Fuzz introspector: fuzz_msg_parser
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1562 1562 1 :

['free_contact']

1562 1562 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
1562 1562 1 :

['free_contenttype']

1562 1562 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
1562 1562 1 :

['free_event']

1562 1562 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
32 32 1 :

['free_lump_list']

56 56 free_sip_msg call site: 00520 /src/opensips/parser/msg_parser.c:977
13 13 3 :

['dp_time.5721', 'dp_my_pid', 'dprint']

13 13 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
9 9 1 :

['free_reply_lump']

17 17 free_sip_msg call site: 00520 /src/opensips/parser/msg_parser.c:981
7 7 1 :

['free_sdp_ops']

24 24 free_sip_msg call site: 00520 /src/opensips/parser/msg_parser.c:979
7 7 1 :

['free_call_info']

7 7 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
6 6 1 :

['msg_callback_process']

94 1656 free_sip_msg call site: 00518 /src/opensips/parser/msg_parser.c:961
4 4 1 :

['free_supported']

4 4 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
4 4 1 :

['free_allow']

4 4 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64
3 3 1 :

['free_disposition']

3 3 clean_hdr_field call site: 00521 /src/opensips/parser/hf.c:64

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 parse_msg_opt [function] [call site] 00001
2 parse_first_line [function] [call site] 00002
3 dp_time [function] [call site] 00003
4 time [call site] 00004
4 ctime_r [call site] 00005
3 dp_my_pid [function] [call site] 00006
4 my_pid [function] [call site] 00007
5 getpid [call site] 00008
3 strncasecmp [call site] 00010
3 strncasecmp [call site] 00011
3 strncasecmp [call site] 00012
3 strncasecmp [call site] 00013
3 strncasecmp [call site] 00014
3 strncasecmp [call site] 00015
3 eat_token_end [function] [call site] 00016
3 dp_my_pid [function] [call site] 00018
3 dp_my_pid [function] [call site] 00021
3 dp_my_pid [function] [call site] 00036
3 eat_token_end [function] [call site] 00038
3 eat_space_end [function] [call site] 00039
3 dp_my_pid [function] [call site] 00041
3 dp_my_pid [function] [call site] 00044
3 eat_token_end [function] [call site] 00046
3 is_empty_end [function] [call site] 00047
4 eat_space_end [function] [call site] 00048
3 eat_token2_end [function] [call site] 00049
3 dp_my_pid [function] [call site] 00053
3 dp_my_pid [function] [call site] 00056
3 dp_my_pid [function] [call site] 00059
3 dp_my_pid [function] [call site] 00062
2 dp_my_pid [function] [call site] 00066
2 dp_my_pid [function] [call site] 00069
2 dp_my_pid [function] [call site] 00072
2 dp_my_pid [function] [call site] 00075
2 dp_my_pid [function] [call site] 00078
2 dp_my_pid [function] [call site] 00081
2 dp_my_pid [function] [call site] 00084
2 dp_my_pid [function] [call site] 00087
2 dp_my_pid [function] [call site] 00090
2 dp_my_pid [function] [call site] 00093
2 parse_headers_aux [function] [call site] 00095
3 dp_my_pid [function] [call site] 00097
3 dp_my_pid [function] [call site] 00100
3 get_hdr_field_aux [function] [call site] 00102
4 dp_my_pid [function] [call site] 00104
4 dp_my_pid [function] [call site] 00111
4 eat_lws_end [function] [call site] 00113
4 dp_my_pid [function] [call site] 00115
4 dp_my_pid [function] [call site] 00118
4 parse_via [function] [call site] 00120
5 dp_my_pid [function] [call site] 00122
5 dp_my_pid [function] [call site] 00125
5 dp_my_pid [function] [call site] 00128
5 dp_my_pid [function] [call site] 00131
5 dp_my_pid [function] [call site] 00134
5 dp_my_pid [function] [call site] 00137
5 dp_my_pid [function] [call site] 00140
5 dp_my_pid [function] [call site] 00143
5 dp_my_pid [function] [call site] 00146
5 dp_my_pid [function] [call site] 00149
5 dp_my_pid [function] [call site] 00152
5 dp_my_pid [function] [call site] 00155
5 dp_my_pid [function] [call site] 00158
5 dp_my_pid [function] [call site] 00161
5 dp_my_pid [function] [call site] 00164
5 dp_my_pid [function] [call site] 00167
5 dp_my_pid [function] [call site] 00170
5 dp_my_pid [function] [call site] 00173
5 dp_my_pid [function] [call site] 00176
5 dp_my_pid [function] [call site] 00179
5 dp_my_pid [function] [call site] 00182
5 dp_my_pid [function] [call site] 00185
5 dp_my_pid [function] [call site] 00188
5 dp_my_pid [function] [call site] 00191
5 dp_my_pid [function] [call site] 00194
