Fuzz introspector: fuzz-xml
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
126 128 3 :

['pj_exception_id_name', 'pj_log_get_level', 'pj_log_1']

128 145 pj_throw_exception_ call site: 00128 /src/pjsip/pjlib/build/../src/pj/except.c:46
78 78 2 :

['term_set_color', 'term_restore_color']

78 78 pj_log_write call site: 00000 /src/pjsip/pjlib/build/../src/pj/log_writer_stdout.c:48
7 7 2 :

['pj_thread_get_name', 'strlen']

9 46 pj_log call site: 00000 /src/pjsip/pjlib/build/../src/pj/log.c:419
6 6 1 :

['pj_utoa']

17 78 pj_log call site: 00000 /src/pjsip/pjlib/build/../src/pj/log.c:380
6 6 1 :

['__errno_location']

6 6 pj_gettimeofday call site: 00000 /src/pjsip/pjlib/build/../src/pj/os_time_unix.c:39
6 6 1 :

['__errno_location']

6 6 pj_get_timestamp call site: 00070 /src/pjsip/pjlib/build/../src/pj/os_timestamp_posix.c:288
4 4 1 :

['pj_thread_local_free']

4 4 pj_log_init call site: 00007 /src/pjsip/pjlib/build/../src/pj/log.c:161
4 4 2 :

['pthread_mutex_destroy', 'pthread_mutex_unlock']

4 4 pj_mutex_destroy call site: 00000 /src/pjsip/pjlib/build/../src/pj/os_core_unix.c:1581
2 2 1 :

['pj_memset']

2 14 pj_log call site: 00000 /src/pjsip/pjlib/build/../src/pj/log.c:454
2 2 1 :

['pthread_mutex_destroy']

2 2 init_mutex call site: 00037 /src/pjsip/pjlib/build/../src/pj/os_core_unix.c:1349
0 118 2 :

['pj_log_4', 'pj_log_get_level']

4 131 pj_thread_register call site: 00020 /src/pjsip/pjlib/build/../src/pj/os_core_unix.c:561
0 13 1 :

['pj_ansi_strxcpy']

