Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
11	11	1 : View List ['file_kind_to_string']	93	216	spec_node_cmp	call site: 00231	/src/selinux/libselinux/src/label_file.c:2353
10	10	4 : View List ['pthread_mutex_lock', '__errno_location', 'fmt_stem', 'pthread_mutex_unlock']	10	10	spec_node_cmp	call site: 00246	/src/selinux/libselinux/src/label_file.c:2436
6	6	2 : View List ['__errno_location', 'munmap']	6	33	load_mmap	call site: 00140	/src/selinux/libselinux/src/label_file.c:1003
6	6	2 : View List ['statvfs64', 'set_selinuxmnt']	6	6	verify_selinuxmnt	call site: 00000	/src/selinux/libselinux/src/init.c:39
2	2	2 : View List ['strlen', 'free']	2	15	selabel_sub_key	call site: 00280	/src/selinux/libselinux/src/label_file.c:1388
2	2	1 : View List ['fclose']	2	2	convert_data	call site: 00015	/src/selinux/libselinux/fuzz/selabel_file_compiled-fuzzer.c:80
2	2	1 : View List ['fclose']	2	2	init_selinuxmnt	call site: 00000	/src/selinux/libselinux/src/init.c:128
2	2	1 : View List ['abort']	2	2	regex_format_error	call site: 00322	/src/selinux/libselinux/src/regex.c:601
0	0	None	257	380	spec_node_cmp	call site: 00199	/src/selinux/libselinux/src/label_file.c:2218
0	0	None	257	380	spec_node_cmp	call site: 00200	/src/selinux/libselinux/src/label_file.c:2228
0	0	None	257	380	spec_node_cmp	call site: 00206	/src/selinux/libselinux/src/label_file.c:2240
0	0	None	257	380	spec_node_cmp	call site: 00207	/src/selinux/libselinux/src/label_file.c:2250

