Fuzz introspector: fuzz_rtp_session
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1798 1798 2 :

['init_config_bail', 'rtpp_cfile_process']

1826 1846 init_config call site: 00000 /src/rtpproxy/src/main.c:756
1029 1064 9 :

['handle_stun_full', 'stun_reply', 'strlen', 'ice_switch_local_role', 'str_isset', 'handle_stun_lite', 're_regex', 'pl_strcmp', 'stun_msg_attr']

1029 1496 icem_stund_recv call site: 00000 /src/rtpproxy/libre/../external/libre/src/ice/stunsrv.c:248
338 338 1 :

['cand_decode']

338 338 icem_sdp_decode call site: 00000 /src/rtpproxy/libre/../external/libre/src/ice/icesdp.c:298
328 328 1 :

['handle_copy']

359 384 rtpp_command_ul_handle call site: 00255 /src/rtpproxy/src/../src/commands/rpcpv1_ul.c:594
76 83 7 :

['_rtpp_log_lock', 'getdtime', '_rtpp_log_unlock', 'ftime', 'fflush', 'strlvl', 'vsyslog_async']

76 83 _rtpp_log_write_va call site: 00000 /src/rtpproxy/src/rtpp_log_stand.c:259
69 69 1 :

['rtp_resizer_enqueue']

69 69 resizer_injest call site: 00000 /src/rtpproxy/src/rtpp_stream.c:228
53 84 5 :

['rtpp_queue_get_item', 'rtpp_queue_get_item_by', 'run_servers', 'dtime2mtimespec', 'getdtime']

57 90 rtpp_proc_servers_run call site: 00000 /src/rtpproxy/src/rtpp_proc_servers.c:188
52 52 1 :

['syslog_async_init']

62 72 _rtpp_log_open call site: 00000 /src/rtpproxy/src/rtpp_log_stand.c:89
52 52 4 :

['tls_peer_fingerprint', 'strcmp', 'setup_srtp_stream', 'tls_srtp_keyinfo']

54 54 rtpp_dtls_conn_dtls_recv call site: 00000 /src/rtpproxy/modules/dtls_gw/rtpp_dtls_conn.c:417
48 48 1 :

['__rtpp_stream_fill_addr']

48 48 _rtpp_stream_latch call site: 00000 /src/rtpproxy/src/rtpp_stream.c:611
47 47 2 :

['getcwd', 'rtpp_daemon']

134 2338 _rtpp_main call site: 00000 /src/rtpproxy/src/main.c:1095
42 42 1 :

['rtpp_anetio_sendto_na']

42 42 rtpc_reply_deliver call site: 00000 /src/rtpproxy/src/rtpp_command_reply.c:142

