Fuzz introspector: input-proxy-receiver_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['perror']

2 2 validate_and_forward_event call site: 00086 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:321
0 0 None 2 2 receive_and_validate_caps call site: 00061 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:76
0 0 None 2 2 receive_and_validate_caps call site: 00065 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:96
0 0 None 2 2 receive_and_validate_caps call site: 00068 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:113
0 0 None 0 0 long_set_bit call site: 00012 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:52
0 0 None 0 0 receive_and_validate_caps call site: 00063 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:82
0 0 None 0 0 receive_and_validate_caps call site: 00080 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:153
0 0 None 0 0 input_proxy_receiver_main call site: 00011 /src/qubes-os/app-linux-input-proxy/fuzz/../src/input-proxy-receiver.c:581

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 pipe [call site] 00001
1 perror [call site] 00002
1 write_all [function] [call site] 00003
2 write [call site] 00004
1 perror [call site] 00005
1 dup2 [call site] 00006
1 perror [call site] 00007
1 close [call site] 00008
1 close [call site] 00009
1 input_proxy_receiver_main [function] [call site] 00010
2 parse_options [function] [call site] 00011
3 long_set_bit [function] [call site] 00012
3 getopt_long [call site] 00013
3 long_set_bit [function] [call site] 00014
3 long_set_bit [function] [call site] 00015
3 long_set_bit [function] [call site] 00016
3 long_set_bit [function] [call site] 00017
3 long_set_bit [function] [call site] 00018
3 long_set_bit [function] [call site] 00019
3 long_set_bit [function] [call site] 00020
3 long_set_bit [function] [call site] 00021
3 long_set_bit [function] [call site] 00022
3 long_set_bit [function] [call site] 00023
3 long_set_bit [function] [call site] 00024
3 long_set_bit [function] [call site] 00025
3 long_set_bit [function] [call site] 00026
3 long_set_bit [function] [call site] 00027
3 long_set_bit [function] [call site] 00028
3 long_set_bit [function] [call site] 00029
3 long_set_bit [function] [call site] 00030
3 long_set_bit [function] [call site] 00031
3 long_set_bit [function] [call site] 00032
3 long_set_bit [function] [call site] 00033
3 long_set_bit [function] [call site] 00034
3 long_set_bit [function] [call site] 00035
3 long_set_bit [function] [call site] 00036
3 long_set_bit [function] [call site] 00037
3 long_set_bit [function] [call site] 00038
3 long_set_bit [function] [call site] 00039
3 long_set_bit [function] [call site] 00040
3 long_set_bit [function] [call site] 00041
3 long_set_bit [function] [call site] 00042
3 long_set_bit [function] [call site] 00043
3 long_set_bit [function] [call site] 00044
3 long_set_bit [function] [call site] 00045
3 long_set_bit [function] [call site] 00046
3 long_set_bit [function] [call site] 00047
3 strtoul [call site] 00048
3 strtoul [call site] 00049
3 usage [function] [call site] 00050
4 fprintf [call site] 00051
4 fprintf [call site] 00052
4 fprintf [call site] 00053
4 fprintf [call site] 00054
4 fprintf [call site] 00055
4 fprintf [call site] 00056
4 fprintf [call site] 00057
4 fprintf [call site] 00058
4 fprintf [call site] 00059
2 receive_and_validate_caps [function] [call site] 00060
3 read_all [function] [call site] 00061
4 read [call site] 00062
3 perror [call site] 00063
3 fprintf [call site] 00064
3 perror [call site] 00066
3 perror [call site] 00069
3 long_test_bit [function] [call site] 00072
3 long_test_bit [function] [call site] 00073
3 long_test_bit [function] [call site] 00074
3 long_test_bit [function] [call site] 00075
3 long_test_bit [function] [call site] 00076
3 long_test_bit [function] [call site] 00077
3 long_test_bit [function] [call site] 00078
3 long_test_bit [function] [call site] 00079
3 calloc [call site] 00080
3 fprintf [call site] 00081
3 long_test_bit [function] [call site] 00082
2 process_events [function] [call site] 00083
3 poll [call site] 00084
3 validate_and_forward_event [function] [call site] 00085
4 perror [call site] 00087
4 long_test_bit [function] [call site] 00088
4 long_test_bit [function] [call site] 00089
4 fprintf [call site] 00090
4 long_test_bit [function] [call site] 00091
4 fprintf [call site] 00092
4 long_test_bit [function] [call site] 00093
4 fprintf [call site] 00094
4 long_test_bit [function] [call site] 00095
4 fprintf [call site] 00096
4 long_test_bit [function] [call site] 00097
4 fprintf [call site] 00098
4 long_test_bit [function] [call site] 00099
4 fprintf [call site] 00100
4 long_test_bit [function] [call site] 00101
4 fprintf [call site] 00102
4 fprintf [call site] 00103
3 perror [call site] 00104
2 close [call site] 00105
1 close [call site] 00106