Fuzz introspector: qubesrpc_parse_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 0 None 12 31 parse_qubes_rpc_command call site: 00002 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:402
0 0 None 10 26 parse_qubes_rpc_command call site: 00002 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:410
0 0 None 10 26 parse_qubes_rpc_command call site: 00004 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:417
0 0 None 2 15 parse_qubes_rpc_command call site: 00009 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:472
0 0 None 2 12 parse_qubes_rpc_command call site: 00010 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:477
0 0 None 0 7 parse_qubes_rpc_command call site: 00007 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:454
0 0 None 0 0 parse_qubes_rpc_command call site: 00012 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:493
0 0 None 0 0 destroy_qrexec_parsed_command call site: 00013 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:505
0 0 None 0 0 memdupnul call site: 00004 /src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c:388

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 parse_qubes_rpc_command [function] [call site] 00001
2 calloc [call site] 00002
2 strchr [call site] 00003
2 memdupnul [function] [call site] 00004
2 strncmp [call site] 00005
2 strncmp [call site] 00006
2 strchr [call site] 00007
2 memchr [call site] 00008
2 memdupnul [function] [call site] 00009
2 memdupnul [function] [call site] 00010
2 strchrnul [call site] 00011
2 memdupnul [function] [call site] 00012
2 destroy_qrexec_parsed_command [function] [call site] 00013
1 strlen [call site] 00014
1 strlen [call site] 00015
1 __assert_fail [call site] 00016
1 __assert_fail [call site] 00017
1 strlen [call site] 00018
1 strlen [call site] 00019
1 strlen [call site] 00020
1 destroy_qrexec_parsed_command [function] [call site] 00021