17 91 pj_log call site: 00000 /src/pjsip/pjlib/build/../src/pj/log.c:374

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 calloc [call site] 00001
1 pj_init [function] [call site] 00002
2 pj_log_init [function] [call site] 00003
3 pj_thread_local_alloc [function] [call site] 00004
4 __assert_fail [call site] 00005
4 pthread_key_create [call site] 00006
3 pj_thread_local_alloc [function] [call site] 00007
3 pj_thread_local_free [function] [call site] 00008
4 pthread_key_delete [call site] 00009
3 pj_atexit [function] [call site] 00010
3 logging_shutdown [function] [call site] 00011
4 pj_thread_local_free [function] [call site] 00012
4 pj_thread_local_free [function] [call site] 00013
3 pj_log_get_decor [function] [call site] 00014
2 pj_thread_init [function] [call site] 00015
3 pj_thread_local_alloc [function] [call site] 00016
3 pj_thread_register [function] [call site] 00017
4 pj_str [function] [call site] 00018
5 strlen [call site] 00019
4 pj_thread_local_get [function] [call site] 00020
5 pthread_getspecific [call site] 00021
4 pj_log_get_level [function] [call site] 00022
4 pthread_self [call site] 00023
4 pj_bzero [function] [call site] 00024
4 pthread_self [call site] 00025
4 pj_strlen [function] [call site] 00026
4 snprintf [call site] 00027
4 snprintf [call site] 00028
4 pj_thread_local_set [function] [call site] 00029
5 pthread_setspecific [call site] 00030
4 pj_bzero [function] [call site] 00031
2 init_mutex [function] [call site] 00032
3 pthread_mutexattr_init [call site] 00033
3 pthread_mutexattr_settype [call site] 00034
3 pthread_mutexattr_settype [call site] 00035
3 pthread_mutex_init [call site] 00036
3 pthread_mutexattr_destroy [call site] 00037
3 pthread_mutex_destroy [call site] 00038
3 strchr [call site] 00039
3 snprintf [call site] 00040
3 pj_ansi_strxcpy [function] [call site] 00041
4 __assert_fail [call site] 00042
3 pj_log_get_level [function] [call site] 00043
2 pj_exception_id_alloc [function] [call site] 00044
3 pj_enter_critical_section [function] [call site] 00045
4 pj_mutex_lock [function] [call site] 00046
5 __assert_fail [call site] 00047
5 pj_log_get_level [function] [call site] 00048
5 pthread_mutex_lock [call site] 00049
5 pj_thread_this [function] [call site] 00050
6 pj_thread_local_get [function] [call site] 00051
6 __assert_fail [call site] 00052
5 pj_ansi_strxcpy [function] [call site] 00053
5 pj_log_get_level [function] [call site] 00054
3 pj_leave_critical_section [function] [call site] 00055
4 pj_mutex_unlock [function] [call site] 00056
5 __assert_fail [call site] 00057
5 pj_thread_this [function] [call site] 00058
5 __assert_fail [call site] 00059
5 pj_log_get_level [function] [call site] 00060
5 pthread_mutex_unlock [call site] 00061
3 pj_leave_critical_section [function] [call site] 00062
2 pj_generate_unique_string [function] [call site] 00063
3 pj_enter_critical_section [function] [call site] 00064
3 init_guid_chars [function] [call site] 00065
3 pj_leave_critical_section [function] [call site] 00066
3 pj_rand [function] [call site] 00067
4 rand [call site] 00068
2 pj_get_timestamp [function] [call site] 00069
3 clock_gettime [call site] 00070
3 __errno_location [call site] 00071
2 __assert_fail [call site] 00072
2 pj_log_get_level [function] [call site] 00073
1 pj_caching_pool_init [function] [call site] 00074
2 pj_bzero [function] [call site] 00075
2 pj_list_init [function] [call site] 00076
2 pj_list_init [function] [call site] 00077
2 pj_memcpy [function] [call site] 00078
2 pj_pool_create_on_buf [function] [call site] 00079
3 __assert_fail [call site] 00080
3 pool_buf_initialize [function] [call site] 00081
4 pj_atexit [function] [call site] 00082
4 pool_buf_cleanup [function] [call site] 00083
5 pj_thread_local_free [function] [call site] 00084
4 pj_thread_local_alloc [function] [call site] 00085
3 pj_thread_local_set [function] [call site] 00086
