Fuzz introspector: FuzzIxmlOps
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
9 429 check_children call site: 00429 die
7 306 ixmlPrintDomTreeRecursive call site: 00306 copy_with_escape
7 329 ixmlPrintDomTreeRecursive call site: 00329 IxmlPrintf
5 152 ixmlNode_cloneCDATASect call site: 00152 ixmlNode_newDoc
3 424 LLVMFuzzerTestOneInput call site: 00424 die
3 440 LLVMFuzzerTestOneInput call site: 00440 die
2 12 ixmlDocument_createElementEx call site: 00012 ixmlElement_free
2 30 ixmlDocument_createAttributeEx call site: 00030 ixmlAttr_free
2 54 ixmlDocument_createCDATASectionEx call site: 00054 ixmlCDATASection_free
2 284 copy_with_escape call site: 00284 ixml_membuf_append_str
2 353 ixmlPrintDomTree call site: 00353 IxmlPrintf
2 380 ixmlDomTreetoString call site: 00380 IxmlPrintf

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 ixmlDocument_createDocumentEx [function] [call site] 00001
2 ixmlDocument_init [function] [call site] 00002
2 strdup [call site] 00003
2 ixmlDocument_free [function] [call site] 00004
3 ixmlNode_free [function] [call site] 00005
4 Parser_getBeforeFree [function] [call site] 00006
4 ixmlNode_freeSingleNode [function] [call site] 00007
4 ixmlNode_freeSingleNode [function] [call site] 00008
1 do_op [function] [call site] 00009
2 ixmlDocument_createElementEx [function] [call site] 00010
3 ixmlElement_init [function] [call site] 00011
3 strdup [call site] 00012
3 ixmlElement_free [function] [call site] 00013
4 ixmlNode_free [function] [call site] 00014
3 strdup [call site] 00015
3 ixmlElement_free [function] [call site] 00016
2 ixmlDocument_createTextNodeEx [function] [call site] 00019
3 ixmlNode_init [function] [call site] 00020
4 __assert_fail [call site] 00021
3 strdup [call site] 00022
3 ixmlNode_free [function] [call site] 00023
3 strdup [call site] 00024
3 ixmlNode_free [function] [call site] 00025
2 ixmlDocument_createAttributeNSEx [function] [call site] 00027
3 ixmlDocument_createAttributeEx [function] [call site] 00028
4 ixmlAttr_init [function] [call site] 00029
4 strdup [call site] 00030
4 ixmlAttr_free [function] [call site] 00031
5 ixmlNode_free [function] [call site] 00032
3 strdup [call site] 00033
3 ixmlAttr_free [function] [call site] 00034
3 ixmlNode_setNodeName [function] [call site] 00035
4 __assert_fail [call site] 00036
4 strdup [call site] 00037
4 Parser_setNodePrefixAndLocalName [function] [call site] 00038
5 __assert_fail [call site] 00039
5 strchr [call site] 00040
5 safe_strdup [function] [call site] 00041
6 __assert_fail [call site] 00042
6 strdup [call site] 00043
6 strdup [call site] 00044
5 strncpy [call site] 00045
5 safe_strdup [function] [call site] 00046
3 ixmlAttr_free [function] [call site] 00047
2 ixmlDocument_createAttributeEx [function] [call site] 00048
2 ixmlNode_setNodeValue [function] [call site] 00049
3 strdup [call site] 00050
2 ixmlDocument_createCDATASectionEx [function] [call site] 00052
3 ixmlCDATASection_init [function] [call site] 00053
3 strdup [call site] 00054
3 ixmlCDATASection_free [function] [call site] 00055
4 ixmlNode_free [function] [call site] 00056
3 strdup [call site] 00057
3 ixmlCDATASection_free [function] [call site] 00058
2 ixmlNode_appendChild [function] [call site] 00062
3 ixmlNode_appendChildAfter [function] [call site] 00063
4 ixmlNode_isAncestor [function] [call site] 00064