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           memmem

[call site] 00001


           memmem

[call site] 00002


           memmem

[call site] 00003


           selinux_set_callback

[function] [call site] 00004


           selinux_set_callback

[function] [call site] 00005


           calloc

[call site] 00006


           convert_data

[function] [call site] 00007


             memfd_create

[call site] 00008


             write_full

[function] [call site] 00009


               write

[call site] 00010


               __errno_location

[call site] 00011


             close

[call site] 00012


             fdopen

[call site] 00013


             close

[call site] 00014


             fseek

[call site] 00015


             fclose

[call site] 00016


           __errno_location

[call site] 00017


           load_mmap

[function] [call site] 00018


             fileno

[call site] 00019


             mmap64

[call site] 00020


             madvise

[call site] 00021


             __errno_location

[call site] 00022


             pthread_mutex_lock

[call site] 00023


             pthread_mutex_unlock

[call site] 00024


             next_entry

[function] [call site] 00025


             __bswap_32

[function] [call site] 00026


             next_entry

[function] [call site] 00027


             __bswap_32

[function] [call site] 00028


             __bswap_32

[function] [call site] 00029


             __errno_location

[call site] 00030


             pthread_mutex_lock

[call site] 00031


             pthread_mutex_unlock

[call site] 00032


             regex_version

[function] [call site] 00033


               pcre2_config_8

[call site] 00034


               pcre2_config_8

[call site] 00035


             regex_arch_string

[function] [call site] 00036


               pthread_once

[call site] 00037


               regex_arch_string_init

[function] [call site] 00038


                 snprintf

[call site] 00039


             next_entry

[function] [call site] 00040


             __bswap_32

[function] [call site] 00041


             strlen

[call site] 00042


             next_entry

[function] [call site] 00043


             entry_size_check

[function] [call site] 00044


             next_entry

[function] [call site] 00045


             strcmp

[call site] 00046


             __errno_location

[call site] 00047


             pthread_mutex_lock

[call site] 00048


             pthread_mutex_unlock

[call site] 00049


             next_entry

[function] [call site] 00050


             __bswap_32

[function] [call site] 00051


             strlen

[call site] 00052


             next_entry

[function] [call site] 00053


             entry_size_check

[function] [call site] 00054


             next_entry

[function] [call site] 00055


             strcmp

[call site] 00056


             __errno_location

[call site] 00057


             pthread_mutex_lock

[call site] 00058


             pthread_mutex_unlock

[call site] 00059


             next_entry

[function] [call site] 00060


             __bswap_64

[function] [call site] 00061


             load_mmap_ctxarray

[function] [call site] 00062


               next_entry

[function] [call site] 00063


               __bswap_32

[function] [call site] 00064


               entry_size_check

[function] [call site] 00065


               calloc

[call site] 00066


               next_entry

[function] [call site] 00067


               __bswap_16

[function] [call site] 00068


               entry_size_check

[function] [call site] 00069


               next_entry

[function] [call site] 00070


               strcmp

[call site] 00071


               __errno_location

[call site] 00072


               pthread_mutex_lock

[call site] 00073


               pthread_mutex_unlock

[call site] 00074


             calloc

[call site] 00075


             load_mmap_spec_node

[function] [call site] 00076


               next_entry

[function] [call site] 00077


               __bswap_16

[function] [call site] 00078


               next_entry

[function] [call site] 00079


               next_entry

[function] [call site] 00080


               __bswap_32

[function] [call site] 00081


               entry_size_check

[function] [call site] 00082


               calloc

[call site] 00083


               load_mmap_literal_spec

[function] [call site] 00084


                 next_entry

[function] [call site] 00085


                 __bswap_32

[function] [call site] 00086


                 strdup

[call site] 00087


                 next_entry

[function] [call site] 00088


                 __bswap_16

[function] [call site] 00089


                 next_entry

[function] [call site] 00090


                 next_entry

[function] [call site] 00091


                 __bswap_16

[function] [call site] 00092


                 next_entry

[function] [call site] 00093


                 strlen

[call site] 00094


                 next_entry

[function] [call site] 00095


               next_entry

[function] [call site] 00096


               __bswap_32

[function] [call site] 00097


               entry_size_check

[function] [call site] 00098


               calloc

[call site] 00099


               load_mmap_regex_spec

[function] [call site] 00100


                 next_entry

[function] [call site] 00101


                 __bswap_32

[function] [call site] 00102


                 strdup

[call site] 00103


                 next_entry

[function] [call site] 00104


                 __bswap_32

[function] [call site] 00105


                 next_entry

[function] [call site] 00106


                 __bswap_16

[function] [call site] 00107


                 next_entry

[function] [call site] 00108


                 next_entry

[function] [call site] 00109


                 __bswap_16

[function] [call site] 00110


                 strlen

[call site] 00111


                 next_entry

[function] [call site] 00112


                 regex_load_mmap

[function] [call site] 00113


                   next_entry

[function] [call site] 00114


                   __bswap_32

[function] [call site] 00115


                   pcre2_serialize_get_number_of_codes_8

[call site] 00116


                   regex_data_create

[function] [call site] 00117


