Fuzz introspector: fuzz_mime
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1029 1029 4 :

['vstring_strcat', 'mime_state_content_encoding', 'mime_state_content_type', 'header_opts_find']

1775 1825 mime_state_update call site: 00121 /src/postfix/postfix/src/global/mime_state.c:795
227 227 1 :

['msg_panic']

227 227 mymalloc call site: 00015 /src/postfix/postfix/src/util/mymalloc.c:160
227 227 1 :

['msg_fatal']

227 227 mymalloc call site: 00016 /src/postfix/postfix/src/util/mymalloc.c:165
227 227 1 :

['msg_fatal']

227 227 myrealloc call site: 00109 /src/postfix/postfix/src/util/mymalloc.c:196
227 227 1 :

['msg_panic']

227 227 vstring_alloc call site: 00003 /src/postfix/postfix/src/util/vstring.c:376
6 6 2 :

['mime_state_enc_name', 'strlen']

734 734 mime_state_update call site: 00121 /src/postfix/postfix/src/global/mime_state.c:940
0 649 1 :

['mime_state_update']

2002 2701 mime_state_update call site: 00120 /src/postfix/postfix/src/global/mime_state.c:773
0 227 1 :

['myrealloc']

0 227 msg_output call site: 00003 /src/postfix/postfix/src/util/msg_output.c:133
0 227 1 :

['mymalloc']

0 227 myrealloc call site: 00105 /src/postfix/postfix/src/util/mymalloc.c:181
0 0 None 740 740 mime_state_update call site: 00121 /src/postfix/postfix/src/global/mime_state.c:927
0 0 None 501 501 mime_state_update call site: 00121 /src/postfix/postfix/src/global/mime_state.c:967
0 0 None 501 501 mime_state_update call site: 00121 /src/postfix/postfix/src/global/mime_state.c:968

