Fuzz introspector: xrow_decode_auth_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
262 262 1 :

['cord_on_demand']

266 266 fiber_set_name_n call site: 00207 /src/tarantool/src/lib/core/fiber.c:1220
23 23 4 :

['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1719']

23 23 clock_monotonic call site: 00000 /src/tarantool/src/lib/core/clock.c:51
23 23 4 :

['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1439']

23 23 clock_lowres_signal_init call site: 00000 /src/tarantool/src/lib/core/clock_lowres.c:69
21 21 1 :

['mmap_checked']

21 34 slab_arena_create call site: 00000 /src/tarantool/src/lib/small/small/slab_arena.c:204
8 8 1 :

['tt_pthread_setname']

8 8 cord_set_name call site: 00303 /src/tarantool/src/lib/core/fiber.c:2232
6 6 3 :

['sigaddset', 'pthread_sigmask', 'sigemptyset']

6 6 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4680
4 4 2 :

['atoi', 'getenv']

386 572 loop_init call site: 00000 /src/tarantool/third_party/libev/ev.c:3302
4 4 2 :

['close', 'dup2']

4 8 evpipe_alloc call site: 00000 /src/tarantool/third_party/libev/ev.c:2764
4 4 4 :

['malloc', 'exit', 'realloc', 'say_log_level_is_enabled.370']

4 4 fiber_set_name_n call site: 00208 /src/tarantool/src/lib/core/fiber.c:1223
2 39 4 :

['ev_unref', 'ev_io_start', '__errno_location', 'fd_intern']

24 134 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4629
2 2 1 :

['getpid']

401 587 loop_init call site: 00000 /src/tarantool/third_party/libev/ev.c:3298
2 2 1 :

['signalfd']

16 89 ev_signal_start call site: 00000 /src/tarantool/third_party/libev/ev.c:4648

