099
5 ogs_log_printf [function] [call site] 00100
5 ogs_abort [function] [call site] 00101
4 ogs_log_add_domain [function] [call site] 00102
4 ogs_log_printf [function] [call site] 00103
4 ogs_abort [function] [call site] 00104
3 ogs_log_install_domain [function] [call site] 00106
3 ogs_log_install_domain [function] [call site] 00108
3 ogs_log_install_domain [function] [call site] 00110
2 ogs_pkbuf_default_init [function] [call site] 00111
2 ogs_pkbuf_default_create [function] [call site] 00112
1 ogs_log_install_domain [function] [call site] 00113
1 ogs_log_install_domain [function] [call site] 00114
1 ogs_pkbuf_put_data [function] [call site] 00115
2 ogs_pkbuf_put [function] [call site] 00116
3 ogs_pkbuf_tailroom [function] [call site] 00117
3 ogs_abort [function] [call site] 00118
1 ogs_gtp2_parse_msg [function] [call site] 00119
2 ogs_log_printf [function] [call site] 00120
2 ogs_abort [function] [call site] 00121
2 ogs_log_printf [function] [call site] 00122
2 ogs_abort [function] [call site] 00123
2 ogs_log_printf [function] [call site] 00124
2 ogs_abort [function] [call site] 00125
2 ogs_log_printf [function] [call site] 00126
2 ogs_abort [function] [call site] 00127
2 ogs_pkbuf_pull [function] [call site] 00128
3 ogs_pkbuf_pull_inline [function] [call site] 00129
2 ogs_log_printf [function] [call site] 00130
2 __bswap_32 [function] [call site] 00131
2 ogs_pkbuf_push [function] [call site] 00132
3 ogs_pkbuf_headroom [function] [call site] 00133
3 ogs_log_printf [function] [call site] 00134
3 ogs_abort [function] [call site] 00135
2 ogs_log_printf [function] [call site] 00136
2 ogs_abort [function] [call site] 00137
2 ogs_tlv_parse_msg [function] [call site] 00138
3 ogs_log_printf [function] [call site] 00139
3 ogs_abort [function] [call site] 00140
3 ogs_log_printf [function] [call site] 00141
3 ogs_abort [function] [call site] 00142
3 ogs_log_printf [function] [call site] 00143
3 ogs_abort [function] [call site] 00144
3 ogs_log_printf [function] [call site] 00145
3 ogs_abort [function] [call site] 00146
3 ogs_log_printf [function] [call site] 00147
3 ogs_log_printf [function] [call site] 00148
3 ogs_abort [function] [call site] 00149
3 ogs_tlv_parse_block [function] [call site] 00150
4 ogs_tlv_get [function] [call site] 00151
5 ogs_abort [function] [call site] 00152
4 ogs_abort [function] [call site] 00153
4 tlv_get_element [function] [call site] 00154
5 ogs_log_printf [function] [call site] 00155
5 ogs_abort [function] [call site] 00156
4 ogs_log_printf [function] [call site] 00157
4 ogs_abort [function] [call site] 00158
4 ogs_tlv_get [function] [call site] 00159
4 ogs_log_printf [function] [call site] 00160
4 ogs_abort [function] [call site] 00161
4 tlv_get_element [function] [call site] 00162
4 ogs_log_printf [function] [call site] 00163
4 ogs_abort [function] [call site] 00164
4 ogs_log_printf [function] [call site] 00165
4 ogs_log_printf [function] [call site] 00166
4 ogs_log_hexdump_func [function] [call site] 00167
5 ogs_slprintf [function] [call site] 00168
5 ogs_slprintf [function] [call site] 00169
5 ogs_slprintf [function] [call site] 00170
5 ogs_slprintf [function] [call site] 00171
5 ogs_slprintf [function] [call site] 00172
5 __ctype_b_loc [call site] 00173
5 ogs_slprintf [function] [call site] 00174
5 ogs_slprintf [function] [call site] 00175
5 ogs_log_printf [function] [call site] 00176
4 ogs_tlv_free_all [function] [call site] 00177
5 ogs_tlv_free_all [function] [call site] 00178
6 ogs_tlv_free [function] [call site] 00179
3 ogs_log_printf [function] [call site] 00180
3 tlv_parse_compound [function] [call site] 00181
4 ogs_log_printf [function] [call site] 00182
4 ogs_abort [function] [call site] 00183
4 ogs_log_printf [function] [call site] 00184
4 ogs_abort [function] [call site] 00185
4 ogs_log_printf [function] [call site] 00186
4 ogs_abort [function] [call site] 00187
4 ogs_log_printf [function] [call site] 00188
4 ogs_abort [function] [call site] 00189