                     calloc

[call site] 00118


                     pthread_mutex_init

[call site] 00119


                   pcre2_serialize_decode_8

[call site] 00120


                   pcre2_match_data_create_from_pattern_8

[call site] 00121


                   next_entry

[function] [call site] 00122


                   regex_data_free

[function] [call site] 00123


                     pcre2_code_free_8

[call site] 00124


                     pcre2_match_data_free_8

[call site] 00125


                     pthread_mutex_destroy

[call site] 00126


                 pthread_mutex_init

[call site] 00127


               next_entry

[function] [call site] 00128


               __bswap_32

[function] [call site] 00129


               entry_size_check

[function] [call site] 00130


               calloc

[call site] 00131


               load_mmap_spec_node

[function] [call site] 00132


                 strcmp

[call site] 00133


             free_spec_node

[function] [call site] 00134


               pthread_mutex_destroy

[call site] 00135


               pthread_mutex_destroy

[call site] 00136


               regex_data_free

[function] [call site] 00137


               pthread_mutex_destroy

[call site] 00138


               free_spec_node

[function] [call site] 00139


             merge_mmap_spec_nodes

[function] [call site] 00140


               strcmp

[call site] 00141


               __assert_fail

[call site] 00142


               __assert_fail

[call site] 00143


               reallocarray

[call site] 00144


               __assert_fail

[call site] 00145


               reallocarray

[call site] 00146


               __assert_fail

[call site] 00147


               calloc

[call site] 00148


               qsort

[call site] 00149


               compare_spec_node

[function] [call site] 00150


                 strcmp

[call site] 00151


                 __assert_fail

[call site] 00152


               strcmp

[call site] 00153


               merge_mmap_spec_nodes

[function] [call site] 00154


                 free_spec_node

[function] [call site] 00155


                 __assert_fail

[call site] 00156


                 __assert_fail

[call site] 00157


                 __assert_fail

[call site] 00158


             free_spec_node

[function] [call site] 00159


             free_context_array

[function] [call site] 00160


             free_context_array

[function] [call site] 00161


             free_spec_node

[function] [call site] 00162


             munmap

[call site] 00163


             __errno_location

[call site] 00164


             __errno_location

[call site] 00165


           __errno_location

[call site] 00166


           __assert_fail

[call site] 00167


           fclose

[call site] 00168


           convert_data

[function] [call site] 00169


           __errno_location

[call site] 00170


           load_mmap

[function] [call site] 00171


           __errno_location

[call site] 00172


           fclose

[call site] 00173


           convert_data

[function] [call site] 00174


           __errno_location

[call site] 00175


           load_mmap

[function] [call site] 00176


           __errno_location

[call site] 00177


           __assert_fail

[call site] 00178


           fclose

[call site] 00179


           sort_specs

[function] [call site] 00180


             sort_spec_node

[function] [call site] 00181


               __assert_fail

[call site] 00182


               __assert_fail

[call site] 00183


               __assert_fail

[call site] 00184


               qsort

[call site] 00185


               compare_literal_spec

[function] [call site] 00186


                 strcmp

[call site] 00187


               qsort

[call site] 00188


               compare_spec_node

[function] [call site] 00189


               sort_spec_node

[function] [call site] 00190

cmp

[function] [call site] 00191


             __assert_fail

[call site] 00192


             spec_node_cmp

[function] [call site] 00193


               strcmp

[call site] 00194


               __errno_location

[call site] 00195


               pthread_mutex_lock

[call site] 00196


               fmt_stem

[function] [call site] 00197


               pthread_mutex_unlock

[call site] 00198


               strcmp

[call site] 00199


               lspec_incomp

[function] [call site] 00200


                 __errno_location

[call site] 00201


                 pthread_mutex_lock

[call site] 00202


                 fmt_stem

[function] [call site] 00203


                 file_kind_to_string

[function] [call site] 00204


                 pthread_mutex_unlock

[call site] 00205


               lspec_incomp

[function] [call site] 00206


               lspec_incomp

[function] [call site] 00207


               lspec_incomp

[function] [call site] 00208


               __errno_location

[call site] 00209


               pthread_mutex_lock

[call site] 00210


               fmt_stem

[function] [call site] 00211


               pthread_mutex_unlock

[call site] 00212


               __errno_location

[call site] 00213


               pthread_mutex_lock

[call site] 00214


               fmt_stem

[function] [call site] 00215


               pthread_mutex_unlock

[call site] 00216


               strcmp

[call site] 00217


               __assert_fail

[call site] 00218


               strcmp

[call site] 00219


               strcmp

[call site] 00220


               rspec_incomp

[function] [call site] 00221


                 __errno_location

[call site] 00222


                 pthread_mutex_lock

[call site] 00223


                 fmt_stem

[function] [call site] 00224


                 file_kind_to_string

[function] [call site] 00225


                 pthread_mutex_unlock

[call site] 00226


               __errno_location

[call site] 00227


               pthread_mutex_lock

[call site] 00228


               fmt_stem

[function] [call site] 00229


               file_kind_to_string

[function] [call site] 00230


               pthread_mutex_unlock

[call site] 00231


               __errno_location

[call site] 00232


               pthread_mutex_lock

[call site] 00233


               fmt_stem

[function] [call site] 00234


               file_kind_to_string

[function] [call site] 00235