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mp_check [function] [call site] 00001
2 mp_load_u8 [function] [call site] 00002
2 mp_load_u8 [function] [call site] 00003
2 mp_load_u8 [function] [call site] 00004
2 mp_load_u16 [function] [call site] 00005
2 mp_load_u32 [function] [call site] 00006
2 mp_load_u16 [function] [call site] 00007
2 mp_load_u32 [function] [call site] 00008
2 mp_load_u16 [function] [call site] 00009
2 mp_load_u32 [function] [call site] 00010
2 mp_load_u8 [function] [call site] 00011
2 mp_load_u8 [function] [call site] 00012
2 mp_load_u16 [function] [call site] 00013
2 mp_load_u8 [function] [call site] 00014
2 mp_load_u32 [function] [call site] 00015
2 mp_load_u8 [function] [call site] 00016
2 __assert_fail [call site] 00017
2 __assert_fail [call site] 00018
1 xrow_decode_auth [function] [call site] 00019
2 __errno_location [call site] 00020
2 say_log_level_is_enabled [function] [call site] 00021
2 BuildClientError [function] [call site] 00022
3 Exception::operator new(unsigned long) [function] [call site] 00023
4 alloc_failure(char const*, int, unsigned long) [function] [call site] 00024
5 fprintf [call site] 00025
5 exit [call site] 00026
3 ClientError::ClientError(char const*, unsigned int, unsigned int, ...) [function] [call site] 00027
4 ClientError::ClientError(type_info const*, char const*, unsigned int, unsigned int) [function] [call site] 00028
5 Exception::Exception(type_info const*, char const*, unsigned int) [function] [call site] 00029
6 error_create [function] [call site] 00030
7 error_payload_create [function] [call site] 00031
7 error_set_location [function] [call site] 00032
8 snprintf [call site] 00033
6 exception_destroy(error*) [function] [call site] 00034
7 Exception::~Exception() [function] [call site] 00035
5 rmean_collect [function] [call site] 00036
6 __assert_fail [call site] 00037
5 Exception::~Exception() [function] [call site] 00038
6 __assert_fail [call site] 00039
4 client_error_create(error*, __va_list_tag*) [function] [call site] 00040
5 tnt_errcode_record(unsigned int) [function] [call site] 00041
5 error_vformat_msg [function] [call site] 00042
6 error_msg_is_malloced [function] [call site] 00043
6 vsnprintf [call site] 00044
6 alloc_failure [function] [call site] 00045
6 vsnprintf [call site] 00046
6 __assert_fail [call site] 00047
5 error_set_str(error*, char const*, char const*) [function] [call site] 00048
6 error_payload_set_str [function] [call site] 00049
7 strlen [call site] 00050
7 mp_sizeof_str [function] [call site] 00051
8 mp_sizeof_strl [function] [call site] 00052
7 error_payload_prepare [function] [call site] 00053
8 grp_alloc_initializer [function] [call site] 00054
8 strcmp [call site] 00055
8 realloc [call site] 00056
8 alloc_failure [function] [call site] 00057
8 grp_alloc_reserve_data [function] [call site] 00058
8 grp_alloc_reserve_str0 [function] [call site] 00059
9 strlen [call site] 00060
9 grp_alloc_reserve_str [function] [call site] 00061
8 grp_alloc_reserve_data [function] [call site] 00062
8 grp_alloc_size [function] [call site] 00063
8 alloc_failure [function] [call site] 00064
8 grp_alloc_create_data [function] [call site] 00065
8 grp_alloc_create_str0 [function] [call site] 00066
9 strlen [call site] 00067
9 grp_alloc_create_str [function] [call site] 00068
8 grp_alloc_create_data [function] [call site] 00069
8 grp_alloc_size [function] [call site] 00070
7 mp_encode_str [function] [call site] 00071
8 mp_encode_strl [function] [call site] 00072
9 mp_store_u8 [function] [call site] 00073
9 mp_store_u8 [function] [call site] 00074
9 mp_store_u8 [function] [call site] 00075
9 mp_store_u8 [function] [call site] 00076
9 mp_store_u16 [function] [call site] 00077
9 mp_store_u8 [function] [call site] 00078
9 mp_store_u32 [function] [call site] 00079
8 mp_memcpy [function] [call site] 00080
5 error_set_int(error*, char const*, long) [function] [call site] 00081
6 error_payload_set_int [function] [call site] 00082
7 error_payload_set_uint [function] [call site] 00083
8 mp_sizeof_uint [function] [call site] 00084
8 error_payload_prepare [function] [call site] 00085
8 mp_encode_uint [function] [call site] 00086
