Fuzz introspector: SecureYamlFuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
66 0 EP call site: 00000 [org.yaml.snakeyaml.Yaml].load(String)

Fuzzer calltree

0 [SecureYamlFuzzer].fuzzerTestOneInput(com.code_intelligence.jazzer.api.FuzzedDataProvider) [function] [call site] 00000
1 [org.yaml.snakeyaml.LoaderOptions].<init>() [function] [call site] 00001
2 [org.yaml.snakeyaml.inspector.UnTrustedTagInspector].<init>() [function] [call site] 00002
1 [org.yaml.snakeyaml.LoaderOptions].setAllowDuplicateKeys(boolean) [function] [call site] 00003
1 [org.yaml.snakeyaml.LoaderOptions].setMaxAliasesForCollections(int) [function] [call site] 00004
1 [org.yaml.snakeyaml.LoaderOptions].setAllowRecursiveKeys(boolean) [function] [call site] 00005
1 [org.yaml.snakeyaml.LoaderOptions].setNestingDepthLimit(int) [function] [call site] 00006
1 [org.yaml.snakeyaml.LoaderOptions].setCodePointLimit(int,int) [function] [call site] 00007
1 [org.yaml.snakeyaml.constructor.SafeConstructor].<init>(org.yaml.snakeyaml.LoaderOptions) [function] [call site] 00008
2 [ConstructUndefined].<init>() [function] [call site] 00009
2 [org.yaml.snakeyaml.constructor.SafeConstructor].getClass() [function] [call site] 00010
2 [org.yaml.snakeyaml.constructor.SafeConstructor].getName() [function] [call site] 00011
2 [org.yaml.snakeyaml.internal.Logger].getLogger(org.yaml.snakeyaml.constructor.SafeConstructor) [function] [call site] 00012
2 [org.yaml.snakeyaml.constructor.BaseConstructor].<init>(org.yaml.snakeyaml.LoaderOptions) [function] [call site] 00013
3 [Object].<init>() [function] [call site] 00014
3 [java.util.EnumMap].<init>() [function] [call site] 00015
3 [java.util.HashMap].<init>() [function] [call site] 00016
3 [java.util.HashMap].<init>() [function] [call site] 00017
3 [NullPointerException].<init>(String) [function] [call site] 00018
3 [java.util.HashMap].<init>() [function] [call site] 00019
3 [java.util.HashSet].<init>() [function] [call site] 00020
3 [java.util.ArrayList].<init>() [function] [call site] 00021
3 [java.util.ArrayList].<init>() [function] [call site] 00022
3 [java.util.HashMap].<init>() [function] [call site] 00023
3 [java.util.HashMap].<init>() [function] [call site] 00024
3 [org.yaml.snakeyaml.TypeDescription].<init>(org.yaml.snakeyaml.nodes.Tag) [function] [call site] 00025
3 [java.util.HashMap].put(org.yaml.snakeyaml.TypeDescription) [function] [call site] 00026
3 [org.yaml.snakeyaml.TypeDescription].<init>(org.yaml.snakeyaml.nodes.Tag) [function] [call site] 00027
3 [java.util.HashMap].put(org.yaml.snakeyaml.TypeDescription) [function] [call site] 00028
2 [org.yaml.snakeyaml.constructor.SafeConstructor.ConstructYamlNull].<init>() [function] [call site] 00029
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,org.yaml.snakeyaml.constructor.SafeConstructor.ConstructYamlNull) [function] [call site] 00030
2 [ConstructYamlBool].<init>() [function] [call site] 00031
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlBool) [function] [call site] 00032
2 [ConstructYamlInt].<init>() [function] [call site] 00033
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlInt) [function] [call site] 00034
2 [ConstructYamlFloat].<init>() [function] [call site] 00035
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlFloat) [function] [call site] 00036
2 [ConstructYamlBinary].<init>() [function] [call site] 00037
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlBinary) [function] [call site] 00038
2 [ConstructYamlTimestamp].<init>() [function] [call site] 00039
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlTimestamp) [function] [call site] 00040
2 [ConstructYamlOmap].<init>() [function] [call site] 00041
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlOmap) [function] [call site] 00042
2 [ConstructYamlPairs].<init>() [function] [call site] 00043
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlPairs) [function] [call site] 00044
2 [ConstructYamlSet].<init>() [function] [call site] 00045
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlSet) [function] [call site] 00046
2 [ConstructYamlStr].<init>() [function] [call site] 00047
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlStr) [function] [call site] 00048
2 [ConstructYamlSeq].<init>() [function] [call site] 00049
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlSeq) [function] [call site] 00050
2 [ConstructYamlMap].<init>() [function] [call site] 00051
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.nodes.Tag,ConstructYamlMap) [function] [call site] 00052
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(null,ConstructUndefined) [function] [call site] 00053
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.constructor.SafeConstructor,ConstructUndefined) [function] [call site] 00054
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.constructor.SafeConstructor,ConstructUndefined) [function] [call site] 00055
2 [org.yaml.snakeyaml.constructor.SafeConstructor].put(org.yaml.snakeyaml.constructor.SafeConstructor,ConstructUndefined) [function] [call site] 00056
2 [HashMap].<init>() [function] [call site] 00057
2 [java.util.regex.Pattern].compile(String) [function] [call site] 00058
2 [java.util.regex.Pattern].compile(String) [function] [call site] 00059
1 [org.yaml.snakeyaml.Yaml].<init>(org.yaml.snakeyaml.constructor.SafeConstructor) [function] [call site] 00060
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00061
1 [org.yaml.snakeyaml.Yaml].load(String) [function] [call site] 00062
2 [org.yaml.snakeyaml.reader.StreamReader].<init>(String) [function] [call site] 00063
3 [java.io.StringReader].<init>(String) [function] [call site] 00064
3 [org.yaml.snakeyaml.reader.StreamReader].<init>(java.io.StringReader) [function] [call site] 00065
2 [org.yaml.snakeyaml.Yaml].loadFromReader(org.yaml.snakeyaml.reader.StreamReader) [function] [call site] 00066