3 pj_pool_create_int [function] [call site] 00087
4 __assert_fail [call site] 00088
4 pj_bzero [function] [call site] 00089
4 pj_list_init [function] [call site] 00090
4 pj_list_insert_after [function] [call site] 00091
4 pj_pool_init_int [function] [call site] 00092
5 strchr [call site] 00093
5 snprintf [call site] 00094
5 pj_ansi_strxcpy [function] [call site] 00095
4 pj_log_get_level [function] [call site] 00096
2 pj_lock_create_simple_mutex [function] [call site] 00097
3 create_mutex_lock [function] [call site] 00098
4 __assert_fail [call site] 00099
4 pj_pool_alloc [function] [call site] 00100
5 pj_pool_alloc_from_block [function] [call site] 00101
5 pj_pool_allocate_find [function] [call site] 00102
6 pj_pool_alloc_from_block [function] [call site] 00103
6 pj_log_get_level [function] [call site] 00104
6 pj_log_get_level [function] [call site] 00105
6 pj_pool_create_block [function] [call site] 00106
7 __assert_fail [call site] 00107
7 pj_log_get_level [function] [call site] 00108
7 pj_list_insert_after [function] [call site] 00109
7 pj_log_get_level [function] [call site] 00110
6 pj_pool_alloc_from_block [function] [call site] 00111
6 __assert_fail [call site] 00112
4 pj_memcpy [function] [call site] 00113
4 pj_mutex_create [function] [call site] 00114
5 __assert_fail [call site] 00115
5 pj_pool_alloc [function] [call site] 00116
5 __assert_fail [call site] 00117
5 init_mutex [function] [call site] 00118
2 __assert_fail [call site] 00119
1 pj_log_set_level [function] [call site] 00120
1 XML_parse [function] [call site] 00121
2 pj_pool_create [function] [call site] 00122
2 pj_xml_parse [function] [call site] 00123
3 pj_scan_init [function] [call site] 00124
4 pj_scan_skip_whitespace [function] [call site] 00125
3 on_syntax_error [function] [call site] 00126
4 pj_throw_exception_ [function] [call site] 00127
5 pj_thread_local_get [function] [call site] 00128
5 pj_log_get_level [function] [call site] 00129
5 pj_exception_id_name [function] [call site] 00130
6 __assert_fail [call site] 00131
6 snprintf [call site] 00132
5 __assert_fail [call site] 00133
5 pj_pop_exception_handler_ [function] [call site] 00134
6 pj_thread_local_get [function] [call site] 00135
6 pj_thread_local_set [function] [call site] 00136
3 pj_push_exception_handler_ [function] [call site] 00137
4 pj_thread_local_alloc [function] [call site] 00138
4 __assert_fail [call site] 00139
4 pj_atexit [function] [call site] 00140
4 exception_cleanup [function] [call site] 00141
5 pj_thread_local_free [function] [call site] 00142
4 pj_thread_local_get [function] [call site] 00143
4 pj_thread_local_set [function] [call site] 00144
3 _setjmp [call site] 00145
3 xml_parse_node [function] [call site] 00146
4 on_syntax_error [function] [call site] 00147
4 pj_scan_advance_n [function] [call site] 00148
5 pj_scan_syntax_err [function] [call site] 00149
5 pj_scan_is_eof [function] [call site] 00150
5 pj_scan_skip_whitespace [function] [call site] 00151
4 pj_scan_get_until_ch [function] [call site] 00152
5 pj_scan_syntax_err [function] [call site] 00153
5 pj_strset3 [function] [call site] 00154
5 pj_scan_is_eof [function] [call site] 00155
5 pj_scan_skip_whitespace [function] [call site] 00156
4 pj_scan_advance_n [function] [call site] 00157
4 pj_scan_advance_n [function] [call site] 00158
4 xml_parse_node [function] [call site] 00159
5 pj_scan_strcmp [function] [call site] 00160
6 pj_scan_syntax_err [function] [call site] 00161
6 strncmp [call site] 00162
5 pj_scan_advance_n [function] [call site] 00163
5 pj_scan_get_until_ch [function] [call site] 00164
5 pj_scan_strcmp [function] [call site] 00165
5 pj_scan_advance_n [function] [call site] 00166
5 pj_scan_advance_n [function] [call site] 00167
5 xml_parse_node [function] [call site] 00168
6 alloc_node [function] [call site] 00169
7 pj_pool_zalloc [function] [call site] 00170
8 pj_pool_calloc [function] [call site] 00171