4 ixmlNode_allowChildren [function] [call site] 00065
5 __assert_fail [call site] 00066
4 ixmlNode_removeChild [function] [call site] 00067
5 ixmlNode_isParent [function] [call site] 00068
6 __assert_fail [call site] 00069
5 ixmlNode_free [function] [call site] 00070
2 ixmlNode_insertBefore [function] [call site] 00074
3 ixmlNode_allowChildren [function] [call site] 00075
3 ixmlNode_isAncestor [function] [call site] 00076
3 ixmlNode_isParent [function] [call site] 00077
3 ixmlNode_removeChild [function] [call site] 00078
3 ixmlNode_appendChild [function] [call site] 00079
2 ixmlNode_replaceChild [function] [call site] 00083
3 ixmlNode_isAncestor [function] [call site] 00084
3 ixmlNode_allowChildren [function] [call site] 00085
3 ixmlNode_isParent [function] [call site] 00086
3 ixmlNode_insertBefore [function] [call site] 00087
3 ixmlNode_removeChild [function] [call site] 00088
2 ixmlNode_removeChild [function] [call site] 00092
2 ixmlNode_cloneNode [function] [call site] 00095
3 ixmlNode_cloneAttrDirect [function] [call site] 00096
4 __assert_fail [call site] 00097
4 ixmlNode_cloneAttr [function] [call site] 00098
5 __assert_fail [call site] 00099
5 ixmlAttr_init [function] [call site] 00100
5 ixmlNode_setNodeName [function] [call site] 00101
5 ixmlAttr_free [function] [call site] 00102
5 ixmlNode_setNodeValue [function] [call site] 00103
5 ixmlAttr_free [function] [call site] 00104
5 ixmlNode_setNamespaceURI [function] [call site] 00105
6 strdup [call site] 00106
5 ixmlAttr_free [function] [call site] 00107
5 ixmlNode_setPrefix [function] [call site] 00108
6 strdup [call site] 00109
5 ixmlAttr_free [function] [call site] 00110
5 ixmlNode_setLocalName [function] [call site] 00111
6 __assert_fail [call site] 00112
6 strdup [call site] 00113
5 ixmlAttr_free [function] [call site] 00114
3 ixmlNode_cloneNodeTree [function] [call site] 00115
4 __assert_fail [call site] 00116
4 ixmlNode_cloneElement [function] [call site] 00117
5 __assert_fail [call site] 00118
5 ixmlElement_init [function] [call site] 00119
5 ixmlElement_setTagName [function] [call site] 00120
6 strdup [call site] 00121
5 ixmlElement_free [function] [call site] 00122
5 ixmlNode_setNodeName [function] [call site] 00123
5 ixmlElement_free [function] [call site] 00124
5 ixmlNode_setNodeValue [function] [call site] 00125
5 ixmlElement_free [function] [call site] 00126
5 ixmlNode_setNamespaceURI [function] [call site] 00127
5 ixmlElement_free [function] [call site] 00128
5 ixmlNode_setPrefix [function] [call site] 00129
5 ixmlElement_free [function] [call site] 00130
5 ixmlNode_setLocalName [function] [call site] 00131
5 ixmlElement_free [function] [call site] 00132
4 ixmlNode_cloneAttrList [function] [call site] 00133
5 ixmlNode_cloneAttr [function] [call site] 00134
4 ixmlNode_free [function] [call site] 00135
4 ixmlNode_cloneNodeTreeRecursive [function] [call site] 00136
5 ixmlNode_cloneSingleNode [function] [call site] 00137
6 ixmlNode_cloneElement [function] [call site] 00138
6 ixmlNode_cloneAttr [function] [call site] 00139
6 ixmlNode_cloneTextNode [function] [call site] 00140
7 __assert_fail [call site] 00141
7 ixmlNode_init [function] [call site] 00142
7 ixmlNode_setNodeName [function] [call site] 00143
7 ixmlNode_free [function] [call site] 00144
7 ixmlNode_setNodeValue [function] [call site] 00145
