Fuzz introspector: xrow_decode_begin_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
262 262 1 :

['cord_on_demand']

266 266 fiber_set_name_n call site: 00227 /src/tarantool/src/lib/core/fiber.c:1220
23 23 4 :

['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1719']

23 23 clock_monotonic call site: 00000 /src/tarantool/src/lib/core/clock.c:51
23 23 4 :

['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1439']

23 23 clock_lowres_signal_init call site: 00000 /src/tarantool/src/lib/core/clock_lowres.c:69
21 21 1 :

['mmap_checked']

21 34 slab_arena_create call site: 00000 /src/tarantool/src/lib/small/small/slab_arena.c:204
8 8 1 :

['tt_pthread_setname']

8 8 cord_set_name call site: 00323 /src/tarantool/src/lib/core/fiber.c:2232
6 6 3 :

['sigaddset', 'pthread_sigmask', 'sigemptyset']

6 6 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4680
4 4 2 :

['atoi', 'getenv']

386 572 loop_init call site: 00000 /src/tarantool/third_party/libev/ev.c:3302
4 4 2 :

['close', 'dup2']

4 8 evpipe_alloc call site: 00000 /src/tarantool/third_party/libev/ev.c:2764
4 4 4 :

['malloc', 'exit', 'realloc', 'say_log_level_is_enabled.370']

4 4 fiber_set_name_n call site: 00228 /src/tarantool/src/lib/core/fiber.c:1223
2 39 4 :

['ev_unref', 'ev_io_start', '__errno_location', 'fd_intern']

24 134 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4629
2 2 1 :

['getpid']

401 587 loop_init call site: 00000 /src/tarantool/third_party/libev/ev.c:3298
2 2 1 :

['signalfd']

