Fuzz introspector: libxml2/fuzz/regexp.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
415 0 EP call site: {node_id} xmlRegexpCompile

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 xmlFuzzDataInit [call site] 00001
1 xmlFuzzReadInt [call site] 00002
1 xmlFuzzReadString [call site] 00003
1 xmlFuzzInjectFailure [function] [call site] 00004
1 xmlRegexpCompile [function] [call site] 00005
2 xmlRegNewParserCtxt [function] [call site] 00006
3 xmlMalloc [call site] 00007
3 memset [call site] 00008
3 xmlStrdup [function] [call site] 00009
4 xmlStrndup [function] [call site] 00010
5 xmlMalloc [call site] 00011
5 memcpy [call site] 00012
3 xmlFree [call site] 00013
2 xmlRegStatePush [function] [call site] 00014
3 xmlGrowCapacity [function] [call site] 00015
3 xmlRegexpErrMemory [function] [call site] 00016
4 xmlRaiseMemoryError [function] [call site] 00017
5 xmlGetLastErrorInternal [function] [call site] 00018
6 xmlGetThreadLocalStorage [function] [call site] 00019
5 xmlResetLastError [function] [call site] 00020
6 xmlGetLastErrorInternal [function] [call site] 00021
6 xmlResetError [function] [call site] 00022
7 xmlFree [call site] 00023
7 xmlFree [call site] 00024
7 xmlFree [call site] 00025
7 xmlFree [call site] 00026
7 xmlFree [call site] 00027
7 memset [call site] 00028
5 xmlResetError [function] [call site] 00029
5 schannel [call site] 00030
5 xmlStructuredError [call site] 00031
5 channel [call site] 00032
3 xmlRealloc [call site] 00033
3 xmlRegexpErrMemory [function] [call site] 00034
3 xmlRegNewState [function] [call site] 00035
4 xmlMalloc [call site] 00036
4 xmlRegexpErrMemory [function] [call site] 00037
4 memset [call site] 00038
2 xmlFAParseRegExp [function] [call site] 00039
3 xmlFAParseBranch [function] [call site] 00040
4 xmlFAParsePiece [function] [call site] 00041
5 xmlFAParseAtom [function] [call site] 00042
6 xmlFAIsChar [function] [call site] 00043
7 xmlGetUTF8Char [function] [call site] 00044
7 ERROR [call site] 00045
6 xmlRegNewAtom [function] [call site] 00046
7 xmlMalloc [call site] 00047
7 xmlRegexpErrMemory [function] [call site] 00048
7 memset [call site] 00049
6 xmlGetUTF8Char [function] [call site] 00050
6 ERROR [call site] 00051
6 NEXTL [call site] 00052
6 ERROR [call site] 00053
6 xmlFAGenerateEpsilonTransition [function] [call site] 00054
7 xmlRegStatePush [function] [call site] 00055
7 xmlRegStateAddTrans [function] [call site] 00056
8 ERROR [call site] 00057
8 ERROR [call site] 00058
8 xmlGrowCapacity [function] [call site] 00059
8 xmlRegexpErrMemory [function] [call site] 00060
8 xmlRealloc [call site] 00061
8 xmlRegexpErrMemory [function] [call site] 00062
8 xmlRegStateAddTransTo [function] [call site] 00063
9 xmlGrowCapacity [function] [call site] 00064
9 xmlRegexpErrMemory [function] [call site] 00065
9 xmlRealloc [call site] 00066
9 xmlRegexpErrMemory [function] [call site] 00067
6 xmlFAGenerateEpsilonTransition [function] [call site] 00068
6 xmlFAParseRegExp [function] [call site] 00069
6 ERROR [call site] 00070
6 xmlRegNewAtom [function] [call site] 00071
6 xmlFAParseCharClass [function] [call site] 00072
7 xmlRegNewAtom [function] [call site] 00073
7 xmlFAParseCharGroup [function] [call site] 00074
8 xmlFAParsePosCharGroup [function] [call site] 00075
9 xmlFAParseCharClassEsc [function] [call site] 00076
10 xmlRegNewAtom [function] [call site] 00077
10 xmlRegAtomAddRange [function] [call site] 00078
