Fuzz introspector: ProxygenHTTP1xFuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
185 0 EP call site __clang_call_terminate

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 proxygen::FakeHTTPCodecCallback::FakeHTTPCodecCallback() [function] [call site] 00001
2 proxygen::HTTPCodec::Callback::Callback() [function] [call site] 00002
2 folly::IOBufQueue::Options::Options() [function] [call site] 00003
2 folly::IOBufQueue::IOBufQueue(folly::IOBufQueue::Options const&) [function] [call site] 00004
3 folly::IOBufQueue::WritableRangeCacheData::WritableRangeCacheData() [function] [call site] 00005
2 proxygen::HTTPCodec::Callback::~Callback() [function] [call site] 00006
1 proxygen::HTTP1xCodec::HTTP1xCodec(proxygen::TransportDirection, bool, bool) [function] [call site] 00007
2 proxygen::HTTPCodec::HTTPCodec() [function] [call site] 00008
2 folly::Range ::Range() [function] [call site] 00009
2 proxygen::HTTPHeaderSize::HTTPHeaderSize() [function] [call site] 00010
2 proxygen::http_parser_init(proxygen::http_parser*, proxygen::http_parser_type) [function] [call site] 00011
2 google::LogMessageFatal::LogMessageFatal(char const*, int) [call site] 00012
2 proxygen::HTTPCodec::~HTTPCodec() [function] [call site] 00013
1 proxygen::HTTP1xCodec::setCallback(proxygen::HTTPCodec::Callback*) [function] [call site] 00014
1 unsigned long proxygen::parse (proxygen::HTTP1xCodec*, unsigned char const*, unsigned int, int, std::__1::function ) [function] [call site] 00015
2 folly::IOBufQueue::cacheChainLength() [function] [call site] 00016
3 folly::IOBufQueue::Options::Options() [function] [call site] 00017
2 folly::IOBufQueue::IOBufQueue(folly::IOBufQueue::Options const&) [function] [call site] 00018
2 folly::IOBuf::copyBuffer(void const*, unsigned long, unsigned long, unsigned long) [function] [call site] 00019
3 bool folly::checked_add (unsigned long*, unsigned long, unsigned long, unsigned long) [function] [call site] 00020
4 bool folly::checked_add (unsigned long*, unsigned long, unsigned long) [function] [call site] 00021
4 bool folly::checked_add (unsigned long*, unsigned long, unsigned long) [function] [call site] 00022
3 std::length_error::length_error(char const*) [function] [call site] 00023
4 std::logic_error::logic_error(char const*) [call site] 00024
3 void folly::throw_exception (std::length_error&&) [function] [call site] 00025
4 __cxa_allocate_exception [call site] 00026
4 std::length_error::length_error(std::length_error const&) [function] [call site] 00027
5 std::logic_error::logic_error(std::logic_error const&) [call site] 00028
3 std::length_error::~length_error() [call site] 00029
3 folly::IOBuf::create(unsigned long) [function] [call site] 00030
4 void folly::detail::throw_exception_ () [function] [call site] 00031
5 std::bad_alloc::bad_alloc() [call site] 00032
5 void folly::throw_exception (std::bad_alloc&&) [function] [call site] 00033
6 std::bad_alloc::bad_alloc(std::bad_alloc const&) [function] [call site] 00034
7 std::exception::exception(std::exception const&) [function] [call site] 00035
4 folly::IOBuf::createCombined(unsigned long) [function] [call site] 00036
5 void folly::detail::throw_exception_ () [function] [call site] 00037
5 folly::goodMallocSize(unsigned long) [function] [call site] 00038
6 folly::canNallocx() [function] [call site] 00039
7 __cxa_guard_acquire [call site] 00040
7 folly::usingJEMalloc() [function] [call site] 00041
8 __cxa_guard_acquire [call site] 00042
8 folly::usingJEMalloc()::{lambda()#1}::operator()() const [function] [call site] 00043
9 mallctl [call site] 00044
9 __cxa_guard_acquire [call site] 00045
6 nallocx [call site] 00046
5 folly::checkedMalloc(unsigned long) [function] [call site] 00047