16 89 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4648

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mp_check [function] [call site] 00001
2 mp_load_u8 [function] [call site] 00002
2 mp_load_u8 [function] [call site] 00003
2 mp_load_u8 [function] [call site] 00004
2 mp_load_u16 [function] [call site] 00005
2 mp_load_u32 [function] [call site] 00006
2 mp_load_u16 [function] [call site] 00007
2 mp_load_u32 [function] [call site] 00008
2 mp_load_u16 [function] [call site] 00009
2 mp_load_u32 [function] [call site] 00010
2 mp_load_u8 [function] [call site] 00011
2 mp_load_u8 [function] [call site] 00012
2 mp_load_u16 [function] [call site] 00013
2 mp_load_u8 [function] [call site] 00014
2 mp_load_u32 [function] [call site] 00015
2 mp_load_u8 [function] [call site] 00016
2 __assert_fail [call site] 00017
2 __assert_fail [call site] 00018
1 xrow_decode_begin [function] [call site] 00019
2 mp_decode_map [function] [call site] 00020
3 mp_load_u8 [function] [call site] 00021
3 mp_load_u16 [function] [call site] 00022
3 mp_load_u32 [function] [call site] 00023
3 __assert_fail [call site] 00024
2 mp_decode_uint [function] [call site] 00025
3 mp_load_u8 [function] [call site] 00026
3 mp_load_u8 [function] [call site] 00027
3 mp_load_u16 [function] [call site] 00028
3 mp_load_u32 [function] [call site] 00029
3 mp_load_u64 [function] [call site] 00030
3 __assert_fail [call site] 00031
2 mp_decode_double [function] [call site] 00032
3 mp_load_u8 [function] [call site] 00033
3 __assert_fail [call site] 00034
3 mp_load_double [function] [call site] 00035
2 mp_decode_uint [function] [call site] 00036
2 mp_decode_bool [function] [call site] 00037
3 mp_load_u8 [function] [call site] 00038
3 __assert_fail [call site] 00039
2 __errno_location [call site] 00040
2 say_log_level_is_enabled [function] [call site] 00041
2 BuildClientError [function] [call site] 00042
3 Exception::operator new(unsigned long) [function] [call site] 00043
4 alloc_failure(char const*, int, unsigned long) [function] [call site] 00044
5 fprintf [call site] 00045
5 exit [call site] 00046
3 ClientError::ClientError(char const*, unsigned int, unsigned int, ...) [function] [call site] 00047
4 ClientError::ClientError(type_info const*, char const*, unsigned int, unsigned int) [function] [call site] 00048
5 Exception::Exception(type_info const*, char const*, unsigned int) [function] [call site] 00049
6 error_create [function] [call site] 00050
7 error_payload_create [function] [call site] 00051
7 error_set_location [function] [call site] 00052
8 snprintf [call site] 00053
6 exception_destroy(error*) [function] [call site] 00054
7 Exception::~Exception() [function] [call site] 00055
5 rmean_collect [function] [call site] 00056
6 __assert_fail [call site] 00057
5 Exception::~Exception() [function] [call site] 00058
6 __assert_fail [call site] 00059
4 client_error_create(error*, __va_list_tag*) [function] [call site] 00060
5 tnt_errcode_record(unsigned int) [function] [call site] 00061
5 error_vformat_msg [function] [call site] 00062
6 error_msg_is_malloced [function] [call site] 00063
6 vsnprintf [call site] 00064
6 alloc_failure [function] [call site] 00065
6 vsnprintf [call site] 00066
6 __assert_fail [call site] 00067
5 error_set_str(error*, char const*, char const*) [function] [call site] 00068
6 error_payload_set_str [function] [call site] 00069
7 strlen [call site] 00070
7 mp_sizeof_str [function] [call site] 00071
8 mp_sizeof_strl [function] [call site] 00072
7 error_payload_prepare [function] [call site] 00073
8 grp_alloc_initializer [function] [call site] 00074
8 strcmp [call site] 00075
8 realloc [call site] 00076
8 alloc_failure [function] [call site] 00077
8 grp_alloc_reserve_data [function] [call site] 00078
8 grp_alloc_reserve_str0 [function] [call site] 00079
9 strlen [call site] 00080
9 grp_alloc_reserve_str [function] [call site] 00081
8 grp_alloc_reserve_data [function] [call site] 00082
8 grp_alloc_size [function] [call site] 00083
8 alloc_failure [function] [call site] 00084
8 grp_alloc_create_data [function] [call site] 00085
8 grp_alloc_create_str0 [function] [call site] 00086
