Fuzz introspector: FuzzIxml
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
36 36 1 :

['ixmlNode_removeChild']

36 36 ixmlNode_appendChild call site: 00267 /src/pupnp/ixml/src/node.c:668
23 23 2 :

['free', 'ixmlElement_free']

23 23 ixmlDocument_createElementEx call site: 00242 /src/pupnp/ixml/src/document.c:135
23 23 1 :

['ixmlAttr_free']

23 23 ixmlDocument_createAttributeEx call site: 00302 /src/pupnp/ixml/src/document.c:287
23 23 1 :

['ixmlCDATASection_free']

23 23 ixmlDocument_createCDATASectionEx call site: 00292 /src/pupnp/ixml/src/document.c:391
23 23 1 :

['ixmlAttr_free']

23 23 ixmlElement_setAttributeNode call site: 00307 /src/pupnp/ixml/src/element.c:245
23 23 1 :

['ixmlElement_free']

23 23 Parser_processElementName call site: 00261 /src/pupnp/ixml/src/ixmlparser.c:2434
23 23 1 :

['ixmlAttr_free']

23 23 Parser_processAttributeName call site: 00306 /src/pupnp/ixml/src/ixmlparser.c:2262
2 2 1 :

['realloc']

2 2 ixml_membuf_set_size call site: 00140 /src/pupnp/ixml/src/ixmlmembuf.c:88
2 2 1 :

['strcmp']

2 2 Parser_getNameSpace call site: 00225 /src/pupnp/ixml/src/ixmlparser.c:1675
0 23 1 :

['ixmlDocument_free']

0 23 ixmlDocument_createDocumentEx call site: 00038 /src/pupnp/ixml/src/document.c:184
0 22 1 :

['Parser_free']

0 22 Parser_LoadDocument call site: 00012 /src/pupnp/ixml/src/ixmlparser.c:2804
0 20 1 :

['ixmlNode_free']

0 20 ixmlDocument_createTextNodeEx call site: 00284 /src/pupnp/ixml/src/document.c:238

