Fuzz introspector: fuzz_attributeoperand
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
115 366 UA_STRING call site: 00366 UA_Log_Stdout_log
85 136 lookupRefType call site: 00136 UA_Server_readBrowseName
66 224 UA_clear call site: 00224 readValueAttributeComplete
34 331 UA_Array_copy call site: 00331 getStructureDefinition
30 298 UA_Array_delete call site: 00298 readExternalValueAttribute
20 517 printNodeIdBody call site: 00517 out_rev_
6 75 parse_nodeid_body call site: 00075 UA_readNumberWithBase
5 59 UA_String_unescape call site: 00059 UA_NamespaceMapping_uri2Index
5 485 nodeId_printEscape call site: 00485 UA_String_escapedSize
5 597 UA_AttributeOperand_print call site: 00597 UA_AttributeId_name
3 293 UA_ByteString_allocBuffer call site: 00293 UA_Variant_copyRange
3 592 moveTmpToOut call site: 00592

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_AttributeOperand_init [function] [call site] 00003
1 UA_AttributeOperand_parse [function] [call site] 00004
2 parseAttributeOperand [function] [call site] 00005
3 UA_AttributeOperand_init [function] [call site] 00006
3 isReservedPercentExtended [function] [call site] 00016
4 isReservedPercent [function] [call site] 00017
3 parse_nodeid [function] [call site] 00018
4 YYSHIFTSTAG [function] [call site] 00031
4 YYRESTORE [function] [call site] 00034
4 escapedUri2Index [function] [call site] 00055
5 UA_String_unescape [function] [call site] 00056
6 UA_String_copy [function] [call site] 00057
6 UA_String_clear [function] [call site] 00060
6 UA_String_clear [function] [call site] 00061
5 UA_NamespaceMapping_uri2Index [function] [call site] 00062
6 UA_String_equal [function] [call site] 00063
5 UA_String_clear [function] [call site] 00064
4 UA_String_copy [function] [call site] 00065
4 UA_readNumber [function] [call site] 00066
5 UA_readNumberWithBase [function] [call site] 00067
4 UA_NamespaceMapping_remote2Local [function] [call site] 00070
4 parse_nodeid_body [function] [call site] 00071
5 UA_readNumber [function] [call site] 00072
5 UA_String_copy [function] [call site] 00073
5 UA_String_unescape [function] [call site] 00074
5 parse_guid [function] [call site] 00075
6 UA_readNumberWithBase [function] [call site] 00076
6 UA_readNumberWithBase [function] [call site] 00077
6 UA_readNumberWithBase [function] [call site] 00078
6 UA_readNumberWithBase [function] [call site] 00079
6 UA_readNumberWithBase [function] [call site] 00080
6 UA_readNumberWithBase [function] [call site] 00081
3 YYRESTORE [function] [call site] 00088
3 parse_relativepath [function] [call site] 00101
4 UA_RelativePath_init [function] [call site] 00102
4 parse_relativepathElement [function] [call site] 00103
5 UA_RelativePathElement_init [function] [call site] 00104
5 UA_NODEID_NUMERIC [function] [call site] 00105
5 UA_NODEID_NUMERIC [function] [call site] 00107
5 parse_nodeid [function] [call site] 00108
5 lookupRefType [function] [call site] 00134
6 UA_String_equal [function] [call site] 00135
6 UA_NODEID_NUMERIC [function] [call site] 00136
6 UA_BrowseDescription_init [function] [call site] 00137
6 UA_NODEID_NUMERIC [function] [call site] 00138
6 UA_NODEID_NUMERIC [function] [call site] 00139
6 UA_Server_browseRecursive [function] [call site] 00140
7 lockServer [function] [call site] 00141
8 UA_LIKELY [function] [call site] 00142
8 UA_EventLoopPOSIX_lock [function] [call site] 00143
7 referenceTypeIndices [function] [call site] 00146
8 UA_NodeId_isNull [function] [call site] 00147
8 UA_ReferenceTypeSet_init [function] [call site] 00150
