Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
6	1 : View List ['va_log']	0	6	usbredirparser_caps_get_cap	call site: 00007	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:272
0	None	12	22	usbredirfilter_string_to_rules	call site: 00197	/work/build/../../src/spice-usbredir/usbredirparser/usbredirfilter.c:68
0	None	10	20	usbredirfilter_string_to_rules	call site: 00198	/work/build/../../src/spice-usbredir/usbredirparser/usbredirfilter.c:73
0	None	2	107	usbredirparser_unserialize	call site: 00128	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1942
0	None	2	65	usbredirparser_unserialize	call site: 00140	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1991
0	None	2	25	usbredirparser_queue	call site: 00030	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1228
0	None	2	2	usbredirparser_do_write	call site: 00211	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1177
0	None	0	391	usbredirparser_do_read	call site: 00181	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1100
0	None	0	136	usbredirparser_init	call site: 00004	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:217
0	None	0	17	usbredirparser_queue	call site: 00067	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1237
0	None	0	12	usbredirparser_do_read	call site: 00174	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1072
0	None	0	12	usbredirparser_unserialize	call site: 00094	/work/build/../../src/spice-usbredir/usbredirparser/usbredirparser.c:1813

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           usbredirparser_create

[function] [call site] 00001


             calloc

[call site] 00002


           usbredirparser_init

[function] [call site] 00003


             snprintf

[call site] 00004


             usbredirparser_caps_set_cap

[function] [call site] 00005


             usbredirparser_verify_caps

[function] [call site] 00006


               usbredirparser_caps_get_cap

[function] [call site] 00007


                 va_log

[function] [call site] 00008


                   sprintf

[call site] 00009


                   vsnprintf

[call site] 00010


               usbredirparser_caps_get_cap

[function] [call site] 00011


               va_log

[function] [call site] 00012


             usbredirparser_queue

[function] [call site] 00013


               usbredirparser_get_header_len

[function] [call site] 00014


                 usbredirparser_using_32bits_ids

[function] [call site] 00015


                   usbredirparser_have_cap

[function] [call site] 00016


                     usbredirparser_caps_get_cap

[function] [call site] 00017


                   usbredirparser_peer_has_cap

[function] [call site] 00018


                     usbredirparser_caps_get_cap

[function] [call site] 00019


               usbredirparser_get_type_header_len

[function] [call site] 00020


                 usbredirparser_have_cap

[function] [call site] 00021


                 usbredirparser_peer_has_cap

[function] [call site] 00022


                 usbredirparser_have_cap

[function] [call site] 00023


                 usbredirparser_peer_has_cap

[function] [call site] 00024


                 usbredirparser_have_cap

[function] [call site] 00025


                 usbredirparser_peer_has_cap

[function] [call site] 00026


                 usbredirparser_have_cap

[function] [call site] 00027


                 usbredirparser_peer_has_cap

[function] [call site] 00028


               va_log

[function] [call site] 00029


               usbredirparser_verify_type_header

[function] [call site] 00030


                 va_log

[function] [call site] 00031


                 va_log

[function] [call site] 00032


                 va_log

[function] [call site] 00033


                 va_log

[function] [call site] 00034


                 usbredirparser_peer_has_cap

[function] [call site] 00035


                 usbredirparser_have_cap

[function] [call site] 00036


                 va_log

[function] [call site] 00037


                 usbredirparser_peer_has_cap

[function] [call site] 00038


                 usbredirparser_have_cap

[function] [call site] 00039


                 va_log

[function] [call site] 00040


                 va_log

[function] [call site] 00041


                 va_log

[function] [call site] 00042


                 usbredirparser_peer_has_cap

[function] [call site] 00043


                 usbredirparser_have_cap

[function] [call site] 00044


                 va_log

[function] [call site] 00045


                 usbredirparser_verify_bulk_recv_cap

[function] [call site] 00046


                   usbredirparser_peer_has_cap

[function] [call site] 00047


                   usbredirparser_have_cap

[function] [call site] 00048


                   va_log

[function] [call site] 00049


                 va_log

[function] [call site] 00050


                 va_log

[function] [call site] 00051


                 usbredirparser_verify_bulk_recv_cap

[function] [call site] 00052


                 va_log

[function] [call site] 00053


                 usbredirparser_verify_bulk_recv_cap

[function] [call site] 00054


                 va_log

[function] [call site] 00055


                 usbredirparser_have_cap

[function] [call site] 00056


                 usbredirparser_peer_has_cap

[function] [call site] 00057


                 va_log

[function] [call site] 00058


                 usbredirparser_verify_bulk_recv_cap

[function] [call site] 00059


                 va_log

[function] [call site] 00060


                 va_log

[function] [call site] 00061


                 va_log

[function] [call site] 00062


                 va_log

[function] [call site] 00063


                 va_log

[function] [call site] 00064


                 va_log

[function] [call site] 00065


               va_log

[function] [call site] 00066


               calloc

[call site] 00067


               va_log

[function] [call site] 00068


               usbredirparser_using_32bits_ids

[function] [call site] 00069


           (anonymous namespace)::try_unserialize(usbredirparser*, FuzzedDataProvider*)