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 getpid [call site] 00001
1 fopen [call site] 00002
1 fwrite [call site] 00003
1 fclose [call site] 00004
1 CheckXML [function] [call site] 00005
2 ixmlLoadDocumentEx [function] [call site] 00006
3 Parser_LoadDocument [function] [call site] 00007
4 Parser_init [function] [call site] 00008
5 ixml_membuf_init [function] [call site] 00009
6 __assert_fail [call site] 00010
5 ixml_membuf_init [function] [call site] 00011
4 Parser_readFileOrBuffer [function] [call site] 00012
5 fopen [call site] 00013
5 fseek [call site] 00014
5 ftell [call site] 00015
5 fclose [call site] 00016
5 fclose [call site] 00017
5 fseek [call site] 00018
5 fread [call site] 00019
5 fclose [call site] 00020
5 safe_strdup [function] [call site] 00021
6 __assert_fail [call site] 00022
6 strdup [call site] 00023
6 strdup [call site] 00024
4 Parser_free [function] [call site] 00025
5 ixml_membuf_destroy [function] [call site] 00026
6 ixml_membuf_init [function] [call site] 00027
5 ixml_membuf_destroy [function] [call site] 00028
5 Parser_freeElementStackItem [function] [call site] 00029
6 __assert_fail [call site] 00030
5 Parser_freeNsURI [function] [call site] 00031
6 __assert_fail [call site] 00032
4 Parser_parseDocument [function] [call site] 00033
5 ixmlNode_init [function] [call site] 00034
6 __assert_fail [call site] 00035
5 ixmlDocument_createDocumentEx [function] [call site] 00036
6 ixmlDocument_init [function] [call site] 00037
6 strdup [call site] 00038
6 ixmlDocument_free [function] [call site] 00039
7 ixmlNode_free [function] [call site] 00040
8 Parser_getBeforeFree [function] [call site] 00041
8 ixmlNode_freeSingleNode [function] [call site] 00042
8 ixmlNode_freeSingleNode [function] [call site] 00043
5 Parser_skipProlog [function] [call site] 00044
6 __assert_fail [call site] 00045
6 Parser_skipBom [function] [call site] 00046
7 strlen [call site] 00047
7 strncmp [call site] 00048
6 Parser_skipWhiteSpaces [function] [call site] 00049
7 strchr [call site] 00050
6 strlen [call site] 00051
6 Parser_skipXMLDecl [function] [call site] 00052
7 __assert_fail [call site] 00053
7 Parser_skipString [function] [call site] 00054
8 strlen [call site] 00055
8 strlen [call site] 00056
7 Parser_skipWhiteSpaces [function] [call site] 00057
6 Parser_skipMisc [function] [call site] 00058
7 strlen [call site] 00059
7 strncasecmp [call site] 00060
7 Parser_skipComment [function] [call site] 00061
8 __assert_fail [call site] 00062
8 strstr [call site] 00063
8 strlen [call site] 00064
7 strlen [call site] 00065
7 strncasecmp [call site] 00066
7 strlen [call site] 00067
7 strncasecmp [call site] 00068
7 strlen [call site] 00069
7 strncasecmp [call site] 00070
7 Parser_skipString [function] [call site] 00071
7 Parser_skipWhiteSpaces [function] [call site] 00072
6 strlen [call site] 00073
6 strncmp [call site] 00074
6 Parser_skipDocType [function] [call site] 00075
7 __assert_fail [call site] 00076
7 strchr [call site] 00077
6 Parser_skipMisc [function] [call site] 00078
5 ixmlNode_init [function] [call site] 00079
5 Parser_getNextNode [function] [call site] 00080
6 Parser_processContent [function] [call site] 00081
7 Parser_skipWhiteSpaces [function] [call site] 00082
7 strlen [call site] 00083
7 Parser_processCDSect [function] [call site] 00084
8 strlen [call site] 00085
8 Parser_isXmlChar [function] [call site] 00086
8 strlen [call site] 00087
8 strncpy [call site] 00088
8 safe_strdup [function] [call site] 00089
8 strlen [call site] 00090
7 strlen [call site] 00091
7 strncmp [call site] 00092
7 Parser_skipComment [function] [call site] 00093
7 strlen [call site] 00094
7 strncmp [call site] 00095
7 Parser_skipPI [function] [call site] 00096
8 __assert_fail [call site] 00097
8 strlen [call site] 00098
8 strlen [call site] 00099
8 strlen [call site] 00100
8 strstr [call site] 00101
8 strlen [call site] 00102
7 strlen [call site] 00103
7 strncmp [call site] 00104
7 strlen [call site] 00105
7 strncmp [call site] 00106
7 Parser_clearTokenBuf [function] [call site] 00107
8 ixml_membuf_destroy [function] [call site] 00108
7 Parser_copyToken [function] [call site] 00109
8 Parser_getChar [function] [call site] 00110
9 Parser_isXmlChar [function] [call site] 00111
9 Parser_UTF8ToInt [function] [call site] 00112
10 IxmlPrintf [function] [call site] 00113