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 SeedRNGs [function] [call site] 00001
2 seedrandom [function] [call site] 00002
3 srandom [call site] 00003
1 ExecuteScript [function] [call site] 00004
2 strlen [call site] 00005
2 ExecuteRTPPCommand [function] [call site] 00006
3 rtpp_command_ctor [function] [call site] 00007
4 rtpp_rzmalloc [function] [call site] 00008
5 rtpp_refcnt_ctor_pa [function] [call site] 00009
4 rtpc_reply_ctor [function] [call site] 00010
5 rtpp_rzmalloc [function] [call site] 00011
3 rtpp_command_split [function] [call site] 00012
4 rtpp_strsplit [function] [call site] 00013
4 memchr [call site] 00014
4 strlen [call site] 00015
4 rtpp_command_guard_retrans [function] [call site] 00016
5 rtpp_anetio_sendto_na [function] [call site] 00017
6 rtpp_wi_malloc_na [function] [call site] 00018
7 rtpp_rmalloc [function] [call site] 00019
8 rtpp_refcnt_ctor_pa [function] [call site] 00020
7 rtpp_wi_free [function] [call site] 00021
8 rtpp_wi_pkt_free [function] [call site] 00022
6 rtpp_anetio_sendto_debug [function] [call site] 00023
6 rtpp_queue_put_item [function] [call site] 00024
7 pthread_mutex_lock [call site] 00025
7 rtpp_queue_getclen [function] [call site] 00026
7 circ_buf_push [function] [call site] 00027
7 rtpp_queue_getclen [function] [call site] 00028
7 pthread_cond_signal [call site] 00029
7 pthread_mutex_unlock [call site] 00030
4 __assert_fail [call site] 00031
4 rtpp_command_pre_parse [function] [call site] 00032
5 fill_cmd_props [function] [call site] 00033
3 handle_command [function] [call site] 00034
4 handle_ver_feature [function] [call site] 00035
5 strcmp [call site] 00036
5 strcmp [call site] 00037
4 handle_info [function] [call site] 00038
4 rtpp_command_play_opts_parse [function] [call site] 00039
5 rtpp_zmalloc [function] [call site] 00040
5 strtol [call site] 00041
5 rtpp_command_play_opts_free [function] [call site] 00042
4 rtpp_command_record_opts_parse [function] [call site] 00043
5 rtpp_rzmalloc [function] [call site] 00044
4 rtpp_command_del_opts_parse [function] [call site] 00045
5 rtpp_rzmalloc [function] [call site] 00046
4 rtpp_command_ul_opts_parse [function] [call site] 00047
5 rtpp_zmalloc [function] [call site] 00048
5 ul_opts_init [function] [call site] 00049
5 url_unquote [function] [call site] 00050
6 url_unquote2 [function] [call site] 00051
5 strtol [call site] 00052
5 __ctype_b_loc [call site] 00053
5 extractaddr [function] [call site] 00054
6 __ctype_b_loc [call site] 00055
6 __ctype_b_loc [call site] 00056
5 extractaddr [function] [call site] 00057
5 strlen [call site] 00058
5 resolve [function] [call site] 00059
6 getaddrinfo [call site] 00060
6 freeaddrinfo [call site] 00061
5 ishostnull [function] [call site] 00062
6 abort [call site] 00063
5 ntohs [call site] 00064
5 htons [call site] 00065
5 gai_strerror [call site] 00066
5 rtpp_command_ul_opts_free [function] [call site] 00067
4 handle_get_stats [function] [call site] 00068
5 __assert_fail [call site] 00069
4 rtpp_subcommand_ul_opts_parse [function] [call site] 00070
5 handle_mod_subc_parse [function] [call site] 00071
6 atoi_safe_sep [function] [call site] 00072
7 strtol [call site] 00073
6 atoi_safe [function] [call site] 00074
7 atoi_safe_sep [function] [call site] 00075
5 rtpp_command_del_opts_parse [function] [call site] 00076
4 rtpp_command_ul_opts_free [function] [call site] 00077
4 handle_delete [function] [call site] 00078
5 do_delete [function] [call site] 00079
6 rtpp_cmd_delete_ematch [function] [call site] 00080
7 compare_session_tags [function] [call site] 00081
8 memcmp [call site] 00082
8 strtoul [call site] 00083
7 compare_session_tags [function] [call site] 00084
4 handle_record [function] [call site] 00085
5 rtpp_cmd_record_ematch [function] [call site] 00086
6 compare_session_tags [function] [call site] 00087
6 compare_session_tags [function] [call site] 00088
6 handle_copy [function] [call site] 00089
7 strncmp [call site] 00090
