Fuzz introspector: /src/tinyusb/test/fuzz/device/msc_bot/fuzz.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
5 0 EP call site: 00000 mscd_xfer_cb
4 14 proc_read_io_data call site: 00014 dcd_event_handler
3 50 proc_write10_host_data call site: 00050 dcd_event_handler
2 20 proc_write10_cmd call site: 00020 fail_scsi_op
1 27 proc_builtin_scsi call site: 00027 tud_msc_set_sense
1 29 proc_builtin_scsi call site: 00029 tud_msc_set_sense
1 31 proc_builtin_scsi call site: 00031 tud_msc_set_sense
1 33 proc_builtin_scsi call site: 00033 tud_msc_set_sense
1 35 proc_builtin_scsi call site: 00035 tud_msc_set_sense
1 65 proc_stage_status call site: 00065 mscd_xfer_cb

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mscd_init [function] [call site] 00001
1 usbd_edpt_xfer [function] [call site] 00002
1 mscd_xfer_cb [function] [call site] 00003
2 usbd_edpt_stall [function] [call site] 00004
2 usbd_edpt_stall [function] [call site] 00005
2 rdwr10_validate_cmd [function] [call site] 00006
2 fail_scsi_op [function] [call site] 00007
3 tud_msc_set_sense [function] [call site] 00008
3 usbd_edpt_stall [function] [call site] 00009
3 usbd_edpt_stall [function] [call site] 00010
2 proc_read10_cmd [function] [call site] 00011
3 tud_msc_read10_cb [function] [call site] 00012
3 proc_read_io_data [function] [call site] 00013
4 usbd_edpt_xfer [function] [call site] 00014
4 tud_msc_set_sense [function] [call site] 00015
4 fail_scsi_op [function] [call site] 00016
4 dcd_event_handler [function] [call site] 00017
5 mscd_xfer_cb [function] [call site] 00018
6 proc_write10_cmd [function] [call site] 00019
7 tud_msc_is_writable_cb [function] [call site] 00020
7 tud_msc_set_sense [function] [call site] 00021
7 fail_scsi_op [function] [call site] 00022
7 usbd_edpt_xfer [function] [call site] 00023
6 fail_scsi_op [function] [call site] 00024
6 usbd_edpt_xfer [function] [call site] 00025
6 proc_builtin_scsi [function] [call site] 00026
7 tud_msc_test_unit_ready_cb [function] [call site] 00027
7 tud_msc_set_sense [function] [call site] 00028
7 tud_msc_start_stop_cb [function] [call site] 00029
7 tud_msc_set_sense [function] [call site] 00030
7 tud_msc_prevent_allow_medium_removal_cb [function] [call site] 00031
7 tud_msc_set_sense [function] [call site] 00032
7 tud_msc_capacity_cb [function] [call site] 00033
7 tud_msc_set_sense [function] [call site] 00034
7 tud_msc_capacity_cb [function] [call site] 00035
7 tud_msc_set_sense [function] [call site] 00036
7 tud_msc_inquiry2_cb [function] [call site] 00037
7 tud_msc_inquiry_cb [function] [call site] 00038
7 tud_msc_is_writable_cb [function] [call site] 00039
7 tud_msc_request_sense_cb [function] [call site] 00040
7 tud_msc_set_sense [function] [call site] 00041
6 tud_msc_scsi_cb [function] [call site] 00042
6 fail_scsi_op [function] [call site] 00043
6 fail_scsi_op [function] [call site] 00044
6 fail_scsi_op [function] [call site] 00045
6 usbd_edpt_xfer [function] [call site] 00046
6 proc_read10_cmd [function] [call site] 00047
6 proc_write10_host_data [function] [call site] 00048
7 tud_msc_write10_cb [function] [call site] 00049
7 proc_write_io_data [function] [call site] 00050
8 tud_msc_set_sense [function] [call site] 00051
8 fail_scsi_op [function] [call site] 00052
8 dcd_event_handler [function] [call site] 00053
8 proc_write10_cmd [function] [call site] 00054
6 tud_msc_scsi_cb [function] [call site] 00055
6 fail_scsi_op [function] [call site] 00056
6 tud_msc_read10_complete_cb [function] [call site] 00057
6 tud_msc_write10_complete_cb [function] [call site] 00058
6 tud_msc_scsi_complete_cb [function] [call site] 00059
6 usbd_edpt_stalled [function] [call site] 00060
6 usbd_edpt_xfer [function] [call site] 00061
6 proc_stage_status [function] [call site] 00062
7 usbd_edpt_stalled [function] [call site] 00063
7 usbd_edpt_stall [function] [call site] 00064
7 usbd_edpt_xfer [function] [call site] 00065
1 mscd_xfer_cb [function] [call site] 00066