11 fprintf [call site] 00114
11 fprintf [call site] 00115
11 vfprintf [call site] 00116
11 fflush [call site] 00117
11 fprintf [call site] 00118
9 Parser_isXmlChar [function] [call site] 00119
9 strncasecmp [call site] 00120
9 strncasecmp [call site] 00121
9 strncasecmp [call site] 00122
9 strncasecmp [call site] 00123
9 strncasecmp [call site] 00124
9 strncasecmp [call site] 00125
9 strchr [call site] 00126
9 Parser_isXmlChar [function] [call site] 00127
9 strncasecmp [call site] 00128
9 strchr [call site] 00129
9 Parser_isXmlChar [function] [call site] 00130
9 IxmlPrintf [function] [call site] 00131
8 Parser_appendTokBufChar [function] [call site] 00132
9 ixml_membuf_append [function] [call site] 00133
10 __assert_fail [call site] 00134
10 ixml_membuf_insert [function] [call site] 00135
11 __assert_fail [call site] 00136
11 ixml_membuf_set_size [function] [call site] 00137
12 __assert_fail [call site] 00138
12 __assert_fail [call site] 00139
12 realloc [call site] 00140
12 realloc [call site] 00141
8 Parser_intToUTF8 [function] [call site] 00142
8 Parser_appendTokBufStr [function] [call site] 00143
9 ixml_membuf_append_str [function] [call site] 00144
10 strlen [call site] 00145
10 ixml_membuf_insert [function] [call site] 00146
8 IxmlPrintf [function] [call site] 00147
7 safe_strdup [function] [call site] 00148
7 safe_strdup [function] [call site] 00149
7 IxmlPrintf [function] [call site] 00150
6 Parser_skipWhiteSpaces [function] [call site] 00151
6 Parser_getNextToken [function] [call site] 00152
7 Parser_clearTokenBuf [function] [call site] 00153
7 Parser_skipMisc [function] [call site] 00154
7 Parser_UTF8ToInt [function] [call site] 00155
7 Parser_isNameChar [function] [call site] 00156
8 Parser_isCharInTable [function] [call site] 00157
8 Parser_isCharInTable [function] [call site] 00158
7 Parser_UTF8ToInt [function] [call site] 00159
7 Parser_isNameChar [function] [call site] 00160
7 Parser_UTF8ToInt [function] [call site] 00161
7 Parser_isNameChar [function] [call site] 00162
7 Parser_copyToken [function] [call site] 00163
6 strcmp [call site] 00164
6 Parser_processETag [function] [call site] 00165
7 __assert_fail [call site] 00166
7 Parser_getNextToken [function] [call site] 00167
7 safe_strdup [function] [call site] 00168
7 Parser_skipWhiteSpaces [function] [call site] 00169
7 Parser_getNextToken [function] [call site] 00170
7 strcmp [call site] 00171
7 IxmlPrintf [function] [call site] 00172
6 Parser_processSTag [function] [call site] 00173
7 Parser_getNextToken [function] [call site] 00174
7 safe_strdup [function] [call site] 00175
7 Parser_setLastElem [function] [call site] 00176
8 ixml_membuf_assign_str [function] [call site] 00177
9 strlen [call site] 00178
9 ixml_membuf_assign [function] [call site] 00179
10 __assert_fail [call site] 00180
10 ixml_membuf_destroy [function] [call site] 00181
10 ixml_membuf_set_size [function] [call site] 00182
7 Parser_setNodePrefixAndLocalName [function] [call site] 00183
8 __assert_fail [call site] 00184
8 strchr [call site] 00185
8 safe_strdup [function] [call site] 00186
8 strncpy [call site] 00187
8 safe_strdup [function] [call site] 00188
7 Parser_getNextToken [function] [call site] 00189
7 strcmp [call site] 00190
7 strcmp [call site] 00191
6 strcmp [call site] 00192
6 safe_strdup [function] [call site] 00193
6 Parser_processAttribute [function] [call site] 00194
7 __assert_fail [call site] 00195
7 Parser_UTF8ToInt [function] [call site] 00196
7 safe_strdup [function] [call site] 00197
7 Parser_getNextToken [function] [call site] 00198
7 Parser_getNextToken [function] [call site] 00199
7 strstr [call site] 00200
7 Parser_clearTokenBuf [function] [call site] 00201
7 Parser_copyToken [function] [call site] 00202
7 safe_strdup [function] [call site] 00203
7 Parser_xmlNamespace [function] [call site] 00204
8 __assert_fail [call site] 00205
8 strcmp [call site] 00206
8 safe_strdup [function] [call site] 00207
8 strncmp [call site] 00208
8 Parser_setNodePrefixAndLocalName [function] [call site] 00209
8 __assert_fail [call site] 00210
8 strcmp [call site] 00211
8 safe_strdup [function] [call site] 00212
8 strcmp [call site] 00213
8 safe_strdup [function] [call site] 00214
8 safe_strdup [function] [call site] 00215
8 Parser_freeNsURI [function] [call site] 00216
8 safe_strdup [function] [call site] 00217
