Fuzz introspector: /src/tinyusb/test/fuzz/device/msc/src/fuzz.cc
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
27 38 usbd_edpt_xfer call site: 00038 process_get_descriptor
25 66 process_control_request call site: 00066 usbd_control_xfer_cb
9 26 process_control_request call site: 00026 tud_control_xfer
3 10 dcd_int_handler call site: 00010 tu_fifo_write
2 22 usbd_reset call site: 00022 usbd_reset
1 0 EP call site: 00000 fuzz_init
1 7 tud_rhport_init call site: 00007 dcd_int_handler
1 19 tu_fifo_read call site: 00019 usbd_reset

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_init [function] [call site] 00001
1 tud_rhport_init [function] [call site] 00002
2 tud_inited [function] [call site] 00003
2 tu_fifo_clear [function] [call site] 00004
2 usbd_app_driver_get_cb [function] [call site] 00005
2 dcd_init [function] [call site] 00006
2 dcd_int_enable [function] [call site] 00007
1 dcd_int_handler [function] [call site] 00008
2 __assert_fail [call site] 00009
2 dcd_event_handler [function] [call site] 00010
3 tu_fifo_write [function] [call site] 00011
3 tud_event_hook_cb [function] [call site] 00012
3 tud_event_hook_cb [function] [call site] 00013
3 tud_event_hook_cb [function] [call site] 00014
2 dcd_event_handler [function] [call site] 00015
1 tud_task_ext [function] [call site] 00016
2 tud_inited [function] [call site] 00017
2 tu_fifo_read [function] [call site] 00018
3 ff_peek_local [function] [call site] 00019
2 usbd_reset [function] [call site] 00020
3 configuration_reset [function] [call site] 00021
3 usbd_control_reset [function] [call site] 00022
2 usbd_reset [function] [call site] 00023
2 tud_umount_cb [function] [call site] 00024
2 process_control_request [function] [call site] 00025
3 usbd_control_set_complete_callback [function] [call site] 00026
3 usbd_control_set_complete_callback [function] [call site] 00027
3 tud_vendor_control_xfer_cb [function] [call site] 00028
3 tud_vendor_control_xfer_cb [function] [call site] 00029
3 invoke_class_control [function] [call site] 00030
4 usbd_control_set_complete_callback [function] [call site] 00031
3 usbd_control_set_request [function] [call site] 00032
3 dcd_set_address [function] [call site] 00033
4 dcd_edpt_xfer [function] [call site] 00034
3 tud_control_xfer [function] [call site] 00035
4 data_stage_xact [function] [call site] 00036
5 usbd_edpt_xfer [function] [call site] 00037
6 dcd_edpt_xfer [function] [call site] 00038
4 status_stage_xact [function] [call site] 00039
5 usbd_edpt_xfer [function] [call site] 00040
3 dcd_sof_enable [function] [call site] 00041
3 dcd_edpt_close_all [function] [call site] 00042
3 configuration_reset [function] [call site] 00043
3 tud_umount_cb [function] [call site] 00044
3 process_set_config [function] [call site] 00045
4 tud_descriptor_configuration_cb [function] [call site] 00046
4 tu_edpt_bind_driver [function] [call site] 00047
3 tud_mount_cb [function] [call site] 00048
3 tud_control_status [function] [call site] 00049
4 status_stage_xact [function] [call site] 00050
3 process_get_descriptor [function] [call site] 00051
4 tud_descriptor_device_cb [function] [call site] 00052
4 tud_control_xfer [function] [call site] 00053
4 tud_descriptor_bos_cb [function] [call site] 00054
4 tud_control_xfer [function] [call site] 00055
4 tud_descriptor_configuration_cb [function] [call site] 00056
4 tud_descriptor_other_speed_configuration_cb [function] [call site] 00057
4 tud_control_xfer [function] [call site] 00058
4 tud_descriptor_string_cb [function] [call site] 00059
5 strlen [call site] 00060
4 tud_control_xfer [function] [call site] 00061
4 tud_descriptor_device_qualifier_cb [function] [call site] 00062
4 tud_control_xfer [function] [call site] 00063
3 tud_control_status [function] [call site] 00064
3 tud_control_status [function] [call site] 00065
3 tud_control_xfer [function] [call site] 00066
3 invoke_class_control [function] [call site] 00067
3 usbd_control_set_complete_callback [function] [call site] 00068
3 tud_control_xfer [function] [call site] 00069
3 tud_control_status [function] [call site] 00070
3 invoke_class_control [function] [call site] 00071
3 usbd_edpt_stalled [function] [call site] 00072
3 tud_control_xfer [function] [call site] 00073
3 usbd_edpt_clear_stall [function] [call site] 00074
4 dcd_edpt_clear_stall [function] [call site] 00075
3 usbd_edpt_stall [function] [call site] 00076
4 dcd_edpt_stall [function] [call site] 00077
3 invoke_class_control [function] [call site] 00078
3 usbd_control_set_complete_callback [function] [call site] 00079
3 tud_control_status [function] [call site] 00080
2 dcd_edpt_stall [function] [call site] 00081
2 dcd_edpt_stall [function] [call site] 00082
2 usbd_control_xfer_cb [function] [call site] 00083
3 dcd_edpt0_status_complete [function] [call site] 00084
3 status_stage_xact [function] [call site] 00085
3 dcd_edpt_stall [function] [call site] 00086
3 dcd_edpt_stall [function] [call site] 00087
3 data_stage_xact [function] [call site] 00088
2 tud_suspend_cb [function] [call site] 00089
2 tud_resume_cb [function] [call site] 00090
2 tud_sof_cb [function] [call site] 00091