Fuzz introspector: json-fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
240 167 json_string_append call site: 00167 evbuffer_add_vprintf
24 8 xvasprintf call site: 00008 xmalloc
14 33 xmalloc call site: 00033 fatal
14 409 json_string_append call site: 00409 evbuffer_chain_insert_new
4 88 xstrndup call site: 00088 fatal
4 123 json_destroy_node call site: 00123 RB_REMOVE
3 162 json_to_string call site: 00162 fatalx
2 60 xreallocarray call site: 00060 fatal
2 72 json_create_node call site: 00072 fatalx
2 158 walk_json call site: 00158 walk_json
2 432 json_string_append call site: 00432 mode_tree_find_item
2 443 json_to_string call site: 00443 evbuffer_decref_and_unlock_

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 malloc [function] [call site] 00001
1 memcpy [function] [call site] 00002
1 json_parse [function] [call site] 00003
2 json_error [function] [call site] 00004
3 xasprintf [function] [call site] 00005
4 va_start [function] [call site] 00006
4 xvasprintf [function] [call site] 00007
5 vasprintf [function] [call site] 00008
6 va_copy [function] [call site] 00009
6 vsnprintf [function] [call site] 00010
6 xmalloc [function] [call site] 00011
7 fatalx [function] [call site] 00012
8 va_start [function] [call site] 00013
8 log_vwrite [function] [call site] 00014
9 vasprintf [function] [call site] 00015
9 stravis [function] [call site] 00016
10 calloc [function] [call site] 00017
10 strlen [function] [call site] 00018
10 strvis [function] [call site] 00019
11 vis [function] [call site] 00020
12 isvisible [function] [call site] 00021
12 isoctal [function] [call site] 00022
12 iscntrl [function] [call site] 00023
10 realloc [function] [call site] 00024
9 free [function] [call site] 00025
9 free [function] [call site] 00026
9 gettimeofday [function] [call site] 00027
9 fprintf [function] [call site] 00028
9 fflush [function] [call site] 00029
9 free [function] [call site] 00030
8 va_end [function] [call site] 00031
8 exit [function] [call site] 00032
7 malloc [function] [call site] 00033
7 fatal [function] [call site] 00034
8 snprintf [function] [call site] 00035
8 strerror [function] [call site] 00036
8 exit [function] [call site] 00037
8 va_start [function] [call site] 00038
8 log_vwrite [function] [call site] 00039
8 va_end [function] [call site] 00040
8 exit [function] [call site] 00041
6 vsnprintf [function] [call site] 00042
6 free [function] [call site] 00043
6 va_end [function] [call site] 00044
6 va_end [function] [call site] 00045
5 fatal [function] [call site] 00046
4 va_end [function] [call site] 00047
3 xasprintf [function] [call site] 00048
2 json_tokenize_input [function] [call site] 00049
3 json_create_tokens [function] [call site] 00050
4 xmalloc [function] [call site] 00051
4 xmalloc [function] [call site] 00052
3 json_tokenize_value [function] [call site] 00053
4 isxdigit [function] [call site] 00054
4 isspace [function] [call site] 00055
3 json_add_token [function] [call site] 00056
4 xrealloc [function] [call site] 00057
5 xreallocarray [function] [call site] 00058
6 fatalx [function] [call site] 00059
6 reallocarray [function] [call site] 00060
7 realloc [function] [call site] 00061
6 fatal [function] [call site] 00062
3 json_add_token [function] [call site] 00063
3 json_error [function] [call site] 00064
3 json_destroy_tokens [function] [call site] 00065
4 free [function] [call site] 00066
4 free [function] [call site] 00067