8 UA_NODESTORE_GET_SELECTIVE [function] [call site] 00152
8 UA_NODESTORE_RELEASE [function] [call site] 00153
8 UA_REFTYPESET [function] [call site] 00154
8 UA_NODESTORE_RELEASE [function] [call site] 00155
7 unlockServer [function] [call site] 00156
8 UA_LIKELY [function] [call site] 00157
8 UA_EventLoopPOSIX_unlock [function] [call site] 00158
9 UA_UNLOCK [function] [call site] 00159
8 UA_UNLOCK [function] [call site] 00160
7 browseRecursive [function] [call site] 00161
8 RefTree_init [function] [call site] 00162
8 UA_NodePointer_fromNodeId [function] [call site] 00165
8 browseRecursiveCallback [function] [call site] 00166
9 UA_NodePointer_isLocal [function] [call site] 00167
9 RefTree_add [function] [call site] 00168
10 UA_NodePointer_toExpandedNodeId [function] [call site] 00169
11 UA_NodePointer_fromNodeId [function] [call site] 00170
11 UA_ExpandedNodeId_init [function] [call site] 00171
11 UA_NodePointer_toNodeId [function] [call site] 00172
10 UA_ExpandedNodeId_hash [function] [call site] 00174
11 UA_NodeId_hash [function] [call site] 00175
12 UA_ByteString_hash [function] [call site] 00176
12 UA_ByteString_hash [function] [call site] 00177
12 UA_ByteString_hash [function] [call site] 00178
11 UA_ByteString_hash [function] [call site] 00179
11 UA_ByteString_hash [function] [call site] 00180
10 ZIP_FIND [function] [call site] 00181
10 RefTree_double [function] [call site] 00182
10 UA_ExpandedNodeId_copy [function] [call site] 00183
10 ZIP_INSERT [function] [call site] 00184
9 UA_NODESTORE_GETFROMREF_SELECTIVE [function] [call site] 00185
9 matchClassMask [function] [call site] 00186
9 RefTree_addNodeId [function] [call site] 00187
10 RefTree_add [function] [call site] 00188
10 UA_NodePointer_fromNodeId [function] [call site] 00189
9 UA_ReferenceTypeSet_contains [function] [call site] 00190
9 UA_NodeReferenceKind_iterate [function] [call site] 00191
9 UA_NODESTORE_RELEASE [function] [call site] 00194
8 browseRecursiveCallback [function] [call site] 00195
8 RefTree_clear [function] [call site] 00196
9 UA_ExpandedNodeId_clear [function] [call site] 00197
7 unlockServer [function] [call site] 00199
6 UA_Server_readBrowseName [function] [call site] 00200
7 __Server_read [function] [call site] 00201
8 lockServer [function] [call site] 00202
8 readWithReadValue [function] [call site] 00203
9 UA_LOCK_ASSERT [function] [call site] 00204
9 UA_ReadValueId_init [function] [call site] 00205
9 readWithSession [function] [call site] 00206
10 UA_LOCK_ASSERT [function] [call site] 00207
10 UA_DataValue_init [function] [call site] 00208
10 Operation_Read [function] [call site] 00209
11 attributeId2AttributeMask [function] [call site] 00210
12 UA_UNLIKELY [function] [call site] 00211
11 UA_NODESTORE_GET_SELECTIVE [function] [call site] 00212
11 ReadWithNodeMaybeAsync [function] [call site] 00213
12 UA_LOG_TRACE_SESSION [function] [call site] 00214
12 UA_String_equal [function] [call site] 00215
12 UA_String_equal [function] [call site] 00216
12 UA_String_equal [function] [call site] 00217
12 UA_Variant_setScalarCopy [function] [call site] 00218
13 UA_malloc [function] [call site] 00219
13 UA_UNLIKELY [function] [call site] 00220
13 UA_UNLIKELY [function] [call site] 00225
13 UA_Variant_setScalar [function] [call site] 00227
14 UA_Variant_init [function] [call site] 00228
12 UA_Variant_setScalarCopy [function] [call site] 00229
12 UA_Variant_setScalarCopy [function] [call site] 00230
12 UA_Session_getNodeDisplayName [function] [call site] 00231
13 getLocalizedForSession [function] [call site] 00232