9 strlen [call site] 00087
9 grp_alloc_create_str [function] [call site] 00088
8 grp_alloc_create_data [function] [call site] 00089
8 grp_alloc_size [function] [call site] 00090
7 mp_encode_str [function] [call site] 00091
8 mp_encode_strl [function] [call site] 00092
9 mp_store_u8 [function] [call site] 00093
9 mp_store_u8 [function] [call site] 00094
9 mp_store_u8 [function] [call site] 00095
9 mp_store_u8 [function] [call site] 00096
9 mp_store_u16 [function] [call site] 00097
9 mp_store_u8 [function] [call site] 00098
9 mp_store_u32 [function] [call site] 00099
8 mp_memcpy [function] [call site] 00100
5 error_set_int(error*, char const*, long) [function] [call site] 00101
6 error_payload_set_int [function] [call site] 00102
7 error_payload_set_uint [function] [call site] 00103
8 mp_sizeof_uint [function] [call site] 00104
8 error_payload_prepare [function] [call site] 00105
8 mp_encode_uint [function] [call site] 00106
9 mp_store_u8 [function] [call site] 00107
9 mp_store_u8 [function] [call site] 00108
9 mp_store_u8 [function] [call site] 00109
9 mp_store_u8 [function] [call site] 00110
9 mp_store_u16 [function] [call site] 00111
9 mp_store_u8 [function] [call site] 00112
9 mp_store_u32 [function] [call site] 00113
9 mp_store_u8 [function] [call site] 00114
9 mp_store_u64 [function] [call site] 00115
7 mp_sizeof_int [function] [call site] 00116
8 __assert_fail [call site] 00117
7 error_payload_prepare [function] [call site] 00118
7 mp_encode_int [function] [call site] 00119
8 __assert_fail [call site] 00120
8 mp_store_u8 [function] [call site] 00121
8 mp_store_u8 [function] [call site] 00122
8 mp_store_u8 [function] [call site] 00123
8 mp_store_u8 [function] [call site] 00124
8 mp_store_u16 [function] [call site] 00125
8 mp_store_u8 [function] [call site] 00126
8 mp_store_u32 [function] [call site] 00127
8 mp_store_u8 [function] [call site] 00128
8 mp_store_u64 [function] [call site] 00129
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00130
5 error_set_int(error*, char const*, long) [function] [call site] 00131
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00132
5 error_set_int(error*, char const*, long) [function] [call site] 00133
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00134
5 error_set_str(error*, char const*, char const*) [function] [call site] 00135
5 __assert_fail [call site] 00136
5 mp_next [function] [call site] 00137
6 mp_load_u8 [function] [call site] 00138
6 mp_load_u8 [function] [call site] 00139
6 mp_next_slowpath [function] [call site] 00140
7 mp_load_u8 [function] [call site] 00141
7 mp_load_u64 [function] [call site] 00142
7 mp_load_u8 [function] [call site] 00143
7 mp_load_u16 [function] [call site] 00144
7 mp_load_u32 [function] [call site] 00145
7 mp_load_u16 [function] [call site] 00146
7 mp_load_u32 [function] [call site] 00147
7 mp_load_u16 [function] [call site] 00148
7 mp_load_u32 [function] [call site] 00149
7 mp_load_u8 [function] [call site] 00150
7 mp_load_u8 [function] [call site] 00151
7 mp_load_u16 [function] [call site] 00152
7 mp_load_u8 [function] [call site] 00153
7 mp_load_u32 [function] [call site] 00154
7 mp_load_u8 [function] [call site] 00155
7 __assert_fail [call site] 00156
5 error_set_mp(error*, char const*, char const*, unsigned int) [function] [call site] 00157
6 error_payload_set_mp [function] [call site] 00158
7 error_payload_prepare [function] [call site] 00159
7 error_payload_prepare [function] [call site] 00160
5 __assert_fail [call site] 00161
5 tuple_data(tuple*) [function] [call site] 00162
6 tuple_data_offset(tuple*) [function] [call site] 00163
7 __assert_fail [call site] 00164
5 tuple_bsize(tuple*) [function] [call site] 00165
5 error_set_mp(error*, char const*, char const*, unsigned int) [function] [call site] 00166
5 __assert_fail [call site] 00167
5 strncmp [call site] 00168
5 error_set_str(error*, char const*, char const*) [function] [call site] 00169
4 ClientError::~ClientError() [function] [call site] 00170
5 Exception::~Exception() [function] [call site] 00171
3 client_error_create(error*, __va_list_tag*) [function] [call site] 00172
