Fuzz introspector: FuzzHttp
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
14 120 parser_parse_chunky_entity call site: 00120 UpnpDisplayFileAndLine
2 75 match_non_ws_string call site: 00075 parse_uri
2 112 vfmatch call site: 00112 __assert_fail
2 170 parser_parse_headers call site: 00170 membuffer_destroy
2 180 FreeListAlloc call site: 00180 membuffer_destroy
1 33 membuffer_set_size call site: 00033 realloc
1 108 read_until_crlf call site: 00108 match_char
1 110 match_char call site: 00110 scanner_get_token
1 167 membuffer_assign call site: 00167 membuffer_destroy
1 202 raw_to_int call site: 00202 __assert_fail
1 225 parser_parse_responseline call site: 00225 __assert_fail

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 parser_response_init [function] [call site] 00001
2 parser_init [function] [call site] 00002
3 httpmsg_init [function] [call site] 00003
4 ListInit [function] [call site] 00004
5 __assert_fail [call site] 00005
5 FreeListInit [function] [call site] 00006
6 __assert_fail [call site] 00007
5 __assert_fail [call site] 00008
4 httpmsg_compare [function] [call site] 00009
5 __assert_fail [call site] 00010
5 __assert_fail [call site] 00011
4 httpheader_free [function] [call site] 00012
5 membuffer_destroy [function] [call site] 00013
6 membuffer_init [function] [call site] 00014
7 __assert_fail [call site] 00015
7 membuffer_initialize [function] [call site] 00016
5 membuffer_destroy [function] [call site] 00017
4 membuffer_init [function] [call site] 00018
4 membuffer_init [function] [call site] 00019
3 scanner_init [function] [call site] 00020
1 parser_request_init [function] [call site] 00021
2 parser_init [function] [call site] 00022
1 parser_append [function] [call site] 00023
2 __assert_fail [call site] 00024
2 __assert_fail [call site] 00025
2 membuffer_append [function] [call site] 00026
3 __assert_fail [call site] 00027
3 membuffer_insert [function] [call site] 00028
4 __assert_fail [call site] 00029
4 membuffer_set_size [function] [call site] 00030
5 __assert_fail [call site] 00031
5 __assert_fail [call site] 00032
5 realloc [call site] 00033
5 realloc [call site] 00034
2 parser_parse [function] [call site] 00035
3 __assert_fail [call site] 00036
3 parser_parse_entity [function] [call site] 00037
4 __assert_fail [call site] 00038
4 parser_parse_entity_using_clen [function] [call site] 00039
5 __assert_fail [call site] 00040
4 parser_parse_chunky_entity [function] [call site] 00041
5 __assert_fail [call site] 00042
5 match [function] [call site] 00043
6 vfmatch [function] [call site] 00044
7 __assert_fail [call site] 00045
7 __assert_fail [call site] 00046
7 __assert_fail [call site] 00047
7 match_raw_value [function] [call site] 00048
8 scanner_get_str [function] [call site] 00049
8 scanner_get_token [function] [call site] 00050
9 __assert_fail [call site] 00051
9 __assert_fail [call site] 00052
9 __assert_fail [call site] 00053
9 is_identifier_char [function] [call site] 00054
10 is_separator_char [function] [call site] 00055
11 strchr [call site] 00056
9 is_identifier_char [function] [call site] 00057
9 is_qdtext_char [function] [call site] 00058
10 __assert_fail [call site] 00059
9 __assert_fail [call site] 00060
9 is_separator_char [function] [call site] 00061
9 is_control_char [function] [call site] 00062
7 __assert_fail [call site] 00063
7 scanner_get_token [function] [call site] 00064
7 scanner_get_token [function] [call site] 00065
7 __assert_fail [call site] 00066
