Fuzz introspector: fuzz_binary_decode
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
4 19 UA_encodeBinaryInternal call site: 00019 exchangeBuffer
2 28 LLVMFuzzerTestOneInput call site: 00028 UA_calcSizeBinary
2 31 UA_encodeBinary call site: 00031 UA_ByteString_clear
1 26 UA_ByteString_allocBuffer call site: 00026 UA_delete
1 49 copySubString call site: 00049 UA_Variant_copyRange
1 53 UA_Variant_copyRange call site: 00053 Variant_clear
1 56 UA_DataValue_copyRange call site: 00056 Variant_clear
1 58 LLVMFuzzerTestOneInput call site: 00058 UA_clear

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_decodeBinary [function] [call site] 00003
2 UA_decodeBinaryInternal [function] [call site] 00004
1 UA_delete [function] [call site] 00007
1 UA_delete [function] [call site] 00009
1 UA_delete [function] [call site] 00012
1 UA_delete [function] [call site] 00013
1 __assert_fail [call site] 00015
1 UA_delete [function] [call site] 00016
1 UA_calcSizeBinary [function] [call site] 00017
2 UA_encodeBinaryInternal [function] [call site] 00018
3 encodeWithExchangeBuffer [function] [call site] 00019
4 __assert_fail [call site] 00020
4 exchangeBuffer [function] [call site] 00021
3 __assert_fail [call site] 00024
1 UA_ByteString_allocBuffer [function] [call site] 00025
2 UA_ByteString_init [function] [call site] 00026
1 UA_delete [function] [call site] 00027
1 UA_encodeBinary [function] [call site] 00028
2 UA_calcSizeBinary [function] [call site] 00029
2 UA_ByteString_allocBuffer [function] [call site] 00030
2 UA_encodeBinaryInternal [function] [call site] 00031
2 UA_ByteString_clear [function] [call site] 00032
1 __assert_fail [call site] 00034
1 UA_ByteString_clear(UA_String*) [function] [call site] 00035
1 UA_DataValue_init(UA_DataValue*) [function] [call site] 00036
1 UA_DataValue_copyRange [function] [call site] 00037
2 UA_Variant_init [function] [call site] 00038
2 UA_Variant_copyRange [function] [call site] 00039
3 UA_Variant_isScalar [function] [call site] 00040
3 isStringLike [function] [call site] 00041
3 checkAdjustRange [function] [call site] 00042
3 computeStrides [function] [call site] 00043
3 __assert_fail [call site] 00044
3 UA_Variant_init [function] [call site] 00045
3 UA_Array_new [function] [call site] 00046
3 copySubString [function] [call site] 00048
4 UA_ByteString_allocBuffer [function] [call site] 00049
3 UA_Variant_copyRange [function] [call site] 00050
4 UA_Array_delete [function] [call site] 00051
4 UA_Array_new [function] [call site] 00053
4 Variant_clear [function] [call site] 00054
5 UA_Array_delete [function] [call site] 00055
2 DataValue_clear [function] [call site] 00056
3 Variant_clear [function] [call site] 00057
1 UA_DataValue_clear(UA_DataValue*) [function] [call site] 00058
1 UA_delete [function] [call site] 00060