[function] [call site] 00070


             __assert_fail

[call site] 00071


             usbredirparser_unserialize

[function] [call site] 00072


               usbredirparser_assert_invariants

[function] [call site] 00073


                 __assert_fail

[call site] 00074


                 __assert_fail

[call site] 00075


                 __assert_fail

[call site] 00076


                 __assert_fail

[call site] 00077


                 __assert_fail

[call site] 00078


                 __assert_fail

[call site] 00079


                 __assert_fail

[call site] 00080


                 __assert_fail

[call site] 00081


                 __assert_fail

[call site] 00082


                 __assert_fail

[call site] 00083


                 __assert_fail

[call site] 00084


                 __assert_fail

[call site] 00085


                 __assert_fail

[call site] 00086


                 __assert_fail

[call site] 00087


                 __assert_fail

[call site] 00088


                 __assert_fail

[call site] 00089


                 __assert_fail

[call site] 00090


               unserialize_int

[function] [call site] 00091


                 va_log

[function] [call site] 00092


                 va_log

[function] [call site] 00093


               usbredirparser_assert_invariants

[function] [call site] 00094


               va_log

[function] [call site] 00095


               usbredirparser_assert_invariants

[function] [call site] 00096


               va_log

[function] [call site] 00097


               usbredirparser_assert_invariants

[function] [call site] 00098


               unserialize_int

[function] [call site] 00099


               usbredirparser_assert_invariants

[function] [call site] 00100


               va_log

[function] [call site] 00101


               usbredirparser_assert_invariants

[function] [call site] 00102


               unserialize_data

[function] [call site] 00103


                 va_log

[function] [call site] 00104


                 va_log

[function] [call site] 00105


                 va_log

[function] [call site] 00106


                 va_log

[function] [call site] 00107


                 va_log

[function] [call site] 00108


                 va_log

[function] [call site] 00109


               usbredirparser_assert_invariants

[function] [call site] 00110


               va_log

[function] [call site] 00111


               usbredirparser_assert_invariants

[function] [call site] 00112


               va_log

[function] [call site] 00113


               unserialize_data

[function] [call site] 00114


               usbredirparser_assert_invariants

[function] [call site] 00115


               unserialize_int

[function] [call site] 00116


               usbredirparser_assert_invariants

[function] [call site] 00117


               usbredirparser_get_header_len

[function] [call site] 00118


               unserialize_data

[function] [call site] 00119


               usbredirparser_assert_invariants

[function] [call site] 00120


               va_log

[function] [call site] 00121


               usbredirparser_assert_invariants

[function] [call site] 00122


               usbredirparser_get_type_header_len

[function] [call site] 00123


               usbredirparser_expect_extra_data

[function] [call site] 00124


               va_log

[function] [call site] 00125


               usbredirparser_assert_invariants

[function] [call site] 00126


               unserialize_data

[function] [call site] 00127


               usbredirparser_assert_invariants

[function] [call site] 00128


               va_log

[function] [call site] 00129


               usbredirparser_assert_invariants

[function] [call site] 00130


               unserialize_data

[function] [call site] 00131


               usbredirparser_assert_invariants

[function] [call site] 00132


               unserialize_int

[function] [call site] 00133


               usbredirparser_assert_invariants

[function] [call site] 00134


               usbredirparser_assert_invariants

[function] [call site] 00135


               unserialize_data

[function] [call site] 00136


               usbredirparser_assert_invariants

[function] [call site] 00137


               va_log

[function] [call site] 00138


               usbredirparser_assert_invariants

[function] [call site] 00139


               calloc

[call site] 00140


               va_log

[function] [call site] 00141


               usbredirparser_assert_invariants

