Fuzz introspector: /src/tinyusb/test/fuzz/device/cdc/src/fuzz.cc
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
6 84 tud_task_ext call site: 00084 usbd_control_xfer_cb
5 69 process_get_status call site: 00069 process_get_status
4 42 tud_control_xfer call site: 00042 configuration_reset
3 112 stream_xfer call site: 00112 stream_release
2 11 dcd_int_handler call site: 00011 tu_fifo_write_n_access_mode
2 15 tu_fifo_write_n_access_mode call site: 00015 tud_event_hook_cb
2 48 process_set_config call site: 00048 tu_bind_driver_to_ep_itf
2 80 usbd_edpt_stall call site: 00080 invoke_class_control
2 92 tud_task_ext call site: 00092 cdc_task
1 8 tud_rhport_init call site: 00008 dcd_int_handler
1 20 dcd_int_handler call site: 00020 tud_task_ext
1 22 tud_task_ext call site: 00022 tu_fifo_read_n_access_mode

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_init [function] [call site] 00001
1 tusb_rhport_init [function] [call site] 00002
2 tud_rhport_init [function] [call site] 00003
3 tud_inited [function] [call site] 00004
3 tu_fifo_clear [function] [call site] 00005
3 usbd_app_driver_get_cb [function] [call site] 00006
3 dcd_int_enable [function] [call site] 00008
1 dcd_int_handler [function] [call site] 00009
2 __assert_fail [call site] 00010
2 dcd_event_handler [function] [call site] 00011
3 tu_fifo_write_n_access_mode [function] [call site] 00012
4 advance_index [function] [call site] 00013
4 ff_push_n [function] [call site] 00014
4 advance_index [function] [call site] 00015
3 tud_event_hook_cb [function] [call site] 00016
3 tud_event_hook_cb [function] [call site] 00017
3 tud_event_hook_cb [function] [call site] 00018
2 dcd_event_handler [function] [call site] 00019
2 dcd_event_handler [function] [call site] 00020
1 tud_task_ext [function] [call site] 00021
2 tud_inited [function] [call site] 00022
2 tu_fifo_read_n_access_mode [function] [call site] 00023
3 tu_fifo_peek_n_access_mode [function] [call site] 00024
4 correct_read_index [function] [call site] 00025
4 ff_pull_n [function] [call site] 00026
3 advance_index [function] [call site] 00027
2 usbd_reset [function] [call site] 00028
3 configuration_reset [function] [call site] 00029
2 usbd_reset [function] [call site] 00030
2 tud_umount_cb [function] [call site] 00031
2 process_setup_received [function] [call site] 00032
3 tud_vendor_control_xfer_cb [function] [call site] 00033
3 invoke_class_control [function] [call site] 00034
3 process_std_device_request [function] [call site] 00035
4 dcd_set_address [function] [call site] 00036
5 dcd_edpt_xfer [function] [call site] 00037
4 tud_control_xfer [function] [call site] 00038
5 data_stage_xact [function] [call site] 00039
6 usbd_edpt_xfer [function] [call site] 00040
7 dcd_edpt_xfer [function] [call site] 00041
5 usbd_edpt_xfer [function] [call site] 00042
4 dcd_sof_enable [function] [call site] 00043
4 dcd_edpt_close_all [function] [call site] 00044
4 configuration_reset [function] [call site] 00045
4 tud_umount_cb [function] [call site] 00046
4 process_set_config [function] [call site] 00047
5 tud_descriptor_configuration_cb [function] [call site] 00048
5 tu_bind_driver_to_ep_itf [function] [call site] 00049
4 tud_mount_cb [function] [call site] 00050
4 tud_control_status [function] [call site] 00051
5 usbd_edpt_xfer [function] [call site] 00052
4 process_get_descriptor [function] [call site] 00053
5 tud_descriptor_device_cb [function] [call site] 00054
5 tud_control_xfer [function] [call site] 00055
5 tud_descriptor_bos_cb [function] [call site] 00056
5 tud_control_xfer [function] [call site] 00057
5 tud_descriptor_configuration_cb [function] [call site] 00058
5 tud_descriptor_other_speed_configuration_cb [function] [call site] 00059
5 tud_control_xfer [function] [call site] 00060
5 tud_descriptor_string_cb [function] [call site] 00061
6 strlen [call site] 00062