2 json_parse_tokens [function] [call site] 00068
3 json_parse_object [function] [call site] 00069
4 json_error [function] [call site] 00070
4 json_create_node [function] [call site] 00071
5 xcalloc [function] [call site] 00072
6 fatalx [function] [call site] 00073
6 fatalx [function] [call site] 00074
6 calloc [function] [call site] 00075
6 fatal [function] [call site] 00076
5 xstrdup [function] [call site] 00077
6 strdup [function] [call site] 00078
6 fatal [function] [call site] 00079
5 RB_INIT [function] [call site] 00080
5 TAILQ_INIT [function] [call site] 00081
5 json_assign_value [function] [call site] 00082
6 RB_INSERT [function] [call site] 00083
6 TAILQ_INSERT_TAIL [function] [call site] 00084
6 fatalx [function] [call site] 00085
4 json_parse_key [function] [call site] 00086
5 xstrndup [function] [call site] 00087
6 strndup [function] [call site] 00088
7 strnlen [function] [call site] 00089
7 malloc [function] [call site] 00090
7 memcpy [function] [call site] 00091
6 fatal [function] [call site] 00092
5 json_error [function] [call site] 00093
4 json_find [function] [call site] 00094
5 RB_FIND [function] [call site] 00095
4 json_error [function] [call site] 00096
4 json_error [function] [call site] 00097
4 json_parse_string [function] [call site] 00098
5 xstrndup [function] [call site] 00099
5 json_create_node [function] [call site] 00100
5 json_error [function] [call site] 00101
4 isdigit [function] [call site] 00102
4 isdigit [function] [call site] 00103
4 json_parse_number [function] [call site] 00104
5 strtoll [function] [call site] 00105
5 json_create_node [function] [call site] 00106
5 json_error [function] [call site] 00107
4 json_parse_boolean [function] [call site] 00108
5 strncmp [function] [call site] 00109
5 strncmp [function] [call site] 00110
5 json_create_node [function] [call site] 00111
5 json_error [function] [call site] 00112
4 json_parse_object [function] [call site] 00113
4 json_parse_array [function] [call site] 00114
5 json_create_node [function] [call site] 00115
5 json_parse_object [function] [call site] 00116
5 json_error [function] [call site] 00117
5 json_assign_value [function] [call site] 00118
5 json_error [function] [call site] 00119
5 json_error [function] [call site] 00120
5 json_destroy_node [function] [call site] 00121
6 free [function] [call site] 00122
6 RB_FOREACH_SAFE [function] [call site] 00123
7 RB_REMOVE [function] [call site] 00124
7 free [function] [call site] 00125
7 free [function] [call site] 00126
7 free [function] [call site] 00127
6 RB_REMOVE [function] [call site] 00128
6 json_destroy_node [function] [call site] 00129
6 TAILQ_EMPTY [function] [call site] 00130
6 TAILQ_FIRST [function] [call site] 00131
6 TAILQ_REMOVE [function] [call site] 00132
6 json_destroy_node [function] [call site] 00133
6 free [function] [call site] 00134
6 free [function] [call site] 00135
4 json_error [function] [call site] 00136
4 json_assign_value [function] [call site] 00137
4 json_error [function] [call site] 00138
4 json_error [function] [call site] 00139
4 free [function] [call site] 00140
4 free [function] [call site] 00141
4 json_destroy_node [function] [call site] 00142
3 json_error [function] [call site] 00143
3 json_error [function] [call site] 00144
3 json_destroy_tokens [function] [call site] 00145
3 json_destroy_node [function] [call site] 00146
3 json_destroy_tokens [function] [call site] 00147
1 free [function] [call site] 00148
