Fuzz introspector: fuzz_list
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
3 3 1 :

['x_gc_free']

6 6 gc_free call site: 00314 /src/openvpn/src/openvpn/./buffer.h:1021
0 0 None 969 969 hash_iterator_init_range call site: 00631 /src/openvpn/src/openvpn/list.c:230
0 0 None 0 0 hash_add call site: 00647 /src/openvpn/src/openvpn/list.c:161

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_random_init [function] [call site] 00001
2 __assert_fail [call site] 00002
1 fuzz_randomizer_get_int [function] [call site] 00005
2 __assert_fail [call site] 00006
1 fuzz_randomizer_get_int [function] [call site] 00007
1 fuzz_randomizer_get_int [function] [call site] 00008
1 hash_init [function] [call site] 00009
2 assert_failed [function] [call site] 00010
3 msg_test [function] [call site] 00011
4 check_debug_level [function] [call site] 00012
4 dont_mute [function] [call site] 00013
5 x_msg [function] [call site] 00015
6 x_msg_va [function] [call site] 00016
7 openvpn_errno_maybe_crt [function] [call site] 00018
8 __errno_location [call site] 00019
7 gc_malloc [function] [call site] 00024
8 check_malloc_return [function] [call site] 00025
9 out_of_memory [function] [call site] 00026
10 fprintf [call site] 00027
10 exit [call site] 00028
8 check_malloc_return [function] [call site] 00029
7 gc_malloc [function] [call site] 00030
7 vsnprintf [call site] 00031
7 openvpn_strerror [function] [call site] 00032
8 strerror [call site] 00033
7 openvpn_snprintf [function] [call site] 00034
8 vsnprintf [call site] 00035
7 openvpn_snprintf [function] [call site] 00036
7 msg_get_prefix [function] [call site] 00037
7 msg_get_virtual_output [function] [call site] 00038
7 openvpn_snprintf [function] [call site] 00039
7 virtual_output_print [function] [call site] 00040
7 syslog [call site] 00041
7 msg_fp [function] [call site] 00042
8 openvpn_exit [function] [call site] 00043
9 tun_abort [function] [call site] 00044
10 do_close_tun [function] [call site] 00045
11 tuntap_is_dco_win [function] [call site] 00046
11 do_close_tun_simple [function] [call site] 00047
12 msg_test [function] [call site] 00048
12 dco_enabled [function] [call site] 00049
12 undo_ifconfig [function] [call site] 00051
13 undo_ifconfig_ipv4 [function] [call site] 00052
14 netmask_to_netbits2 [function] [call site] 00053
15 netbits_to_netmask [function] [call site] 00054
14 is_tun_p2p [function] [call site] 00055
15 msg_test [function] [call site] 00056
15 _exit [call site] 00058
14 net_addr_ptp_v4_del [function] [call site] 00059
15 htonl [call site] 00060
15 msg_test [function] [call site] 00061
15 inet_ntop [call site] 00062
15 sitnl_addr_ptp_del [function] [call site] 00064
16 msg_test [function] [call site] 00065
16 if_nametoindex [call site] 00067
16 msg_test [function] [call site] 00068
16 sitnl_addr_set [function] [call site] 00070
17 msg_test [function] [call site] 00071
17 sitnl_addattr [function] [call site] 00073
17 sitnl_addattr [function] [call site] 00076
17 sitnl_send [function] [call site] 00077
18 time [call site] 00078
18 sitnl_socket [function] [call site] 00079
19 socket [call site] 00080
19 msg_test [function] [call site] 00081
19 setsockopt [call site] 00083
19 msg_test [function] [call site] 00084
19 close [call site] 00086
19 setsockopt [call site] 00087
19 msg_test [function] [call site] 00088
19 close [call site] 00090
18 msg_test [function] [call site] 00091
18 __errno_location [call site] 00093
18 sitnl_bind [function] [call site] 00094
19 bind [call site] 00095
19 msg_test [function] [call site] 00096
19 __errno_location [call site] 00098
19 getsockname [call site] 00099
19 msg_test [function] [call site] 00100
19 __errno_location [call site] 00102
19 msg_test [function] [call site] 00103
19 msg_test [function] [call site] 00105
18 msg_test [function] [call site] 00107
18 __errno_location [call site] 00109
18 sendmsg [call site] 00110
18 msg_test [function] [call site] 00111