14 UA_LocalizedText_init [function] [call site] 00233
14 UA_String_equal [function] [call site] 00234
14 UA_String_equal [function] [call site] 00235
12 UA_Variant_setScalarCopy [function] [call site] 00236
12 UA_Session_getNodeDescription [function] [call site] 00237
13 getLocalizedForSession [function] [call site] 00238
12 UA_Variant_setScalarCopy [function] [call site] 00239
12 UA_Variant_setScalarCopy [function] [call site] 00240
12 getUserWriteMask [function] [call site] 00241
13 UA_LOCK_ASSERT [function] [call site] 00242
13 UA_Server*::config::accessControl::getUserRightsMask [function] [call site] 00243
12 UA_Variant_setScalarCopy [function] [call site] 00244
12 readIsAbstractAttribute [function] [call site] 00245
13 UA_Variant_setScalarCopy [function] [call site] 00246
12 CHECK_NODECLASS [function] [call site] 00247
12 UA_Variant_setScalarCopy [function] [call site] 00248
12 CHECK_NODECLASS [function] [call site] 00249
12 UA_Variant_setScalarCopy [function] [call site] 00250
12 CHECK_NODECLASS [function] [call site] 00251
12 UA_Variant_setScalarCopy [function] [call site] 00252
12 CHECK_NODECLASS [function] [call site] 00253
12 UA_Variant_setScalarCopy [function] [call site] 00254
12 UA_Variant_setScalarCopy [function] [call site] 00255
12 CHECK_NODECLASS [function] [call site] 00256
12 getUserAccessLevel [function] [call site] 00257
13 UA_LOCK_ASSERT [function] [call site] 00258
13 getUserAccessLevel [function] [call site] 00259
14 UA_LOCK_ASSERT [function] [call site] 00260
14 getUserAccessLevel [function] [call site] 00261
12 readValueAttributeComplete [function] [call site] 00262
13 UA_NumericRange_parse [function] [call site] 00263
14 UA_realloc [function] [call site] 00264
14 readDimension [function] [call site] 00265
15 UA_readNumber [function] [call site] 00266
15 UA_readNumber [function] [call site] 00267
13 readInternalValueAttribute [function] [call site] 00269
14 UA_LOCK_ASSERT [function] [call site] 00270
14 UA_VariableNode*::valueSource::internal::notifications::onRead [function] [call site] 00271
14 UA_NODESTORE_GET_SELECTIVE [function] [call site] 00272
14 UA_DataValue_copy [function] [call site] 00273
14 UA_DataValue_copyRange [function] [call site] 00274
15 UA_Variant_init [function] [call site] 00276
15 UA_Variant_copyRange [function] [call site] 00277
16 UA_Variant_isScalar [function] [call site] 00278
16 isStringLike [function] [call site] 00279
16 checkAdjustRange [function] [call site] 00281
16 computeStrides [function] [call site] 00282
16 UA_assert [function] [call site] 00283
16 UA_Variant_init [function] [call site] 00284
16 UA_Array_new [function] [call site] 00285
17 UA_calloc [function] [call site] 00286
16 copySubString [function] [call site] 00289
17 UA_ByteString_allocBuffer [function] [call site] 00290
18 UA_ByteString_init [function] [call site] 00291
18 UA_malloc [function] [call site] 00292
18 UA_UNLIKELY [function] [call site] 00293
16 UA_Variant_copyRange [function] [call site] 00295
16 UA_Array_delete [function] [call site] 00296
16 UA_Array_new [function] [call site] 00299
16 Variant_clear [function] [call site] 00300
17 UA_Array_delete [function] [call site] 00301
15 DataValue_clear [function] [call site] 00303
16 Variant_clear [function] [call site] 00304
14 UA_NODESTORE_RELEASE [function] [call site] 00305
13 readExternalValueAttribute [function] [call site] 00306
14 UA_LOCK_ASSERT [function] [call site] 00307
14 UA_VariableNode*::valueSource::internal::notifications::onRead [function] [call site] 00308
14 UA_atomic_load [function] [call site] 00309
