Fuzz introspector: fuzz_xml_decode_encode
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
3 198 LLVMFuzzerTestOneInput call site: 00198
2 6 yxml_init call site: 00006
2 168 UA_decodeXml call site: 00168 UA_STRING
2 184 LLVMFuzzerTestOneInput call site: 00184 UA_calcSizeXml
2 192 LLVMFuzzerTestOneInput call site: 00192
1 9 xml_tokenize call site: 00009
1 166 UA_decodeXml call site: 00166
1 182 UA_ByteString_allocBuffer call site: 00182
1 188 UA_encodeXml call site: 00188

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_Variant_init [function] [call site] 00001
1 UA_decodeXml [function] [call site] 00002
2 xml_tokenize [function] [call site] 00003
3 UA_assert [function] [call site] 00010
3 yxml_parse [function] [call site] 00011
4 yxml_isName [function] [call site] 00012
4 yxml_attrname [function] [call site] 00013
5 yxml_pushstackc [function] [call site] 00014
4 yxml_isSP [function] [call site] 00015
4 yxml_attrnameend [function] [call site] 00016
4 yxml_attrnameend [function] [call site] 00017
4 yxml_isSP [function] [call site] 00018
4 yxml_isSP [function] [call site] 00019
4 yxml_isAttValue [function] [call site] 00020
4 yxml_dataattr [function] [call site] 00021
5 yxml_setchar [function] [call site] 00022
4 yxml_refstart [function] [call site] 00023
4 yxml_attrvalend [function] [call site] 00025
5 yxml_popstack [function] [call site] 00026
4 yxml_isRef [function] [call site] 00027
4 yxml_ref [function] [call site] 00028
5 yxml_setchar [function] [call site] 00029
4 yxml_refattrval [function] [call site] 00030
5 yxml_refend [function] [call site] 00031
6 yxml_isHex [function] [call site] 00032
6 yxml_isNum [function] [call site] 00033
6 INTFROM5CHARS [function] [call site] 00034
6 INTFROM5CHARS [function] [call site] 00035
6 INTFROM5CHARS [function] [call site] 00036
6 INTFROM5CHARS [function] [call site] 00037
6 INTFROM5CHARS [function] [call site] 00038
6 INTFROM5CHARS [function] [call site] 00039
6 yxml_setutf8 [function] [call site] 00040
7 yxml_setchar [function] [call site] 00041
7 yxml_setchar [function] [call site] 00042
7 yxml_setchar [function] [call site] 00043
7 yxml_setchar [function] [call site] 00044
7 yxml_setchar [function] [call site] 00045
7 yxml_setchar [function] [call site] 00046
7 yxml_setchar [function] [call site] 00047
7 yxml_setchar [function] [call site] 00048
7 yxml_setchar [function] [call site] 00049
7 yxml_setchar [function] [call site] 00050
4 yxml_isChar [function] [call site] 00051
4 yxml_datacontent [function] [call site] 00052
5 yxml_setchar [function] [call site] 00053
4 yxml_isChar [function] [call site] 00054
4 yxml_datacd1 [function] [call site] 00055
5 yxml_setchar [function] [call site] 00056
4 yxml_datacontent [function] [call site] 00057
4 yxml_isChar [function] [call site] 00058
4 yxml_datacd2 [function] [call site] 00059
5 yxml_setchar [function] [call site] 00060
4 yxml_isChar [function] [call site] 00061
4 yxml_isChar [function] [call site] 00062
4 yxml_isChar [function] [call site] 00063
4 yxml_isChar [function] [call site] 00064
4 yxml_isChar [function] [call site] 00065
4 yxml_isChar [function] [call site] 00066
4 yxml_isName [function] [call site] 00067
4 yxml_elemname [function] [call site] 00068
5 yxml_pushstackc [function] [call site] 00069
4 yxml_isSP [function] [call site] 00070
4 yxml_elemnameend [function] [call site] 00071
4 yxml_elemnameend [function] [call site] 00072
4 yxml_elemnameend [function] [call site] 00073
4 yxml_isSP [function] [call site] 00074
4 yxml_isNameStart [function] [call site] 00075
4 yxml_attrstart [function] [call site] 00076
5 yxml_pushstack [function] [call site] 00077
4 yxml_isSP [function] [call site] 00078
4 yxml_selfclose [function] [call site] 00079
5 yxml_popstack [function] [call site] 00080
4 yxml_isSP [function] [call site] 00081
4 yxml_isSP [function] [call site] 00082
4 yxml_isAlpha [function] [call site] 00083
4 yxml_isEncName [function] [call site] 00084
4 yxml_isNameStart [function] [call site] 00085
4 yxml_elemclose [function] [call site] 00086
4 yxml_isName [function] [call site] 00087
4 yxml_elemclose [function] [call site] 00088
4 yxml_isSP [function] [call site] 00089
4 yxml_elemcloseend [function] [call site] 00090
5 yxml_selfclose [function] [call site] 00091
4 yxml_elemcloseend [function] [call site] 00092
4 yxml_isSP [function] [call site] 00093
4 yxml_isSP [function] [call site] 00094
4 yxml_isNameStart [function] [call site] 00095