8 Parser_addNamespace [function] [call site] 00218
9 strcmp [call site] 00219
9 __assert_fail [call site] 00220
9 safe_strdup [function] [call site] 00221
9 strcmp [call site] 00222
9 strcmp [call site] 00223
9 Parser_getNameSpace [function] [call site] 00224
10 strcmp [call site] 00225
10 strcmp [call site] 00226
9 safe_strdup [function] [call site] 00227
8 IxmlPrintf [function] [call site] 00228
7 Parser_getNextToken [function] [call site] 00229
7 strcmp [call site] 00230
7 strcmp [call site] 00231
7 IxmlPrintf [function] [call site] 00232
6 IxmlPrintf [function] [call site] 00233
5 Parser_processElementName [function] [call site] 00234
6 isTopLevelElement [function] [call site] 00235
7 __assert_fail [call site] 00236
6 ixmlDocument_createElementEx [function] [call site] 00237
7 ixmlElement_init [function] [call site] 00238
7 strdup [call site] 00239
7 ixmlElement_free [function] [call site] 00240
8 ixmlNode_free [function] [call site] 00241
7 strdup [call site] 00242
7 ixmlElement_free [function] [call site] 00243
6 ixmlNode_setNodeProperties [function] [call site] 00244
7 __assert_fail [call site] 00245
7 ixmlNode_setNodeValue [function] [call site] 00246
8 strdup [call site] 00247
7 ixmlNode_setLocalName [function] [call site] 00248
8 __assert_fail [call site] 00249
8 strdup [call site] 00250
7 ixmlNode_setPrefix [function] [call site] 00251
8 strdup [call site] 00252
6 ixmlElement_free [function] [call site] 00253
6 Parser_ElementPrefixDefined [function] [call site] 00254
7 strcmp [call site] 00255
7 strcmp [call site] 00256
6 Parser_setElementNamespace [function] [call site] 00257
7 safe_strdup [function] [call site] 00258
6 Parser_hasDefaultNamespace [function] [call site] 00259
6 Parser_setElementNamespace [function] [call site] 00260
6 ixmlNode_appendChild [function] [call site] 00261
7 ixmlNode_isAncestor [function] [call site] 00262
8 ixmlNode_isAncestor [function] [call site] 00263
9 ixmlNode_isAncestor [function] [call site] 00264
7 ixmlNode_allowChildren [function] [call site] 00265
8 __assert_fail [call site] 00266
7 ixmlNode_isParent [function] [call site] 00267
8 __assert_fail [call site] 00268
7 ixmlNode_removeChild [function] [call site] 00269
8 ixmlNode_isParent [function] [call site] 00270
8 ixmlNode_free [function] [call site] 00271
6 ixmlElement_free [function] [call site] 00272
6 Parser_pushElement [function] [call site] 00273
7 __assert_fail [call site] 00274
7 safe_strdup [function] [call site] 00275
7 safe_strdup [function] [call site] 00276
7 Parser_freeElementStackItem [function] [call site] 00277
7 safe_strdup [function] [call site] 00278
7 Parser_freeElementStackItem [function] [call site] 00279
5 ixmlDocument_createTextNodeEx [function] [call site] 00280
6 ixmlNode_init [function] [call site] 00281
6 strdup [call site] 00282
6 ixmlNode_free [function] [call site] 00283
6 strdup [call site] 00284
6 ixmlNode_free [function] [call site] 00285
5 ixmlNode_appendChild [function] [call site] 00286
5 ixmlDocument_createCDATASectionEx [function] [call site] 00287
6 ixmlCDATASection_init [function] [call site] 00288
6 strdup [call site] 00289
6 ixmlCDATASection_free [function] [call site] 00290
7 ixmlNode_free [function] [call site] 00291
6 strdup [call site] 00292
6 ixmlCDATASection_free [function] [call site] 00293
5 ixmlNode_appendChild [function] [call site] 00294
5 Parser_processAttributeName [function] [call site] 00295
6 isDuplicateAttribute [function] [call site] 00296
7 strcmp [call site] 00297
6 ixmlDocument_createAttributeEx [function] [call site] 00298
7 ixmlAttr_free [function] [call site] 00299
8 ixmlNode_free [function] [call site] 00300
7 ixmlAttr_init [function] [call site] 00301
7 strdup [call site] 00302
7 ixmlAttr_free [function] [call site] 00303
6 ixmlNode_setNodeProperties [function] [call site] 00304
6 ixmlAttr_free [function] [call site] 00305
6 ixmlElement_setAttributeNode [function] [call site] 00306
7 strcmp [call site] 00307
7 ixmlAttr_free [function] [call site] 00308
6 ixmlAttr_free [function] [call site] 00309
5 Parser_eTagVerification [function] [call site] 00310
6 __assert_fail [call site] 00311
6 __assert_fail [call site] 00312
6 Parser_isValidEndElement [function] [call site] 00313
7 __assert_fail [call site] 00314
7 __assert_fail [call site] 00315
7 __assert_fail [call site] 00316
7 __assert_fail [call site] 00317
