Fuzz introspector: fuzz_msg_parser
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1579 1579 1 :

['free_contact']

1579 1579 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
1579 1579 1 :

['free_contenttype']

1579 1579 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
1579 1579 1 :

['free_event']

1579 1579 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
35 35 1 :

['free_lump_list']

74 74 free_sip_msg call site: 00558 /src/opensips/parser/msg_parser.c:976
31 31 1 :

['free_reply_lump']

39 39 free_sip_msg call site: 00558 /src/opensips/parser/msg_parser.c:978
29 29 1 :

['free_call_info']

29 29 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
28 28 1 :

['msg_callback_process']

137 1826 free_sip_msg call site: 00550 /src/opensips/parser/msg_parser.c:960
26 26 1 :

['free_supported']

26 26 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
26 26 1 :

['free_allow']

26 26 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
25 25 1 :

['free_disposition']

25 25 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
25 25 1 :

['free_session_expires']

25 25 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64
24 24 1 :

['free_expires']

24 24 clean_hdr_field call site: 00559 /src/opensips/parser/hf.c:64

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 parse_msg_opt [function] [call site] 00001
2 parse_first_line [function] [call site] 00002
3 dp_time [function] [call site] 00003
4 time [call site] 00004
4 ctime_r [call site] 00005
3 dp_my_pid [function] [call site] 00006
4 my_pid [function] [call site] 00007
5 getpid [call site] 00008
3 strncasecmp [call site] 00010
3 strncasecmp [call site] 00011
3 strncasecmp [call site] 00012
3 strncasecmp [call site] 00013
3 strncasecmp [call site] 00014
3 strncasecmp [call site] 00015
3 eat_token_end [function] [call site] 00016
3 dp_my_pid [function] [call site] 00018
3 dp_my_pid [function] [call site] 00021
3 dp_my_pid [function] [call site] 00036
3 eat_token_end [function] [call site] 00038
3 eat_space_end [function] [call site] 00039
3 dp_my_pid [function] [call site] 00041
3 dp_my_pid [function] [call site] 00044
3 eat_token_end [function] [call site] 00046
3 is_empty_end [function] [call site] 00047
4 eat_space_end [function] [call site] 00048
3 eat_token2_end [function] [call site] 00049
3 dp_my_pid [function] [call site] 00053
3 dp_my_pid [function] [call site] 00056
3 dp_my_pid [function] [call site] 00063
3 dp_my_pid [function] [call site] 00070
2 dp_my_pid [function] [call site] 00074
2 dp_my_pid [function] [call site] 00077
2 dp_my_pid [function] [call site] 00080
2 dp_my_pid [function] [call site] 00083
2 dp_my_pid [function] [call site] 00086
2 dp_my_pid [function] [call site] 00089
2 dp_my_pid [function] [call site] 00092
2 dp_my_pid [function] [call site] 00095
2 dp_my_pid [function] [call site] 00098
2 dp_my_pid [function] [call site] 00101
2 parse_headers_aux [function] [call site] 00103
3 dp_my_pid [function] [call site] 00105
3 sys_malloc [function] [call site] 00107
3 dp_my_pid [function] [call site] 00109
3 get_hdr_field_aux [function] [call site] 00111
4 dp_my_pid [function] [call site] 00113
4 dp_my_pid [function] [call site] 00120
4 eat_lws_end [function] [call site] 00122
4 dp_my_pid [function] [call site] 00124
4 sys_malloc [function] [call site] 00126
4 dp_my_pid [function] [call site] 00128
4 parse_via [function] [call site] 00130
5 dp_my_pid [function] [call site] 00132
5 dp_my_pid [function] [call site] 00135
5 dp_my_pid [function] [call site] 00138
5 dp_my_pid [function] [call site] 00141
5 dp_my_pid [function] [call site] 00144
5 dp_my_pid [function] [call site] 00147