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 msg_vstream_init [function] [call site] 00001
2 msg_output [function] [call site] 00002
3 vstring_alloc [function] [call site] 00003
4 msg_panic [function] [call site] 00004
5 vmsg_panic [function] [call site] 00005
6 msg_vprintf [function] [call site] 00006
7 __errno_location [call site] 00007
7 msg_vstream_init [function] [call site] 00008
8 msg_vstream_print [function] [call site] 00009
9 msg_panic [function] [call site] 00010
9 vstream_fprintf [function] [call site] 00011
10 vbuf_print [function] [call site] 00012
11 __errno_location [call site] 00013
11 vstring_alloc [function] [call site] 00014
12 mymalloc [function] [call site] 00015
13 msg_panic [function] [call site] 00016
13 msg_fatal [function] [call site] 00017
14 vmsg_fatal [function] [call site] 00018
15 msg_vprintf [function] [call site] 00019
16 vstring_vsprintf [function] [call site] 00020
17 vbuf_print [function] [call site] 00021
18 vbuf_put [function] [call site] 00022
18 vbuf_put [function] [call site] 00023
18 vbuf_put [function] [call site] 00024
18 vbuf_put [function] [call site] 00025
18 vbuf_put [function] [call site] 00026
18 vbuf_put [function] [call site] 00027
18 msg_warn [function] [call site] 00028
19 vmsg_warn [function] [call site] 00029
20 msg_vprintf [function] [call site] 00030
21 printable_except [function] [call site] 00031
22 __ctype_b_loc [call site] 00032
22 strchr [call site] 00033
22 parse_utf8_char [function] [call site] 00034
22 __ctype_b_loc [call site] 00035
22 strchr [call site] 00036
18 snprintf [call site] 00037
18 mystrdup [function] [call site] 00038
19 msg_panic [function] [call site] 00039
19 strlen [call site] 00040
19 msg_panic [function] [call site] 00041
19 mymalloc [function] [call site] 00042
18 msg_panic [function] [call site] 00043
18 __ctype_b_loc [call site] 00044
18 msg_panic [function] [call site] 00045
18 vbuf_put [function] [call site] 00046
18 vbuf_put [function] [call site] 00047
18 msg_warn [function] [call site] 00048
18 snprintf [call site] 00049
18 mystrdup [function] [call site] 00050
18 msg_panic [function] [call site] 00051
18 __ctype_b_loc [call site] 00052
18 msg_panic [function] [call site] 00053
18 vbuf_put [function] [call site] 00054
18 vbuf_put [function] [call site] 00055
18 vbuf_put [function] [call site] 00056
18 msg_panic [function] [call site] 00057
18 strlen [call site] 00058
18 snprintf [call site] 00059
18 mystrdup [function] [call site] 00060
18 msg_panic [function] [call site] 00061
18 vbuf_put [function] [call site] 00062
18 msg_panic [function] [call site] 00063
18 snprintf [call site] 00064
18 mystrdup [function] [call site] 00065
18 msg_panic [function] [call site] 00066
18 snprintf [call site] 00067
18 mystrdup [function] [call site] 00068
18 msg_panic [function] [call site] 00069
18 snprintf [call site] 00070
18 mystrdup [function] [call site] 00071
18 msg_panic [function] [call site] 00072
18 mystrerror [function] [call site] 00073
19 strerror [call site] 00074
18 vbuf_put [function] [call site] 00075
18 msg_panic [function] [call site] 00076
18 snprintf [call site] 00077
18 mystrdup [function] [call site] 00078
18 msg_panic [function] [call site] 00079
18 msg_panic [function] [call site] 00080
15 sleep [call site] 00081
15 _exit [call site] 00082
12 mymalloc [function] [call site] 00083
9 vstream_fprintf [function] [call site] 00084
9 vstream_fflush [function] [call site] 00085
10 vstream_fflush_delayed [function] [call site] 00086
11 msg_panic [function] [call site] 00087
11 vstream_fflush_some [function] [call site] 00088
12 msg_panic [function] [call site] 00089
12 msg_panic [function] [call site] 00090
12 msg_info [function] [call site] 00091
13 vmsg_info [function] [call site] 00092
14 msg_vprintf [function] [call site] 00093
12 msg_panic [function] [call site] 00094
12 msg_panic [function] [call site] 00095
12 __errno_location [call site] 00096
12 gettimeofday [call site] 00097
12 __errno_location [call site] 00098
12 gettimeofday [call site] 00099
12 msg_info [function] [call site] 00100
10 vstream_fflush_some [function] [call site] 00101
6 sleep [call site] 00102
6 abort [call site] 00103
3 mymalloc [function] [call site] 00104
3 myrealloc [function] [call site] 00105
4 mymalloc [function] [call site] 00106
4 msg_panic [function] [call site] 00107
4 msg_panic [function] [call site] 00108
4 realloc [call site] 00109
4 msg_fatal [function] [call site] 00110
1 mime_state_alloc [function] [call site] 00111
2 mymalloc [function] [call site] 00112
2 vstring_alloc [function] [call site] 00113
2 vstring_alloc [function] [call site] 00114
1 head_out [function] [call site] 00115
1 head_end [function] [call site] 00116
1 body_out [function] [call site] 00117
1 body_end [function] [call site] 00118
1 err_print [function] [call site] 00119
1 mime_state_update [function] [call site] 00120
2 mime_state_update [function] [call site] 00121
3 vstring_strncat [function] [call site] 00122
4 vbuf_put [function] [call site] 00123
3 vstring_strcat [function] [call site] 00124
4 vbuf_put [function] [call site] 00125
3 vstring_strncat [function] [call site] 00126
3 header_opts_find [function] [call site] 00127
4 header_opts_init [function] [call site] 00128
5 vstring_alloc [function] [call site] 00129
5 htable_create [function] [call site] 00130
6 mymalloc [function] [call site] 00131
6 htable_size [function] [call site] 00132
7 mymalloc [function] [call site] 00133
