Fuzz introspector: fuzz_attributeoperand
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
102 97 stringOrder call site: 00097 UA_Server_readBrowseName
69 244 UA_STRING call site: 00244 UA_DataType_toStructureDescription
40 203 UA_Array_delete call site: 00203 UA_DataType_toDescription
39 57 lookupRefType call site: 00057 UA_Server_browseRecursive
7 15 UA_String_unescape call site: 00015 UA_NamespaceMapping_uri2Index
6 33 parse_nodeid_body call site: 00033 UA_readNumberWithBase
5 332 nodeId_printEscape call site: 00332 UA_String_escapedSize
5 396 UA_AttributeOperand_print call site: 00396 UA_STRING
3 10 parse_nodeid call site: 00010 UA_String_unescape
3 361 printRelativePath call site: 00361 UA_STRING
2 200 UA_ByteString_allocBuffer call site: 00200 UA_Variant_copyRange
2 317 parse_relativepathElement call site: 00317 UA_RelativePathElement_clear

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_AttributeOperand_init(UA_AttributeOperand*) [function] [call site] 00002
1 UA_AttributeOperand_parse [function] [call site] 00003
2 UA_NODEID_NUMERIC [function] [call site] 00004
2 parseAttributeOperand [function] [call site] 00005
3 UA_AttributeOperand_init [function] [call site] 00006
3 isReservedPercentExtended [function] [call site] 00007
4 isReservedPercent [function] [call site] 00008
3 parse_nodeid [function] [call site] 00009
4 escapedUri2Index [function] [call site] 00010
5 UA_String_unescape [function] [call site] 00011
6 UA_String_copy [function] [call site] 00012
6 UA_String_clear [function] [call site] 00016
6 UA_String_clear [function] [call site] 00018
5 UA_NamespaceMapping_uri2Index [function] [call site] 00019
6 UA_String_equal [function] [call site] 00020
5 UA_String_clear [function] [call site] 00022
4 UA_String_copy [function] [call site] 00023
4 UA_readNumber [function] [call site] 00024
5 UA_readNumberWithBase [function] [call site] 00025
6 __assert_fail [call site] 00026
6 __assert_fail [call site] 00027
4 UA_NamespaceMapping_remote2Local [function] [call site] 00028
4 parse_nodeid_body [function] [call site] 00029
5 UA_readNumber [function] [call site] 00030
5 UA_String_copy [function] [call site] 00031
5 UA_String_unescape [function] [call site] 00032
5 parse_guid [function] [call site] 00033
6 UA_readNumberWithBase [function] [call site] 00034
6 UA_readNumberWithBase [function] [call site] 00035
6 UA_readNumberWithBase [function] [call site] 00036
6 UA_readNumberWithBase [function] [call site] 00037
6 UA_readNumberWithBase [function] [call site] 00038
6 UA_readNumberWithBase [function] [call site] 00039
5 UA_unbase64 [function] [call site] 00040
5 __assert_fail [call site] 00041
3 parse_relativepath [function] [call site] 00042
4 UA_RelativePath_init [function] [call site] 00043
4 parse_relativepathElement [function] [call site] 00044
5 UA_RelativePathElement_init [function] [call site] 00045
5 UA_NODEID_NUMERIC [function] [call site] 00046
5 UA_NODEID_NUMERIC [function] [call site] 00047
5 parse_nodeid [function] [call site] 00048
5 parse_qn [function] [call site] 00049
6 UA_QualifiedName_init [function] [call site] 00050
6 UA_readNumber [function] [call site] 00051
6 escapedUri2Index [function] [call site] 00052
6 UA_String_copy [function] [call site] 00053
6 UA_String_unescape [function] [call site] 00054
5 lookupRefType [function] [call site] 00055
6 UA_String_equal [function] [call site] 00056
6 UA_NODEID_NUMERIC [function] [call site] 00057