5 dp_my_pid [function] [call site] 00150
5 dp_my_pid [function] [call site] 00153
5 dp_my_pid [function] [call site] 00156
5 dp_my_pid [function] [call site] 00159
5 dp_my_pid [function] [call site] 00162
5 dp_my_pid [function] [call site] 00165
5 dp_my_pid [function] [call site] 00168
5 dp_my_pid [function] [call site] 00171
5 dp_my_pid [function] [call site] 00174
5 dp_my_pid [function] [call site] 00177
5 dp_my_pid [function] [call site] 00180
5 dp_my_pid [function] [call site] 00183
5 dp_my_pid [function] [call site] 00186
5 dp_my_pid [function] [call site] 00189
5 dp_my_pid [function] [call site] 00192
5 dp_my_pid [function] [call site] 00195
5 dp_my_pid [function] [call site] 00198
5 dp_my_pid [function] [call site] 00201
5 dp_my_pid [function] [call site] 00204
5 dp_my_pid [function] [call site] 00207
5 dp_my_pid [function] [call site] 00210
5 dp_my_pid [function] [call site] 00213
5 dp_my_pid [function] [call site] 00216
5 dp_my_pid [function] [call site] 00219
5 dp_my_pid [function] [call site] 00222
5 dp_my_pid [function] [call site] 00225
5 dp_my_pid [function] [call site] 00228
5 dp_my_pid [function] [call site] 00231
5 dp_my_pid [function] [call site] 00234
5 dp_my_pid [function] [call site] 00237
5 dp_my_pid [function] [call site] 00240
5 dp_my_pid [function] [call site] 00243
5 dp_my_pid [function] [call site] 00246
5 dp_my_pid [function] [call site] 00249
5 dp_my_pid [function] [call site] 00252
5 dp_my_pid [function] [call site] 00255
5 dp_my_pid [function] [call site] 00258
5 sys_malloc [function] [call site] 00260
5 dp_my_pid [function] [call site] 00262
5 parse_via_param [function] [call site] 00264
6 dp_my_pid [function] [call site] 00266
6 dp_my_pid [function] [call site] 00269
6 dp_my_pid [function] [call site] 00272
6 dp_my_pid [function] [call site] 00275
6 dp_my_pid [function] [call site] 00278
6 dp_my_pid [function] [call site] 00281
6 dp_my_pid [function] [call site] 00284
6 dp_my_pid [function] [call site] 00287
6 dp_my_pid [function] [call site] 00290
6 dp_my_pid [function] [call site] 00293
6 dp_my_pid [function] [call site] 00296
6 dp_my_pid [function] [call site] 00299
6 dp_my_pid [function] [call site] 00302
6 dp_my_pid [function] [call site] 00305
5 dp_my_pid [function] [call site] 00310
5 dp_my_pid [function] [call site] 00313
5 dp_my_pid [function] [call site] 00316
5 dp_my_pid [function] [call site] 00319
5 dp_my_pid [function] [call site] 00322
5 dp_my_pid [function] [call site] 00325
5 dp_my_pid [function] [call site] 00335
5 dp_my_pid [function] [call site] 00338
5 dp_my_pid [function] [call site] 00342
5 sys_malloc [function] [call site] 00344
5 dp_my_pid [function] [call site] 00346
5 dp_my_pid [function] [call site] 00349
5 dp_my_pid [function] [call site] 00352
5 dp_my_pid [function] [call site] 00355
4 dp_my_pid [function] [call site] 00358
4 free_via_list [function] [call site] 00360
5 free_via_param_list [function] [call site] 00361
4 set_err_info [function] [call site] 00364
4 set_err_reply [function] [call site] 00369
5 strlen [call site] 00370
4 dp_my_pid [function] [call site] 00373
4 sys_malloc [function] [call site] 00375
4 dp_my_pid [function] [call site] 00377
4 dp_my_pid [function] [call site] 00404
4 set_err_info [function] [call site] 00407
4 set_err_reply [function] [call site] 00408
4 dp_my_pid [function] [call site] 00410
4 dp_my_pid [function] [call site] 00414
4 sys_malloc [function] [call site] 00416
4 dp_my_pid [function] [call site] 00418
4 parse_to [function] [call site] 00420
5 _parse_to [function] [call site] 00421
6 sys_malloc [function] [call site] 00422
6 dp_my_pid [function] [call site] 00424