7 rtpp_record_ctor [function] [call site] 00091
8 strncmp [call site] 00092
8 rtpp_rzmalloc [function] [call site] 00093
8 pthread_mutex_init [call site] 00094
8 ropen_remote_ctor_pa [function] [call site] 00095
9 atoi [call site] 00096
9 snprintf [call site] 00097
9 resolve [function] [call site] 00098
9 gai_strerror [call site] 00099
9 connect [call site] 00100
8 rtpp_record_close [function] [call site] 00101
9 flush_rbuf [function] [call site] 00102
10 write [call site] 00103
10 close [call site] 00104
9 close [call site] 00105
9 unlink [call site] 00106
9 rename [call site] 00107
9 pthread_mutex_destroy [call site] 00108
8 sprintf [call site] 00109
8 sprintf [call site] 00110
8 sprintf [call site] 00111
8 sprintf [call site] 00112
8 open [call site] 00113
8 write [call site] 00114
8 rtpp_record_close [function] [call site] 00115
8 close [call site] 00116
8 pthread_mutex_destroy [call site] 00117
7 __assert_fail [call site] 00118
7 get_args4remote [function] [call site] 00119
8 strlcpy [function] [call site] 00120
8 strrchr [call site] 00121
8 rtpp_create_listener [function] [call site] 00122
9 create_twinlistener [function] [call site] 00123
10 create_listener [function] [call site] 00124
11 rtpp_socket_ctor [function] [call site] 00125
12 rtpp_rzmalloc [function] [call site] 00126
12 socket [call site] 00127
12 setsockopt [call site] 00128
12 rtpp_socket_dtor [function] [call site] 00129
13 shutdown [call site] 00130
13 close [call site] 00131
11 htons [call site] 00132
11 __errno_location [call site] 00133
7 rtpp_record_ctor [function] [call site] 00134
7 rtpp_record_ctor [function] [call site] 00135
4 handle_norecord [function] [call site] 00136
5 rtpp_cmd_norecord_ematch [function] [call site] 00137
6 compare_session_tags [function] [call site] 00138
6 compare_session_tags [function] [call site] 00139
6 handle_stop_record [function] [call site] 00140
7 __assert_fail [call site] 00141
6 handle_stop_record [function] [call site] 00142
4 find_stream [function] [call site] 00143
5 rtpp_session_ematch [function] [call site] 00144
6 memcmp [call site] 00145
6 compare_session_tags [function] [call site] 00146
6 strrchr [call site] 00147
6 strrchr [call site] 00148
6 strcmp [call site] 00149
4 rtpp_command_ul_opts_free [function] [call site] 00150
4 ul_reply_port [function] [call site] 00151
5 __assert_fail [call site] 00152
5 ishostnull [function] [call site] 00153
5 __assert_fail [call site] 00154
5 __assert_fail [call site] 00155
5 __assert_fail [call site] 00156
5 __assert_fail [call site] 00157
4 rtpp_command_play_opts_free [function] [call site] 00158
4 rtpp_command_play_handle [function] [call site] 00159
5 strcmp [call site] 00160
5 rtpp_command_play_opts_free [function] [call site] 00161
4 handle_copy [function] [call site] 00162
4 handle_query [function] [call site] 00163
5 handle_query_simple [function] [call site] 00164
5 strcmp [call site] 00165
5 strcmp [call site] 00166
5 strcmp [call site] 00167
5 strcmp [call site] 00168
5 strcmp [call site] 00169
5 strcmp [call site] 00170
5 strcmp [call site] 00171
5 strcmp [call site] 00172
5 strcmp [call site] 00173
5 strcmp [call site] 00174
5 strcmp [call site] 00175
5 strcmp [call site] 00176
5 strcmp [call site] 00177
5 strcmp [call site] 00178
5 __assert_fail [call site] 00179
5 __assert_fail [call site] 00180
5 __assert_fail [call site] 00181
4 rtpp_command_ul_handle [function] [call site] 00182
5 rtpp_create_listener [function] [call site] 00183
5 rtpp_command_get_stats [function] [call site] 00184
5 rtpp_create_listener [function] [call site] 00185
5 rtpp_session_ctor [function] [call site] 00186
6 rtpp_rzmalloc [function] [call site] 00187
6 rtpp_log_ctor [function] [call site] 00188
7 rtpp_rzmalloc [function] [call site] 00189
7 rtpp_log_obj_dtor [function] [call site] 00190
8 _rtpp_log_close [function] [call site] 00191
6 rtpp_pipe_ctor [function] [call site] 00192
7 rtpp_rzmalloc [function] [call site] 00193
