Fuzz introspector: fuzz_iolog_json
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
10 10 2 :

['fputs', 'putc']

12 14 warning call site: 00025 /src/sudo/lib/util/./fatal.c:192
2 2 1 :

['strcmp']

9 9 initprogname2 call site: 00004 /src/sudo/lib/util/./progname.c:79
0 41 2 :

['sudo_warnx_nodebug_v1', 'sudo_warn_gettext_v1']

0 41 json_array_to_strvec call site: 00000 /src/sudo/lib/eventlog/./parse_json.c:184
0 41 2 :

['sudo_warnx_nodebug_v1', 'sudo_warn_gettext_v1']

0 41 new_json_item call site: 00042 /src/sudo/lib/eventlog/./parse_json.c:499
0 41 2 :

['sudo_warnx_nodebug_v1', 'sudo_warn_gettext_v1']

0 41 json_parse_string call site: 00059 /src/sudo/lib/eventlog/./parse_json.c:530
0 35 2 :

['sudo_warnx_nodebug_v1', 'sudo_warn_gettext_v1']

0 35 eventlog_json_parse call site: 00126 /src/sudo/lib/eventlog/./parse_json.c:644
0 0 None 22 1259 eventlog_json_read call site: 00077 /src/sudo/lib/eventlog/./parse_json.c:964
0 0 None 22 1259 eventlog_json_read call site: 00085 /src/sudo/lib/eventlog/./parse_json.c:986
0 0 None 22 1259 eventlog_json_read call site: 00092 /src/sudo/lib/eventlog/./parse_json.c:1008
0 0 None 22 1259 eventlog_json_read call site: 00112 /src/sudo/lib/eventlog/./parse_json.c:1038
0 0 None 12 16 warning call site: 00025 /src/sudo/lib/util/./fatal.c:189
0 0 None 10 10 sudo_strtonumx call site: 00101 /src/sudo/lib/util/./strtonum.c:89