6 parse_to_param [function] [call site] 00426
7 dp_my_pid [function] [call site] 00428
7 dp_my_pid [function] [call site] 00431
7 dp_my_pid [function] [call site] 00434
7 dp_my_pid [function] [call site] 00437
7 dp_my_pid [function] [call site] 00440
7 sys_malloc [function] [call site] 00442
7 dp_my_pid [function] [call site] 00444
7 dp_my_pid [function] [call site] 00447
7 dp_my_pid [function] [call site] 00450
7 dp_my_pid [function] [call site] 00453
7 dp_my_pid [function] [call site] 00456
7 dp_my_pid [function] [call site] 00460
7 free_to_params [function] [call site] 00463
6 sys_malloc [function] [call site] 00465
6 dp_my_pid [function] [call site] 00467
6 dp_my_pid [function] [call site] 00470
6 dp_my_pid [function] [call site] 00473
6 dp_my_pid [function] [call site] 00476
6 dp_my_pid [function] [call site] 00479
6 dp_my_pid [function] [call site] 00482
6 free_to_params [function] [call site] 00484
4 dp_my_pid [function] [call site] 00490
4 set_err_info [function] [call site] 00493
4 set_err_reply [function] [call site] 00494
4 dp_my_pid [function] [call site] 00496
4 dp_my_pid [function] [call site] 00499
4 dp_my_pid [function] [call site] 00503
4 dp_my_pid [function] [call site] 00513
4 set_err_info [function] [call site] 00515
4 set_err_reply [function] [call site] 00516
4 dp_my_pid [function] [call site] 00518
4 dp_my_pid [function] [call site] 00522
4 dp_my_pid [function] [call site] 00526
4 dp_my_pid [function] [call site] 00529
4 set_err_info [function] [call site] 00531
4 set_err_reply [function] [call site] 00532
4 dp_my_pid [function] [call site] 00534
3 dp_my_pid [function] [call site] 00537
3 dp_my_pid [function] [call site] 00541
3 dp_my_pid [function] [call site] 00544
3 dp_my_pid [function] [call site] 00547
2 free_sip_msg [function] [call site] 00550
3 msg_callback_process [function] [call site] 00551
3 free_hdr_field_lst [function] [call site] 00558
4 clean_hdr_field [function] [call site] 00559
5 free_via_list [function] [call site] 00560
5 free_contact [function] [call site] 00565
6 free_contacts [function] [call site] 00566
7 free_params [function] [call site] 00567
8 do_free_params [function] [call site] 00568
9 shm_free [function] [call site] 00569
10 get_lock [function] [call site] 00570
11 sched_yield [call site] 00572
10 qm_free [function] [call site] 00573
11 dp_my_pid [function] [call site] 00575
11 qm_detach_free [function] [call site] 00577
11 big_hash_idx [function] [call site] 00578
11 qm_detach_free [function] [call site] 00579
11 big_hash_idx [function] [call site] 00580
11 qm_insert_free [function] [call site] 00581
12 big_hash_idx [function] [call site] 00582
10 shm_threshold_check [function] [call site] 00583
11 qm_get_real_used [function] [call site] 00584
11 qm_get_size [function] [call site] 00585
11 shm_event_raise [function] [call site] 00586
12 evi_probe_event [function] [call site] 00587
13 get_trans_mod_no [function] [call site] 00589
12 evi_get_params [function] [call site] 00590
12 dp_my_pid [function] [call site] 00623
12 evi_param_add [function] [call site] 00625
12 dp_my_pid [function] [call site] 00627
12 evi_param_add [function] [call site] 00629
12 dp_my_pid [function] [call site] 00631
12 evi_param_add [function] [call site] 00633
12 dp_my_pid [function] [call site] 00635
12 release_lock [function] [call site] 00637
12 evi_raise_event [function] [call site] 00638
13 get_dummy_sip_msg [function] [call site] 00639
14 dp_my_pid [function] [call site] 00641
14 sys_malloc [function] [call site] 00643
14 dp_my_pid [function] [call site] 00645
14 strlen [call site] 00647
14 strlen [call site] 00648