18 __errno_location [call site] 00113
18 msg_test [function] [call site] 00114
18 recvmsg [call site] 00116
18 msg_test [function] [call site] 00117
18 __errno_location [call site] 00119
18 msg_test [function] [call site] 00120
18 __errno_location [call site] 00123
18 msg_test [function] [call site] 00124
18 msg_test [function] [call site] 00126
18 msg_test [function] [call site] 00128
18 msg_test [function] [call site] 00130
18 msg_test [function] [call site] 00132
18 msg_test [function] [call site] 00134
18 strerror [call site] 00135
18 msg_test [function] [call site] 00137
18 msg_test [function] [call site] 00139
18 msg_test [function] [call site] 00141
18 close [call site] 00143
14 msg_test [function] [call site] 00144
14 net_addr_v4_del [function] [call site] 00146
15 htonl [call site] 00147
15 msg_test [function] [call site] 00148
15 inet_ntop [call site] 00149
15 sitnl_addr_del [function] [call site] 00151
16 msg_test [function] [call site] 00152
16 if_nametoindex [call site] 00154
16 msg_test [function] [call site] 00155
16 sitnl_addr_set [function] [call site] 00157
14 msg_test [function] [call site] 00158
13 undo_ifconfig_ipv6 [function] [call site] 00160
14 net_addr_v6_del [function] [call site] 00161
15 msg_test [function] [call site] 00162
15 inet_ntop [call site] 00163
15 sitnl_addr_del [function] [call site] 00164
14 msg_test [function] [call site] 00165
13 net_ctx_reset [function] [call site] 00167
12 close_tun [function] [call site] 00168
13 assert_failed [function] [call site] 00169
14 _exit [call site] 00171
14 msg_test [function] [call site] 00172
14 _exit [call site] 00174
14 _exit [call site] 00175
13 tun_dco_enabled [function] [call site] 00176
13 close_tun_dco [function] [call site] 00177
14 msg_test [function] [call site] 00178
14 net_iface_del [function] [call site] 00180
15 if_nametoindex [call site] 00181
15 __errno_location [call site] 00182
15 msg_test [function] [call site] 00183
15 sitnl_send [function] [call site] 00185
14 ovpn_dco_uninit_netlink [function] [call site] 00186
15 nl_socket_free [call site] 00187
15 nl_cb_put [call site] 00188
13 close_tun_generic [function] [call site] 00189
14 close [call site] 00190
14 clear_tuntap [function] [call site] 00191
11 string_alloc [function] [call site] 00193
12 strlen [call site] 00194
12 gc_malloc [function] [call site] 00195
12 calloc [call site] 00196
12 check_malloc_return [function] [call site] 00197
11 management_pre_tunnel_close [function] [call site] 00198
12 man_connection_close [function] [call site] 00199
13 event_free [function] [call site] 00200
13 socket_defined [function] [call site] 00201
13 man_close_socket [function] [call site] 00202
14 close [call site] 00203
13 man_delete_unix_socket [function] [call site] 00204
14 socket_delete_unix [function] [call site] 00205
15 sockaddr_unix_name [function] [call site] 00206
15 strlen [call site] 00207
15 unlink [call site] 00208
13 socket_defined [function] [call site] 00209
13 man_close_socket [function] [call site] 00210
13 command_line_free [function] [call site] 00211
14 command_line_reset [function] [call site] 00212
15 buf_clear [function] [call site] 00213
16 secure_memzero [function] [call site] 00214
15 buf_clear [function] [call site] 00215
14 free_buf [function] [call site] 00216
14 free_buf [function] [call site] 00217
13 buffer_list_free [function] [call site] 00218
14 buffer_list_reset [function] [call site] 00219
15 free_buf [function] [call site] 00220
13 event_timeout_clear [function] [call site] 00221
13 in_extra_reset [function] [call site] 00222
14 buffer_list_free [function] [call site] 00223
14 buffer_list_new [function] [call site] 00224
15 check_malloc_return [function] [call site] 00225
13 buffer_list_free [function] [call site] 00226
13 man_connection_clear [function] [call site] 00227
11 management_up_down [function] [call site] 00228
12 msg_test [function] [call site] 00229