6 UA_BrowseDescription_init [function] [call site] 00058
6 UA_NODEID_NUMERIC [function] [call site] 00059
6 UA_NODEID_NUMERIC [function] [call site] 00060
6 UA_Server_browseRecursive [function] [call site] 00061
7 lockServer [function] [call site] 00062
8 UA_LOCK [function] [call site] 00063
9 pthread_mutex_lock [call site] 00064
7 referenceTypeIndices [function] [call site] 00065
8 UA_NodeId_isNull [function] [call site] 00066
9 guidOrder [function] [call site] 00067
10 memcmp [call site] 00068
8 UA_ReferenceTypeSet_init [function] [call site] 00069
8 UA_REFTYPESET [function] [call site] 00070
9 UA_ReferenceTypeSet_init [function] [call site] 00071
7 unlockServer [function] [call site] 00072
8 UA_UNLOCK [function] [call site] 00073
9 pthread_mutex_unlock [call site] 00074
7 browseRecursive [function] [call site] 00075
8 RefTree_init [function] [call site] 00076
8 UA_NodePointer_fromNodeId [function] [call site] 00077
8 browseRecursiveCallback [function] [call site] 00078
9 UA_NodePointer_isLocal [function] [call site] 00079
9 RefTree_add [function] [call site] 00080
10 UA_NodePointer_toExpandedNodeId [function] [call site] 00081
11 UA_NodePointer_fromNodeId [function] [call site] 00082
11 UA_ExpandedNodeId_init [function] [call site] 00083
11 UA_NodePointer_toNodeId [function] [call site] 00084
10 UA_ExpandedNodeId_hash [function] [call site] 00085
11 UA_NodeId_hash [function] [call site] 00086
12 UA_ByteString_hash [function] [call site] 00087
12 UA_ByteString_hash [function] [call site] 00088
12 UA_ByteString_hash [function] [call site] 00089
11 UA_ByteString_hash [function] [call site] 00090
11 UA_ByteString_hash [function] [call site] 00091
10 RefHead_ZIP_FIND [function] [call site] 00092
11 cmpTarget [function] [call site] 00093
12 UA_ExpandedNodeId_order [function] [call site] 00094
13 expandedNodeIdOrder [function] [call site] 00095
14 stringOrder [function] [call site] 00096
15 memcmp [call site] 00097
14 nodeIdOrder [function] [call site] 00098
15 guidOrder [function] [call site] 00099
15 stringOrder [function] [call site] 00100
10 RefTree_double [function] [call site] 00101
11 __assert_fail [call site] 00102
11 RefHead_ZIP_INSERT [function] [call site] 00103
12 __ZIP_INSERT [function] [call site] 00104
13 __ZIP_UNIQUE_CMP [function] [call site] 00105
13 __ZIP_RANK_CMP [function] [call site] 00106
14 __ZIP_PTR_HASH [function] [call site] 00107
14 __ZIP_PTR_HASH [function] [call site] 00108
13 __ZIP_INSERT_MOVE_RIGHT [function] [call site] 00109
14 __ZIP_UNIQUE_CMP [function] [call site] 00110
13 __ZIP_INSERT_MOVE_LEFT [function] [call site] 00111
14 __ZIP_UNIQUE_CMP [function] [call site] 00112
10 UA_ExpandedNodeId_copy [function] [call site] 00113
10 RefHead_ZIP_INSERT [function] [call site] 00115
9 matchClassMask [function] [call site] 00116
9 RefTree_addNodeId [function] [call site] 00117
10 UA_NodePointer_fromNodeId [function] [call site] 00118
10 RefTree_add [function] [call site] 00119
9 UA_ReferenceTypeSet_contains [function] [call site] 00120
9 UA_NodeReferenceKind_iterate [function] [call site] 00121
10 UA_ReferenceIdTree_ZIP_ITER [function] [call site] 00122
11 __ZIP_ITER [function] [call site] 00123
12 __ZIP_ITER [function] [call site] 00124
13 __ZIP_ITER [function] [call site] 00125
9 browseRecursiveCallback [function] [call site] 00126
8 browseRecursiveCallback [function] [call site] 00127
8 RefTree_clear [function] [call site] 00128