               pthread_mutex_unlock

[call site] 00236


               strcmp

[call site] 00237


               __errno_location

[call site] 00238


               pthread_mutex_lock

[call site] 00239


               fmt_stem

[function] [call site] 00240


               pthread_mutex_unlock

[call site] 00241


               __errno_location

[call site] 00242


               pthread_mutex_lock

[call site] 00243


               fmt_stem

[function] [call site] 00244


               pthread_mutex_unlock

[call site] 00245


               spec_node_cmp

[function] [call site] 00246


                 __errno_location

[call site] 00247


                 pthread_mutex_lock

[call site] 00248


                 fmt_stem

[function] [call site] 00249


                 pthread_mutex_unlock

[call site] 00250


                 __errno_location

[call site] 00251


                 pthread_mutex_lock

[call site] 00252


                 fmt_stem

[function] [call site] 00253


                 pthread_mutex_unlock

[call site] 00254


                 __errno_location

[call site] 00255


                 pthread_mutex_lock

[call site] 00256


                 fmt_stem

[function] [call site] 00257


                 pthread_mutex_unlock

[call site] 00258


                 __errno_location

[call site] 00259


                 pthread_mutex_lock

[call site] 00260


                 fmt_stem

[function] [call site] 00261


                 pthread_mutex_unlock

[call site] 00262


                 __errno_location

[call site] 00263


                 pthread_mutex_lock

[call site] 00264


                 fmt_stem

[function] [call site] 00265


                 pthread_mutex_unlock

[call site] 00266


           __assert_fail

[call site] 00267


           __errno_location

[call site] 00268


           lookup_all

[function] [call site] 00269


             mode_to_file_kind

[function] [call site] 00270


             __errno_location

[call site] 00271


             __errno_location

[call site] 00272


             strstr

[call site] 00273


             strlen

[call site] 00274


             strstr

[call site] 00275


             strcpy

[call site] 00276


             strlen

[call site] 00277


             __errno_location

[call site] 00278


             selabel_sub_key

[function] [call site] 00279


               selabel_apply_subs

[function] [call site] 00280


                 strncmp

[call site] 00281


                 strcmp

[call site] 00282


               strlen

[call site] 00283


               selabel_apply_subs

[function] [call site] 00284


               selabel_apply_subs

[function] [call site] 00285


             lookup_find_deepest_node

[function] [call site] 00286


               strchr

[call site] 00287


               search_child_node

[function] [call site] 00288


                 strncmp

[call site] 00289


             lookup_check_node

[function] [call site] 00290


               strlen

[call site] 00291


               __assert_fail

[call site] 00292


               search_literal_spec

[function] [call site] 00293


                 strncmp

[call site] 00294


                 strcmp

[call site] 00295


                 strncmp

[call site] 00296


                 strcmp

[call site] 00297


               strcmp

[call site] 00298


               __errno_location

[call site] 00299


               strncmp

[call site] 00300


               strcmp

[call site] 00301


               compile_regex

[function] [call site] 00302


                 __errno_location

[call site] 00303


                 pthread_mutex_lock

[call site] 00304


                 pthread_mutex_unlock

[call site] 00305


                 strlen

[call site] 00306


                 pthread_mutex_unlock

[call site] 00307


                 snprintf

[call site] 00308


                 __errno_location

[call site] 00309


                 pthread_mutex_unlock

[call site] 00310


                 snprintf

[call site] 00311


                 regex_prepare_data

[function] [call site] 00312


                   regex_data_create

[function] [call site] 00313


                   pcre2_compile_8

[call site] 00314


                   pcre2_match_data_create_from_pattern_8

[call site] 00315


                   regex_data_free

[function] [call site] 00316


                 regex_format_error

[function] [call site] 00317


                   snprintf

[call site] 00318


                   abort

[call site] 00319


                   snprintf

[call site] 00320


                   abort

[call site] 00321


                   snprintf

[call site] 00322


                   abort

[call site] 00323


                   pcre2_get_error_message_8

[call site] 00324


                 pthread_mutex_unlock

[call site] 00325


                 __errno_location

[call site] 00326


                 pthread_mutex_unlock

[call site] 00327


               __errno_location

[call site] 00328


               pthread_mutex_lock

[call site] 00329


               pthread_mutex_unlock

[call site] 00330


               regex_match

[function] [call site] 00331


                 pthread_mutex_lock

[call site] 00332


                 pcre2_match_8

[call site] 00333


                 pthread_mutex_unlock

[call site] 00334


               strcmp

[call site] 00335


               __errno_location

[call site] 00336


               __errno_location

[call site] 00337


               __errno_location

[call site] 00338


               free_lookup_result

[function] [call site] 00339


           __errno_location

[call site] 00340


           __assert_fail

[call site] 00341


           __assert_fail

[call site] 00342


           __assert_fail

[call site] 00343


           __assert_fail

[call site] 00344


           __assert_fail

[call site] 00345


           strcmp

[call site] 00346


           __assert_fail

[call site] 00347


           __assert_fail

[call site] 00348


           __assert_fail

[call site] 00349


           strlen

[call site] 00350


           __assert_fail

[call site] 00351


           free_lookup_result

[function] [call site] 00352


           fclose

[call site] 00353


           free_spec_node

[function] [call site] 00354


           munmap

[call site] 00355


           __assert_fail

[call site] 00356