4 tlv_count_node_find [function] [call site] 00190
5 ogs_log_printf [function] [call site] 00191
5 ogs_rbtree_link_node [function] [call site] 00192
5 ogs_rbtree_insert_color [function] [call site] 00193
6 ogs_log_printf [function] [call site] 00194
6 ogs_abort [function] [call site] 00195
6 ogs_log_printf [function] [call site] 00196
6 ogs_abort [function] [call site] 00197
6 ogs_log_printf [function] [call site] 00198
6 ogs_abort [function] [call site] 00199
6 rb_rotate_left [function] [call site] 00200
7 rb_replace_node [function] [call site] 00201
8 rb_change_child [function] [call site] 00202
6 rb_rotate_right [function] [call site] 00203
7 rb_replace_node [function] [call site] 00204
6 rb_rotate_right [function] [call site] 00205
6 rb_rotate_left [function] [call site] 00206
6 ogs_log_printf [function] [call site] 00207
6 ogs_abort [function] [call site] 00208
4 tlv_find_desc_by_type_inst [function] [call site] 00209
5 ogs_log_printf [function] [call site] 00210
5 ogs_abort [function] [call site] 00211
4 ogs_log_printf [function] [call site] 00212
4 ogs_log_printf [function] [call site] 00213
4 ogs_tlv_parse_embedded_block [function] [call site] 00214
5 ogs_tlv_parse_block [function] [call site] 00215
4 ogs_log_printf [function] [call site] 00216
4 ogs_log_printf [function] [call site] 00217
4 tlv_parse_compound [function] [call site] 00218
5 ogs_log_printf [function] [call site] 00219
5 ogs_log_printf [function] [call site] 00220
5 tlv_parse_leaf [function] [call site] 00221
6 ogs_log_printf [function] [call site] 00222
6 ogs_abort [function] [call site] 00223
6 ogs_log_printf [function] [call site] 00224
6 ogs_abort [function] [call site] 00225
6 ogs_log_printf [function] [call site] 00226
6 ogs_abort [function] [call site] 00227
6 ogs_log_printf [function] [call site] 00228
6 ogs_log_printf [function] [call site] 00229
6 ogs_log_printf [function] [call site] 00230
6 ogs_log_printf [function] [call site] 00231
6 ogs_log_printf [function] [call site] 00232
6 ogs_log_printf [function] [call site] 00233
6 ogs_log_printf [function] [call site] 00234
5 ogs_log_printf [function] [call site] 00235
3 ogs_tlv_free_all [function] [call site] 00236
2 ogs_tlv_parse_msg [function] [call site] 00237
2 ogs_tlv_parse_msg [function] [call site] 00238
2 ogs_tlv_parse_msg [function] [call site] 00239
2 ogs_tlv_parse_msg [function] [call site] 00240
2 ogs_tlv_parse_msg [function] [call site] 00241
2 ogs_tlv_parse_msg [function] [call site] 00242
2 ogs_tlv_parse_msg [function] [call site] 00243
2 ogs_tlv_parse_msg [function] [call site] 00244
2 ogs_tlv_parse_msg [function] [call site] 00245
2 ogs_tlv_parse_msg [function] [call site] 00246
2 ogs_tlv_parse_msg [function] [call site] 00247
2 ogs_tlv_parse_msg [function] [call site] 00248
2 ogs_tlv_parse_msg [function] [call site] 00249
2 ogs_tlv_parse_msg [function] [call site] 00250
2 ogs_tlv_parse_msg [function] [call site] 00251
2 ogs_tlv_parse_msg [function] [call site] 00252
2 ogs_tlv_parse_msg [function] [call site] 00253
2 ogs_tlv_parse_msg [function] [call site] 00254
2 ogs_tlv_parse_msg [function] [call site] 00255
2 ogs_tlv_parse_msg [function] [call site] 00256
2 ogs_tlv_parse_msg [function] [call site] 00257
2 ogs_tlv_parse_msg [function] [call site] 00258
2 ogs_tlv_parse_msg [function] [call site] 00259
2 ogs_tlv_parse_msg [function] [call site] 00260
2 ogs_tlv_parse_msg [function] [call site] 00261
2 ogs_tlv_parse_msg [function] [call site] 00262
2 ogs_tlv_parse_msg [function] [call site] 00263
2 ogs_tlv_parse_msg [function] [call site] 00264
2 ogs_tlv_parse_msg [function] [call site] 00265
2 ogs_log_printf [function] [call site] 00266
2 ogs_pkbuf_push [function] [call site] 00267
2 ogs_log_printf [function] [call site] 00268
2 ogs_abort [function] [call site] 00269
1 ogs_pkbuf_free [function] [call site] 00270
2 ogs_talloc_free [function] [call site] 00271
3 pthread_mutex_lock [call site] 00272
3 _talloc_free [call site] 00273
3 pthread_mutex_unlock [call site] 00274