12 man_output_env [function] [call site] 00231
13 env_filter_match [function] [call site] 00232
14 strncmp [call site] 00233
14 strlen [call site] 00234
14 strncmp [call site] 00235
13 msg_test [function] [call site] 00236
13 msg_test [function] [call site] 00238
11 print_in_addr_t [function] [call site] 00240
12 alloc_buf_gc [function] [call site] 00241
13 buf_size_valid [function] [call site] 00242
13 buf_size_error [function] [call site] 00243
14 msg_test [function] [call site] 00244
14 _exit [call site] 00246
13 gc_malloc [function] [call site] 00247
12 htonl [call site] 00248
12 inet_ntoa [call site] 00249
12 buf_printf [function] [call site] 00250
13 buf_defined [function] [call site] 00251
13 buf_bend [function] [call site] 00252
14 buf_bptr [function] [call site] 00253
15 buf_valid [function] [call site] 00254
13 buf_forward_capacity [function] [call site] 00255
14 buf_valid [function] [call site] 00256
13 vsnprintf [call site] 00257
13 strlen [call site] 00258
11 print_in_addr_t [function] [call site] 00261
11 signal_description [function] [call site] 00262
12 signal_name [function] [call site] 00263
11 run_up_down [function] [call site] 00264
12 setenv_str [function] [call site] 00266
13 setenv_str_ex [function] [call site] 00267
14 strlen [call site] 00269
14 assert_failed [function] [call site] 00270
14 string_mod_const [function] [call site] 00271
15 string_alloc [function] [call site] 00272
15 string_mod [function] [call site] 00273
16 assert_failed [function] [call site] 00274
16 char_inc_exc [function] [call site] 00275
17 char_class [function] [call site] 00276
18 __ctype_b_loc [call site] 00277
18 __ctype_b_loc [call site] 00278
18 __ctype_b_loc [call site] 00279
18 __ctype_b_loc [call site] 00280
18 __ctype_b_loc [call site] 00281
18 __ctype_b_loc [call site] 00282
18 __ctype_b_loc [call site] 00283
14 string_mod_const [function] [call site] 00284
14 assert_failed [function] [call site] 00285
14 construct_name_value [function] [call site] 00286
15 assert_failed [function] [call site] 00287
15 strlen [call site] 00288
15 alloc_buf_gc [function] [call site] 00289
15 buf_printf [function] [call site] 00290
14 env_set_add [function] [call site] 00292
15 assert_failed [function] [call site] 00293
15 assert_failed [function] [call site] 00294
15 env_set_add_nolock [function] [call site] 00295
16 remove_env_item [function] [call site] 00296
17 assert_failed [function] [call site] 00297
17 assert_failed [function] [call site] 00298
17 env_string_equal [function] [call site] 00299
18 assert_failed [function] [call site] 00300
18 assert_failed [function] [call site] 00301
17 strlen [call site] 00302
17 secure_memzero [function] [call site] 00303
16 add_env_item [function] [call site] 00304
17 assert_failed [function] [call site] 00305
17 assert_failed [function] [call site] 00306
17 gc_malloc [function] [call site] 00307
17 string_alloc [function] [call site] 00308
14 env_set_del [function] [call site] 00309
15 assert_failed [function] [call site] 00310
15 assert_failed [function] [call site] 00311
15 env_set_del_nolock [function] [call site] 00312
16 remove_env_item [function] [call site] 00313
14 gc_free [function] [call site] 00314
15 x_gc_free [function] [call site] 00315
15 x_gc_freespecial [function] [call site] 00316
12 setenv_str [function] [call site] 00317
12 setenv_int [function] [call site] 00318
13 setenv_str [function] [call site] 00319
12 setenv_str [function] [call site] 00320
12 setenv_str [function] [call site] 00321
12 plugin_defined [function] [call site] 00322
12 argv_new [function] [call site] 00323
13 argv_init [function] [call site] 00324
14 argv_extend [function] [call site] 00326
15 array_mult_safe [function] [call site] 00327
16 msg_test [function] [call site] 00328
16 _exit [call site] 00330
12 assert_failed [function] [call site] 00331
12 argv_printf [function] [call site] 00332
13 argv_reset [function] [call site] 00333