5 __ctype_b_loc [call site] 00134
5 __ctype_tolower_loc [call site] 00135
5 vbuf_put [function] [call site] 00136
5 htable_enter [function] [call site] 00137
6 htable_grow [function] [call site] 00138
7 htable_size [function] [call site] 00139
7 hash_fnvz [function] [call site] 00140
8 hash_fnv_init [function] [call site] 00141
9 getenv [call site] 00142
9 ldseed [function] [call site] 00143
10 open [call site] 00144
10 non_blocking [function] [call site] 00145
11 fcntl [call site] 00146
11 msg_fatal [function] [call site] 00147
11 fcntl [call site] 00148
11 msg_fatal [function] [call site] 00149
10 read [call site] 00150
10 close [call site] 00151
10 clock_gettime [call site] 00152
10 msg_fatal [function] [call site] 00153
10 clock_gettime [call site] 00154
10 msg_fatal [function] [call site] 00155
10 getpid [call site] 00156
7 myfree [function] [call site] 00157
8 msg_panic [function] [call site] 00158
6 mymalloc [function] [call site] 00159
6 mystrdup [function] [call site] 00160
6 hash_fnvz [function] [call site] 00161
4 header_drop_init [function] [call site] 00162
5 argv_split [function] [call site] 00163
6 argv_alloc [function] [call site] 00164
7 mymalloc [function] [call site] 00165
7 mymalloc [function] [call site] 00166
6 mystrdup [function] [call site] 00167
6 mystrtok_cw [function] [call site] 00168
7 strspn [call site] 00169
7 strcspn [call site] 00170
7 mystrtok_warn [function] [call site] 00171
8 msg_warn [function] [call site] 00172
6 argv_add [function] [call site] 00173
7 argv_extend [function] [call site] 00174
8 myrealloc [function] [call site] 00175
7 mystrdup [function] [call site] 00176
6 argv_terminate [function] [call site] 00177
6 myfree [function] [call site] 00178
5 lowercase [function] [call site] 00179
6 __ctype_b_loc [call site] 00180
6 __ctype_tolower_loc [call site] 00181
5 htable_locate [function] [call site] 00182
6 hash_fnvz [function] [call site] 00183
6 strcmp [call site] 00184
5 mymalloc [function] [call site] 00185
5 htable_enter [function] [call site] 00186
5 argv_free [function] [call site] 00187
6 myfree [function] [call site] 00188
6 myfree [function] [call site] 00189
6 myfree [function] [call site] 00190
4 msg_panic [function] [call site] 00191
4 __ctype_b_loc [call site] 00192
4 __ctype_tolower_loc [call site] 00193
4 vbuf_put [function] [call site] 00194
4 trimblanks [function] [call site] 00195
5 __ctype_b_loc [call site] 00196
4 vstring_truncate [function] [call site] 00197
4 htable_find [function] [call site] 00198
5 hash_fnvz [function] [call site] 00199
5 strcmp [call site] 00200
3 mime_state_content_type [function] [call site] 00201
4 strlen [call site] 00202
4 header_token [function] [call site] 00203
5 vstring_truncate [function] [call site] 00204
5 vbuf_put [function] [call site] 00205
5 vbuf_put [function] [call site] 00206
5 strchr [call site] 00207
5 __ctype_b_loc [call site] 00208
5 vbuf_put [function] [call site] 00209
5 vbuf_put [function] [call site] 00210
5 __ctype_b_loc [call site] 00211
5 strchr [call site] 00212
5 vbuf_put [function] [call site] 00213
5 msg_info [function] [call site] 00214
4 strcasecmp [call site] 00215
4 strcasecmp [call site] 00216
4 strcasecmp [call site] 00217
4 strcasecmp [call site] 00218
4 strcasecmp [call site] 00219
4 strcasecmp [call site] 00220
4 strcasecmp [call site] 00221
4 strcasecmp [call site] 00222
4 strcasecmp [call site] 00223
4 header_token [function] [call site] 00224
4 strcasecmp [call site] 00225
4 mime_state_push [function] [call site] 00226
5 mymalloc [function] [call site] 00227
5 strlen [call site] 00228
5 mystrndup [function] [call site] 00229
6 msg_panic [function] [call site] 00230
6 msg_panic [function] [call site] 00231
6 memchr [call site] 00232
6 mymalloc [function] [call site] 00233
5 msg_info [function] [call site] 00234
3 mime_state_content_encoding [function] [call site] 00235
4 strlen [call site] 00236
4 header_token [function] [call site] 00237
4 strcasecmp [call site] 00238
3 is_header_buf [function] [call site] 00239
4 __ctype_b_loc [call site] 00240
3 vstring_strncpy [function] [call site] 00241
4 vbuf_put [function] [call site] 00242
3 vstring_strncat [function] [call site] 00243
3 vstring_sprintf [function] [call site] 00244
4 vstring_vsprintf [function] [call site] 00245
3 mime_state_enc_name [function] [call site] 00246
3 strlen [call site] 00247
3 mime_state_enc_name [function] [call site] 00248
3 strlen [call site] 00249
3 mime_state_enc_name [function] [call site] 00250
3 strlen [call site] 00251
3 msg_info [function] [call site] 00252
3 strncmp [call site] 00253
3 mime_state_pop [function] [call site] 00254
4 msg_panic [function] [call site] 00255
4 msg_info [function] [call site] 00256
4 myfree [function] [call site] 00257
4 myfree [function] [call site] 00258
3 strncmp [call site] 00259
3 mime_state_pop [function] [call site] 00260
3 mime_state_downgrade [function] [call site] 00261
4 vbuf_put [function] [call site] 00262
4 vbuf_put [function] [call site] 00263
4 vbuf_put [function] [call site] 00264
4 vstring_truncate [function] [call site] 00265
4 vbuf_put [function] [call site] 00266
3 msg_panic [function] [call site] 00267
1 mime_state_free [function] [call site] 00268
2 vstring_free [function] [call site] 00269
3 myfree [function] [call site] 00270
3 myfree [function] [call site] 00271
2 mime_state_pop [function] [call site] 00272
2 vstring_free [function] [call site] 00273
2 myfree [function] [call site] 00274