7 match_int [function] [call site] 00067
8 scanner_get_token [function] [call site] 00068
8 __errno_location [call site] 00069
8 strtol [call site] 00070
8 __errno_location [call site] 00071
7 __assert_fail [call site] 00072
7 match_non_ws_string [function] [call site] 00073
8 scanner_get_str [function] [call site] 00074
8 scanner_get_token [function] [call site] 00075
7 __assert_fail [call site] 00076
7 parse_uri [function] [call site] 00077
8 parse_scheme [function] [call site] 00078
9 __ctype_b_loc [call site] 00079
9 __ctype_b_loc [call site] 00080
8 token_string_casecmp [function] [call site] 00081
9 strlen [call site] 00082
9 strncasecmp [call site] 00083
8 parse_hostport [function] [call site] 00084
9 strncpy [call site] 00085
9 __ctype_b_loc [call site] 00086
9 __ctype_b_loc [call site] 00087
9 __ctype_b_loc [call site] 00088
9 strtol [call site] 00089
9 atoi [call site] 00090
9 htons [call site] 00091
9 inet_pton [call site] 00092
9 htons [call site] 00093
9 inet_pton [call site] 00094
8 parse_uric [function] [call site] 00095
9 is_unreserved [function] [call site] 00096
10 __ctype_b_loc [call site] 00097
10 is_mark [function] [call site] 00098
11 strchr [call site] 00099
9 is_reserved [function] [call site] 00100
10 strchr [call site] 00101
9 is_escaped [function] [call site] 00102
10 __ctype_b_loc [call site] 00103
8 parse_uric [function] [call site] 00104
7 __assert_fail [call site] 00105
7 read_until_crlf [function] [call site] 00106
8 scanner_get_str [function] [call site] 00107
8 scanner_get_token [function] [call site] 00108
7 match_char [function] [call site] 00109
8 tolower [call site] 00110
7 scanner_get_token [function] [call site] 00111
7 scanner_get_token [function] [call site] 00112
7 __assert_fail [call site] 00113
7 __assert_fail [call site] 00114
7 skip_lws [function] [call site] 00115
8 scanner_get_token [function] [call site] 00116
8 scanner_get_token [function] [call site] 00117
7 scanner_get_token [function] [call site] 00118
7 match_char [function] [call site] 00119
5 UpnpPrintf [function] [call site] 00120
6 DebugAtThisLevel [function] [call site] 00121
6 pthread_mutex_lock [call site] 00122
6 pthread_mutex_unlock [call site] 00123
6 UpnpDisplayFileAndLine [function] [call site] 00124
7 time [call site] 00125
7 snprintf [call site] 00126
7 localtime [call site] 00127
7 strftime [call site] 00128
7 pthread_self [call site] 00129
7 fprintf [call site] 00130
7 fflush [call site] 00131
6 vfprintf [call site] 00132
6 fflush [call site] 00133
6 pthread_mutex_unlock [call site] 00134
5 membuffer_delete [function] [call site] 00135
6 __assert_fail [call site] 00136
6 membuffer_set_size [function] [call site] 00137
6 __assert_fail [call site] 00138
4 parser_parse_chunky_body [function] [call site] 00139
5 match [function] [call site] 00140
5 membuffer_delete [function] [call site] 00141
4 parser_parse_chunky_headers [function] [call site] 00142
5 parser_parse_headers [function] [call site] 00143
6 __assert_fail [call site] 00144
6 scanner_get_token [function] [call site] 00145
6 match [function] [call site] 00146
6 map_str_to_int [function] [call site] 00147
7 memptr_cmp [function] [call site] 00148
8 strncmp [call site] 00149
8 strlen [call site] 00150
7 memptr_cmp_nocase [function] [call site] 00151
8 strncasecmp [call site] 00152
8 strlen [call site] 00153
6 httpmsg_find_hdr [function] [call site] 00154
7 ListFind [function] [call site] 00155
8 __assert_fail [call site] 00156
8 __assert_fail [call site] 00157