1 walk_json [function] [call site] 00149
2 json_get_string [function] [call site] 00150
2 json_get_number [function] [call site] 00151
2 json_get_boolean [function] [call site] 00152
2 json_get_object [function] [call site] 00153
2 json_find [function] [call site] 00154
2 json_find [function] [call site] 00155
2 json_array_first [function] [call site] 00156
3 TAILQ_FIRST [function] [call site] 00157
2 json_array_next [function] [call site] 00158
3 TAILQ_NEXT [function] [call site] 00159
2 walk_json [function] [call site] 00160
1 json_to_string [function] [call site] 00161
2 evbuffer_new [function] [call site] 00162
3 mm_calloc [function] [call site] 00163
3 LIST_INIT [function] [call site] 00164
2 fatalx [function] [call site] 00165
2 json_string_append [function] [call site] 00166
3 evbuffer_add_printf [function] [call site] 00167
4 va_start [function] [call site] 00168
4 evbuffer_add_vprintf [function] [call site] 00169
5 EVBUFFER_LOCK [function] [call site] 00170
5 evbuffer_expand_singlechain [function] [call site] 00171
6 ASSERT_EVBUFFER_LOCKED [function] [call site] 00172
6 CHAIN_SPACE_LEN [function] [call site] 00173
6 CHAIN_SPACE_LEN [function] [call site] 00174
6 evbuffer_chain_should_realign [function] [call site] 00175
6 evbuffer_chain_align [function] [call site] 00176
7 EVUTIL_ASSERT [function] [call site] 00177
7 EVUTIL_ASSERT [function] [call site] 00178
7 memmove [function] [call site] 00179
6 CHAIN_SPACE_LEN [function] [call site] 00180
6 CHAIN_SPACE_LEN [function] [call site] 00181
6 evbuffer_chain_new_membuf [function] [call site] 00182
7 evbuffer_chain_new [function] [call site] 00183
8 mm_malloc [function] [call site] 00184
8 memset [function] [call site] 00185
8 EVBUFFER_CHAIN_EXTRA [function] [call site] 00186
6 memcpy [function] [call site] 00187
6 EVUTIL_ASSERT [function] [call site] 00188
6 evbuffer_chain_free [function] [call site] 00189
7 EVUTIL_ASSERT [function] [call site] 00190
7 CHAIN_PINNED [function] [call site] 00191
7 EVBUFFER_CHAIN_EXTRA [function] [call site] 00192
7 EVBUFFER_CHAIN_EXTRA [function] [call site] 00193
7 UnmapViewOfFile [function] [call site] 00194
7 evbuffer_file_segment_free [function] [call site] 00195
8 EVLOCK_LOCK [function] [call site] 00196
8 EVLOCK_UNLOCK [function] [call site] 00197
8 EVUTIL_ASSERT [function] [call site] 00198
8 CloseHandle [function] [call site] 00199
8 get_page_size [function] [call site] 00200
9 sysconf [function] [call site] 00201
9 sysconf [function] [call site] 00202
8 munmap [function] [call site] 00203
8 event_warn [function] [call site] 00204
9 va_start [function] [call site] 00205
9 event_logv_ [function] [call site] 00206
10 event_debug_get_logging_mask_ [function] [call site] 00207
10 evutil_vsnprintf [function] [call site] 00208
11 _vsnprintf [function] [call site] 00209
11 _vscprintf [function] [call site] 00210
11 _xpg5_vsnprintf [function] [call site] 00211
11 vsnprintf [function] [call site] 00212
10 strlen [function] [call site] 00213
10 evutil_snprintf [function] [call site] 00214
11 va_start [function] [call site] 00215
11 evutil_vsnprintf [function] [call site] 00216
11 va_end [function] [call site] 00217
10 event_log [function] [call site] 00218
11 log_fn [function] [call site] 00219
11 fprintf [function] [call site] 00220
9 strerror [function] [call site] 00221
9 va_end [function] [call site] 00222
8 mm_free [function] [call site] 00223
8 close [function] [call site] 00224