9 UA_ExpandedNodeId_clear [function] [call site] 00129
10 UA_clear [function] [call site] 00130
7 unlockServer [function] [call site] 00131
6 UA_Server_readBrowseName [function] [call site] 00132
7 __Server_read [function] [call site] 00133
8 lockServer [function] [call site] 00134
8 readWithReadValue [function] [call site] 00135
9 UA_LOCK_ASSERT [function] [call site] 00136
10 __assert_fail [call site] 00137
9 UA_ReadValueId_init [function] [call site] 00138
9 readWithSession [function] [call site] 00139
10 UA_LOCK_ASSERT [function] [call site] 00140
10 UA_DataValue_init [function] [call site] 00141
10 Operation_Read [function] [call site] 00142
11 attributeId2AttributeMask [function] [call site] 00143
11 ReadWithNodeMaybeAsync [function] [call site] 00144
12 UA_String_equal [function] [call site] 00145
12 UA_String_equal [function] [call site] 00146
12 UA_String_equal [function] [call site] 00147
12 addMissingTimestamps [function] [call site] 00148
12 addMissingTimestamps [function] [call site] 00149
12 UA_Variant_setScalarCopy [function] [call site] 00150
13 UA_Variant_setScalar [function] [call site] 00152
14 UA_Variant_init [function] [call site] 00153
12 UA_Variant_setScalarCopy [function] [call site] 00154
12 UA_Variant_setScalarCopy [function] [call site] 00155
12 UA_Session_getNodeDisplayName [function] [call site] 00156
13 getLocalizedForSession [function] [call site] 00157
14 UA_LocalizedText_init [function] [call site] 00158
14 UA_String_equal [function] [call site] 00159
14 UA_String_equal [function] [call site] 00160
12 UA_Variant_setScalarCopy [function] [call site] 00161
12 UA_Session_getNodeDescription [function] [call site] 00162
13 getLocalizedForSession [function] [call site] 00163
12 UA_Variant_setScalarCopy [function] [call site] 00164
12 UA_Variant_setScalarCopy [function] [call site] 00165
12 getUserWriteMask [function] [call site] 00166
13 UA_LOCK_ASSERT [function] [call site] 00167
12 UA_Variant_setScalarCopy [function] [call site] 00168
12 readIsAbstractAttribute [function] [call site] 00169
13 UA_Variant_setScalarCopy [function] [call site] 00170
12 UA_Variant_setScalarCopy [function] [call site] 00171
12 UA_Variant_setScalarCopy [function] [call site] 00172
12 UA_Variant_setScalarCopy [function] [call site] 00173
12 UA_Variant_setScalarCopy [function] [call site] 00174
12 UA_Variant_setScalarCopy [function] [call site] 00175
12 getUserAccessLevel [function] [call site] 00176
13 UA_LOCK_ASSERT [function] [call site] 00177
12 readValueAttributeComplete [function] [call site] 00178
13 UA_NumericRange_parse [function] [call site] 00179
14 readDimension [function] [call site] 00180
15 UA_readNumber [function] [call site] 00181
15 UA_readNumber [function] [call site] 00182
13 readInternalValueAttribute [function] [call site] 00183
14 UA_LOCK_ASSERT [function] [call site] 00184
14 UA_DataValue_copy [function] [call site] 00185
14 UA_DataValue_copyRange [function] [call site] 00187
15 UA_Variant_init [function] [call site] 00188
15 UA_Variant_copyRange [function] [call site] 00189
16 UA_Variant_isScalar [function] [call site] 00190
16 isStringLike [function] [call site] 00191
16 checkAdjustRange [function] [call site] 00192
16 computeStrides [function] [call site] 00193
16 __assert_fail [call site] 00194
16 UA_Variant_init [function] [call site] 00195
16 UA_Array_new [function] [call site] 00196
16 copySubString [function] [call site] 00198
17 UA_ByteString_allocBuffer [function] [call site] 00199