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 initprogname [function] [call site] 00001
2 initprogname2 [function] [call site] 00002
3 sudo_getprogname [function] [call site] 00003
3 sudo_basename_v1 [function] [call site] 00004
4 strrchr [call site] 00005
3 strcmp [call site] 00006
3 sudo_setprogname [function] [call site] 00007
4 sudo_basename_v1 [function] [call site] 00008
1 getenv [call site] 00009
1 sudo_warn_set_conversation_v1 [function] [call site] 00010
1 fuzz_conversation [function] [call site] 00011
1 open_data [function] [call site] 00012
2 fmemopen [call site] 00013
1 calloc [call site] 00014
1 iolog_parse_loginfo_json [function] [call site] 00015
2 eventlog_json_read [function] [call site] 00016
3 getdelim [call site] 00017
3 __ctype_b_loc [call site] 00018
3 __ctype_b_loc [call site] 00019
3 __ctype_b_loc [call site] 00020
3 sudo_warn_gettext_v1 [function] [call site] 00021
4 dgettext [call site] 00022
3 sudo_warnx_nodebug_v1 [function] [call site] 00023
4 warning [function] [call site] 00024
5 __errno_location [call site] 00025
5 sudo_getprogname [function] [call site] 00026
5 vsnprintf [call site] 00027
5 vasprintf [call site] 00028
5 sudo_getprogname [function] [call site] 00029
5 fputs [call site] 00030
5 fputs [call site] 00031
5 vfprintf [call site] 00032
5 fputs [call site] 00033
5 fputs [call site] 00034
5 putc [call site] 00035
5 __errno_location [call site] 00036
3 sudo_warn_gettext_v1 [function] [call site] 00037
3 sudo_warnx_nodebug_v1 [function] [call site] 00038
3 json_stack_push [function] [call site] 00039
4 sudo_warn_gettext_v1 [function] [call site] 00040
4 sudo_warnx_nodebug_v1 [function] [call site] 00041
4 new_json_item [function] [call site] 00042
5 sudo_warn_gettext_v1 [function] [call site] 00043
5 sudo_warn_gettext_v1 [function] [call site] 00044
5 sudo_warnx_nodebug_v1 [function] [call site] 00045
3 sudo_warn_gettext_v1 [function] [call site] 00046
3 sudo_warnx_nodebug_v1 [function] [call site] 00047
3 sudo_warn_gettext_v1 [function] [call site] 00048
3 sudo_warnx_nodebug_v1 [function] [call site] 00049
3 sudo_warn_gettext_v1 [function] [call site] 00050
3 sudo_warnx_nodebug_v1 [function] [call site] 00051
3 json_stack_push [function] [call site] 00052
3 sudo_warn_gettext_v1 [function] [call site] 00053
3 sudo_warnx_nodebug_v1 [function] [call site] 00054
3 sudo_warn_gettext_v1 [function] [call site] 00055
3 sudo_warnx_nodebug_v1 [function] [call site] 00056
3 json_parse_string [function] [call site] 00057
4 sudo_warn_gettext_v1 [function] [call site] 00058
4 sudo_warnx_nodebug_v1 [function] [call site] 00059
4 sudo_warn_gettext_v1 [function] [call site] 00060
4 sudo_warnx_nodebug_v1 [function] [call site] 00061
4 sudo_hexchar_v1 [function] [call site] 00062
4 __ctype_b_loc [call site] 00063
3 sudo_warn_gettext_v1 [function] [call site] 00064
3 sudo_warnx_nodebug_v1 [function] [call site] 00065
3 sudo_warn_gettext_v1 [function] [call site] 00066
3 sudo_warnx_nodebug_v1 [function] [call site] 00067
3 json_insert_str [function] [call site] 00068
4 new_json_item [function] [call site] 00069
4 json_parse_string [function] [call site] 00070
3 strncmp [call site] 00071
3 sudo_warn_gettext_v1 [function] [call site] 00072
3 sudo_warnx_nodebug_v1 [function] [call site] 00073
3 __ctype_b_loc [call site] 00074
3 sudo_warn_gettext_v1 [function] [call site] 00075
3 sudo_warnx_nodebug_v1 [function] [call site] 00076
3 json_insert_bool [function] [call site] 00077
4 new_json_item [function] [call site] 00078
3 strncmp [call site] 00079
3 sudo_warn_gettext_v1 [function] [call site] 00080
3 sudo_warnx_nodebug_v1 [function] [call site] 00081
3 __ctype_b_loc [call site] 00082
3 sudo_warn_gettext_v1 [function] [call site] 00083
3 sudo_warnx_nodebug_v1 [function] [call site] 00084
3 json_insert_bool [function] [call site] 00085
3 strncmp [call site] 00086
3 sudo_warn_gettext_v1 [function] [call site] 00087
3 sudo_warnx_nodebug_v1 [function] [call site] 00088
3 __ctype_b_loc [call site] 00089
3 sudo_warn_gettext_v1 [function] [call site] 00090
3 sudo_warnx_nodebug_v1 [function] [call site] 00091
3 json_insert_null [function] [call site] 00092
4 new_json_item [function] [call site] 00093
3 sudo_warn_gettext_v1 [function] [call site] 00094
3 sudo_warnx_nodebug_v1 [function] [call site] 00095
3 strcspn [call site] 00096
3 sudo_warn_gettext_v1 [function] [call site] 00097
3 sudo_warnx_nodebug_v1 [function] [call site] 00098
3 sudo_strtonum [function] [call site] 00099
4 sudo_strtonumx [function] [call site] 00100
5 __ctype_b_loc [call site] 00101
5 __ctype_b_loc [call site] 00102
5 __ctype_b_loc [call site] 00103
5 __ctype_b_loc [call site] 00104
5 __ctype_b_loc [call site] 00105
5 __errno_location [call site] 00106
5 __errno_location [call site] 00107
5 __errno_location [call site] 00108
4 __errno_location [call site] 00109
3 sudo_warn_gettext_v1 [function] [call site] 00110
3 sudo_warnx_nodebug_v1 [function] [call site] 00111
3 json_insert_num [function] [call site] 00112
4 new_json_item [function] [call site] 00113
3 sudo_warn_gettext_v1 [function] [call site] 00114
3 sudo_warnx_nodebug_v1 [function] [call site] 00115
3 sudo_warn_gettext_v1 [function] [call site] 00116
3 sudo_warnx_nodebug_v1 [function] [call site] 00117
3 sudo_warn_gettext_v1 [function] [call site] 00118
3 sudo_warnx_nodebug_v1 [function] [call site] 00119
3 eventlog_json_free [function] [call site] 00120
4 free_json_items [function] [call site] 00121
5 free_json_items [function] [call site] 00122
6 sudo_warnx_nodebug_v1 [function] [call site] 00123
2 eventlog_json_parse [function] [call site] 00124
3 sudo_warn_gettext_v1 [function] [call site] 00125
3 sudo_warnx_nodebug_v1 [function] [call site] 00126
3 sudo_warn_gettext_v1 [function] [call site] 00127
3 sudo_warnx_nodebug_v1 [function] [call site] 00128
3 sudo_debug_printf2_v1 [function] [call site] 00129
3 strcmp [call site] 00130
3 sudo_debug_printf2_v1 [function] [call site] 00131
3 sudo_debug_printf2_v1 [function] [call site] 00132
3 sudo_debug_printf2_v1 [function] [call site] 00133
3 strlen [call site] 00134
3 strlen [call site] 00135
3 strcmp [call site] 00136
2 eventlog_json_free [function] [call site] 00137
1 eventlog_free [function] [call site] 00138
1 fclose [call site] 00139
1 fflush [call site] 00140