8 EVTHREAD_FREE_LOCK [function] [call site] 00225
8 mm_free [function] [call site] 00226
7 EVBUFFER_CHAIN_EXTRA [function] [call site] 00227
7 EVUTIL_ASSERT [function] [call site] 00228
7 EVUTIL_ASSERT [function] [call site] 00229
7 EVBUFFER_LOCK [function] [call site] 00230
7 evbuffer_chain_free [function] [call site] 00231
7 evbuffer_decref_and_unlock_ [function] [call site] 00232
8 ASSERT_EVBUFFER_LOCKED [function] [call site] 00233
8 EVUTIL_ASSERT [function] [call site] 00234
8 EVBUFFER_UNLOCK [function] [call site] 00235
8 evbuffer_chain_free [function] [call site] 00236
8 evbuffer_remove_all_callbacks [function] [call site] 00237
9 LIST_FIRST [function] [call site] 00238
9 LIST_REMOVE [function] [call site] 00239
9 mm_free [function] [call site] 00240
8 event_deferred_cb_cancel_ [function] [call site] 00241
9 event_callback_cancel_ [function] [call site] 00242
10 EVBASE_ACQUIRE_LOCK [function] [call site] 00243
10 event_callback_cancel_nolock_ [function] [call site] 00244
11 event_del_nolock_ [function] [call site] 00245
12 event_debug [function] [call site] 00246
12 EV_SOCK_ARG [function] [call site] 00247
12 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00248
12 EVUTIL_ASSERT [function] [call site] 00249
12 min_heap_top_ [function] [call site] 00250
12 event_queue_remove_timeout [function] [call site] 00251
13 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00252
13 EVUTIL_FAILURE_CHECK [function] [call site] 00253
13 event_errx [function] [call site] 00254
14 va_start [function] [call site] 00255
14 event_logv_ [function] [call site] 00256
14 va_end [function] [call site] 00257
14 event_exit [function] [call site] 00258
15 fatal_fn [function] [call site] 00259
15 exit [function] [call site] 00260
15 abort [function] [call site] 00261
15 exit [function] [call site] 00262
13 EV_SOCK_ARG [function] [call site] 00263
13 DECR_EVENT_COUNT [function] [call site] 00264
13 is_common_timeout [function] [call site] 00265
14 COMMON_TIMEOUT_IDX [function] [call site] 00266
13 get_common_timeout_list [function] [call site] 00267
14 COMMON_TIMEOUT_IDX [function] [call site] 00268
13 TAILQ_REMOVE [function] [call site] 00269
13 min_heap_erase_ [function] [call site] 00270
14 min_heap_elem_greater [function] [call site] 00271
14 min_heap_shift_up_unconditional_ [function] [call site] 00272
15 min_heap_elem_greater [function] [call site] 00273
14 min_heap_shift_down_ [function] [call site] 00274
15 min_heap_elem_greater [function] [call site] 00275
15 min_heap_elem_greater [function] [call site] 00276
12 event_queue_remove_active [function] [call site] 00277
13 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00278
13 EVUTIL_FAILURE_CHECK [function] [call site] 00279
13 event_errx [function] [call site] 00280
13 DECR_EVENT_COUNT [function] [call site] 00281
13 TAILQ_REMOVE [function] [call site] 00282
12 event_to_event_callback [function] [call site] 00283
12 event_queue_remove_active_later [function] [call site] 00284
13 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00285
13 EVUTIL_FAILURE_CHECK [function] [call site] 00286
13 event_errx [function] [call site] 00287
13 DECR_EVENT_COUNT [function] [call site] 00288
13 TAILQ_REMOVE [function] [call site] 00289
12 event_to_event_callback [function] [call site] 00290
12 event_queue_remove_inserted [function] [call site] 00291
13 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00292
13 EVUTIL_FAILURE_CHECK [function] [call site] 00293