18 UA_ByteString_init [function] [call site] 00200
16 UA_Variant_copyRange [function] [call site] 00201
17 UA_Array_delete [function] [call site] 00202
18 UA_clear [function] [call site] 00203
17 UA_Array_new [function] [call site] 00204
17 Variant_clear [function] [call site] 00205
18 UA_Array_delete [function] [call site] 00206
15 DataValue_clear [function] [call site] 00207
16 Variant_clear [function] [call site] 00208
13 readExternalValueAttribute [function] [call site] 00209
14 UA_LOCK_ASSERT [function] [call site] 00210
14 UA_DataValue_copy [function] [call site] 00211
14 UA_DataValue_copyRange [function] [call site] 00212
13 readCallbackValueAttribute [function] [call site] 00213
14 UA_LOCK_ASSERT [function] [call site] 00214
14 UA_DataValue_copy [function] [call site] 00215
12 UA_Variant_setScalarCopy [function] [call site] 00216
12 UA_Variant_setScalarCopy [function] [call site] 00217
12 UA_Variant_setArrayCopy [function] [call site] 00218
13 UA_Variant_init [function] [call site] 00219
13 UA_Array_copy [function] [call site] 00220
14 UA_Array_delete [function] [call site] 00222
12 UA_Variant_setScalarCopy [function] [call site] 00223
12 UA_Variant_setScalarCopy [function] [call site] 00224
12 getUserAccessLevel [function] [call site] 00225
12 UA_Variant_setScalarCopy [function] [call site] 00226
12 UA_Variant_setScalarCopy [function] [call site] 00227
12 UA_Variant_setScalarCopy [function] [call site] 00228
12 UA_Variant_setScalarCopy [function] [call site] 00229
12 getUserExecutable [function] [call site] 00230
13 UA_LOCK_ASSERT [function] [call site] 00231
12 UA_Variant_setScalarCopy [function] [call site] 00232
12 serverCustomTypes [function] [call site] 00233
12 UA_findDataTypeWithCustom [function] [call site] 00234
13 nodeIdOrder [function] [call site] 00235
13 nodeIdOrder [function] [call site] 00236
12 UA_DataType_toDescription [function] [call site] 00237
13 UA_ExtensionObject_init [function] [call site] 00238
13 UA_EnumDescription_new [function] [call site] 00239
13 UA_DataType_toEnumDescription [function] [call site] 00241
14 toDescription [function] [call site] 00242
15 UA_STRING [function] [call site] 00243
16 strlen [call site] 00244
15 UA_QualifiedName_parse [function] [call site] 00245
16 UA_QualifiedName_parseEx [function] [call site] 00246
17 parse_qn [function] [call site] 00247
17 UA_QualifiedName_clear [function] [call site] 00248
18 UA_clear [function] [call site] 00249
15 UA_NodeId_copy [function] [call site] 00250
15 UA_QualifiedName_clear [function] [call site] 00252
14 UA_EnumDescription_clear [function] [call site] 00253
15 UA_clear [function] [call site] 00254
14 UA_String_fromChars [function] [call site] 00255
15 strlen [call site] 00256
14 UA_LOCALIZEDTEXT_ALLOC [function] [call site] 00257
15 UA_String_fromChars [function] [call site] 00258
15 UA_String_fromChars [function] [call site] 00259
13 UA_StructureDescription_new [function] [call site] 00260
13 UA_DataType_toStructureDescription [function] [call site] 00262
14 UA_StructureDescription_init [function] [call site] 00263
14 toDescription [function] [call site] 00264
14 UA_NODEID_NUMERIC [function] [call site] 00265
14 UA_NODEID_NUMERIC [function] [call site] 00266
14 UA_NODEID_NUMERIC [function] [call site] 00267
14 UA_StructureDescription_clear [function] [call site] 00268
15 UA_clear [function] [call site] 00269
14 UA_NodeId_copy [function] [call site] 00270