7 ixmlNode_free [function] [call site] 00146
6 ixmlNode_cloneCDATASect [function] [call site] 00147
7 __assert_fail [call site] 00148
7 ixmlCDATASection_init [function] [call site] 00149
7 ixmlNode_setNodeName [function] [call site] 00150
7 ixmlCDATASection_free [function] [call site] 00151
7 ixmlNode_setNodeValue [function] [call site] 00152
7 ixmlCDATASection_free [function] [call site] 00153
6 ixmlNode_newDoc [function] [call site] 00154
7 ixmlDocument_init [function] [call site] 00155
7 ixmlNode_setNodeName [function] [call site] 00156
7 ixmlDocument_free [function] [call site] 00157
5 ixmlNode_cloneAttrList [function] [call site] 00158
5 ixmlNode_cloneSingleNode [function] [call site] 00159
5 ixmlNode_cloneSingleNode [function] [call site] 00160
5 ixmlNode_free [function] [call site] 00161
4 ixmlNode_cloneSingleNode [function] [call site] 00162
4 ixmlNode_cloneNodeTreeRecursive [function] [call site] 00163
2 subtree_size [function] [call site] 00164
3 subtree_size [function] [call site] 00165
4 subtree_size [function] [call site] 00166
2 ixmlNode_free [function] [call site] 00167
2 pick_type [function] [call site] 00169
3 ixmlNode_getNodeType [function] [call site] 00170
2 ixmlElement_setAttribute [function] [call site] 00171
3 Parser_isValidXmlName [function] [call site] 00172
4 __assert_fail [call site] 00173
4 strlen [call site] 00174
4 Parser_isNameChar [function] [call site] 00175
5 Parser_isCharInTable [function] [call site] 00176
5 Parser_isCharInTable [function] [call site] 00177
4 Parser_isNameChar [function] [call site] 00178
3 get_attribute_node [function] [call site] 00179
3 find_condition_name [function] [call site] 00180
4 strcmp [call site] 00181
3 strdup [call site] 00182
3 ixmlDocument_createAttributeEx [function] [call site] 00183
3 strdup [call site] 00184
3 ixmlAttr_free [function] [call site] 00185
3 ixmlElement_setAttributeNode [function] [call site] 00186
4 ixmlElement_setAttributeNode_common [function] [call site] 00187
5 get_attribute_node [function] [call site] 00188
5 ixmlAttr_free [function] [call site] 00189
4 find_condition_node_name [function] [call site] 00190
5 strcmp [call site] 00191
3 ixmlAttr_free [function] [call site] 00192
2 pick_type [function] [call site] 00193
2 ixmlElement_removeAttribute [function] [call site] 00194
3 get_attribute_node [function] [call site] 00195
3 find_condition_name [function] [call site] 00196
2 pick_type [function] [call site] 00197
2 pick_type [function] [call site] 00198
2 ixmlElement_setAttributeNode [function] [call site] 00199
2 pick_type [function] [call site] 00201
2 pick_type [function] [call site] 00202
2 ixmlElement_removeAttributeNode [function] [call site] 00203
3 get_attribute_node [function] [call site] 00204
3 find_condition_node [function] [call site] 00205
4 ixmlNode_compare [function] [call site] 00206
5 __assert_fail [call site] 00207
5 strcmp [call site] 00208
5 safe_strcmp [function] [call site] 00209
6 strcmp [call site] 00210
5 safe_strcmp [function] [call site] 00211
5 safe_strcmp [function] [call site] 00212
5 safe_strcmp [function] [call site] 00213
2 pick_type [function] [call site] 00215
2 ixmlElement_setAttributeNS [function] [call site] 00216
3 Parser_isValidXmlName [function] [call site] 00217
3 ixmlNode_init [function] [call site] 00218
3 strdup [call site] 00219