14 UA_DataValue_copy [function] [call site] 00310
14 UA_DataValue_copyRange [function] [call site] 00311
13 readCallbackValueAttribute [function] [call site] 00312
14 UA_LOCK_ASSERT [function] [call site] 00313
14 profileGetThread [function] [call site] 00314
15 UA_NodeId_init [function] [call site] 00315
15 releaseNode [function] [call site] 00317
14 UA_DataValue_copy [function] [call site] 00318
13 UA_EventLoop*::dateTime_now [function] [call site] 00319
12 CHECK_NODECLASS [function] [call site] 00321
12 UA_Variant_setScalarCopy [function] [call site] 00322
12 CHECK_NODECLASS [function] [call site] 00323
12 UA_Variant_setScalarCopy [function] [call site] 00324
12 CHECK_NODECLASS [function] [call site] 00325
12 UA_Variant_setArrayCopy [function] [call site] 00326
13 UA_Variant_init [function] [call site] 00327
13 UA_Array_copy [function] [call site] 00328
14 UA_UNLIKELY [function] [call site] 00329
14 UA_calloc [function] [call site] 00330
14 UA_Array_delete [function] [call site] 00333
12 CHECK_NODECLASS [function] [call site] 00334
12 UA_Variant_setScalarCopy [function] [call site] 00335
12 CHECK_NODECLASS [function] [call site] 00336
12 UA_Variant_setScalarCopy [function] [call site] 00337
12 CHECK_NODECLASS [function] [call site] 00338
12 getUserAccessLevel [function] [call site] 00339
12 UA_Variant_setScalarCopy [function] [call site] 00340
12 CHECK_NODECLASS [function] [call site] 00341
12 UA_Variant_setScalarCopy [function] [call site] 00342
12 CHECK_NODECLASS [function] [call site] 00343
12 UA_Variant_setScalarCopy [function] [call site] 00344
12 CHECK_NODECLASS [function] [call site] 00345
12 UA_Variant_setScalarCopy [function] [call site] 00346
12 CHECK_NODECLASS [function] [call site] 00347
12 getUserExecutable [function] [call site] 00348
13 UA_LOCK_ASSERT [function] [call site] 00349
13 getUserExecutable [function] [call site] 00350
14 UA_LOCK_ASSERT [function] [call site] 00351
14 getUserExecutable [function] [call site] 00352
12 UA_Variant_setScalarCopy [function] [call site] 00353
12 CHECK_NODECLASS [function] [call site] 00354
12 findDataType [function] [call site] 00355
13 UA_NodeId_equal [function] [call site] 00356
13 UA_NodeId_equal [function] [call site] 00357
12 getStructureDefinition [function] [call site] 00358
13 UA_NodeId_copy [function] [call site] 00359
13 UA_NS0ID [function] [call site] 00360
13 UA_NS0ID [function] [call site] 00361
13 UA_NS0ID [function] [call site] 00362
13 UA_calloc [function] [call site] 00363
13 UA_NodeId_clear [function] [call site] 00364
12 UA_Variant_setScalarCopy [function] [call site] 00367
12 UA_EventLoop*::dateTime_now [function] [call site] 00369
11 UA_NODESTORE_RELEASE [function] [call site] 00370
10 asyncOperationCancelCallback [function] [call site] 00371
11 UA_LOG_INFO [function] [call site] 00372
12 va_start [function] [call site] 00373
12 UA_Log_Stdout_log [function] [call site] 00374
13 __format__ [function] [call site] 00375
13 UA_DateTime_localTimeUtcOffset [function] [call site] 00376
13 UA_DateTime_toStruct [function] [call site] 00377
14 musl_secs_to_tm [function] [call site] 00379
13 UA_DateTime_now [function] [call site] 00380
14 xTaskGetTickCount [function] [call site] 00381
13 spinLock [function] [call site] 00382
14 UA_atomic_cmpxchg [function] [call site] 00383
13 mp_vsnprintf [function] [call site] 00385
14 format_string_loop [function] [call site] 00386
15 putchar_ [function] [call site] 00387
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00388
15 parse_flags [function] [call site] 00389