14 UA_StructureDescription_clear [function] [call site] 00273
14 UA_StructureDescription_clear [function] [call site] 00274
14 UA_String_fromChars [function] [call site] 00275
14 UA_NodeId_copy [function] [call site] 00276
14 UA_StructureDescription_clear [function] [call site] 00277
14 UA_StructureDescription_clear [function] [call site] 00278
13 UA_SimpleTypeDescription_new [function] [call site] 00279
13 UA_DataType_toSimpleTypeDescription [function] [call site] 00281
14 toDescription [function] [call site] 00282
14 UA_NodeId_copy [function] [call site] 00283
14 UA_SimpleTypeDescription_clear [function] [call site] 00284
15 UA_clear [function] [call site] 00285
13 UA_ExtensionObject_setValue [function] [call site] 00286
14 UA_ExtensionObject_init [function] [call site] 00287
12 UA_NodeId_clear [function] [call site] 00288
13 UA_clear [function] [call site] 00289
12 UA_QualifiedName_clear [function] [call site] 00290
12 UA_Variant_setScalar [function] [call site] 00291
12 UA_NodeId_clear [function] [call site] 00292
12 UA_QualifiedName_clear [function] [call site] 00293
12 UA_Variant_setScalar [function] [call site] 00294
12 UA_Variant_setArray [function] [call site] 00295
13 UA_Variant_init [function] [call site] 00296
12 UA_Variant_isEmpty [function] [call site] 00297
12 isNullableDataType [function] [call site] 00298
13 UA_Server_findDataType [function] [call site] 00299
14 serverCustomTypes [function] [call site] 00300
14 UA_findDataTypeWithCustom [function] [call site] 00301
13 UA_DataType_isNumeric [function] [call site] 00302
12 addMissingTimestamps [function] [call site] 00303
9 UA_DataValue_clear [function] [call site] 00304
10 UA_clear [function] [call site] 00305
8 unlockServer [function] [call site] 00306
6 UA_QualifiedName_equal [function] [call site] 00307
6 UA_QualifiedName_clear [function] [call site] 00309
6 UA_NodeId_clear [function] [call site] 00310
6 UA_Array_delete [function] [call site] 00311
6 UA_QualifiedName_clear [function] [call site] 00312
6 UA_Array_delete [function] [call site] 00313
5 UA_QualifiedName_clear [function] [call site] 00314
5 isReservedPercentExtended [function] [call site] 00315
5 isReservedAnd [function] [call site] 00316
5 UA_RelativePathElement_clear [function] [call site] 00318
5 relativepath_addelem [function] [call site] 00320
5 UA_RelativePathElement_clear [function] [call site] 00321
3 UA_AttributeId_fromName [function] [call site] 00322
4 strlen [call site] 00323
3 UA_String_copy [function] [call site] 00324
3 UA_AttributeOperand_clear [function] [call site] 00325
1 UA_AttributeOperand_print [function] [call site] 00327
2 UA_NodeId_equal [function] [call site] 00328
2 nodeId_printEscape [function] [call site] 00330
3 UA_NamespaceMapping_index2Uri [function] [call site] 00331
3 nodeIdSize [function] [call site] 00332
4 UA_String_escapedSize [function] [call site] 00333
5 isReservedAndExtended [function] [call site] 00334
6 isReservedAnd [function] [call site] 00335
5 isReservedAnd [function] [call site] 00336
5 isReservedPercent [function] [call site] 00337
5 isReservedPercentExtended [function] [call site] 00338
4 itoaUnsigned [function] [call site] 00342
4 UA_String_escapedSize [function] [call site] 00343
3 UA_ByteString_allocBuffer [function] [call site] 00344
3 printNodeIdBody [function] [call site] 00345
4 UA_String_escapeInsert [function] [call site] 00346
5 isReservedPercentExtended [function] [call site] 00347