9 pj_pool_alloc [function] [call site] 00172
9 pj_bzero [function] [call site] 00173
7 pj_list_init [function] [call site] 00174
7 pj_list_init [function] [call site] 00175
6 pj_scan_get_char [function] [call site] 00176
7 pj_scan_syntax_err [function] [call site] 00177
7 pj_scan_skip_whitespace [function] [call site] 00178
6 pj_scan_get_until_chr [function] [call site] 00179
7 pj_scan_syntax_err [function] [call site] 00180
7 memchr [call site] 00181
7 pj_strset3 [function] [call site] 00182
7 pj_scan_is_eof [function] [call site] 00183
7 pj_scan_skip_whitespace [function] [call site] 00184
6 alloc_attr [function] [call site] 00185
7 pj_pool_zalloc [function] [call site] 00186
6 pj_scan_get_until_chr [function] [call site] 00187
6 pj_scan_get_char [function] [call site] 00188
6 pj_scan_get_quotes [function] [call site] 00189
7 __assert_fail [call site] 00190
7 pj_scan_syntax_err [function] [call site] 00191
7 pj_scan_syntax_err [function] [call site] 00192
7 pj_strset3 [function] [call site] 00193
7 pj_scan_is_eof [function] [call site] 00194
7 pj_scan_skip_whitespace [function] [call site] 00195
6 pj_list_push_back [function] [call site] 00196
7 pj_list_insert_before [function] [call site] 00197
8 pj_list_insert_after [function] [call site] 00198
6 pj_scan_get_char [function] [call site] 00199
6 pj_scan_get_char [function] [call site] 00200
6 on_syntax_error [function] [call site] 00201
6 pj_scan_get_char [function] [call site] 00202
6 on_syntax_error [function] [call site] 00203
6 xml_parse_node [function] [call site] 00204
7 pj_list_push_back [function] [call site] 00205
7 pj_scan_is_eof [function] [call site] 00206
7 pj_scan_get_until_ch [function] [call site] 00207
7 pj_scan_strcmp [function] [call site] 00208
7 pj_scan_advance_n [function] [call site] 00209
7 pj_scan_get_until_ch [function] [call site] 00210
7 pj_scan_strcmp [function] [call site] 00211
7 pj_scan_advance_n [function] [call site] 00212
7 pj_scan_get_until_ch [function] [call site] 00213
7 pj_scan_advance_n [function] [call site] 00214
7 pj_scan_get_char [function] [call site] 00215
7 on_syntax_error [function] [call site] 00216
7 pj_scan_get_until_chr [function] [call site] 00217
7 pj_stricmp [function] [call site] 00218
8 __assert_fail [call site] 00219
8 __assert_fail [call site] 00220
8 strncasecmp [call site] 00221
7 on_syntax_error [function] [call site] 00222
7 pj_scan_get_char [function] [call site] 00223
7 on_syntax_error [function] [call site] 00224
3 pj_log_get_level [function] [call site] 00225
3 pj_scan_get_col [function] [call site] 00226
3 pj_pop_exception_handler_ [function] [call site] 00227
3 pj_scan_fini [function] [call site] 00228
2 pj_pool_zalloc [function] [call site] 00229
2 pj_xml_print [function] [call site] 00230
3 pj_memcpy [function] [call site] 00231
3 xml_print_node [function] [call site] 00232
4 pj_memcpy [function] [call site] 00233
4 pj_memcpy [function] [call site] 00234
4 pj_memcpy [function] [call site] 00235
4 xml_print_node [function] [call site] 00236
5 pj_memcpy [function] [call site] 00237
5 pj_memcpy [function] [call site] 00238
2 pj_pool_release [function] [call site] 00239
2 pj_pool_release [function] [call site] 00240
1 pj_caching_pool_destroy [function] [call site] 00241
2 pj_list_erase [function] [call site] 00242
3 pj_link_node [function] [call site] 00243
3 pj_list_init [function] [call site] 00244
2 pj_pool_destroy_int [function] [call site] 00245
3 pj_log_get_level [function] [call site] 00246
3 reset_pool [function] [call site] 00247
4 pj_list_erase [function] [call site] 00248
2 pj_list_erase [function] [call site] 00249
2 pj_log_get_level [function] [call site] 00250
2 pj_pool_destroy_int [function] [call site] 00251
2 pj_lock_destroy [function] [call site] 00252
3 __assert_fail [call site] 00253
2 pj_lock_create_null_mutex [function] [call site] 00254
3 __assert_fail [call site] 00255