13 argv_printf_arglist [function] [call site] 00334
14 argv_prep_format [function] [call site] 00335
15 strlen [call site] 00336
15 gc_malloc [function] [call site] 00337
15 strlen [call site] 00338
14 vsnprintf [call site] 00339
14 gc_malloc [function] [call site] 00340
14 vsnprintf [call site] 00341
14 strchr [call site] 00342
14 argv_append [function] [call site] 00343
15 argv_grow [function] [call site] 00344
16 assert_failed [function] [call site] 00345
16 adjust_power_of_2 [function] [call site] 00346
17 assert_failed [function] [call site] 00347
16 argv_extend [function] [call site] 00348
14 strchr [call site] 00349
14 argv_append [function] [call site] 00350
14 argv_reset [function] [call site] 00351
12 plugin_call [function] [call site] 00352
13 plugin_call_ssl [function] [call site] 00353
14 plugin_return_init [function] [call site] 00354
14 plugin_defined [function] [call site] 00355
14 plugin_n [function] [call site] 00357
14 setenv_del [function] [call site] 00358
15 assert_failed [function] [call site] 00359
15 setenv_str [function] [call site] 00360
14 make_env_array [function] [call site] 00361
15 array_mult_safe [function] [call site] 00362
15 env_allowed [function] [call site] 00363
16 script_security [function] [call site] 00364
16 is_password_env_var [function] [call site] 00365
17 strncmp [call site] 00366
15 assert_failed [function] [call site] 00367
14 plugin_call_item [function] [call site] 00368
15 argv_insert_head [function] [call site] 00370
16 argv_clone [function] [call site] 00371
17 argv_init [function] [call site] 00372
17 argv_append [function] [call site] 00373
17 string_alloc [function] [call site] 00374
17 argv_append [function] [call site] 00375
16 string_alloc [function] [call site] 00376
15 msg_test [function] [call site] 00377
15 plugin_type_name [function] [call site] 00378
15 plugin_show_args_env [function] [call site] 00380
16 check_debug_level [function] [call site] 00381
16 plugin_show_string_array [function] [call site] 00382
17 env_safe_to_print [function] [call site] 00383
18 is_password_env_var [function] [call site] 00384
17 msg_test [function] [call site] 00385
17 _exit [call site] 00387
16 plugin_show_string_array [function] [call site] 00388
15 assert_failed [function] [call site] 00389
15 msg_test [function] [call site] 00390
15 plugin_type_name [function] [call site] 00391
15 msg_test [function] [call site] 00393
15 plugin_type_name [function] [call site] 00394
14 msg_test [function] [call site] 00399
14 _exit [call site] 00401
12 _exit [call site] 00403
12 argv_free [function] [call site] 00404
12 argv_new [function] [call site] 00405
12 assert_failed [function] [call site] 00406
12 setenv_str [function] [call site] 00407
12 argv_parse_cmd [function] [call site] 00408
13 argv_reset [function] [call site] 00409
13 parse_line [function] [call site] 00410
14 space [function] [call site] 00411
15 __ctype_b_loc [call site] 00412
14 gc_malloc [function] [call site] 00414
14 msg_test [function] [call site] 00416
14 _exit [call site] 00418
14 msg_test [function] [call site] 00419
14 _exit [call site] 00421
14 msg_test [function] [call site] 00422
14 _exit [call site] 00424
14 msg_test [function] [call site] 00425
14 _exit [call site] 00427
14 msg_test [function] [call site] 00428
14 _exit [call site] 00430
13 argv_append [function] [call site] 00431
13 string_alloc [function] [call site] 00432
13 argv_append [function] [call site] 00433
12 argv_printf_cat [function] [call site] 00434
13 argv_printf_arglist [function] [call site] 00435
12 argv_msg [function] [call site] 00436
13 msg_test [function] [call site] 00438
13 argv_str [function] [call site] 00439
14 print_argv [function] [call site] 00440
15 alloc_buf_gc [function] [call site] 00441
15 buf_printf [function] [call site] 00442
15 buf_printf [function] [call site] 00443
15 buf_printf [function] [call site] 00444
13 _exit [call site] 00447