13 event_errx [function] [call site] 00294
13 EV_SOCK_ARG [function] [call site] 00295
13 DECR_EVENT_COUNT [function] [call site] 00296
12 evmap_io_del_ [function] [call site] 00297
13 EVUTIL_ASSERT [function] [call site] 00298
13 GET_IO_SLOT [function] [call site] 00299
13 EVUTIL_ASSERT [function] [call site] 00300
13 EVUTIL_ASSERT [function] [call site] 00301
13 EVUTIL_ASSERT [function] [call site] 00302
13 iocp_listener_event_del [function] [call site] 00303
14 event_base_del_virtual_ [function] [call site] 00304
15 EVBASE_ACQUIRE_LOCK [function] [call site] 00305
15 EVUTIL_ASSERT [function] [call site] 00306
15 EVBASE_NEED_NOTIFY [function] [call site] 00307
15 evthread_notify_base [function] [call site] 00308
16 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00309
16 struct [call site] 00310
15 EVBASE_RELEASE_LOCK [function] [call site] 00311
13 LIST_REMOVE [function] [call site] 00312
12 evmap_signal_del_ [function] [call site] 00313
13 GET_SIGNAL_SLOT [function] [call site] 00314
13 LIST_REMOVE [function] [call site] 00315
13 LIST_FIRST [function] [call site] 00316
13 iocp_listener_event_del [function] [call site] 00317
12 event_haveevents [function] [call site] 00318
12 N_ACTIVE_CALLBACKS [function] [call site] 00319
12 EVBASE_NEED_NOTIFY [function] [call site] 00320
12 evthread_notify_base [function] [call site] 00321
12 event_debug_note_del_ [function] [call site] 00322
13 EVLOCK_LOCK [function] [call site] 00323
13 HT_FIND [function] [call site] 00324
13 event_errx [function] [call site] 00325
13 EV_SOCK_ARG [function] [call site] 00326
13 EVLOCK_UNLOCK [function] [call site] 00327
13 event_debug_mode_too_late_set [function] [call site] 00328
14 EVLOCK_LOCK [function] [call site] 00329
14 EVLOCK_UNLOCK [function] [call site] 00330
12 event_to_event_callback [function] [call site] 00331
12 EVBASE_IN_THREAD [function] [call site] 00332
12 EVTHREAD_COND_WAIT [function] [call site] 00333
11 event_callback_to_event [function] [call site] 00334
12 EVUTIL_ASSERT [function] [call site] 00335
12 EVUTIL_UPCAST [function] [call site] 00336
11 EVUTIL_ASSERT [function] [call site] 00337
11 event_queue_remove_active [function] [call site] 00338
11 event_queue_remove_active_later [function] [call site] 00339
10 EVBASE_RELEASE_LOCK [function] [call site] 00340
8 EVBUFFER_UNLOCK [function] [call site] 00341
8 EVTHREAD_FREE_LOCK [function] [call site] 00342
8 mm_free [function] [call site] 00343
7 mm_free [function] [call site] 00344
6 evbuffer_chain_insert_new [function] [call site] 00345
7 evbuffer_chain_new_membuf [function] [call site] 00346
7 evbuffer_chain_insert [function] [call site] 00347
8 ASSERT_EVBUFFER_LOCKED [function] [call site] 00348
8 EVUTIL_ASSERT [function] [call site] 00349
8 EVUTIL_ASSERT [function] [call site] 00350
8 evbuffer_free_trailing_empty_chains [function] [call site] 00351
9 CHAIN_PINNED [function] [call site] 00352
9 EVUTIL_ASSERT [function] [call site] 00353
9 evbuffer_chains_all_empty [function] [call site] 00354
9 evbuffer_free_all_chains [function] [call site] 00355
10 evbuffer_chain_free [function] [call site] 00356
6 EVUTIL_ASSERT [function] [call site] 00357
6 EVUTIL_ASSERT [function] [call site] 00358
6 CHAIN_SPACE_LEN [function] [call site] 00359
5 EVUTIL_ASSERT [function] [call site] 00360
5 CHAIN_SPACE_PTR [function] [call site] 00361
5 CHAIN_SPACE_LEN [function] [call site] 00362
5 va_copy [function] [call site] 00363