11 ERROR [call site] 00079
11 ERROR [call site] 00080
11 xmlGrowCapacity [function] [call site] 00081
11 xmlRegexpErrMemory [function] [call site] 00082
11 xmlRealloc [call site] 00083
11 xmlRegexpErrMemory [function] [call site] 00084
11 xmlRegNewRange [function] [call site] 00085
12 xmlMalloc [call site] 00086
12 xmlRegexpErrMemory [function] [call site] 00087
10 ERROR [call site] 00088
10 ERROR [call site] 00089
10 xmlFAParseCharProp [function] [call site] 00090
11 ERROR [call site] 00091
11 xmlStrndup [function] [call site] 00092
11 xmlRegexpErrMemory [function] [call site] 00093
11 ERROR [call site] 00094
11 xmlRegNewAtom [function] [call site] 00095
11 xmlFree [call site] 00096
11 xmlRegAtomAddRange [function] [call site] 00097
11 xmlFree [call site] 00098
10 ERROR [call site] 00099
10 ERROR [call site] 00100
10 xmlFAParseCharProp [function] [call site] 00101
10 ERROR [call site] 00102
10 xmlRegNewAtom [function] [call site] 00103
10 parse_escaped_codepoint [function] [call site] 00104
11 parse_escaped_codeunit [function] [call site] 00105
12 ERROR [call site] 00106
11 parse_escaped_codeunit [function] [call site] 00107
11 ERROR [call site] 00108
10 xmlRegAtomAddRange [function] [call site] 00109
10 xmlRegNewAtom [function] [call site] 00110
10 xmlRegAtomAddRange [function] [call site] 00111
10 ERROR [call site] 00112
9 xmlFAParseCharRange [function] [call site] 00113
10 ERROR [call site] 00114
10 ERROR [call site] 00115
10 xmlGetUTF8Char [function] [call site] 00116
10 ERROR [call site] 00117
10 ERROR [call site] 00118
10 NXT [call site] 00119
10 NEXTL [call site] 00120
10 NEXTL [call site] 00121
10 NXT [call site] 00122
10 NXT [call site] 00123
10 xmlRegAtomAddRange [function] [call site] 00124
10 ERROR [call site] 00125
10 xmlGetUTF8Char [function] [call site] 00126
10 ERROR [call site] 00127
10 ERROR [call site] 00128
10 ERROR [call site] 00129
10 NEXTL [call site] 00130
10 xmlRegAtomAddRange [function] [call site] 00131
8 NXT [call site] 00132
8 xmlFAParseCharGroup [function] [call site] 00133
8 ERROR [call site] 00134
8 xmlFAParsePosCharGroup [function] [call site] 00135
7 ERROR [call site] 00136
7 xmlFAParseCharClassEsc [function] [call site] 00137
5 ERROR [call site] 00138
5 xmlFAParseQuantifier [function] [call site] 00139
6 xmlFAParseQuantExact [function] [call site] 00140
6 ERROR [call site] 00141
6 xmlFAParseQuantExact [function] [call site] 00142
6 ERROR [call site] 00143
6 ERROR [call site] 00144
4 xmlFAGenerateEpsilonTransition [function] [call site] 00145
4 xmlFAGenerateTransitions [function] [call site] 00146
5 ERROR [call site] 00147
5 xmlFAGenerateEpsilonTransition [function] [call site] 00148
5 xmlRegStatePush [function] [call site] 00149
5 xmlFAGenerateEpsilonTransition [function] [call site] 00150
5 xmlFAGenerateEpsilonTransition [function] [call site] 00151
5 xmlFAGenerateEpsilonTransition [function] [call site] 00152
5 xmlFAGenerateEpsilonTransition [function] [call site] 00153
5 xmlFAGenerateEpsilonTransition [function] [call site] 00154
5 xmlFAGenerateEpsilonTransition [function] [call site] 00155
5 xmlFAGenerateEpsilonTransition [function] [call site] 00156
5 xmlRegStatePush [function] [call site] 00157
5 xmlRegCopyAtom [function] [call site] 00158
6 xmlMalloc [call site] 00159
6 xmlRegexpErrMemory [function] [call site] 00160
6 memset [call site] 00161
6 xmlMalloc [call site] 00162