5 isReservedPercent [function] [call site] 00348
5 isReservedAndExtended [function] [call site] 00349
5 isReservedAnd [function] [call site] 00350
4 strlen [call site] 00351
4 strlen [call site] 00352
4 UA_String_escapeInsert [function] [call site] 00353
4 UA_Guid_to_hex [function] [call site] 00354
4 UA_base64_buf [function] [call site] 00355
2 UA_String_append [function] [call site] 00356
2 __assert_fail [call site] 00357
2 printRelativePath [function] [call site] 00358
3 UA_NodeId_equal [function] [call site] 00359
3 UA_STRING [function] [call site] 00360
3 UA_String_append [function] [call site] 00361
3 UA_NodeId_equal [function] [call site] 00362
3 UA_STRING [function] [call site] 00363
3 UA_String_append [function] [call site] 00364
3 UA_STRING [function] [call site] 00365
3 UA_String_append [function] [call site] 00366
3 UA_STRING [function] [call site] 00367
3 UA_String_append [function] [call site] 00368
3 UA_STRING [function] [call site] 00369
3 UA_String_append [function] [call site] 00370
3 getRefTypeBrowseName [function] [call site] 00371
4 UA_NodeId_print [function] [call site] 00372
5 UA_NodeId_printEx [function] [call site] 00373
6 nodeId_printEscape [function] [call site] 00374
3 UA_String_init [function] [call site] 00375
3 getRefTypeBrowseName [function] [call site] 00376
3 UA_String_escapeAppend [function] [call site] 00377
4 UA_String_append [function] [call site] 00378
4 UA_String_escapedSize [function] [call site] 00379
4 UA_String_escapeInsert [function] [call site] 00380
3 UA_STRING [function] [call site] 00381
3 UA_String_append [function] [call site] 00382
3 UA_String_clear [function] [call site] 00383
3 itoaUnsigned [function] [call site] 00384
3 UA_STRING [function] [call site] 00385
3 UA_String_append [function] [call site] 00386
3 UA_STRING [function] [call site] 00387
3 UA_String_append [function] [call site] 00388
3 UA_String_escapeAppend [function] [call site] 00389
3 UA_String_clear [function] [call site] 00390
3 moveTmpToOut [function] [call site] 00391
4 __assert_fail [call site] 00392
4 UA_String_clear [function] [call site] 00393
4 UA_String_clear [function] [call site] 00394
2 UA_String_append [function] [call site] 00395
2 UA_String_clear [function] [call site] 00396
2 UA_AttributeId_name [function] [call site] 00397
2 UA_STRING [function] [call site] 00398
2 UA_String_append [function] [call site] 00399
2 UA_STRING [function] [call site] 00400
2 UA_String_append [function] [call site] 00401
2 UA_STRING [function] [call site] 00402
2 UA_String_append [function] [call site] 00403
2 UA_String_append [function] [call site] 00404
2 UA_STRING [function] [call site] 00405
2 UA_String_append [function] [call site] 00406
2 UA_String_clear [function] [call site] 00407
2 moveTmpToOut [function] [call site] 00408
1 __assert_fail [call site] 00409
1 UA_AttributeOperand_parse [function] [call site] 00410
1 __assert_fail [call site] 00411
1 UA_AttributeOperand_print [function] [call site] 00412
1 __assert_fail [call site] 00413
1 UA_String_equal(UA_String const*, UA_String const*) [function] [call site] 00414
1 __assert_fail [call site] 00415
1 __assert_fail [call site] 00418
1 UA_String_clear(UA_String*) [function] [call site] 00419
1 UA_String_clear(UA_String*) [function] [call site] 00420
1 UA_AttributeOperand_clear(UA_AttributeOperand*) [function] [call site] 00421
1 UA_AttributeOperand_clear(UA_AttributeOperand*) [function] [call site] 00422