[function] [call site] 00142


               va_log

[function] [call site] 00143


               usbredirparser_assert_invariants

[function] [call site] 00144


               usbredirparser_assert_invariants

[function] [call site] 00145


           usbredirparser_has_data_to_write

[function] [call site] 00146


           (anonymous namespace)::try_serialize(usbredirparser*)

[function] [call site] 00147


             usbredirparser_serialize

[function] [call site] 00148


               serialize_int

[function] [call site] 00149


                 va_log

[function] [call site] 00150


                 serialize_alloc

[function] [call site] 00151


                   realloc

[call site] 00152


                   va_log

[function] [call site] 00153


               serialize_int

[function] [call site] 00154


               serialize_data

[function] [call site] 00155


                 va_log

[function] [call site] 00156


                 va_log

[function] [call site] 00157


                 serialize_alloc

[function] [call site] 00158


               serialize_data

[function] [call site] 00159


               serialize_int

[function] [call site] 00160


               serialize_int

[function] [call site] 00161


               serialize_data

[function] [call site] 00162


               serialize_data

[function] [call site] 00163


               serialize_data

[function] [call site] 00164


               serialize_int

[function] [call site] 00165


               serialize_data

[function] [call site] 00166


           usbredirparser_do_read

[function] [call site] 00167


             usbredirparser_get_header_len

[function] [call site] 00168


             usbredirparser_assert_invariants

[function] [call site] 00169


             usbredirparser_assert_invariants

[function] [call site] 00170


             usbredirparser_assert_invariants

[function] [call site] 00171


             usbredirparser_get_type_header_len

[function] [call site] 00172


             va_log

[function] [call site] 00173


             usbredirparser_assert_invariants

[function] [call site] 00174


             va_log

[function] [call site] 00175


             usbredirparser_assert_invariants

[function] [call site] 00176


             va_log

[function] [call site] 00177


             usbredirparser_assert_invariants

[function] [call site] 00178


             usbredirparser_expect_extra_data

[function] [call site] 00179


             va_log

[function] [call site] 00180


             usbredirparser_assert_invariants

[function] [call site] 00181


             va_log

[function] [call site] 00182


             usbredirparser_assert_invariants

[function] [call site] 00183


             usbredirparser_verify_type_header

[function] [call site] 00184


             usbredirparser_call_type_func

[function] [call site] 00185


               usbredirparser_using_32bits_ids

[function] [call site] 00186


               usbredirparser_handle_hello

[function] [call site] 00187


                 strncpy

[call site] 00188


                 usbredirparser_verify_caps

[function] [call site] 00189


                 usbredirparser_using_32bits_ids

[function] [call site] 00190


               usbredirparser_peer_has_cap

[function] [call site] 00191


               usbredirparser_queue

[function] [call site] 00192


               usbredirfilter_string_to_rules

[function] [call site] 00193


                 strlen

[call site] 00194


                 strspn

[call site] 00195


                 strcspn

[call site] 00196


                 calloc

[call site] 00197


                 strdup

[call site] 00198


                 strtok_r

[call site] 00199


                 strtok_r

[call site] 00200


                 strtol

[call site] 00201


                 strtok_r

[call site] 00202


                 usbredirfilter_verify

[function] [call site] 00203


                 strtok_r

[call site] 00204


               va_log

[function] [call site] 00205


             usbredirparser_assert_invariants

[function] [call site] 00206


             usbredirparser_get_header_len

[function] [call site] 00207


           (anonymous namespace)::try_serialize(usbredirparser*)

[function] [call site] 00208


           usbredirparser_has_data_to_write

[function] [call site] 00209


           usbredirparser_do_write

[function] [call site] 00210


             __assert_fail

[call site] 00211


             abort

[call site] 00212