3 Parser_setNodePrefixAndLocalName [function] [call site] 00220
3 check_namespace_error [function] [call site] 00221
4 strcmp [call site] 00222
4 strcmp [call site] 00223
4 strcmp [call site] 00224
4 strcmp [call site] 00225
3 get_attribute_node [function] [call site] 00226
3 find_condition_ns_ln [function] [call site] 00227
4 strcmp [call site] 00228
4 strcmp [call site] 00229
3 strdup [call site] 00230
3 ixmlDocument_createAttributeNSEx [function] [call site] 00231
3 strdup [call site] 00232
3 ixmlAttr_free [function] [call site] 00233
3 ixmlElement_setAttributeNodeNS [function] [call site] 00234
4 ixmlElement_setAttributeNode_common [function] [call site] 00235
4 find_condition_node_ns_ln [function] [call site] 00236
5 strcmp [call site] 00237
5 strcmp [call site] 00238
3 ixmlAttr_free [function] [call site] 00239
3 Parser_freeNodeContent [function] [call site] 00240
2 pick_type [function] [call site] 00241
2 ixmlElement_removeAttributeNS [function] [call site] 00242
3 strcmp [call site] 00243
3 strcmp [call site] 00244
2 pick_type [function] [call site] 00245
2 ixmlElement_getAttributeNS [function] [call site] 00246
3 get_attribute_node [function] [call site] 00247
3 find_condition_ns_ln [function] [call site] 00248
2 ixmlElement_hasAttributeNS [function] [call site] 00249
3 strcmp [call site] 00250
3 strcmp [call site] 00251
2 ixmlElement_getAttributeNodeNS [function] [call site] 00252
3 get_attribute_node [function] [call site] 00253
3 find_condition_ns_ln [function] [call site] 00254
2 pick_type [function] [call site] 00255
2 pick_type [function] [call site] 00256
2 ixmlElement_setAttributeNodeNS [function] [call site] 00257
2 ixmlPrintNode [function] [call site] 00260
3 ixml_membuf_init [function] [call site] 00261
4 __assert_fail [call site] 00262
3 ixmlPrintDomTree [function] [call site] 00263
4 ixmlNode_getNodeName [function] [call site] 00264
4 ixmlNode_getNodeValue [function] [call site] 00265
4 ixmlNode_getNodeType [function] [call site] 00266
4 ixmlPrintDomTreeRecursive [function] [call site] 00267
5 ixmlNode_getNodeName [function] [call site] 00268
5 ixml_membuf_append_str [function] [call site] 00269
6 strlen [call site] 00270
6 ixml_membuf_insert [function] [call site] 00271
7 __assert_fail [call site] 00272
7 ixml_membuf_set_size [function] [call site] 00273
8 __assert_fail [call site] 00274
8 __assert_fail [call site] 00275
8 realloc [call site] 00276
8 realloc [call site] 00277
5 ixml_membuf_append_str [function] [call site] 00278
5 ixmlNode_getNodeValue [function] [call site] 00279
5 copy_with_escape [function] [call site] 00280
6 strlen [call site] 00281
6 ixml_membuf_append_str [function] [call site] 00282
6 ixml_membuf_append_str [function] [call site] 00283
6 ixml_membuf_append_str [function] [call site] 00284
6 ixml_membuf_append_str [function] [call site] 00285
6 ixml_membuf_append_str [function] [call site] 00286
6 ixml_membuf_append [function] [call site] 00287
7 __assert_fail [call site] 00288
7 ixml_membuf_insert [function] [call site] 00289
5 ixml_membuf_append_str [function] [call site] 00290
5 ixml_membuf_append_str [function] [call site] 00291
5 ixmlNode_getNodeType [function] [call site] 00292
5 ixmlPrintCloseTag [function] [call site] 00293
6 ixml_membuf_append_str [function] [call site] 00294
6 ixmlNode_getNodeName [function] [call site] 00295