6 xmlRegexpErrMemory [function] [call site] 00163
6 xmlRegCopyRange [function] [call site] 00164
7 xmlRegNewRange [function] [call site] 00165
7 xmlStrdup [function] [call site] 00166
7 xmlRegexpErrMemory [function] [call site] 00167
7 xmlRegFreeRange [function] [call site] 00168
8 xmlFree [call site] 00169
8 xmlFree [call site] 00170
6 xmlRegFreeAtom [function] [call site] 00171
7 xmlRegFreeRange [function] [call site] 00172
7 xmlFree [call site] 00173
7 xmlFree [call site] 00174
7 xmlFree [call site] 00175
7 xmlFree [call site] 00176
7 xmlFree [call site] 00177
5 xmlFAGenerateTransitions [function] [call site] 00178
5 xmlRegFreeAtom [function] [call site] 00179
5 xmlRegGetCounter [function] [call site] 00180
6 xmlGrowCapacity [function] [call site] 00181
6 xmlRegexpErrMemory [function] [call site] 00182
6 xmlRealloc [call site] 00183
6 xmlRegexpErrMemory [function] [call site] 00184
5 xmlFAGenerateCountedEpsilonTransition [function] [call site] 00185
6 xmlRegStatePush [function] [call site] 00186
6 xmlRegStateAddTrans [function] [call site] 00187
5 xmlFAGenerateCountedTransition [function] [call site] 00188
6 xmlRegStatePush [function] [call site] 00189
6 xmlRegStateAddTrans [function] [call site] 00190
5 xmlFAGenerateEpsilonTransition [function] [call site] 00191
5 xmlRegGetCounter [function] [call site] 00192
5 xmlFAGenerateCountedTransition [function] [call site] 00193
5 xmlFAGenerateCountedEpsilonTransition [function] [call site] 00194
5 xmlFAGenerateEpsilonTransition [function] [call site] 00195
5 xmlRegAtomPush [function] [call site] 00196
6 ERROR [call site] 00197
6 xmlGrowCapacity [function] [call site] 00198
6 xmlRegexpErrMemory [function] [call site] 00199
6 xmlRealloc [call site] 00200
6 xmlRegexpErrMemory [function] [call site] 00201
5 xmlRegStatePush [function] [call site] 00202
5 xmlFAGenerateEpsilonTransition [function] [call site] 00203
5 xmlRegFreeAtom [function] [call site] 00204
5 xmlRegStatePush [function] [call site] 00205
5 xmlRegStatePush [function] [call site] 00206
5 xmlFAGenerateEpsilonTransition [function] [call site] 00207
5 xmlRegStateAddTrans [function] [call site] 00208
5 xmlFAGenerateEpsilonTransition [function] [call site] 00209
5 xmlFAGenerateEpsilonTransition [function] [call site] 00210
5 xmlRegStateAddTrans [function] [call site] 00211
5 xmlRegStateAddTrans [function] [call site] 00212
5 xmlFAGenerateEpsilonTransition [function] [call site] 00213
5 xmlRegAtomPush [function] [call site] 00214
4 xmlRegFreeAtom [function] [call site] 00215
4 xmlFAParsePiece [function] [call site] 00216
4 xmlFAGenerateTransitions [function] [call site] 00217
4 xmlRegFreeAtom [function] [call site] 00218
3 xmlFAParseBranch [function] [call site] 00219
2 ERROR [call site] 00220
2 xmlFAEliminateEpsilonTransitions [function] [call site] 00221
3 xmlFAEliminateSimpleEpsilonTransitions [function] [call site] 00222
4 xmlRegStateAddTrans [function] [call site] 00223
3 xmlRegFreeState [function] [call site] 00224
4 xmlFree [call site] 00225
4 xmlFree [call site] 00226
4 xmlFree [call site] 00227
3 xmlFAReduceEpsilonTransitions [function] [call site] 00228
4 xmlRegStateAddTrans [function] [call site] 00229
4 xmlFAReduceEpsilonTransitions [function] [call site] 00230
4 xmlRegStateAddTrans [function] [call site] 00231
3 xmlFAFinishReduceEpsilonTransitions [function] [call site] 00232
4 xmlFAFinishReduceEpsilonTransitions [function] [call site] 00233
