Fuzz introspector: fuzz_binary_decode
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
4 20 UA_encodeBinaryInternal call site: 00020 exchangeBuffer
2 29 LLVMFuzzerTestOneInput call site: 00029 calcSizeBinaryInternal
2 32 UA_encodeBinary call site: 00032 UA_ByteString_clear
1 27 UA_ByteString_allocBuffer call site: 00027 UA_delete
1 50 copySubString call site: 00050 UA_Variant_copyRange
1 54 UA_Variant_copyRange call site: 00054 Variant_clear
1 57 UA_DataValue_copyRange call site: 00057 Variant_clear
1 59 LLVMFuzzerTestOneInput call site: 00059 UA_clear

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_decodeBinary [function] [call site] 00003
2 UA_decodeBinaryInternal [function] [call site] 00004
1 UA_delete [function] [call site] 00007
1 UA_delete [function] [call site] 00009
1 UA_delete [function] [call site] 00012
1 UA_delete [function] [call site] 00013
1 __assert_fail [call site] 00015
1 UA_delete [function] [call site] 00016
1 UA_calcSizeBinary [function] [call site] 00017
2 calcSizeBinaryInternal [function] [call site] 00018
3 UA_encodeBinaryInternal [function] [call site] 00019
4 encodeWithExchangeBuffer [function] [call site] 00020
5 __assert_fail [call site] 00021
5 exchangeBuffer [function] [call site] 00022
4 __assert_fail [call site] 00025
1 UA_ByteString_allocBuffer [function] [call site] 00026
2 UA_ByteString_init [function] [call site] 00027
1 UA_delete [function] [call site] 00028
1 UA_encodeBinary [function] [call site] 00029
2 calcSizeBinaryInternal [function] [call site] 00030
2 UA_ByteString_allocBuffer [function] [call site] 00031
2 UA_encodeBinaryInternal [function] [call site] 00032
2 UA_ByteString_clear [function] [call site] 00033
1 __assert_fail [call site] 00035
1 UA_ByteString_clear(UA_String*) [function] [call site] 00036
1 UA_DataValue_init(UA_DataValue*) [function] [call site] 00037
1 UA_DataValue_copyRange [function] [call site] 00038
2 UA_Variant_init [function] [call site] 00039
2 UA_Variant_copyRange [function] [call site] 00040
3 UA_Variant_isScalar [function] [call site] 00041
3 isStringLike [function] [call site] 00042
3 checkAdjustRange [function] [call site] 00043
3 computeStrides [function] [call site] 00044
3 __assert_fail [call site] 00045
3 UA_Variant_init [function] [call site] 00046
3 UA_Array_new [function] [call site] 00047
3 copySubString [function] [call site] 00049
4 UA_ByteString_allocBuffer [function] [call site] 00050
3 UA_Variant_copyRange [function] [call site] 00051
4 UA_Array_delete [function] [call site] 00052
4 UA_Array_new [function] [call site] 00054
4 Variant_clear [function] [call site] 00055
5 UA_Array_delete [function] [call site] 00056
2 DataValue_clear [function] [call site] 00057
3 Variant_clear [function] [call site] 00058
1 UA_DataValue_clear(UA_DataValue*) [function] [call site] 00059
1 UA_delete [function] [call site] 00061