6 void folly::detail::throw_exception_ () [function] [call site] 00048
5 folly::IOBuf::HeapPrefix::HeapPrefix(unsigned short, unsigned long) [function] [call site] 00049
5 folly::IOBuf::SharedInfo::SharedInfo(void (*)(void*, void*), void*, bool) [function] [call site] 00050
5 io_buf_alloc_cb(void*, unsigned long) [call site] 00051
5 folly::IOBuf::packFlagsAndSharedInfo(unsigned long, folly::IOBuf::SharedInfo*) [function] [call site] 00052
5 folly::IOBuf::IOBuf(folly::IOBuf::InternalConstructor, unsigned long, unsigned char*, unsigned long, unsigned char*, unsigned long) [function] [call site] 00053
4 folly::canNallocx() [function] [call site] 00054
4 folly::goodMallocSize(unsigned long) [function] [call site] 00055
4 folly::checkedMalloc(unsigned long) [function] [call site] 00056
4 folly::IOBuf::takeOwnership(folly::IOBuf::SizedFree, void*, unsigned long, unsigned long, unsigned long, bool) [function] [call site] 00057
5 folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption) [function] [call site] 00058
6 void folly::detail::throw_exception_ () [function] [call site] 00059
6 folly::detail::ScopeGuardImpl ::type, true> folly::makeGuard (folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption)::$_4&&) [function] [call site] 00060
7 folly::detail::ScopeGuardImpl ::ScopeGuardImpl(folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption)::$_4&&) [function] [call site] 00061
8 folly::detail::ScopeGuardImpl ::makeFailsafe(std::__1::integral_constant , void const*) [function] [call site] 00062
9 folly::detail::ScopeGuardImplBase::makeEmptyScopeGuard() [function] [call site] 00063
10 folly::detail::ScopeGuardImplBase::ScopeGuardImplBase(bool) [function] [call site] 00064
8 folly::detail::ScopeGuardImpl ::ScopeGuardImpl (folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption)::$_4&&, folly::detail::ScopeGuardImplBase&&) [function] [call site] 00065
9 folly::detail::ScopeGuardImplBase::ScopeGuardImplBase(bool) [function] [call site] 00066
9 folly::detail::ScopeGuardImplBase::dismiss() [function] [call site] 00067
6 folly::goodMallocSize(unsigned long) [function] [call site] 00068
6 folly::checkedMalloc(unsigned long) [function] [call site] 00069
6 folly::IOBuf::HeapPrefix::HeapPrefix(unsigned short, unsigned long) [function] [call site] 00070
6 folly::IOBuf::SharedInfo::SharedInfo(void (*)(void*, void*), void*, bool) [function] [call site] 00071
6 folly::IOBuf::packFlagsAndSharedInfo(unsigned long, folly::IOBuf::SharedInfo*) [function] [call site] 00072
6 folly::IOBuf::IOBuf(folly::IOBuf::InternalConstructor, unsigned long, unsigned char*, unsigned long, unsigned char*, unsigned long) [function] [call site] 00073
6 folly::detail::ScopeGuardImplBase::dismiss() [function] [call site] 00074
6 io_buf_alloc_cb(void*, unsigned long) [call site] 00075
6 io_buf_alloc_cb(void*, unsigned long) [call site] 00076
6 folly::detail::ScopeGuardImpl ::~ScopeGuardImpl() [function] [call site] 00077
7 folly::detail::ScopeGuardImpl ::execute() [function] [call site] 00078
8 folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption)::$_4::operator()() const [function] [call site] 00079
9 (anonymous namespace)::takeOwnershipError(bool, void*, void (*)(void*, void*), void*) [function] [call site] 00080
10 __clang_call_terminate [call site] 00081
11 __cxa_begin_catch [call site] 00082
4 folly::IOBuf::createSeparate(unsigned long) [function] [call site] 00083
3 folly::IOBuf::advance(unsigned long) [function] [call site] 00084
3 folly::IOBuf::writableData() [function] [call site] 00085
3 folly::IOBuf::append(unsigned long) [function] [call site] 00086
2 folly::IOBufQueue::append(std::__1::unique_ptr >&&, bool, bool) [function] [call site] 00087