12 openvpn_run_script [function] [call site] 00448
13 openvpn_snprintf [function] [call site] 00449
13 openvpn_execve_check [function] [call site] 00450
14 openvpn_execve [function] [call site] 00452
15 openvpn_execve_allowed [function] [call site] 00454
16 script_security [function] [call site] 00455
16 script_security [function] [call site] 00456
15 fork [call site] 00457
15 execve [call site] 00458
15 exit [call site] 00459
15 msg_test [function] [call site] 00460
15 _exit [call site] 00462
15 waitpid [call site] 00463
15 script_security [function] [call site] 00464
15 msg_test [function] [call site] 00465
15 msg_test [function] [call site] 00467
15 _exit [call site] 00469
14 platform_ret_code [function] [call site] 00471
14 platform_system_ok [function] [call site] 00472
14 system_error_message [function] [call site] 00473
15 alloc_buf_gc [function] [call site] 00474
15 buf_printf [function] [call site] 00475
15 buf_printf [function] [call site] 00476
15 buf_printf [function] [call site] 00477
15 buf_printf [function] [call site] 00478
15 buf_printf [function] [call site] 00479
15 buf_printf [function] [call site] 00480
14 _exit [call site] 00481
12 argv_free [function] [call site] 00483
11 delete_routes [function] [call site] 00485
12 delete_route [function] [call site] 00486
13 argv_new [function] [call site] 00488
13 local_route [function] [call site] 00489
13 netmask_to_netbits2 [function] [call site] 00490
13 net_route_v4_del [function] [call site] 00491
14 htonl [call site] 00492
14 htonl [call site] 00493
14 msg_test [function] [call site] 00494
14 inet_ntop [call site] 00495
14 sitnl_route_del [function] [call site] 00498
15 if_nametoindex [call site] 00499
15 msg_test [function] [call site] 00500
15 sitnl_route_set [function] [call site] 00502
16 sitnl_addattr [function] [call site] 00503
16 sitnl_addattr [function] [call site] 00504
16 sitnl_addattr [function] [call site] 00505
16 sitnl_addattr [function] [call site] 00506
16 sitnl_addattr [function] [call site] 00507
16 sitnl_send [function] [call site] 00508
13 msg_test [function] [call site] 00509
13 argv_free [function] [call site] 00511
13 net_ctx_reset [function] [call site] 00513
12 undo_redirect_default_route_to_vpn [function] [call site] 00514
13 del_route3 [function] [call site] 00515
14 delete_route [function] [call site] 00516
13 del_bypass_routes [function] [call site] 00517
14 del_route3 [function] [call site] 00518
13 del_route3 [function] [call site] 00519
13 del_route3 [function] [call site] 00520
13 del_route3 [function] [call site] 00521
13 add_route3 [function] [call site] 00522
14 add_route [function] [call site] 00523
15 argv_new [function] [call site] 00524
15 local_route [function] [call site] 00526
15 is_on_link [function] [call site] 00527
15 netmask_to_netbits2 [function] [call site] 00528
15 net_route_v4_add [function] [call site] 00529
16 htonl [call site] 00530
16 htonl [call site] 00531
16 msg_test [function] [call site] 00532
16 inet_ntop [call site] 00533
16 sitnl_route_add [function] [call site] 00536
17 if_nametoindex [call site] 00537
17 msg_test [function] [call site] 00538
17 sitnl_route_set [function] [call site] 00540
15 msg_test [function] [call site] 00541
15 msg_test [function] [call site] 00543
15 argv_free [function] [call site] 00545
15 net_ctx_reset [function] [call site] 00547
12 clear_route_list [function] [call site] 00548
12 delete_route_ipv6 [function] [call site] 00550
13 argv_new [function] [call site] 00552
13 print_in6_addr [function] [call site] 00553
14 alloc_buf_gc [function] [call site] 00554
14 memcmp [call site] 00555
14 inet_ntop [call site] 00556
14 buf_printf [function] [call site] 00557
13 msg_test [function] [call site] 00559
13 net_route_v6_del [function] [call site] 00561
14 msg_test [function] [call site] 00562
14 inet_ntop [call site] 00563
14 sitnl_route_del [function] [call site] 00566
13 msg_test [function] [call site] 00567
