Fuzz introspector: fuzz_rtp_parser
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['fflush']

2 2 rtpp_log_obj_write_early call site: 00000 /src/rtpproxy/src/rtpp_log_obj.c:163
0 0 None 0 37 update_rtpp_stats call site: 00000 /src/rtpproxy/src/rtp_analyze.c:426
0 0 None 0 0 rtpp_stats_init call site: 00015 /src/rtpproxy/src/rtp_analyze.c:215
0 0 None 0 0 update_rtpp_stats call site: 00000 /src/rtpproxy/src/rtp_analyze.c:357
0 0 None 0 0 update_rtpp_totals call site: 00000 /src/rtpproxy/src/rtp_analyze.c:511
0 0 None 0 0 update_rtpp_totals call site: 00000 /src/rtpproxy/src/rtp_analyze.c:516
0 0 None 0 0 rtp_analyze_jt_ctor call site: 00016 /src/rtpproxy/src/rtp_analyze.c:249
0 0 1 :

['free']

0 0 rtp_analyze_jt_ctor call site: 00017 /src/rtpproxy/src/rtp_analyze.c:253
0 0 None 0 0 rtp_analyze_jdata_ctor call site: 00018 /src/rtpproxy/src/rtp_analyze.c:228
0 0 1 :

['free']

0 0 rtp_analyze_jdata_ctor call site: 00019 /src/rtpproxy/src/rtp_analyze.c:232
0 0 None 0 0 jdata_by_ssrc call site: 00000 /src/rtpproxy/src/rtp_analyze.c:313
0 0 None 0 0 jdata_by_ssrc call site: 00000 /src/rtpproxy/src/rtp_analyze.c:321

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 rtpp_gen_uid_init [function] [call site] 00001
2 rtpp_genuid_ctor [function] [call site] 00002
3 rtpp_zmalloc [function] [call site] 00003
1 __assert_fail [call site] 00004
1 rtpp_log_ctor [function] [call site] 00005
2 rtpp_rzmalloc [function] [call site] 00006
3 rtpp_refcnt_ctor_pa [function] [call site] 00007
2 rtpp_gen_uid [function] [call site] 00008
2 rtpp_log_obj_dtor [function] [call site] 00009
3 _rtpp_log_close [function] [call site] 00010
1 __assert_fail [call site] 00011
1 rtpp_analyzer_ctor [function] [call site] 00012
2 rtpp_rzmalloc [function] [call site] 00013
2 rtpp_stats_init [function] [call site] 00014
3 rtp_analyze_jt_ctor [function] [call site] 00015
4 rtpp_zmalloc [function] [call site] 00016
4 rtp_analyze_jdata_ctor [function] [call site] 00017
5 rtpp_zmalloc [function] [call site] 00018
5 rtpp_ringbuf_ctor [function] [call site] 00019
6 rtpp_rzmalloc [function] [call site] 00020
6 rtpp_zmalloc [function] [call site] 00021
6 rtpp_ringbuf_dtor [function] [call site] 00022
2 rtpp_analyzer_dtor [function] [call site] 00023
3 rtpp_stats_destroy [function] [call site] 00024
4 rtp_analyze_jt_destroy [function] [call site] 00025
1 __assert_fail [call site] 00026
1 rtp_packet_alloc [function] [call site] 00027
2 rtpp_rzmalloc [function] [call site] 00028
1 __assert_fail [call site] 00029