3 xmlRegFreeState [function] [call site] 00234
2 xmlRegEpxFromParse [function] [call site] 00235
3 xmlMalloc [call site] 00236
3 xmlRegexpErrMemory [function] [call site] 00237
3 memset [call site] 00238
3 xmlRegexpIsDeterminist [function] [call site] 00239
4 xmlNewAutomata [function] [call site] 00240
5 xmlRegNewParserCtxt [function] [call site] 00241
5 xmlRegStatePush [function] [call site] 00242
5 xmlFreeAutomata [function] [call site] 00243
6 xmlRegFreeParserCtxt [function] [call site] 00244
7 xmlFree [call site] 00245
7 xmlRegFreeState [function] [call site] 00246
7 xmlFree [call site] 00247
7 xmlRegFreeAtom [function] [call site] 00248
7 xmlFree [call site] 00249
7 xmlFree [call site] 00250
7 xmlFree [call site] 00251
4 xmlRegFreeState [function] [call site] 00252
4 xmlFree [call site] 00253
4 xmlFAComputesDeterminism [function] [call site] 00254
5 xmlFAEqualAtoms [function] [call site] 00255
6 xmlStrEqual [function] [call site] 00256
7 strcmp [call site] 00257
5 xmlFACompareAtoms [function] [call site] 00258
6 xmlFACompareAtomTypes [function] [call site] 00259
6 xmlStrchr [function] [call site] 00260
6 xmlStrchr [function] [call site] 00261
6 xmlRegStrEqualWildcard [function] [call site] 00262
6 xmlRegCheckCharacter [function] [call site] 00263
7 IS_CHAR [call site] 00264
7 xmlRegCheckCharacterRange [function] [call site] 00265
8 IS_LETTER [call site] 00266
8 IS_LETTER [call site] 00267
8 IS_DIGIT [call site] 00268
8 IS_COMBINING [call site] 00269
8 IS_EXTENDER [call site] 00270
8 xmlUCSIsCatNd [call site] 00271
8 xmlUCSIsCatP [call site] 00272
8 xmlUCSIsCatZ [call site] 00273
8 xmlUCSIsCatC [call site] 00274
8 xmlUCSIsCatL [call site] 00275
8 xmlUCSIsCatLu [call site] 00276
8 xmlUCSIsCatLl [call site] 00277
8 xmlUCSIsCatLt [call site] 00278
8 xmlUCSIsCatLm [call site] 00279
8 xmlUCSIsCatLo [call site] 00280
8 xmlUCSIsCatM [call site] 00281
8 xmlUCSIsCatMn [call site] 00282
8 xmlUCSIsCatMc [call site] 00283
8 xmlUCSIsCatMe [call site] 00284
8 xmlUCSIsCatN [call site] 00285
8 xmlUCSIsCatNd [call site] 00286
8 xmlUCSIsCatNl [call site] 00287
8 xmlUCSIsCatNo [call site] 00288
8 xmlUCSIsCatP [call site] 00289
8 xmlUCSIsCatPc [call site] 00290
8 xmlUCSIsCatPd [call site] 00291
8 xmlUCSIsCatPs [call site] 00292
8 xmlUCSIsCatPe [call site] 00293
8 xmlUCSIsCatPi [call site] 00294
8 xmlUCSIsCatPf [call site] 00295
8 xmlUCSIsCatPo [call site] 00296
8 xmlUCSIsCatZ [call site] 00297
8 xmlUCSIsCatZs [call site] 00298
8 xmlUCSIsCatZl [call site] 00299
8 xmlUCSIsCatZp [call site] 00300
8 xmlUCSIsCatS [call site] 00301
8 xmlUCSIsCatSm [call site] 00302
8 xmlUCSIsCatSc [call site] 00303
8 xmlUCSIsCatSk [call site] 00304
8 xmlUCSIsCatSo [call site] 00305
8 xmlUCSIsCatC [call site] 00306
8 xmlUCSIsCatCc [call site] 00307
8 xmlUCSIsCatCf [call site] 00308
8 xmlUCSIsCatCo [call site] 00309
8 xmlUCSIsBlock [function] [call site] 00310
9 xmlUnicodeLookup [function] [call site] 00311
10 strcmp [call site] 00312
9 xmlCharInRange [function] [call site] 00313
7 xmlRegCheckCharacterRange [function] [call site] 00314
7 xmlRegCheckCharacterRange [function] [call site] 00315
7 xmlRegCheckCharacterRange [function] [call site] 00316
6 xmlFACompareRanges [function] [call site] 00317
7 xmlRegCheckCharacterRange [function] [call site] 00318
7 xmlStrEqual [function] [call site] 00319
5 xmlFAEqualAtoms [function] [call site] 00320
5 xmlFARecurseDeterminism [function] [call site] 00321