6 ixml_membuf_append_str [function] [call site] 00296
6 ixmlNode_getNodeType [function] [call site] 00297
6 ixml_membuf_append_str [function] [call site] 00298
6 ixml_membuf_append_str [function] [call site] 00299
5 ixmlNode_getNodeType [function] [call site] 00300
5 ixmlNode_getNodeValue [function] [call site] 00301
5 copy_with_escape [function] [call site] 00302
5 ixml_membuf_append_str [function] [call site] 00303
5 ixmlNode_getNodeValue [function] [call site] 00304
5 ixml_membuf_append_str [function] [call site] 00305
5 ixml_membuf_append_str [function] [call site] 00306
5 ixml_membuf_append_str [function] [call site] 00307
5 ixmlNode_getNodeName [function] [call site] 00308
5 ixml_membuf_append_str [function] [call site] 00309
5 ixml_membuf_append_str [function] [call site] 00310
5 ixmlNode_getNodeValue [function] [call site] 00311
5 copy_with_escape [function] [call site] 00312
5 ixml_membuf_append_str [function] [call site] 00313
5 ixml_membuf_append_str [function] [call site] 00314
5 ixmlNode_getNodeName [function] [call site] 00315
5 ixml_membuf_append_str [function] [call site] 00316
5 ixml_membuf_append_str [function] [call site] 00317
5 ixmlNode_getNodeName [function] [call site] 00318
5 ixml_membuf_append_str [function] [call site] 00319
5 ixml_membuf_append_str [function] [call site] 00320
5 ixmlNode_getNodeValue [function] [call site] 00321
5 copy_with_escape [function] [call site] 00322
5 ixml_membuf_append_str [function] [call site] 00323
5 ixml_membuf_append_str [function] [call site] 00324
5 ixmlNode_getFirstChild [function] [call site] 00325
5 ixmlNode_getNodeType [function] [call site] 00326
5 ixml_membuf_append_str [function] [call site] 00327
5 ixml_membuf_append_str [function] [call site] 00328
5 ixmlPrintCloseTag [function] [call site] 00329
5 ixmlNode_getNodeType [function] [call site] 00330
5 IxmlPrintf [function] [call site] 00331
6 fprintf [call site] 00332
6 fprintf [call site] 00333
6 vfprintf [call site] 00334
6 fflush [call site] 00335
6 fprintf [call site] 00336
4 ixml_membuf_append_str [function] [call site] 00337
4 ixml_membuf_append_str [function] [call site] 00338
4 copy_with_escape [function] [call site] 00339
4 ixml_membuf_append_str [function] [call site] 00340
4 ixml_membuf_append_str [function] [call site] 00341
4 ixml_membuf_append_str [function] [call site] 00342
4 ixml_membuf_append_str [function] [call site] 00343
4 ixmlPrintDomTreeRecursive [function] [call site] 00344
4 ixmlNode_getFirstChild [function] [call site] 00345
4 ixmlNode_getNodeType [function] [call site] 00346
4 ixml_membuf_append_str [function] [call site] 00347
4 ixml_membuf_append_str [function] [call site] 00348
4 ixmlNode_getFirstChild [function] [call site] 00349
4 ixmlPrintDomTreeRecursive [function] [call site] 00350
4 ixml_membuf_append_str [function] [call site] 00351
4 ixml_membuf_append_str [function] [call site] 00352
4 ixml_membuf_append_str [function] [call site] 00353
4 ixmlNode_getNodeType [function] [call site] 00354
4 IxmlPrintf [function] [call site] 00355
2 ixmlFreeDOMString [function] [call site] 00356
2 ixmlNodetoString [function] [call site] 00357
3 ixml_membuf_init [function] [call site] 00358
3 ixmlDomTreetoString [function] [call site] 00359
4 ixmlNode_getNodeName [function] [call site] 00360
4 ixmlNode_getNodeValue [function] [call site] 00361