4 yxml_elemstart [function] [call site] 00096
5 yxml_pushstack [function] [call site] 00097
4 yxml_isNameStart [function] [call site] 00098
4 yxml_elemstart [function] [call site] 00099
4 yxml_isNameStart [function] [call site] 00100
4 yxml_elemstart [function] [call site] 00101
4 yxml_pistart [function] [call site] 00102
5 yxml_pushstack [function] [call site] 00103
4 yxml_isNameStart [function] [call site] 00104
4 yxml_pistart [function] [call site] 00105
4 yxml_isSP [function] [call site] 00106
4 yxml_isSP [function] [call site] 00107
4 yxml_refstart [function] [call site] 00108
4 yxml_isChar [function] [call site] 00109
4 yxml_datacontent [function] [call site] 00110
4 yxml_isRef [function] [call site] 00111
4 yxml_refcontent [function] [call site] 00113
5 yxml_refend [function] [call site] 00114
4 yxml_isSP [function] [call site] 00115
4 yxml_isNameStart [function] [call site] 00116
4 yxml_pistart [function] [call site] 00117
4 yxml_isName [function] [call site] 00118
4 yxml_piname [function] [call site] 00119
5 yxml_pushstackc [function] [call site] 00120
4 yxml_pinameend [function] [call site] 00121
4 yxml_isSP [function] [call site] 00122
4 yxml_pinameend [function] [call site] 00123
4 yxml_isChar [function] [call site] 00124
4 yxml_datapi1 [function] [call site] 00125
5 yxml_setchar [function] [call site] 00126
4 yxml_pivalend [function] [call site] 00127
5 yxml_popstack [function] [call site] 00128
4 yxml_isChar [function] [call site] 00129
4 yxml_datapi2 [function] [call site] 00130
5 yxml_setchar [function] [call site] 00131
4 yxml_pivalend [function] [call site] 00132
4 yxml_isSP [function] [call site] 00133
4 yxml_isSP [function] [call site] 00134
4 yxml_isSP [function] [call site] 00135
4 yxml_isSP [function] [call site] 00136
4 yxml_isNum [function] [call site] 00137
4 yxml_isNum [function] [call site] 00138
4 yxml_piname [function] [call site] 00139
4 yxml_isName [function] [call site] 00140
4 yxml_piname [function] [call site] 00141
4 yxml_pinameend [function] [call site] 00142
4 yxml_isSP [function] [call site] 00143
4 yxml_pinameend [function] [call site] 00144
4 yxml_piname [function] [call site] 00145
4 yxml_isName [function] [call site] 00146
4 yxml_piname [function] [call site] 00147
4 yxml_pinameend [function] [call site] 00148
4 yxml_isSP [function] [call site] 00149
4 yxml_pinameend [function] [call site] 00150
4 yxml_isSP [function] [call site] 00151
4 yxml_piabort [function] [call site] 00152
5 yxml_popstack [function] [call site] 00153
4 yxml_isName [function] [call site] 00154
4 yxml_piname [function] [call site] 00155
4 yxml_isSP [function] [call site] 00156
4 yxml_isSP [function] [call site] 00157
4 yxml_isSP [function] [call site] 00158
4 yxml_isSP [function] [call site] 00159
4 yxml_isSP [function] [call site] 00160
4 yxml_isSP [function] [call site] 00161
3 backtrackName [function] [call site] 00163
2 UA_malloc [function] [call site] 00165
2 xml_tokenize [function] [call site] 00166
1 UA_calcSizeXml [function] [call site] 00175
2 writeXmlElement [function] [call site] 00177
1 UA_Variant_clear [function] [call site] 00178
1 UA_ByteString_allocBuffer [function] [call site] 00179
2 UA_ByteString_init [function] [call site] 00180
2 UA_malloc [function] [call site] 00181
2 UA_UNLIKELY [function] [call site] 00182
1 UA_Variant_clear [function] [call site] 00183
1 UA_encodeXml [function] [call site] 00184
2 UA_calcSizeXml [function] [call site] 00185
2 UA_ByteString_allocBuffer [function] [call site] 00186
2 writeXmlElement [function] [call site] 00188
2 UA_ByteString_clear [function] [call site] 00189
1 UA_assert [function] [call site] 00190
1 UA_Variant_init [function] [call site] 00191
1 UA_decodeXml [function] [call site] 00192
1 UA_Variant_clear [function] [call site] 00193
1 UA_ByteString_clear [function] [call site] 00194
1 UA_assert [function] [call site] 00195
1 UA_assert [function] [call site] 00196
1 UA_ByteString_allocBuffer [function] [call site] 00198
1 UA_Variant_clear [function] [call site] 00199
1 UA_Variant_clear [function] [call site] 00200
1 UA_ByteString_clear [function] [call site] 00201
1 UA_encodeXml [function] [call site] 00202
1 UA_assert [function] [call site] 00203
1 UA_assert [function] [call site] 00204
1 UA_assert [function] [call site] 00205
1 UA_Variant_clear [function] [call site] 00207
1 UA_Variant_clear [function] [call site] 00208
1 UA_ByteString_clear [function] [call site] 00209
1 UA_ByteString_clear [function] [call site] 00210