15 is_digit_ [function] [call site] 00390
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00394
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00395
15 is_digit_ [function] [call site] 00396
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00399
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00400
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00401
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00402
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00403
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00404
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00405
15 ADVANCE_IN_FORMAT_STRING [function] [call site] 00406
15 print_integer [function] [call site] 00408
16 print_integer_finalization [function] [call site] 00409
15 ABS_FOR_PRINTING [function] [call site] 00414
15 print_integer [function] [call site] 00416
15 ABS_FOR_PRINTING [function] [call site] 00417
15 print_integer [function] [call site] 00421
15 ABS_FOR_PRINTING [function] [call site] 00422
15 print_integer [function] [call site] 00423
15 print_integer [function] [call site] 00425
15 print_integer [function] [call site] 00430
15 putchar_ [function] [call site] 00464
15 putchar_ [function] [call site] 00465
15 putchar_ [function] [call site] 00467
15 out_rev_ [function] [call site] 00469
15 strnlen_s_ [function] [call site] 00470
15 putchar_ [function] [call site] 00471
15 putchar_ [function] [call site] 00473
15 out_rev_ [function] [call site] 00475
15 print_integer [function] [call site] 00476
15 putchar_ [function] [call site] 00477
15 UA_NodeId_print [function] [call site] 00481
16 UA_NodeId_printEx [function] [call site] 00482
17 nodeId_printEscape [function] [call site] 00483
18 UA_NamespaceMapping_index2Uri [function] [call site] 00484
18 nodeIdSize [function] [call site] 00485
19 UA_String_escapedSize [function] [call site] 00486
20 isReservedExtended [function] [call site] 00487
21 isReservedAnd [function] [call site] 00488
20 isReservedAnd [function] [call site] 00489
20 isReservedPercent [function] [call site] 00490
20 isReservedPercentExtended [function] [call site] 00491
19 itoaUnsigned [function] [call site] 00495
19 UA_String_escapedSize [function] [call site] 00496
18 UA_ByteString_allocBuffer [function] [call site] 00497
18 printNodeIdBody [function] [call site] 00498
19 UA_String_escapeInsert [function] [call site] 00500
20 isReservedPercentExtended [function] [call site] 00501
20 isReservedPercent [function] [call site] 00502
20 UA_LIKELY [function] [call site] 00503
20 isReservedExtended [function] [call site] 00504
20 isReservedAnd [function] [call site] 00505
19 UA_String_escapeInsert [function] [call site] 00513
19 UA_Guid_to_hex [function] [call site] 00515
19 UA_base64_buf [function] [call site] 00517
15 UA_String_clear [function] [call site] 00519
15 out_rev_ [function] [call site] 00520
15 putchar_ [function] [call site] 00521
13 spinUnLock [function] [call site] 00524
14 UA_atomic_xchg [function] [call site] 00525
9 UA_DataValue_clear [function] [call site] 00527
8 unlockServer [function] [call site] 00531
6 UA_QualifiedName_equal [function] [call site] 00532
6 UA_QualifiedName_clear [function] [call site] 00533
6 UA_NodeId_clear [function] [call site] 00534
6 UA_Array_delete [function] [call site] 00535
6 UA_QualifiedName_clear [function] [call site] 00536
6 UA_Array_delete [function] [call site] 00537
5 UA_QualifiedName_clear [function] [call site] 00538
5 isReservedPercentExtended [function] [call site] 00539