5 dp_my_pid [function] [call site] 00197
5 dp_my_pid [function] [call site] 00200
5 dp_my_pid [function] [call site] 00203
5 dp_my_pid [function] [call site] 00206
5 dp_my_pid [function] [call site] 00209
5 dp_my_pid [function] [call site] 00212
5 dp_my_pid [function] [call site] 00215
5 dp_my_pid [function] [call site] 00218
5 dp_my_pid [function] [call site] 00221
5 dp_my_pid [function] [call site] 00224
5 dp_my_pid [function] [call site] 00227
5 dp_my_pid [function] [call site] 00230
5 dp_my_pid [function] [call site] 00233
5 dp_my_pid [function] [call site] 00236
5 dp_my_pid [function] [call site] 00239
5 dp_my_pid [function] [call site] 00242
5 dp_my_pid [function] [call site] 00245
5 dp_my_pid [function] [call site] 00248
5 dp_my_pid [function] [call site] 00251
5 parse_via_param [function] [call site] 00253
6 dp_my_pid [function] [call site] 00255
6 dp_my_pid [function] [call site] 00258
6 dp_my_pid [function] [call site] 00261
6 dp_my_pid [function] [call site] 00264
6 dp_my_pid [function] [call site] 00267
6 dp_my_pid [function] [call site] 00270
6 dp_my_pid [function] [call site] 00273
6 dp_my_pid [function] [call site] 00276
6 dp_my_pid [function] [call site] 00279
6 dp_my_pid [function] [call site] 00282
6 dp_my_pid [function] [call site] 00285
6 dp_my_pid [function] [call site] 00288
6 dp_my_pid [function] [call site] 00291
5 dp_my_pid [function] [call site] 00294
5 dp_my_pid [function] [call site] 00297
5 dp_my_pid [function] [call site] 00300
5 dp_my_pid [function] [call site] 00303
5 dp_my_pid [function] [call site] 00306
5 dp_my_pid [function] [call site] 00309
5 dp_my_pid [function] [call site] 00319
5 dp_my_pid [function] [call site] 00322
5 dp_my_pid [function] [call site] 00326
5 dp_my_pid [function] [call site] 00329
5 dp_my_pid [function] [call site] 00332
5 dp_my_pid [function] [call site] 00335
5 dp_my_pid [function] [call site] 00338
4 dp_my_pid [function] [call site] 00341
4 free_via_list [function] [call site] 00343
5 free_via_param_list [function] [call site] 00344
4 set_err_info [function] [call site] 00345
4 set_err_reply [function] [call site] 00350
5 strlen [call site] 00351
4 dp_my_pid [function] [call site] 00354
4 dp_my_pid [function] [call site] 00357
4 dp_my_pid [function] [call site] 00384
4 set_err_info [function] [call site] 00386
4 set_err_reply [function] [call site] 00387
4 dp_my_pid [function] [call site] 00389
4 dp_my_pid [function] [call site] 00393
4 dp_my_pid [function] [call site] 00396
4 parse_to [function] [call site] 00398
5 _parse_to [function] [call site] 00399
6 dp_my_pid [function] [call site] 00401
6 parse_to_param [function] [call site] 00403
6 dp_my_pid [function] [call site] 00442
6 dp_my_pid [function] [call site] 00445
6 dp_my_pid [function] [call site] 00448
6 dp_my_pid [function] [call site] 00451
6 dp_my_pid [function] [call site] 00454
6 dp_my_pid [function] [call site] 00457
6 free_to_params [function] [call site] 00459
6 free_to [function] [call site] 00460
7 free_to [function] [call site] 00461
8 free_to_params [function] [call site] 00462
4 dp_my_pid [function] [call site] 00464
4 set_err_info [function] [call site] 00466
4 set_err_reply [function] [call site] 00467
4 dp_my_pid [function] [call site] 00469
4 dp_my_pid [function] [call site] 00472
4 dp_my_pid [function] [call site] 00476
4 dp_my_pid [function] [call site] 00486
4 set_err_info [function] [call site] 00488
4 set_err_reply [function] [call site] 00489
4 dp_my_pid [function] [call site] 00491
4 dp_my_pid [function] [call site] 00496
4 dp_my_pid [function] [call site] 00499
4 set_err_info [function] [call site] 00501
4 set_err_reply [function] [call site] 00502
4 dp_my_pid [function] [call site] 00504
3 dp_my_pid [function] [call site] 00507
3 dp_my_pid [function] [call site] 00510
3 dp_my_pid [function] [call site] 00513
3 dp_my_pid [function] [call site] 00516
2 free_sip_msg [function] [call site] 00518
3 msg_callback_process [function] [call site] 00519
3 free_hdr_field_lst [function] [call site] 00520
4 clean_hdr_field [function] [call site] 00521
5 free_via_list [function] [call site] 00522
5 free_cseq [function] [call site] 00525
5 free_contact [function] [call site] 00526
6 free_contacts [function] [call site] 00527
7 free_params [function] [call site] 00528
8 do_free_params [function] [call site] 00529
