Fuzz introspector: sapi/fuzzer/fuzzer-json.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
25 38 zend_hash_real_init_mixed_ex call site: {node_id}
23 375 gc_grow_root_buffer call site: {node_id} gc_grow_root_buffer
20 193 init_executor call site: {node_id}
16 345 gc_possible_root call site: {node_id} gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: {node_id}
12 502 zend_observer_fcall_end_all call site: {node_id} call_end_observers
9 71 zend_interned_strings_activate call site: {node_id}
8 260 sapi_activate call site: {node_id} sapi_read_post_data
7 291 zend_signal_activate call site: {node_id} zend_signal_register
7 450 zend_string_efree call site: {node_id}
7 462 php_build_argv call site: {node_id}
6 22 zend_hash_real_init_mixed_ex call site: {node_id}

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzzer_request_startup [function] [call site] 00001
2 php_request_startup [function] [call site] 00002
3 zend_interned_strings_activate [function] [call site] 00003
4 zend_init_interned_strings_ht [function] [call site] 00004
5 zend_hash_init [function] [call site] 00005
5 zend_hash_real_init_mixed [function] [call site] 00006
6 IS_CONSISTENT [function] [call site] 00007
6 HT_ASSERT_RC1 [function] [call site] 00008
6 zend_hash_real_init_mixed_ex [function] [call site] 00009
7 ZEND_ASSERT [function] [call site] 00010
7 HT_SIZE_TO_MASK [function] [call site] 00011
7 UNEXPECTED [function] [call site] 00012
7 HT_SIZE_EX [function] [call site] 00015
7 HT_SIZE_TO_MASK [function] [call site] 00016
7 HT_SIZE_EX [function] [call site] 00019
7 HT_SIZE_TO_MASK [function] [call site] 00020
7 HT_SIZE_TO_MASK [function] [call site] 00021
7 HT_SET_DATA_ADDR [function] [call site] 00022
7 _mm256_setzero_si256 [function] [call site] 00023
7 _mm256_cmpeq_epi64 [function] [call site] 00024
7 _mm256_storeu_si256 [function] [call site] 00025
7 HT_HASH_EX [function] [call site] 00026
7 _mm256_storeu_si256 [function] [call site] 00027
7 HT_HASH_EX [function] [call site] 00028
7 _mm_setzero_si128 [function] [call site] 00029
7 _mm_cmpeq_epi8 [function] [call site] 00030
7 _mm_storeu_si128 [function] [call site] 00031
7 HT_HASH_EX [function] [call site] 00032
7 _mm_storeu_si128 [function] [call site] 00033
7 HT_HASH_EX [function] [call site] 00034
7 _mm_storeu_si128 [function] [call site] 00035
7 HT_HASH_EX [function] [call site] 00036
7 _mm_storeu_si128 [function] [call site] 00037
7 HT_HASH_EX [function] [call site] 00038
7 vdupq_n_s32 [function] [call site] 00039
7 vst1q_s32 [function] [call site] 00040
7 HT_HASH_EX [function] [call site] 00041
7 vst1q_s32 [function] [call site] 00042
7 HT_HASH_EX [function] [call site] 00043
7 vst1q_s32 [function] [call site] 00044
7 HT_HASH_EX [function] [call site] 00045
7 vst1q_s32 [function] [call site] 00046
7 HT_HASH_EX [function] [call site] 00047
7 HT_HASH_EX [function] [call site] 00048
7 HT_HASH_EX [function] [call site] 00049
7 HT_HASH_EX [function] [call site] 00050
7 HT_HASH_EX [function] [call site] 00051
7 HT_HASH_EX [function] [call site] 00052
7 HT_HASH_EX [function] [call site] 00053
7 HT_HASH_EX [function] [call site] 00054
7 HT_HASH_EX [function] [call site] 00055
7 HT_HASH_EX [function] [call site] 00056
7 HT_HASH_EX [function] [call site] 00057
7 HT_HASH_EX [function] [call site] 00058
7 HT_HASH_EX [function] [call site] 00059
7 HT_HASH_EX [function] [call site] 00060
7 HT_HASH_EX [function] [call site] 00061
7 HT_HASH_EX [function] [call site] 00062
7 HT_HASH_EX [function] [call site] 00063
7 HT_SIZE_EX [function] [call site] 00065
7 HT_SIZE_TO_MASK [function] [call site] 00066
7 HT_SIZE_TO_MASK [function] [call site] 00067
7 HT_SET_DATA_ADDR [function] [call site] 00068
7 HT_HASH_RESET [function] [call site] 00070
3 DTRACE_REQUEST_STARTUP [function] [call site] 00072
3 SAFE_FILENAME [function] [call site] 00073
3 SAFE_FILENAME [function] [call site] 00075
3 SAFE_FILENAME [function] [call site] 00077
3 _configthreadlocale [function] [call site] 00079
3 zend_activate [function] [call site] 00089
4 virtual_cwd_activate [function] [call site] 00090
4 init_compiler [function] [call site] 00103
5 get_cpu_features [function] [call site] 00104