3 folly::IOBufQueue::updateGuard() [function] [call site] 00088
4 folly::IOBufQueue::flushCache() const [function] [call site] 00089
5 folly::IOBufQueue::dcheckCacheIntegrity() const [function] [call site] 00090
5 folly::IOBuf::prev() [function] [call site] 00091
5 folly::IOBuf::append(unsigned long) [function] [call site] 00092
4 folly::detail::ScopeGuardImpl ::type, true> folly::makeGuard (std::__1::decay&&) [function] [call site] 00093
5 folly::detail::ScopeGuardImpl ::ScopeGuardImpl({lambda()#1}&&) [function] [call site] 00094
6 folly::detail::ScopeGuardImpl ::makeFailsafe(std::__1::integral_constant , void const*) [function] [call site] 00095
6 folly::detail::ScopeGuardImpl ::ScopeGuardImpl<{lambda()#1}>({lambda()#1}&&, folly::detail::ScopeGuardImplBase&&) [function] [call site] 00096
3 folly::IOBuf::computeChainDataLength() const [function] [call site] 00097
3 (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool) [function] [call site] 00098
4 folly::IOBuf::prev() [function] [call site] 00099
4 void (anonymous namespace)::packInto >, (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool)::$_0>(folly::IOBuf*, std::__1::unique_ptr >&, (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool)::$_0) [function] [call site] 00100
5 folly::IOBuf::isSharedOne() const [function] [call site] 00101
6 folly::IOBuf::sharedInfo() const [function] [call site] 00102
6 folly::IOBuf::sharedInfo() const [function] [call site] 00103
6 folly::IOBuf::sharedInfo() const [function] [call site] 00104
5 folly::IOBuf::length() const [function] [call site] 00105
5 folly::IOBuf::append(unsigned long) [function] [call site] 00106
5 auto (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool)::$_0::operator() > >(std::__1::unique_ptr >&&) const [function] [call site] 00107
6 folly::IOBuf::pop() [function] [call site] 00108
4 folly::IOBuf::insertAfterThisOne(std::__1::unique_ptr >&&) [function] [call site] 00109
5 folly::IOBuf::appendToChain(std::__1::unique_ptr >&&) [function] [call site] 00110
3 folly::IOBufQueue::maybeReuseTail() [function] [call site] 00111
4 folly::IOBuf::isSharedOne() const [function] [call site] 00112
4 folly::IOBuf::tailroom() const [function] [call site] 00113
5 folly::IOBuf::bufferEnd() const [function] [call site] 00114
4 folly::IOBuf::length() const [function] [call site] 00115
4 folly::IOBuf::pop() [function] [call site] 00116
4 folly::IOBuf::unlink() [function] [call site] 00117
4 folly::IOBuf::getFreeFn() const [function] [call site] 00118
5 folly::IOBuf::sharedInfo() const [function] [call site] 00119
4 folly::IOBuf::getUserData() const [function] [call site] 00120
5 folly::IOBuf::sharedInfo() const [function] [call site] 00121
4 folly::IOBuf::writableTail() [function] [call site] 00122
4 folly::IOBuf::tailroom() const [function] [call site] 00123
4 folly::IOBuf::cloneOne() const [function] [call site] 00124
5 folly::IOBuf::sharedInfo() const [function] [call site] 00125
5 folly::IOBuf::operator new(unsigned long) [function] [call site] 00126
6 void folly::detail::throw_exception_ () [function] [call site] 00127
6 folly::checkedMalloc(unsigned long) [function] [call site] 00128
6 folly::IOBuf::HeapPrefix::HeapPrefix(unsigned short, unsigned long) [function] [call site] 00129
6 io_buf_alloc_cb(void*, unsigned long) [call site] 00130
4 folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, void (*)(void*, void*), void*, bool) [function] [call site] 00131
5 folly::IOBuf::takeOwnership(void*, unsigned long, unsigned long, unsigned long, void (*)(void*, void*), void*, bool, folly::IOBuf::TakeOwnershipOption) [function] [call site] 00132
4 folly::IOBuf::tailroom() const [function] [call site] 00133