6 xmlFARecurseDeterminism [function] [call site] 00322
6 xmlFACompareAtoms [function] [call site] 00323
6 xmlFAEqualAtoms [function] [call site] 00324
5 xmlFAFinishRecurseDeterminism [function] [call site] 00325
6 xmlFAFinishRecurseDeterminism [function] [call site] 00326
4 xmlFreeAutomata [function] [call site] 00327
3 xmlRegexpErrMemory [function] [call site] 00328
3 xmlFree [call site] 00329
3 xmlMalloc [call site] 00330
3 xmlRegexpErrMemory [function] [call site] 00331
3 xmlFree [call site] 00332
3 xmlMalloc [call site] 00333
3 xmlRegexpErrMemory [function] [call site] 00334
3 xmlFree [call site] 00335
3 xmlFree [call site] 00336
3 xmlMalloc [call site] 00337
3 xmlRegexpErrMemory [function] [call site] 00338
3 xmlFree [call site] 00339
3 xmlFree [call site] 00340
3 xmlFree [call site] 00341
3 xmlStrEqual [function] [call site] 00342
3 xmlStrdup [function] [call site] 00343
3 xmlFree [call site] 00344
3 xmlFree [call site] 00345
3 xmlFree [call site] 00346
3 xmlFree [call site] 00347
3 xmlFree [call site] 00348
3 xmlFree [call site] 00349
3 xmlFree [call site] 00350
3 xmlFree [call site] 00351
3 xmlFree [call site] 00352
3 xmlFree [call site] 00353
3 xmlRegCalloc2 [function] [call site] 00354
4 xmlMalloc [call site] 00355
4 memset [call site] 00356
3 xmlFree [call site] 00357
3 xmlFree [call site] 00358
3 xmlFree [call site] 00359
3 xmlFree [call site] 00360
3 xmlFree [call site] 00361
3 xmlRegCalloc2 [function] [call site] 00362
3 xmlRegexpErrMemory [function] [call site] 00363
3 xmlFree [call site] 00364
3 xmlFree [call site] 00365
3 xmlFree [call site] 00366
3 xmlFree [call site] 00367
3 xmlFree [call site] 00368
3 xmlFree [call site] 00369
3 xmlRegFreeState [function] [call site] 00370
3 xmlFree [call site] 00371
3 xmlRegFreeAtom [function] [call site] 00372
3 xmlFree [call site] 00373
3 xmlFree [call site] 00374
3 xmlFree [call site] 00375
2 xmlRegFreeParserCtxt [function] [call site] 00376
1 xmlFuzzMallocFailed [function] [call site] 00377
1 fprintf [call site] 00378
1 abort [call site] 00379
1 xmlRegexpExec [function] [call site] 00380
2 xmlFARegExec [function] [call site] 00381
3 xmlMalloc [call site] 00382
3 memset [call site] 00383
3 xmlGetUTF8Char [function] [call site] 00384
3 xmlRegCheckCharacter [function] [call site] 00385
3 xmlFARegExecSave [function] [call site] 00386
4 xmlGrowCapacity [function] [call site] 00387
4 xmlRealloc [call site] 00388
4 memset [call site] 00389
4 xmlMalloc [call site] 00390
4 memcpy [call site] 00391
3 xmlFARegExecSave [function] [call site] 00392
3 xmlGetUTF8Char [function] [call site] 00393
3 xmlRegCheckCharacter [function] [call site] 00394
3 xmlFARegExecSave [function] [call site] 00395
3 xmlFARegExecRollBack [function] [call site] 00396
4 memcpy [call site] 00397
3 xmlFree [call site] 00398
3 xmlFree [call site] 00399
3 xmlFree [call site] 00400
1 xmlRegFreeRegexp [function] [call site] 00401
2 xmlFree [call site] 00402
2 xmlRegFreeState [function] [call site] 00403
2 xmlFree [call site] 00404
2 xmlRegFreeAtom [function] [call site] 00405
2 xmlFree [call site] 00406
2 xmlFree [call site] 00407
2 xmlFree [call site] 00408
2 xmlFree [call site] 00409
2 xmlFree [call site] 00410
2 xmlFree [call site] 00411
2 xmlFree [call site] 00412
1 xmlFuzzInjectFailure [function] [call site] 00413
1 xmlFuzzDataCleanup [call site] 00414
1 xmlResetLastError [function] [call site] 00415