7 rtpp_stream_ctor [function] [call site] 00194
8 rtpp_rzmalloc [function] [call site] 00195
8 pthread_mutex_init [call site] 00196
8 pthread_mutex_destroy [call site] 00197
8 rtpp_analyzer_ctor [function] [call site] 00198
9 rtpp_stats_init [function] [call site] 00199
10 rtp_analyze_jt_ctor [function] [call site] 00200
11 rtpp_zmalloc [function] [call site] 00201
11 rtp_analyze_jdata_ctor [function] [call site] 00202
12 rtpp_zmalloc [function] [call site] 00203
12 rtpp_ringbuf_ctor [function] [call site] 00204
13 rtpp_rzmalloc [function] [call site] 00205
13 rtpp_zmalloc [function] [call site] 00206
13 rtpp_ringbuf_dtor [function] [call site] 00207
9 rtpp_analyzer_dtor [function] [call site] 00208
10 rtpp_stats_destroy [function] [call site] 00209
11 rtp_analyze_jt_destroy [function] [call site] 00210
8 rtpp_pcnt_strm_ctor [function] [call site] 00211
9 rtpp_rzmalloc [function] [call site] 00212
9 pthread_mutex_init [call site] 00213
9 rtpp_pcnt_strm_dtor [function] [call site] 00214
10 pthread_mutex_destroy [call site] 00215
8 rtpp_netaddr_ctor [function] [call site] 00216
9 rtpp_rzmalloc [function] [call site] 00217
9 pthread_mutex_init [call site] 00218
9 rtpp_netaddr_dtor [function] [call site] 00219
10 pthread_mutex_destroy [call site] 00220
8 rtpp_netaddr_ctor [function] [call site] 00221
8 rtpp_stream_dtor [function] [call site] 00222
9 _rtpp_stream_get_actor [function] [call site] 00223
9 snprintf [call site] 00224
9 rtp_resizer_free [function] [call site] 00225
7 rtpp_pcount_ctor [function] [call site] 00226
8 rtpp_rzmalloc [function] [call site] 00227
8 rtpp_pcount_dtor [function] [call site] 00228
7 rtpp_pipe_dtor [function] [call site] 00229
6 rtpp_pipe_ctor [function] [call site] 00230
6 rtpp_acct_ctor [function] [call site] 00231
7 rtpp_rzmalloc [function] [call site] 00232
7 rtpp_acct_dtor [function] [call site] 00233
6 _rtpp_str_dup2_sf [function] [call site] 00234
7 _rtpp_str_dup2 [function] [call site] 00235
6 _rtpp_str_dup2_sf [function] [call site] 00236
6 memchr [call site] 00237
6 _rtpp_str_dup2_sc [function] [call site] 00238
7 _rtpp_str_dup2 [function] [call site] 00239
6 rtpp_ttl_ctor [function] [call site] 00240
7 rtpp_rzmalloc [function] [call site] 00241
7 pthread_mutex_init [call site] 00242
7 rtpp_ttl_dtor [function] [call site] 00243
8 pthread_mutex_destroy [call site] 00244
6 rtpp_session_dtor [function] [call site] 00245
7 rtpp_timestamp_get [function] [call site] 00246
8 _getdtime [function] [call site] 00247
9 clock_gettime [call site] 00248
8 _getdtime [function] [call site] 00249
5 handle_nomem [function] [call site] 00250
5 rtpp_command_get_stats [function] [call site] 00251
5 handle_nomem [function] [call site] 00252
5 handle_nomem [function] [call site] 00253
5 rtpp_rlim_max [function] [call site] 00254
5 rtpp_rlim_max [function] [call site] 00255
5 handle_copy [function] [call site] 00256
5 handle_copy [function] [call site] 00257
5 rtpp_command_get_raddr [function] [call site] 00258
5 rtpp_timeout_data_ctor [function] [call site] 00259
6 rtpp_rzmalloc [function] [call site] 00260
5 rtp_resizer_set_ptime [function] [call site] 00261
6 rtp_resizer_get_ptime [function] [call site] 00262
5 rtp_resizer_new [function] [call site] 00263
6 rtpp_zmalloc [function] [call site] 00264
6 rtp_resizer_set_ptime [function] [call site] 00265
5 rtp_resizer_free [function] [call site] 00266
5 ul_reply_port [function] [call site] 00267
4 rtpp_command_ul_opts_free [function] [call site] 00268
4 abort [call site] 00269
3 __assert_fail [call site] 00270
3 __assert_fail [call site] 00271
3 __assert_fail [call site] 00272
1 __assert_fail [call site] 00273
1 rfz_get_chunk [function] [call site] 00274
1 proc_foreach [function] [call site] 00275
2 rtp_packet_alloc [function] [call site] 00276
3 rtpp_rzmalloc [function] [call site] 00277
1 sem_wait [call site] 00278
1 ExecuteRTPPCommand [function] [call site] 00279
1 __assert_fail [call site] 00280