9 mp_store_u8 [function] [call site] 00087
9 mp_store_u8 [function] [call site] 00088
9 mp_store_u8 [function] [call site] 00089
9 mp_store_u8 [function] [call site] 00090
9 mp_store_u16 [function] [call site] 00091
9 mp_store_u8 [function] [call site] 00092
9 mp_store_u32 [function] [call site] 00093
9 mp_store_u8 [function] [call site] 00094
9 mp_store_u64 [function] [call site] 00095
7 mp_sizeof_int [function] [call site] 00096
8 __assert_fail [call site] 00097
7 error_payload_prepare [function] [call site] 00098
7 mp_encode_int [function] [call site] 00099
8 __assert_fail [call site] 00100
8 mp_store_u8 [function] [call site] 00101
8 mp_store_u8 [function] [call site] 00102
8 mp_store_u8 [function] [call site] 00103
8 mp_store_u8 [function] [call site] 00104
8 mp_store_u16 [function] [call site] 00105
8 mp_store_u8 [function] [call site] 00106
8 mp_store_u32 [function] [call site] 00107
8 mp_store_u8 [function] [call site] 00108
8 mp_store_u64 [function] [call site] 00109
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00110
5 error_set_int(error*, char const*, long) [function] [call site] 00111
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00112
5 error_set_int(error*, char const*, long) [function] [call site] 00113
5 error_set_uint(error*, char const*, unsigned long) [function] [call site] 00114
5 error_set_str(error*, char const*, char const*) [function] [call site] 00115
5 __assert_fail [call site] 00116
5 mp_next [function] [call site] 00117
6 mp_load_u8 [function] [call site] 00118
6 mp_load_u8 [function] [call site] 00119
6 mp_next_slowpath [function] [call site] 00120
7 mp_load_u8 [function] [call site] 00121
7 mp_load_u64 [function] [call site] 00122
7 mp_load_u8 [function] [call site] 00123
7 mp_load_u16 [function] [call site] 00124
7 mp_load_u32 [function] [call site] 00125
7 mp_load_u16 [function] [call site] 00126
7 mp_load_u32 [function] [call site] 00127
7 mp_load_u16 [function] [call site] 00128
7 mp_load_u32 [function] [call site] 00129
7 mp_load_u8 [function] [call site] 00130
7 mp_load_u8 [function] [call site] 00131
7 mp_load_u16 [function] [call site] 00132
7 mp_load_u8 [function] [call site] 00133
7 mp_load_u32 [function] [call site] 00134
7 mp_load_u8 [function] [call site] 00135
7 __assert_fail [call site] 00136
5 error_set_mp(error*, char const*, char const*, unsigned int) [function] [call site] 00137
6 error_payload_set_mp [function] [call site] 00138
7 error_payload_prepare [function] [call site] 00139
7 error_payload_prepare [function] [call site] 00140
5 __assert_fail [call site] 00141
5 tuple_data(tuple*) [function] [call site] 00142
6 tuple_data_offset(tuple*) [function] [call site] 00143
7 __assert_fail [call site] 00144
5 tuple_bsize(tuple*) [function] [call site] 00145
5 error_set_mp(error*, char const*, char const*, unsigned int) [function] [call site] 00146
5 __assert_fail [call site] 00147
5 strncmp [call site] 00148
5 error_set_str(error*, char const*, char const*) [function] [call site] 00149
4 ClientError::~ClientError() [function] [call site] 00150
5 Exception::~Exception() [function] [call site] 00151
3 client_error_create(error*, __va_list_tag*) [function] [call site] 00152
3 __cxa_begin_catch [call site] 00153
3 __cxa_end_catch [call site] 00154
2 diag_get [function] [call site] 00155
3 cord_on_demand [function] [call site] 00156
4 CordOnDemand::get() [function] [call site] 00157
5 CordOnDemand::CordOnDemand() [function] [call site] 00158
6 calloc [call site] 00159
6 alloc_failure(char const*, int, unsigned long) [function] [call site] 00160
6 cord_create [function] [call site] 00161
7 cord_on_demand [function] [call site] 00162
7 slab_cache_set_thread [function] [call site] 00163
8 pthread_self [call site] 00164
7 pthread_self [call site] 00165
7 slab_cache_create [function] [call site] 00166
8 small_getpagesize [function] [call site] 00167
9 sysconf [call site] 00168
8 __assert_fail [call site] 00169
8 small_lb [function] [call site] 00170
8 small_lb [function] [call site] 00171
8 slab_list_create [function] [call site] 00172
9 small_stats_reset [function] [call site] 00173
8 slab_list_create [function] [call site] 00174
8 slab_cache_set_thread [function] [call site] 00175