4 init_executor [function] [call site] 00106
5 ZVAL_NULL [function] [call site] 00115
5 ZVAL_ERROR [function] [call site] 00117
5 ZVAL_UNDEF [function] [call site] 00120
5 zend_hash_init [function] [call site] 00141
5 zend_llist_apply [function] [call site] 00143
5 zend_hash_init [function] [call site] 00145
5 ZVAL_UNDEF [function] [call site] 00147
5 ZVAL_UNDEF [function] [call site] 00149
5 zend_stack_init [function] [call site] 00152
5 zend_stack_init [function] [call site] 00154
5 zend_stack_init [function] [call site] 00156
5 zend_objects_store_init [function] [call site] 00158
5 zend_lazy_objects_init [function] [call site] 00162
6 zend_hash_init [function] [call site] 00163
5 ZEND_ATOMIC_BOOL_INIT [function] [call site] 00165
5 ZEND_ATOMIC_BOOL_INIT [function] [call site] 00167
5 zend_weakrefs_init [function] [call site] 00220
4 startup_scanner [function] [call site] 00224
4 zend_observer_activate [function] [call site] 00234
3 sapi_activate [function] [call site] 00236
4 zend_llist_init [function] [call site] 00237
4 ZVAL_UNDEF [function] [call site] 00242
4 read_cookies [function] [call site] 00285
4 input_filter_init [function] [call site] 00287
3 zend_set_timeout [function] [call site] 00301
4 zend_set_timeout_ex [function] [call site] 00303
4 zend_atomic_bool_store_ex [function] [call site] 00304
5 InterlockedExchange8 [function] [call site] 00305
3 zend_set_timeout [function] [call site] 00308
3 sapi_add_header [function] [call site] 00314
3 ZVAL_STRING [function] [call site] 00317
3 php_output_start_user [function] [call site] 00319
3 zval_ptr_dtor [function] [call site] 00320
4 i_zval_ptr_dtor [function] [call site] 00321
5 Z_REFCOUNTED_P [function] [call site] 00322
5 Z_COUNTED_P [function] [call site] 00323
5 GC_DELREF [function] [call site] 00324
5 gc_check_possible_root [function] [call site] 00329
6 GC_TYPE_INFO [function] [call site] 00331
6 Z_COLLECTABLE_P [function] [call site] 00332
6 Z_COUNTED_P [function] [call site] 00333
6 UNEXPECTED [function] [call site] 00334
6 GC_MAY_LEAK [function] [call site] 00335
6 gc_possible_root [function] [call site] 00336
7 UNEXPECTED [function] [call site] 00337
7 GC_BENCH_INC [function] [call site] 00339
7 GC_HAS_UNUSED [function] [call site] 00341
7 GC_FETCH_UNUSED [function] [call site] 00342
7 GC_HAS_NEXT_UNUSED_UNDER_THRESHOLD [function] [call site] 00344
7 GC_FETCH_NEXT_UNUSED [function] [call site] 00345
7 gc_possible_root_when_full [function] [call site] 00346
8 ZEND_ASSERT [function] [call site] 00347
8 ZEND_ASSERT [function] [call site] 00350
8 GC_ADDREF [function] [call site] 00354
8 gc_collect_cycles [function] [call site] 00381
8 UNEXPECTED [function] [call site] 00382
8 GC_DELREF [function] [call site] 00383
8 rc_dtor_func [function] [call site] 00384
8 UNEXPECTED [function] [call site] 00385
8 GC_HAS_UNUSED [function] [call site] 00387
8 GC_FETCH_UNUSED [function] [call site] 00388
8 GC_HAS_NEXT_UNUSED [function] [call site] 00390
8 GC_FETCH_NEXT_UNUSED [function] [call site] 00391
8 gc_grow_root_buffer [function] [call site] 00392
8 UNEXPECTED [function] [call site] 00393
8 GC_HAS_NEXT_UNUSED [function] [call site] 00394
8 GC_FETCH_NEXT_UNUSED [function] [call site] 00395
8 GC_IDX2PTR [function] [call site] 00396
8 GC_TRACE_SET_COLOR [function] [call site] 00397
8 gc_compress [function] [call site] 00398
8 GC_REF_SET_INFO [function] [call site] 00400
8 GC_BENCH_INC [function] [call site] 00402
8 GC_BENCH_INC [function] [call site] 00403
8 GC_BENCH_PEAK [function] [call site] 00404
7 ZEND_ASSERT [function] [call site] 00405
7 ZEND_ASSERT [function] [call site] 00408
7 GC_IDX2PTR [function] [call site] 00410
7 GC_TRACE_SET_COLOR [function] [call site] 00411
7 gc_compress [function] [call site] 00412
7 GC_REF_SET_INFO [function] [call site] 00413
7 GC_BENCH_INC [function] [call site] 00415
7 GC_BENCH_INC [function] [call site] 00416
7 GC_BENCH_PEAK [function] [call site] 00417
3 php_output_start_user [function] [call site] 00419
3 php_output_set_implicit_flush [function] [call site] 00423
3 php_hash_environment [function] [call site] 00426
4 zend_activate_auto_globals [function] [call site] 00430