5 isReservedAnd [function] [call site] 00540
5 UA_RelativePathElement_clear [function] [call site] 00542
5 relativepath_addelem [function] [call site] 00543
6 UA_realloc [function] [call site] 00544
5 UA_RelativePathElement_clear [function] [call site] 00545
3 UA_AttributeId_fromName [function] [call site] 00546
3 UA_String_copy [function] [call site] 00548
3 UA_AttributeOperand_clear [function] [call site] 00549
1 UA_AttributeOperand_print [function] [call site] 00551
2 UA_NodeId_equal [function] [call site] 00552
2 nodeId_printEscape [function] [call site] 00553
2 UA_String_append [function] [call site] 00554
2 UA_assert [function] [call site] 00557
2 printRelativePath [function] [call site] 00558
3 UA_NodeId_equal [function] [call site] 00559
3 UA_String_append [function] [call site] 00560
3 UA_STRING [function] [call site] 00561
3 UA_NodeId_equal [function] [call site] 00562
3 UA_String_append [function] [call site] 00563
3 UA_STRING [function] [call site] 00564
3 UA_String_append [function] [call site] 00565
3 UA_STRING [function] [call site] 00566
3 UA_String_append [function] [call site] 00567
3 UA_STRING [function] [call site] 00568
3 UA_String_append [function] [call site] 00569
3 UA_STRING [function] [call site] 00570
3 getRefTypeBrowseName [function] [call site] 00571
4 UA_NodeId_print [function] [call site] 00573
3 UA_String_init [function] [call site] 00574
3 getRefTypeBrowseName [function] [call site] 00575
3 UA_String_escapeAppend [function] [call site] 00576
4 UA_String_append [function] [call site] 00577
4 UA_String_escapedSize [function] [call site] 00578
4 UA_realloc [function] [call site] 00579
4 UA_String_escapeInsert [function] [call site] 00580
3 UA_String_append [function] [call site] 00581
3 UA_STRING [function] [call site] 00582
3 UA_String_clear [function] [call site] 00583
3 itoaUnsigned [function] [call site] 00584
3 UA_String_append [function] [call site] 00585
3 UA_STRING [function] [call site] 00586
3 UA_String_append [function] [call site] 00587
3 UA_STRING [function] [call site] 00588
3 UA_String_escapeAppend [function] [call site] 00589
3 UA_String_clear [function] [call site] 00590
3 moveTmpToOut [function] [call site] 00591
4 UA_assert [function] [call site] 00592
4 UA_String_clear [function] [call site] 00593
4 UA_String_clear [function] [call site] 00595
2 UA_String_append [function] [call site] 00596
2 UA_String_clear [function] [call site] 00597
2 UA_AttributeId_name [function] [call site] 00598
2 UA_String_append [function] [call site] 00599
2 UA_STRING [function] [call site] 00600
2 UA_String_append [function] [call site] 00601
2 UA_STRING [function] [call site] 00602
2 UA_String_append [function] [call site] 00603
2 UA_STRING [function] [call site] 00604
2 UA_String_append [function] [call site] 00605
2 UA_String_append [function] [call site] 00606
2 UA_STRING [function] [call site] 00607
2 UA_String_clear [function] [call site] 00608
2 moveTmpToOut [function] [call site] 00609
1 UA_assert [function] [call site] 00610
1 UA_AttributeOperand_parse [function] [call site] 00611
1 UA_assert [function] [call site] 00612
1 UA_AttributeOperand_print [function] [call site] 00613
1 UA_assert [function] [call site] 00614
1 UA_assert [function] [call site] 00615
1 UA_String_equal [function] [call site] 00616
1 UA_assert [function] [call site] 00617
1 UA_String_clear [function] [call site] 00620
1 UA_String_clear [function] [call site] 00621
1 UA_AttributeOperand_clear [function] [call site] 00622
1 UA_AttributeOperand_clear [function] [call site] 00623