7 mempool_create [function] [call site] 00176
8 slab_order [function] [call site] 00177
8 __assert_fail [call site] 00178
8 mempool_create_with_order [function] [call site] 00179
9 __assert_fail [call site] 00180
9 slab_list_create [function] [call site] 00181
9 mslab_tree_new [function] [call site] 00182
9 slab_order_size [function] [call site] 00183
9 mslab_sizeof [function] [call site] 00184
10 small_align [function] [call site] 00185
11 __assert_fail [call site] 00186
11 __assert_fail [call site] 00187
9 __assert_fail [call site] 00188
9 slab_order_size [function] [call site] 00189
7 mh_i64ptr_new [function] [call site] 00190
8 calloc [call site] 00191
8 alloc_failure [function] [call site] 00192
8 calloc [call site] 00193
8 alloc_failure [function] [call site] 00194
8 calloc [call site] 00195
8 alloc_failure [function] [call site] 00196
8 calloc [call site] 00197
8 alloc_failure [function] [call site] 00198
7 fiber_reset [function] [call site] 00199
8 clock_stat_reset [function] [call site] 00200
7 diag_create [function] [call site] 00201
7 region_create [function] [call site] 00202
8 slab_list_create [function] [call site] 00203
7 fiber_gc_checker_init [function] [call site] 00204
7 fiber_set_name [function] [call site] 00205
8 strlen [call site] 00206
8 fiber_set_name_n [function] [call site] 00207
9 cord_on_demand [function] [call site] 00208
9 realloc [call site] 00209
9 say_log_level_is_enabled [function] [call site] 00210
9 exit [call site] 00211
7 fiber_schedule_wakeup [function] [call site] 00212
8 cord_on_demand [function] [call site] 00213
8 fiber_check_gc [function] [call site] 00214
9 cord_on_demand [function] [call site] 00215
9 region_used [function] [call site] 00216
9 __assert_fail [call site] 00217
9 region_used [function] [call site] 00218
9 say_log_level_is_enabled [function] [call site] 00219
9 abort [call site] 00220
8 fiber_schedule_list [function] [call site] 00221
9 __assert_fail [call site] 00222
9 __assert_fail [call site] 00223
9 cord_on_demand [function] [call site] 00224
9 cord_on_demand [function] [call site] 00225
9 __assert_fail [call site] 00226
9 cord_on_demand [function] [call site] 00227
9 clock_set_on_csw [function] [call site] 00228
10 cord_on_demand [function] [call site] 00229
10 cpu_stat_on_csw [function] [call site] 00230
11 clock_monotonic64 [function] [call site] 00231
12 clock_gettime [call site] 00232
12 say_log_level_is_enabled [function] [call site] 00233
12 __errno_location [call site] 00234
12 tt_strerror [function] [call site] 00235
13 tt_static_buf [function] [call site] 00236
14 static_aligned_alloc [function] [call site] 00237
15 static_aligned_reserve [function] [call site] 00238
16 static_reserve [function] [call site] 00239
16 small_align [function] [call site] 00240
13 strerror_r [call site] 00241
10 cord_on_demand [function] [call site] 00242
10 clock_stat_add_delta [function] [call site] 00243
10 clock_stat_add_delta [function] [call site] 00244
9 fiber_call_impl [function] [call site] 00245
10 cord_on_demand [function] [call site] 00246
10 cord_on_demand [function] [call site] 00247
10 __assert_fail [call site] 00248
10 __assert_fail [call site] 00249
10 __assert_fail [call site] 00250
10 __assert_fail [call site] 00251
10 __assert_fail [call site] 00252
10 __assert_fail [call site] 00253
10 __assert_fail [call site] 00254
10 __assert_fail [call site] 00255
10 cord_is_main [function] [call site] 00256
11 cord_on_demand [function] [call site] 00257
10 cord_reset_slice [function] [call site] 00258
11 cord_is_main [function] [call site] 00259
11 __assert_fail [call site] 00260
11 clock_lowres_monotonic [function] [call site] 00261
12 clock_lowres_thread_is_owner [function] [call site] 00262
13 pthread_self [call site] 00263
12 __assert_fail [call site] 00264
11 cord_on_demand [function] [call site] 00265
11 cord_on_demand [function] [call site] 00266
11 cord_on_demand [function] [call site] 00267
10 coro_transfer [call site] 00268
7 fiber_schedule_idle [function] [call site] 00269
7 cord_is_main [function] [call site] 00270
7 fiber_top_init [function] [call site] 00271
8 cord_on_demand [function] [call site] 00272
8 loop_on_iteration_end [function] [call site] 00273