6 httpmsg_find_hdr_str [function] [call site] 00158
7 ListHead [function] [call site] 00159
7 memptr_cmp_nocase [function] [call site] 00160
7 ListNext [function] [call site] 00161
8 __assert_fail [call site] 00162
8 __assert_fail [call site] 00163
6 membuffer_init [function] [call site] 00164
6 membuffer_init [function] [call site] 00165
6 membuffer_assign [function] [call site] 00166
7 __assert_fail [call site] 00167
7 membuffer_destroy [function] [call site] 00168
7 membuffer_set_size [function] [call site] 00169
6 membuffer_assign [function] [call site] 00170
6 membuffer_destroy [function] [call site] 00171
6 membuffer_destroy [function] [call site] 00172
6 ListAddTail [function] [call site] 00173
7 __assert_fail [call site] 00174
7 ListAddBefore [function] [call site] 00175
8 __assert_fail [call site] 00176
8 CreateListNode [function] [call site] 00177
9 __assert_fail [call site] 00178
9 FreeListAlloc [function] [call site] 00179
10 __assert_fail [call site] 00180
6 membuffer_destroy [function] [call site] 00181
6 membuffer_destroy [function] [call site] 00182
6 membuffer_append_str [function] [call site] 00183
7 strlen [call site] 00184
7 membuffer_insert [function] [call site] 00185
6 membuffer_append [function] [call site] 00186
5 membuffer_delete [function] [call site] 00187
4 parser_parse_entity_until_close [function] [call site] 00188
5 __assert_fail [call site] 00189
4 parser_get_entity_read_method [function] [call site] 00190
5 __assert_fail [call site] 00191
5 scanner_get_str [function] [call site] 00192
5 httpmsg_find_hdr [function] [call site] 00193
5 raw_find_str [function] [call site] 00194
6 tolower [call site] 00195
6 strstr [call site] 00196
5 UpnpPrintf [function] [call site] 00197
5 httpmsg_find_hdr [function] [call site] 00198
5 raw_to_int [function] [call site] 00199
6 __errno_location [call site] 00200
6 strtoll [call site] 00201
6 __errno_location [call site] 00202
4 __assert_fail [call site] 00203
3 parser_parse_headers [function] [call site] 00204
3 parser_parse_request_line [function] [call site] 00205
4 __assert_fail [call site] 00206
4 skip_blank_lines [function] [call site] 00207
5 scanner_get_token [function] [call site] 00208
4 match [function] [call site] 00209
4 map_str_to_int [function] [call site] 00210
4 str_alloc [function] [call site] 00211
4 parse_uri [function] [call site] 00212
4 match [function] [call site] 00213
4 str_alloc [function] [call site] 00214
4 parse_uri [function] [call site] 00215
4 map_str_to_int [function] [call site] 00216
4 __isoc99_sscanf [call site] 00217
3 parser_parse_responseline [function] [call site] 00218
4 __assert_fail [call site] 00219
4 skip_blank_lines [function] [call site] 00220
4 match [function] [call site] 00221
4 __isoc99_sscanf [call site] 00222
4 __ctype_b_loc [call site] 00223
4 __ctype_b_loc [call site] 00224
4 membuffer_assign [function] [call site] 00225
3 __assert_fail [call site] 00226
1 httpmsg_destroy [function] [call site] 00227
2 __assert_fail [call site] 00228
2 ListDestroy [function] [call site] 00229
3 ListDelNode [function] [call site] 00230
4 __assert_fail [call site] 00231
4 __assert_fail [call site] 00232
4 __assert_fail [call site] 00233
4 freeListNode [function] [call site] 00234
5 __assert_fail [call site] 00235
5 FreeListFree [function] [call site] 00236
6 __assert_fail [call site] 00237
3 FreeListDestroy [function] [call site] 00238
2 membuffer_destroy [function] [call site] 00239
2 membuffer_destroy [function] [call site] 00240