4 ixmlNode_getNodeType [function] [call site] 00362
4 ixmlPrintDomTreeRecursive [function] [call site] 00363
4 ixml_membuf_append_str [function] [call site] 00364
4 ixml_membuf_append_str [function] [call site] 00365
4 copy_with_escape [function] [call site] 00366
4 ixml_membuf_append_str [function] [call site] 00367
4 ixml_membuf_append_str [function] [call site] 00368
4 ixml_membuf_append_str [function] [call site] 00369
4 ixml_membuf_append_str [function] [call site] 00370
4 ixmlPrintDomTreeRecursive [function] [call site] 00371
4 ixmlNode_getFirstChild [function] [call site] 00372
4 ixmlNode_getNodeType [function] [call site] 00373
4 ixml_membuf_append_str [function] [call site] 00374
4 ixml_membuf_append_str [function] [call site] 00375
4 ixmlNode_getFirstChild [function] [call site] 00376
4 ixmlPrintDomTreeRecursive [function] [call site] 00377
4 ixml_membuf_append_str [function] [call site] 00378
4 ixml_membuf_append_str [function] [call site] 00379
4 ixml_membuf_append_str [function] [call site] 00380
4 ixmlNode_getNodeType [function] [call site] 00381
4 IxmlPrintf [function] [call site] 00382
2 ixmlFreeDOMString [function] [call site] 00383
2 ixmlNode_setNodeValue [function] [call site] 00385
2 ixmlDocument_getElementsByTagName [function] [call site] 00386
3 ixmlNode_getElementsByTagName [function] [call site] 00387
4 __assert_fail [call site] 00388
4 ixmlNode_getNodeType [function] [call site] 00389
4 ixmlNode_getNodeName [function] [call site] 00390
4 strcmp [call site] 00391
4 ixmlNodeList_addToNodeList [function] [call site] 00392
5 __assert_fail [call site] 00393
5 ixmlNodeList_init [function] [call site] 00394
6 __assert_fail [call site] 00395
4 ixmlNode_getFirstChild [function] [call site] 00396
4 ixmlNode_getElementsByTagNameRecursive [function] [call site] 00397
5 ixmlNode_getNodeType [function] [call site] 00398
5 ixmlNode_getNodeName [function] [call site] 00399
5 strcmp [call site] 00400
5 strcmp [call site] 00401
5 ixmlNodeList_addToNodeList [function] [call site] 00402
2 ixmlNodeList_free [function] [call site] 00403
2 ixmlNode_getNodeType [function] [call site] 00404
2 ixmlElement_getElementsByTagName [function] [call site] 00405
3 ixmlNode_getElementsByTagName [function] [call site] 00406
2 ixmlNodeList_free [function] [call site] 00407
2 pick_type [function] [call site] 00408
2 ixmlNode_getAttributes [function] [call site] 00409
3 ixmlNamedNodeMap_init [function] [call site] 00410
4 __assert_fail [call site] 00411
3 ixmlNamedNodeMap_addToNamedNodeMap [function] [call site] 00412
4 ixmlNamedNodeMap_init [function] [call site] 00413
3 ixmlNamedNodeMap_free [function] [call site] 00414
2 ixmlNamedNodeMap_getLength [function] [call site] 00415
2 ixmlNamedNodeMap_item [function] [call site] 00416
3 ixmlNamedNodeMap_getLength [function] [call site] 00417
2 ixmlNamedNodeMap_getNamedItem [function] [call site] 00418
3 ixmlNamedNodeMap_getItemNumber [function] [call site] 00419
4 __assert_fail [call site] 00420
4 strcmp [call site] 00421
3 ixmlNamedNodeMap_item [function] [call site] 00422
2 ixmlNamedNodeMap_free [function] [call site] 00423
1 check_children [function] [call site] 00439
1 subtree_contains [function] [call site] 00444
1 subtree_contains [function] [call site] 00445
1 ixmlDocument_free [function] [call site] 00446
1 ixmlNode_free [function] [call site] 00447