4 folly::IOBuf::trimWritableTail(unsigned long) [function] [call site] 00134
4 folly::IOBuf::prependChain(std::__1::unique_ptr >&&) [function] [call site] 00135
5 folly::IOBuf::appendToChain(std::__1::unique_ptr >&&) [function] [call site] 00136
2 folly::IOBufQueue::front() const [function] [call site] 00137
3 folly::IOBufQueue::flushCache() const [function] [call site] 00138
2 folly::IOBuf::copyBuffer(void const*, unsigned long, unsigned long, unsigned long) [function] [call site] 00139
2 folly::IOBufQueue::append(std::__1::unique_ptr >&&, bool, bool) [function] [call site] 00140
2 folly::IOBufQueue::front() const [function] [call site] 00141
2 folly::IOBufQueue::split(unsigned long) [function] [call site] 00142
3 folly::IOBufQueue::split(unsigned long, bool) [function] [call site] 00143
4 folly::IOBufQueue::updateGuard() [function] [call site] 00144
4 __cxa_allocate_exception [call site] 00145
4 std::underflow_error::underflow_error(char const*) [function] [call site] 00146
5 std::runtime_error::runtime_error(char const*) [call site] 00147
4 folly::IOBuf::length() const [function] [call site] 00148
4 folly::IOBuf::length() const [function] [call site] 00149
4 folly::IOBuf::length() const [function] [call site] 00150
4 folly::IOBuf::pop() [function] [call site] 00151
4 (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool) [function] [call site] 00152
4 folly::IOBuf::cloneOne() const [function] [call site] 00153
4 folly::IOBuf::length() const [function] [call site] 00154
4 (anonymous namespace)::appendToChain(std::__1::unique_ptr >&, std::__1::unique_ptr >&&, bool) [function] [call site] 00155
4 folly::IOBuf::trimStart(unsigned long) [function] [call site] 00156
4 folly::IOBuf::create(unsigned long) [function] [call site] 00157
4 folly::detail::ScopeGuardImpl ::~ScopeGuardImpl() [function] [call site] 00158
5 folly::detail::ScopeGuardImpl ::execute() [function] [call site] 00159
6 folly::IOBufQueue::updateGuard()::{lambda()#1}::operator()() const [function] [call site] 00160
7 folly::IOBufQueue::updateWritableTailCache() [function] [call site] 00161
8 folly::IOBuf::prev() [function] [call site] 00162
8 folly::IOBuf::prev() [function] [call site] 00163
8 folly::IOBuf::isSharedOne() const [function] [call site] 00164
8 folly::IOBuf::writableTail() [function] [call site] 00165
8 folly::IOBuf::tailroom() const [function] [call site] 00166
6 __cxa_begin_catch [call site] 00167
6 folly::detail::ScopeGuardImplBase::terminate() [function] [call site] 00168
7 __clang_call_terminate [call site] 00169
2 folly::IOBufQueue::front() const [function] [call site] 00170
2 folly::IOBufQueue::chainLength() const [function] [call site] 00171
3 __cxa_allocate_exception [call site] 00172
3 std::invalid_argument::invalid_argument(char const*) [function] [call site] 00173
4 std::logic_error::logic_error(char const*) [call site] 00174
3 folly::IOBufQueue::dcheckCacheIntegrity() const [function] [call site] 00175
2 folly::IOBufQueue::~IOBufQueue() [function] [call site] 00176
3 folly::IOBufQueue::clearWritableRangeCache() [function] [call site] 00177
4 folly::IOBufQueue::flushCache() const [function] [call site] 00178
4 folly::IOBufQueue::WritableRangeCacheData::operator=(folly::IOBufQueue::WritableRangeCacheData&&) [function] [call site] 00179
3 __clang_call_terminate [call site] 00180
1 proxygen::HTTP1xCodec::~HTTP1xCodec() [function] [call site] 00181
2 proxygen::HTTPCodec::~HTTPCodec() [function] [call site] 00182
1 proxygen::FakeHTTPCodecCallback::~FakeHTTPCodecCallback() [function] [call site] 00183
2 folly::IOBufQueue::~IOBufQueue() [function] [call site] 00184
2 proxygen::HTTPCodec::Callback::~Callback() [function] [call site] 00185