9 cord_on_demand [function] [call site] 00274
9 __assert_fail [call site] 00275
9 cord_on_demand [function] [call site] 00276
9 clock_set_on_csw [function] [call site] 00277
9 cord_on_demand [function] [call site] 00278
9 cord_on_demand [function] [call site] 00279
9 cpu_stat_end [function] [call site] 00280
10 clock_thread64 [function] [call site] 00281
11 clock_gettime [call site] 00282
11 say_log_level_is_enabled [function] [call site] 00283
11 __errno_location [call site] 00284
11 tt_strerror [function] [call site] 00285
10 cord_on_demand [function] [call site] 00286
9 cord_on_demand [function] [call site] 00287
9 clock_stat_update [function] [call site] 00288
10 clock_diff_accumulate [function] [call site] 00289
9 cord_on_demand [function] [call site] 00290
9 clock_stat_update [function] [call site] 00291
9 cord_on_demand [function] [call site] 00292
9 clock_stat_update [function] [call site] 00293
8 cord_on_demand [function] [call site] 00294
8 loop_on_iteration_start [function] [call site] 00295
9 cord_on_demand [function] [call site] 00296
9 cpu_stat_start [function] [call site] 00297
10 clock_monotonic64 [function] [call site] 00298
10 clock_thread64 [function] [call site] 00299
7 cord_set_name [function] [call site] 00300
8 cord_on_demand [function] [call site] 00301
8 snprintf [call site] 00302
8 cord_is_main [function] [call site] 00303
8 tt_pthread_setname [function] [call site] 00304
9 snprintf [call site] 00305
9 pthread_self [call site] 00306
7 trigger_init_in_thread [function] [call site] 00307
8 cord_on_demand [function] [call site] 00308
8 mempool_create(mempool*, slab_cache*, unsigned int) [function] [call site] 00309
7 signal_stack_init [function] [call site] 00310
8 alloc_failure [function] [call site] 00311
8 say_log_level_is_enabled [function] [call site] 00312
8 __errno_location [call site] 00313
8 _say_strerror [function] [call site] 00314
9 tt_strerror [function] [call site] 00315
2 diag_set_error [function] [call site] 00316
3 __assert_fail [call site] 00317
3 error_ref [function] [call site] 00318
4 say_log_level_is_enabled [function] [call site] 00319
3 diag_clear [function] [call site] 00320
4 error_unref [function] [call site] 00321
5 __assert_fail [call site] 00322
5 error_msg_is_malloced [function] [call site] 00323
5 error_payload_destroy [function] [call site] 00324
3 error_unlink_effect [function] [call site] 00325
4 __assert_fail [call site] 00326
4 error_unref [function] [call site] 00327
2 __assert_fail [call site] 00328
2 __errno_location [call site] 00329
2 say_log_level_is_enabled [function] [call site] 00330
2 BuildClientError [function] [call site] 00331
2 diag_get [function] [call site] 00332
2 diag_set_error [function] [call site] 00333
2 dump_row_hex [function] [call site] 00334
3 tt_static_buf [function] [call site] 00335
3 say_log_level_is_enabled [function] [call site] 00336
3 snprintf [call site] 00337
3 snprintf [call site] 00338
3 say_log_level_is_enabled [function] [call site] 00339
2 mp_decode_map [function] [call site] 00340
3 mp_load_u8 [function] [call site] 00341
3 mp_load_u16 [function] [call site] 00342
3 mp_load_u32 [function] [call site] 00343
3 __assert_fail [call site] 00344
2 mp_decode_uint [function] [call site] 00345
3 mp_load_u8 [function] [call site] 00346
3 mp_load_u8 [function] [call site] 00347
3 mp_load_u16 [function] [call site] 00348
3 mp_load_u32 [function] [call site] 00349
3 mp_load_u64 [function] [call site] 00350
3 __assert_fail [call site] 00351
2 mp_next [function] [call site] 00352
2 __errno_location [call site] 00353
2 say_log_level_is_enabled [function] [call site] 00354
2 iproto_key_name [function] [call site] 00355
2 BuildClientError [function] [call site] 00356
2 diag_get [function] [call site] 00357
2 diag_set_error [function] [call site] 00358
2 dump_row_hex [function] [call site] 00359
2 __errno_location [call site] 00360
2 say_log_level_is_enabled [function] [call site] 00361
2 iproto_key_name [function] [call site] 00362
2 BuildClientError [function] [call site] 00363
2 diag_get [function] [call site] 00364
2 diag_set_error [function] [call site] 00365
2 dump_row_hex [function] [call site] 00366