7 strcmp [call site] 00318
6 Parser_popElement [function] [call site] 00319
7 Parser_freeElementStackItem [function] [call site] 00320
7 Parser_freeNsURI [function] [call site] 00321
6 strcmp [call site] 00322
5 Parser_freeNodeContent [function] [call site] 00323
5 Parser_free [function] [call site] 00324
5 Parser_freeNodeContent [function] [call site] 00325
5 ixmlDocument_free [function] [call site] 00326
5 Parser_free [function] [call site] 00327
2 ixmlPrintDocument [function] [call site] 00328
3 ixml_membuf_init [function] [call site] 00329
3 ixml_membuf_append_str [function] [call site] 00330
3 ixmlPrintDomTree [function] [call site] 00331
4 ixmlNode_getNodeName [function] [call site] 00332
4 ixmlNode_getNodeValue [function] [call site] 00333
4 ixmlNode_getNodeType [function] [call site] 00334
4 ixmlPrintDomTreeRecursive [function] [call site] 00335
5 ixmlNode_getNodeName [function] [call site] 00336
5 ixmlNode_getNodeValue [function] [call site] 00337
5 ixmlNode_getNodeType [function] [call site] 00338
5 copy_with_escape [function] [call site] 00339
6 strlen [call site] 00340
6 ixml_membuf_append_str [function] [call site] 00341
6 ixml_membuf_append_str [function] [call site] 00342
6 ixml_membuf_append_str [function] [call site] 00343
6 ixml_membuf_append_str [function] [call site] 00344
6 ixml_membuf_append_str [function] [call site] 00345
6 ixml_membuf_append [function] [call site] 00346
5 ixml_membuf_append_str [function] [call site] 00347
5 ixml_membuf_append_str [function] [call site] 00348
5 ixml_membuf_append_str [function] [call site] 00349
5 ixml_membuf_append_str [function] [call site] 00350
5 ixml_membuf_append_str [function] [call site] 00351
5 ixml_membuf_append_str [function] [call site] 00352
5 copy_with_escape [function] [call site] 00353
5 ixml_membuf_append_str [function] [call site] 00354
5 ixmlNode_getFirstChild [function] [call site] 00355
5 ixmlPrintDomTreeRecursive [function] [call site] 00356
6 ixml_membuf_append_str [function] [call site] 00357
6 ixml_membuf_append_str [function] [call site] 00358
6 copy_with_escape [function] [call site] 00359
6 ixml_membuf_append_str [function] [call site] 00360
6 ixmlPrintDomTreeRecursive [function] [call site] 00361
7 ixml_membuf_append_str [function] [call site] 00362
7 ixml_membuf_append_str [function] [call site] 00363
7 ixml_membuf_append_str [function] [call site] 00364
7 ixmlPrintDomTreeRecursive [function] [call site] 00365
8 ixmlNode_getFirstChild [function] [call site] 00366
8 ixmlNode_getNodeType [function] [call site] 00367
8 ixml_membuf_append_str [function] [call site] 00368
8 ixmlNode_getFirstChild [function] [call site] 00369
8 ixmlPrintDomTreeRecursive [function] [call site] 00370
9 ixml_membuf_append_str [function] [call site] 00371
9 ixml_membuf_append_str [function] [call site] 00372
9 ixmlNode_getNodeType [function] [call site] 00373
9 ixml_membuf_append_str [function] [call site] 00374
9 ixml_membuf_append_str [function] [call site] 00375
9 ixmlNode_getNextSibling [function] [call site] 00376
9 ixmlPrintDomTreeRecursive [function] [call site] 00377
10 ixmlNode_getNodeType [function] [call site] 00378
10 IxmlPrintf [function] [call site] 00379
4 ixml_membuf_append_str [function] [call site] 00380
4 ixml_membuf_append_str [function] [call site] 00381
4 copy_with_escape [function] [call site] 00382
4 ixml_membuf_append_str [function] [call site] 00383
4 ixml_membuf_append_str [function] [call site] 00384
4 ixml_membuf_append_str [function] [call site] 00385
4 ixml_membuf_append_str [function] [call site] 00386
4 ixmlPrintDomTreeRecursive [function] [call site] 00387
4 ixmlNode_getFirstChild [function] [call site] 00388
4 ixml_membuf_append_str [function] [call site] 00389
4 ixml_membuf_append_str [function] [call site] 00390
4 ixmlNode_getFirstChild [function] [call site] 00391
4 ixmlPrintDomTreeRecursive [function] [call site] 00392
4 ixml_membuf_append_str [function] [call site] 00393
4 ixml_membuf_append_str [function] [call site] 00394
4 ixml_membuf_append_str [function] [call site] 00395
4 ixmlNode_getNodeType [function] [call site] 00396
4 IxmlPrintf [function] [call site] 00397
2 ixmlDocument_free [function] [call site] 00398
2 ixmlFreeDOMString [function] [call site] 00399
2 ixmlDocument_free [function] [call site] 00400
1 unlink [call site] 00401