14 parse_msg_opt [function] [call site] 00649
14 parse_headers_aux [function] [call site] 00653
14 dp_my_pid [function] [call site] 00655
14 dp_my_pid [function] [call site] 00658
13 dp_my_pid [function] [call site] 00661
13 set_avp_list [function] [call site] 00663
14 __assert_fail [call site] 00664
13 evi_raise_event_msg [function] [call site] 00665
14 dp_my_pid [function] [call site] 00667
14 time [call site] 00672
14 dp_my_pid [function] [call site] 00674
14 shm_free [function] [call site] 00676
15 get_lock [function] [call site] 00677
15 shm_threshold_check [function] [call site] 00678
16 qm_get_real_used [function] [call site] 00679
16 qm_get_size [function] [call site] 00680
15 release_lock [function] [call site] 00681
14 shm_free [function] [call site] 00682
14 shm_free [function] [call site] 00683
14 dp_my_pid [function] [call site] 00685
14 dp_my_pid [function] [call site] 00688
14 release_lock [function] [call site] 00691
14 get_lock [function] [call site] 00692
14 release_lock [function] [call site] 00693
14 evi_free_params [function] [call site] 00694
13 release_dummy_sip_msg [function] [call site] 00697
14 dp_my_pid [function] [call site] 00699
14 free_sip_msg [function] [call site] 00701
15 free_lump_list [function] [call site] 00702
16 free_lump [function] [call site] 00703
17 dp_my_pid [function] [call site] 00705
17 abort [call site] 00707
17 sys_free [function] [call site] 00708
16 sys_free [function] [call site] 00709
16 free_lump [function] [call site] 00710
16 sys_free [function] [call site] 00711
16 free_lump [function] [call site] 00712
16 sys_free [function] [call site] 00713
15 free_lump_list [function] [call site] 00714
15 free_reply_lump [function] [call site] 00715
16 free_lump_rpl [function] [call site] 00716
15 free_sip_body [function] [call site] 00719
14 dp_my_pid [function] [call site] 00721
14 free_sip_msg [function] [call site] 00723
14 sys_free [function] [call site] 00724
13 destroy_avp_list [function] [call site] 00725
14 dp_my_pid [function] [call site] 00727
14 shm_free [function] [call site] 00729
15 shm_threshold_check [function] [call site] 00732
16 qm_get_real_used [function] [call site] 00733
16 qm_get_size [function] [call site] 00734
15 release_lock [function] [call site] 00735
13 set_avp_list [function] [call site] 00736
12 dp_my_pid [function] [call site] 00738
12 evi_free_params [function] [call site] 00742
10 release_lock [function] [call site] 00743
5 free_rr [function] [call site] 00747
6 do_free_rr [function] [call site] 00748
7 shm_free_params [function] [call site] 00749
8 do_free_params [function] [call site] 00750
7 free_params [function] [call site] 00751
7 shm_free [function] [call site] 00752
8 shm_threshold_check [function] [call site] 00755
9 qm_get_real_used [function] [call site] 00756
9 qm_get_size [function] [call site] 00757
8 release_lock [function] [call site] 00758
5 free_contenttype [function] [call site] 00762
6 free_params [function] [call site] 00763
5 free_credentials [function] [call site] 00765
5 free_expires [function] [call site] 00767
5 free_credentials [function] [call site] 00769
5 free_supported [function] [call site] 00770
5 free_event [function] [call site] 00774
6 free_params [function] [call site] 00775
5 free_disposition [function] [call site] 00777
5 free_session_expires [function] [call site] 00783
5 free_call_info [function] [call site] 00787
6 free_call_info_param_list [function] [call site] 00788
5 free_authenticate [function] [call site] 00790
5 free_sec_agree [function] [call site] 00794
6 free_sec_agree_body [function] [call site] 00795
1 free_sip_msg [function] [call site] 00800