3 __cxa_begin_catch [call site] 00173
3 __cxa_end_catch [call site] 00174
2 diag_get [function] [call site] 00175
3 cord_on_demand [function] [call site] 00176
4 CordOnDemand::get() [function] [call site] 00177
5 CordOnDemand::CordOnDemand() [function] [call site] 00178
6 calloc [call site] 00179
6 alloc_failure(char const*, int, unsigned long) [function] [call site] 00180
6 cord_create [function] [call site] 00181
7 cord_on_demand [function] [call site] 00182
7 slab_cache_set_thread [function] [call site] 00183
8 pthread_self [call site] 00184
7 pthread_self [call site] 00185
7 slab_cache_create [function] [call site] 00186
8 small_getpagesize [function] [call site] 00187
9 sysconf [call site] 00188
8 __assert_fail [call site] 00189
8 small_lb [function] [call site] 00190
8 small_lb [function] [call site] 00191
8 slab_list_create [function] [call site] 00192
9 small_stats_reset [function] [call site] 00193
8 slab_list_create [function] [call site] 00194
8 slab_cache_set_thread [function] [call site] 00195
7 mempool_create [function] [call site] 00196
8 slab_order [function] [call site] 00197
8 __assert_fail [call site] 00198
8 mempool_create_with_order [function] [call site] 00199
9 __assert_fail [call site] 00200
9 slab_list_create [function] [call site] 00201
9 mslab_tree_new [function] [call site] 00202
9 slab_order_size [function] [call site] 00203
9 mslab_sizeof [function] [call site] 00204
10 small_align [function] [call site] 00205
11 __assert_fail [call site] 00206
11 __assert_fail [call site] 00207
9 __assert_fail [call site] 00208
9 slab_order_size [function] [call site] 00209
7 mh_i64ptr_new [function] [call site] 00210
8 calloc [call site] 00211
8 alloc_failure [function] [call site] 00212
8 calloc [call site] 00213
8 alloc_failure [function] [call site] 00214
8 calloc [call site] 00215
8 alloc_failure [function] [call site] 00216
8 calloc [call site] 00217
8 alloc_failure [function] [call site] 00218
7 fiber_reset [function] [call site] 00219
8 clock_stat_reset [function] [call site] 00220
7 diag_create [function] [call site] 00221
7 region_create [function] [call site] 00222
8 slab_list_create [function] [call site] 00223
7 fiber_gc_checker_init [function] [call site] 00224
7 fiber_set_name [function] [call site] 00225
8 strlen [call site] 00226
8 fiber_set_name_n [function] [call site] 00227
9 cord_on_demand [function] [call site] 00228
9 realloc [call site] 00229
9 say_log_level_is_enabled [function] [call site] 00230
9 exit [call site] 00231
7 fiber_schedule_wakeup [function] [call site] 00232
8 cord_on_demand [function] [call site] 00233
8 fiber_check_gc [function] [call site] 00234
9 cord_on_demand [function] [call site] 00235
9 region_used [function] [call site] 00236
9 __assert_fail [call site] 00237
9 region_used [function] [call site] 00238
9 say_log_level_is_enabled [function] [call site] 00239
9 abort [call site] 00240
8 fiber_schedule_list [function] [call site] 00241
9 __assert_fail [call site] 00242
9 __assert_fail [call site] 00243
9 cord_on_demand [function] [call site] 00244
9 cord_on_demand [function] [call site] 00245
9 __assert_fail [call site] 00246
9 cord_on_demand [function] [call site] 00247
9 clock_set_on_csw [function] [call site] 00248
10 cord_on_demand [function] [call site] 00249
10 cpu_stat_on_csw [function] [call site] 00250
11 clock_monotonic64 [function] [call site] 00251
12 clock_gettime [call site] 00252
12 say_log_level_is_enabled [function] [call site] 00253
12 __errno_location [call site] 00254
12 tt_strerror [function] [call site] 00255
13 tt_static_buf [function] [call site] 00256
14 static_aligned_alloc [function] [call site] 00257
15 static_aligned_reserve [function] [call site] 00258
16 static_reserve [function] [call site] 00259
16 small_align [function] [call site] 00260
13 strerror_r [call site] 00261
10 cord_on_demand [function] [call site] 00262
10 clock_stat_add_delta [function] [call site] 00263
10 clock_stat_add_delta [function] [call site] 00264
9 fiber_call_impl [function] [call site] 00265
10 cord_on_demand [function] [call site] 00266
10 cord_on_demand [function] [call site] 00267