9 shm_free [function] [call site] 00530
10 get_lock [function] [call site] 00531
11 sched_yield [call site] 00533
10 shm_threshold_check [function] [call site] 00534
11 shm_event_raise [function] [call site] 00535
12 evi_probe_event [function] [call site] 00536
13 get_trans_mod_no [function] [call site] 00538
12 evi_get_params [function] [call site] 00539
12 dp_my_pid [function] [call site] 00572
12 evi_param_add [function] [call site] 00574
12 dp_my_pid [function] [call site] 00576
12 evi_param_add [function] [call site] 00578
12 dp_my_pid [function] [call site] 00580
12 evi_param_add [function] [call site] 00582
12 dp_my_pid [function] [call site] 00584
12 release_lock [function] [call site] 00586
12 evi_raise_event [function] [call site] 00587
13 get_dummy_sip_msg [function] [call site] 00588
14 dp_my_pid [function] [call site] 00590
14 dp_my_pid [function] [call site] 00593
14 strlen [call site] 00595
14 strlen [call site] 00596
14 parse_msg_opt [function] [call site] 00597
14 parse_headers_aux [function] [call site] 00601
14 dp_my_pid [function] [call site] 00603
14 dp_my_pid [function] [call site] 00606
13 dp_my_pid [function] [call site] 00609
13 set_avp_list [function] [call site] 00611
14 __assert_fail [call site] 00612
13 evi_raise_event_msg [function] [call site] 00613
14 dp_my_pid [function] [call site] 00615
14 dp_my_pid [function] [call site] 00618
14 time [call site] 00622
14 shm_free [function] [call site] 00624
15 get_lock [function] [call site] 00625
15 shm_threshold_check [function] [call site] 00626
15 release_lock [function] [call site] 00627
14 shm_free [function] [call site] 00628
14 shm_free [function] [call site] 00629
14 dp_my_pid [function] [call site] 00631
14 dp_my_pid [function] [call site] 00634
14 dp_my_pid [function] [call site] 00637
14 release_lock [function] [call site] 00639
14 get_lock [function] [call site] 00640
14 release_lock [function] [call site] 00641
14 evi_free_params [function] [call site] 00642
13 release_dummy_sip_msg [function] [call site] 00643
14 dp_my_pid [function] [call site] 00645
14 free_sip_msg [function] [call site] 00647
15 free_lump_list [function] [call site] 00648
16 free_lump [function] [call site] 00649
17 dp_my_pid [function] [call site] 00651
17 abort [call site] 00653
16 free_lump [function] [call site] 00654
16 free_lump [function] [call site] 00655
15 free_lump_list [function] [call site] 00656
15 free_sdp_ops [function] [call site] 00657
16 free_sdp_ops_lines [function] [call site] 00658
15 free_reply_lump [function] [call site] 00659
16 free_lump_rpl [function] [call site] 00660
15 free_sip_body [function] [call site] 00661
14 dp_my_pid [function] [call site] 00663
14 free_sip_msg [function] [call site] 00665
13 destroy_avp_list [function] [call site] 00666
14 dp_my_pid [function] [call site] 00668
14 shm_free [function] [call site] 00670
15 shm_threshold_check [function] [call site] 00673
15 release_lock [function] [call site] 00674
13 set_avp_list [function] [call site] 00675
12 dp_my_pid [function] [call site] 00677
12 evi_free_params [function] [call site] 00681
10 release_lock [function] [call site] 00682
5 free_rr [function] [call site] 00683
6 do_free_rr [function] [call site] 00684
7 shm_free_params [function] [call site] 00685
8 do_free_params [function] [call site] 00686
7 free_params [function] [call site] 00687
7 shm_free [function] [call site] 00688
8 shm_threshold_check [function] [call site] 00691
8 release_lock [function] [call site] 00692
5 free_contenttype [function] [call site] 00695
6 free_params [function] [call site] 00696
5 free_credentials [function] [call site] 00697
5 free_expires [function] [call site] 00698
5 free_credentials [function] [call site] 00699
5 free_supported [function] [call site] 00700
5 free_allow [function] [call site] 00701
5 free_event [function] [call site] 00702
6 free_params [function] [call site] 00703
5 free_disposition [function] [call site] 00704
5 free_session_expires [function] [call site] 00708
5 free_call_info [function] [call site] 00711
6 free_call_info_param_list [function] [call site] 00712
5 free_authenticate [function] [call site] 00713
5 free_fcaps [function] [call site] 00714
5 free_sec_agree [function] [call site] 00715
6 free_sec_agree_body [function] [call site] 00716
1 free_sip_msg [function] [call site] 00718