5 zend_auto_global*::auto_global_callback [function] [call site] 00431
5 ZEND_HASH_FOREACH_END [function] [call site] 00432
4 php_build_argv [function] [call site] 00434
5 array_init [function] [call site] 00436
5 ZVAL_STRING [function] [call site] 00439
5 zend_hash_next_index_insert [function] [call site] 00441
5 zend_string_efree [function] [call site] 00443
6 ZEND_ASSERT [function] [call site] 00444
6 ZSTR_IS_INTERNED [function] [call site] 00445
6 ZEND_ASSERT [function] [call site] 00446
6 GC_REFCOUNT [function] [call site] 00447
6 ZEND_ASSERT [function] [call site] 00448
5 ZVAL_STRINGL [function] [call site] 00452
5 zend_hash_next_index_insert [function] [call site] 00454
5 zend_string_efree [function] [call site] 00456
5 ZVAL_LONG [function] [call site] 00459
5 ZVAL_LONG [function] [call site] 00461
5 zend_hash_update [function] [call site] 00464
5 ZSTR_KNOWN [function] [call site] 00466
5 zend_hash_update [function] [call site] 00467
5 ZSTR_KNOWN [function] [call site] 00469
5 zend_hash_update [function] [call site] 00472
5 Z_ARRVAL_P [function] [call site] 00473
5 ZSTR_KNOWN [function] [call site] 00474
5 zend_hash_update [function] [call site] 00475
5 Z_ARRVAL_P [function] [call site] 00476
5 ZSTR_KNOWN [function] [call site] 00477
5 zval_ptr_dtor_nogc [function] [call site] 00478
6 Z_REFCOUNTED_P [function] [call site] 00479
6 Z_DELREF_P [function] [call site] 00480
6 rc_dtor_func [function] [call site] 00481
6 Z_COUNTED_P [function] [call site] 00482
3 zend_activate_modules [function] [call site] 00485
4 zend_module_entry*::request_startup_func [function] [call site] 00486
4 zend_error [function] [call site] 00487
2 php_module_shutdown [function] [call site] 00490
1 php_json_parser_init [function] [call site] 00492
1 php_json_yyparse [function] [call site] 00493
1 zval_ptr_dtor [function] [call site] 00494
1 php_request_shutdown [function] [call site] 00495
2 zend_observer_fcall_end_all [function] [call site] 00499
2 php_call_shutdown_functions [function] [call site] 00517
2 zend_call_destructors [function] [call site] 00518
3 shutdown_destructors [function] [call site] 00519
4 zend_hash_num_elements [function] [call site] 00522
4 zend_hash_reverse_apply [function] [call site] 00524
5 IS_CONSISTENT [function] [call site] 00525
5 HT_IS_PACKED [function] [call site] 00526
5 UNEXPECTED [function] [call site] 00527
5 apply_func [function] [call site] 00529
5 HT_ASSERT_RC1 [function] [call site] 00530
5 _zend_hash_packed_del_val [function] [call site] 00531
6 HT_HASH_TO_IDX [function] [call site] 00532
6 UNEXPECTED [function] [call site] 00533
6 zend_hash_iterators_clamp_max [function] [call site] 00536
6 ZVAL_COPY_VALUE [function] [call site] 00542
6 ZVAL_UNDEF [function] [call site] 00543
6 HashTable*::pDestructor [function] [call site] 00544
6 ZVAL_UNDEF [function] [call site] 00545
5 HT_IDX_TO_HASH [function] [call site] 00546
5 UNEXPECTED [function] [call site] 00547
5 apply_func [function] [call site] 00549
5 HT_ASSERT_RC1 [function] [call site] 00550
5 _zend_hash_del_el [function] [call site] 00551
6 HT_HASH_TO_BUCKET [function] [call site] 00553
6 HT_HASH_TO_BUCKET [function] [call site] 00556
6 zend_string_release [function] [call site] 00557
7 ZSTR_IS_INTERNED [function] [call site] 00558
7 GC_DELREF [function] [call site] 00559
6 _zend_hash_del_el_ex [function] [call site] 00562
7 HT_HASH_TO_IDX [function] [call site] 00567
7 UNEXPECTED [function] [call site] 00568
7 zend_hash_iterators_clamp_max [function] [call site] 00571
7 ZVAL_COPY_VALUE [function] [call site] 00572
7 ZVAL_UNDEF [function] [call site] 00573
7 HashTable*::pDestructor [function] [call site] 00574
7 ZVAL_UNDEF [function] [call site] 00575
5 HT_IDX_TO_HASH [function] [call site] 00576
4 zend_hash_num_elements [function] [call site] 00578
4 zend_objects_store_call_destructors [function] [call site] 00580
5 IS_OBJ_VALID [function] [call site] 00582
5 OBJ_FLAGS [function] [call site] 00583
5 GC_ADD_FLAGS [function] [call site] 00584
5 GC_ADDREF [function] [call site] 00585
5 zend_object*::handlers::dtor_obj [function] [call site] 00586
5 GC_DELREF [function] [call site] 00587