10 __assert_fail [call site] 00268
10 __assert_fail [call site] 00269
10 __assert_fail [call site] 00270
10 __assert_fail [call site] 00271
10 __assert_fail [call site] 00272
10 __assert_fail [call site] 00273
10 __assert_fail [call site] 00274
10 __assert_fail [call site] 00275
10 cord_is_main [function] [call site] 00276
11 cord_on_demand [function] [call site] 00277
10 cord_reset_slice [function] [call site] 00278
11 cord_is_main [function] [call site] 00279
11 __assert_fail [call site] 00280
11 clock_lowres_monotonic [function] [call site] 00281
12 clock_lowres_thread_is_owner [function] [call site] 00282
13 pthread_self [call site] 00283
12 __assert_fail [call site] 00284
11 cord_on_demand [function] [call site] 00285
11 cord_on_demand [function] [call site] 00286
11 cord_on_demand [function] [call site] 00287
10 coro_transfer [call site] 00288
7 fiber_schedule_idle [function] [call site] 00289
7 cord_is_main [function] [call site] 00290
7 fiber_top_init [function] [call site] 00291
8 cord_on_demand [function] [call site] 00292
8 loop_on_iteration_end [function] [call site] 00293
9 cord_on_demand [function] [call site] 00294
9 __assert_fail [call site] 00295
9 cord_on_demand [function] [call site] 00296
9 clock_set_on_csw [function] [call site] 00297
9 cord_on_demand [function] [call site] 00298
9 cord_on_demand [function] [call site] 00299
9 cpu_stat_end [function] [call site] 00300
10 clock_thread64 [function] [call site] 00301
11 clock_gettime [call site] 00302
11 say_log_level_is_enabled [function] [call site] 00303
11 __errno_location [call site] 00304
11 tt_strerror [function] [call site] 00305
10 cord_on_demand [function] [call site] 00306
9 cord_on_demand [function] [call site] 00307
9 clock_stat_update [function] [call site] 00308
10 clock_diff_accumulate [function] [call site] 00309
9 cord_on_demand [function] [call site] 00310
9 clock_stat_update [function] [call site] 00311
9 cord_on_demand [function] [call site] 00312
9 clock_stat_update [function] [call site] 00313
8 cord_on_demand [function] [call site] 00314
8 loop_on_iteration_start [function] [call site] 00315
9 cord_on_demand [function] [call site] 00316
9 cpu_stat_start [function] [call site] 00317
10 clock_monotonic64 [function] [call site] 00318
10 clock_thread64 [function] [call site] 00319
7 cord_set_name [function] [call site] 00320
8 cord_on_demand [function] [call site] 00321
8 snprintf [call site] 00322
8 cord_is_main [function] [call site] 00323
8 tt_pthread_setname [function] [call site] 00324
9 snprintf [call site] 00325
9 pthread_self [call site] 00326
7 trigger_init_in_thread [function] [call site] 00327
8 cord_on_demand [function] [call site] 00328
8 mempool_create(mempool*, slab_cache*, unsigned int) [function] [call site] 00329
7 signal_stack_init [function] [call site] 00330
8 alloc_failure [function] [call site] 00331
8 say_log_level_is_enabled [function] [call site] 00332
8 __errno_location [call site] 00333
8 _say_strerror [function] [call site] 00334
9 tt_strerror [function] [call site] 00335
2 diag_set_error [function] [call site] 00336
3 __assert_fail [call site] 00337
3 error_ref [function] [call site] 00338
4 say_log_level_is_enabled [function] [call site] 00339
3 diag_clear [function] [call site] 00340
4 error_unref [function] [call site] 00341
5 __assert_fail [call site] 00342
5 error_msg_is_malloced [function] [call site] 00343
5 error_payload_destroy [function] [call site] 00344
3 error_unlink_effect [function] [call site] 00345
4 __assert_fail [call site] 00346
4 error_unref [function] [call site] 00347
2 dump_row_hex [function] [call site] 00348
3 tt_static_buf [function] [call site] 00349
3 say_log_level_is_enabled [function] [call site] 00350
3 snprintf [call site] 00351
3 snprintf [call site] 00352
3 say_log_level_is_enabled [function] [call site] 00353
2 mp_next [function] [call site] 00354
2 __errno_location [call site] 00355
2 say_log_level_is_enabled [function] [call site] 00356
2 BuildClientError [function] [call site] 00357
2 diag_get [function] [call site] 00358
2 diag_set_error [function] [call site] 00359
2 dump_row_hex [function] [call site] 00360