13 argv_free [function] [call site] 00569
13 net_ctx_reset [function] [call site] 00571
12 clear_route_ipv6_list [function] [call site] 00572
11 do_close_tun_simple [function] [call site] 00574
11 print_in_addr_t [function] [call site] 00575
11 print_in_addr_t [function] [call site] 00576
11 signal_description [function] [call site] 00577
11 run_up_down [function] [call site] 00578
11 do_close_tun_simple [function] [call site] 00579
11 print_in_addr_t [function] [call site] 00580
11 print_in_addr_t [function] [call site] 00581
11 signal_description [function] [call site] 00582
11 run_up_down [function] [call site] 00583
9 remove_pid_file [function] [call site] 00585
10 platform_unlink [function] [call site] 00586
11 unlink [call site] 00587
9 close_syslog [function] [call site] 00588
10 closelog [call site] 00589
9 plugin_abort [function] [call site] 00590
10 plugin_abort_item [function] [call site] 00591
9 port_share_abort [function] [call site] 00592
10 send_control [function] [call site] 00593
10 close [call site] 00594
9 mstats_close [function] [call site] 00595
10 munmap [call site] 00596
10 msg_test [function] [call site] 00597
10 platform_unlink [function] [call site] 00599
9 perf_output_results [function] [call site] 00600
9 exit [call site] 00601
7 check_debug_level [function] [call site] 00602
7 gettimeofday [call site] 00603
7 fprintf [call site] 00604
7 fprintf [call site] 00605
7 time_string [function] [call site] 00606
8 alloc_buf_gc [function] [call site] 00607
8 gettimeofday [call site] 00608
8 localtime [call site] 00609
8 buf_printf [function] [call site] 00610
8 buf_printf [function] [call site] 00611
7 fprintf [call site] 00613
7 fflush [call site] 00614
7 openvpn_exit [function] [call site] 00617
2 check_malloc_return [function] [call site] 00623
2 adjust_power_of_2 [function] [call site] 00624
2 array_mult_safe [function] [call site] 00625
2 check_malloc_return [function] [call site] 00626
1 word_hash_function [function] [call site] 00627
2 hash_func [function] [call site] 00628
1 hash_free [function] [call site] 00629
1 hash_iterator_init [function] [call site] 00630
2 hash_iterator_init_range [function] [call site] 00631
1 hash_iterator_next [function] [call site] 00632
2 hash_iterator_advance [function] [call site] 00633
2 hash_iterator_unlock [function] [call site] 00634
3 hash_remove_marked [function] [call site] 00635
2 hash_iterator_lock [function] [call site] 00636
2 hash_iterator_advance [function] [call site] 00637
1 hash_iterator_free [function] [call site] 00638
2 hash_iterator_unlock [function] [call site] 00639
1 fuzz_get_random_data [function] [call site] 00640
1 hash_lookup [function] [call site] 00641
2 hash_value [function] [call site] 00642
2 hash_lookup_fast [function] [call site] 00643
1 fuzz_randomizer_get_int [function] [call site] 00644
1 hash_add [function] [call site] 00645
2 hash_value [function] [call site] 00646
2 hash_lookup_fast [function] [call site] 00647
2 hash_add_fast [function] [call site] 00648
3 check_malloc_return [function] [call site] 00649
1 hash_n_elements [function] [call site] 00650
1 hash_n_buckets [function] [call site] 00651
1 fuzz_randomizer_get_int [function] [call site] 00652
1 hash_bucket [function] [call site] 00653
1 fuzz_get_random_data [function] [call site] 00654
1 hash_remove [function] [call site] 00655
2 hash_value [function] [call site] 00656
2 hash_remove_fast [function] [call site] 00657
1 fuzz_randomizer_get_int [function] [call site] 00658
1 hash_remove_by_value [function] [call site] 00659
2 hash_iterator_init [function] [call site] 00660
2 hash_iterator_next [function] [call site] 00661
2 hash_iterator_delete_element [function] [call site] 00662
3 assert_failed [function] [call site] 00663
2 hash_iterator_free [function] [call site] 00664
1 hash_free [function] [call site] 00665
1 fuzz_random_destroy [function] [call site] 00667
2 __assert_fail [call site] 00668