5 tud_control_xfer [function] [call site] 00063
5 tud_descriptor_device_qualifier_cb [function] [call site] 00064
5 tud_control_xfer [function] [call site] 00065
4 tud_control_status [function] [call site] 00066
4 tud_control_status [function] [call site] 00067
4 process_get_status [function] [call site] 00068
5 tud_control_xfer [function] [call site] 00069
3 invoke_class_control [function] [call site] 00070
3 tud_control_xfer [function] [call site] 00071
3 tud_control_status [function] [call site] 00072
3 process_get_status [function] [call site] 00073
3 invoke_class_control [function] [call site] 00074
3 usbd_edpt_stalled [function] [call site] 00075
3 process_get_status [function] [call site] 00076
3 usbd_edpt_clear_stall [function] [call site] 00077
4 dcd_edpt_clear_stall [function] [call site] 00078
3 usbd_edpt_stall [function] [call site] 00079
4 dcd_edpt_stall [function] [call site] 00080
3 invoke_class_control [function] [call site] 00081
3 tud_control_status [function] [call site] 00082
2 dcd_edpt_stall [function] [call site] 00083
2 dcd_edpt_stall [function] [call site] 00084
2 usbd_control_xfer_cb [function] [call site] 00085
3 dcd_edpt0_status_complete [function] [call site] 00086
3 usbd_edpt_xfer [function] [call site] 00087
3 dcd_edpt_stall [function] [call site] 00088
3 dcd_edpt_stall [function] [call site] 00089
3 data_stage_xact [function] [call site] 00090
2 tud_suspend_cb [function] [call site] 00091
2 tud_resume_cb [function] [call site] 00092
2 tud_sof_cb [function] [call site] 00093
1 cdc_task [function] [call site] 00094
2 __assert_fail [call site] 00095
2 tud_cdc_n_connected [function] [call site] 00096
3 tud_mounted [function] [call site] 00097
3 tud_suspended [function] [call site] 00098
2 tud_cdc_n_get_line_state [function] [call site] 00099
2 tud_cdc_n_get_line_coding [function] [call site] 00100
2 tud_cdc_n_set_wanted_char [function] [call site] 00101
2 tud_cdc_n_available [function] [call site] 00102
2 tud_cdc_n_read [function] [call site] 00103
3 tu_edpt_stream_read [function] [call site] 00104
4 tu_fifo_read_n_access_mode [function] [call site] 00105
4 tu_edpt_stream_read_xfer [function] [call site] 00106
5 stream_claim [function] [call site] 00107
6 usbd_edpt_claim [function] [call site] 00108
7 tu_edpt_claim [function] [call site] 00109
5 stream_xfer [function] [call site] 00110
6 usbd_edpt_xfer_fifo [function] [call site] 00111
6 usbd_edpt_xfer [function] [call site] 00112
5 stream_release [function] [call site] 00113
6 usbd_edpt_release [function] [call site] 00114
7 tu_edpt_release [function] [call site] 00115
2 tud_cdc_n_read [function] [call site] 00116
2 tud_cdc_n_read_flush [function] [call site] 00117
3 tu_fifo_clear [function] [call site] 00118
3 tu_edpt_stream_read_xfer [function] [call site] 00119
2 tud_cdc_n_peek [function] [call site] 00120
3 tu_fifo_peek [function] [call site] 00121
4 ff_peek_local [function] [call site] 00122
5 correct_read_index [function] [call site] 00123
2 tud_cdc_n_write [function] [call site] 00124
3 tu_edpt_stream_write [function] [call site] 00125
4 tu_fifo_write_n_access_mode [function] [call site] 00126
4 tu_edpt_stream_write_xfer [function] [call site] 00127
5 stream_claim [function] [call site] 00128
5 tu_fifo_read_n_access_mode [function] [call site] 00129
5 stream_xfer [function] [call site] 00130
5 stream_release [function] [call site] 00131
2 tud_cdc_n_write [function] [call site] 00132
2 strlen [call site] 00133
2 tud_cdc_n_write [function] [call site] 00134
2 tud_cdc_n_write_flush [function] [call site] 00135
3 tu_edpt_stream_write_xfer [function] [call site] 00136
2 tud_cdc_n_write_available [function] [call site] 00137
3 tu_edpt_stream_write_available [function] [call site] 00138
2 tud_cdc_n_write_clear [function] [call site] 00139
3 tu_fifo_clear [function] [call site] 00140