Fuzz introspector: fuzz_binary_decode
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
3 29 UA_encodeBinaryInternal call site: 00029 exchangeBuffer
2 36 UA_ByteString_allocBuffer call site: 00036
2 39 LLVMFuzzerTestOneInput call site: 00039 UA_calcSizeBinary
1 12 UA_clear call site: 00012
1 42 UA_encodeBinary call site: 00042
1 51 UA_Variant_copyRange call site: 00051 isStringLike
1 55 UA_Variant_copyRange call site: 00055
1 64 copySubString call site: 00064 UA_Variant_copyRange
1 69 UA_Variant_copyRange call site: 00069 Variant_clear

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_decodeBinary [function] [call site] 00005
1 UA_delete [function] [call site] 00017
1 UA_delete [function] [call site] 00021
1 UA_delete [function] [call site] 00022
1 UA_assert [function] [call site] 00023
1 UA_delete [function] [call site] 00025
1 UA_calcSizeBinary [function] [call site] 00026
2 UA_encodeBinaryInternal [function] [call site] 00027
3 encodeWithExchangeBuffer [function] [call site] 00029
4 UA_assert [function] [call site] 00030
4 exchangeBuffer [function] [call site] 00031
5 Ctx*::exchangeBufferCallback [function] [call site] 00032
3 UA_assert [function] [call site] 00033
1 UA_ByteString_allocBuffer [function] [call site] 00034
2 UA_ByteString_init [function] [call site] 00035
2 UA_calloc [function] [call site] 00036
2 UA_UNLIKELY [function] [call site] 00037
1 UA_delete [function] [call site] 00038
1 UA_encodeBinary [function] [call site] 00039
2 UA_calcSizeBinary [function] [call site] 00040
2 UA_ByteString_allocBuffer [function] [call site] 00041
2 UA_encodeBinaryInternal [function] [call site] 00042
2 UA_ByteString_clear [function] [call site] 00043
1 UA_assert [function] [call site] 00044
1 UA_ByteString_clear [function] [call site] 00045
1 UA_DataValue_init [function] [call site] 00046
1 UA_DataValue_copyRange [function] [call site] 00047
2 UA_Variant_init [function] [call site] 00049
2 UA_Variant_copyRange [function] [call site] 00050
3 UA_Variant_isScalar [function] [call site] 00051
3 isStringLike [function] [call site] 00052
3 checkAdjustRange [function] [call site] 00054
3 computeStrides [function] [call site] 00055
3 UA_assert [function] [call site] 00056
3 UA_Variant_init [function] [call site] 00057
3 UA_Array_new [function] [call site] 00058
4 UA_calloc [function] [call site] 00059
3 copySubString [function] [call site] 00062
4 UA_ByteString_allocBuffer [function] [call site] 00063
3 UA_Variant_copyRange [function] [call site] 00065
3 UA_Array_delete [function] [call site] 00066
3 UA_Array_new [function] [call site] 00069
3 Variant_clear [function] [call site] 00070
4 UA_Array_delete [function] [call site] 00071
2 DataValue_clear [function] [call site] 00073
3 Variant_clear [function] [call site] 00074
1 UA_DataValue_clear [function] [call site] 00075
1 UA_delete [function] [call site] 00076