5 evutil_vsnprintf [function] [call site] 00364
5 va_end [function] [call site] 00365
5 advance_last_with_data [function] [call site] 00366
6 ASSERT_EVBUFFER_LOCKED [function] [call site] 00367
5 evbuffer_invoke_callbacks_ [function] [call site] 00368
6 LIST_EMPTY [function] [call site] 00369
6 event_deferred_cb_schedule_ [function] [call site] 00370
7 EVBASE_ACQUIRE_LOCK [function] [call site] 00371
7 event_callback_activate_later_nolock_ [function] [call site] 00372
8 event_queue_insert_active_later [function] [call site] 00373
9 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00374
9 INCR_EVENT_COUNT [function] [call site] 00375
9 MAX_EVENT_COUNT [function] [call site] 00376
9 EVUTIL_ASSERT [function] [call site] 00377
9 TAILQ_INSERT_TAIL [function] [call site] 00378
8 EVBASE_NEED_NOTIFY [function] [call site] 00379
8 evthread_notify_base [function] [call site] 00380
7 event_callback_activate_nolock_ [function] [call site] 00381
8 EVUTIL_ASSERT [function] [call site] 00382
8 event_queue_remove_active_later [function] [call site] 00383
8 event_queue_insert_active [function] [call site] 00384
9 EVENT_BASE_ASSERT_LOCKED [function] [call site] 00385
9 INCR_EVENT_COUNT [function] [call site] 00386
9 MAX_EVENT_COUNT [function] [call site] 00387
9 EVUTIL_ASSERT [function] [call site] 00388
9 TAILQ_INSERT_TAIL [function] [call site] 00389
8 EVBASE_NEED_NOTIFY [function] [call site] 00390
8 evthread_notify_base [function] [call site] 00391
7 EVBASE_RELEASE_LOCK [function] [call site] 00392
6 evbuffer_incref_and_lock_ [function] [call site] 00393
7 EVBUFFER_LOCK [function] [call site] 00394
6 bufferevent_incref_ [function] [call site] 00395
6 EVBUFFER_UNLOCK [function] [call site] 00396
6 evbuffer_run_callbacks [function] [call site] 00397
7 ASSERT_EVBUFFER_LOCKED [function] [call site] 00398
7 LIST_EMPTY [function] [call site] 00399
7 LIST_FIRST [function] [call site] 00400
7 LIST_END [function] [call site] 00401
7 LIST_NEXT [function] [call site] 00402
7 struct [call site] 00403
7 struct [call site] 00404
5 evbuffer_expand_singlechain [function] [call site] 00405
5 EVBUFFER_UNLOCK [function] [call site] 00406
4 va_end [function] [call site] 00407
3 evbuffer_add_printf [function] [call site] 00408
3 evbuffer_add [function] [call site] 00409
4 EVBUFFER_LOCK [function] [call site] 00410
4 evbuffer_chain_insert_new [function] [call site] 00411
4 EVUTIL_ASSERT [function] [call site] 00412
4 memcpy [function] [call site] 00413
4 CHAIN_PINNED [function] [call site] 00414
4 evbuffer_chain_should_realign [function] [call site] 00415
4 evbuffer_chain_align [function] [call site] 00416
4 memcpy [function] [call site] 00417
4 evbuffer_chain_new_membuf [function] [call site] 00418
4 memcpy [function] [call site] 00419
4 memcpy [function] [call site] 00420
4 evbuffer_chain_insert [function] [call site] 00421
4 evbuffer_invoke_callbacks_ [function] [call site] 00422
4 EVBUFFER_UNLOCK [function] [call site] 00423
3 strlen [function] [call site] 00424
3 evbuffer_add [function] [call site] 00425
3 RB_FOREACH [function] [call site] 00426
3 evbuffer_add [function] [call site] 00427
3 evbuffer_add_printf [function] [call site] 00428
3 json_string_append [function] [call site] 00429
3 evbuffer_add [function] [call site] 00430
3 evbuffer_add [function] [call site] 00431
3 TAILQ_FOREACH [function] [call site] 00432
4 mode_tree_find_item [function] [call site] 00433
5 mode_tree_find_item [function] [call site] 00434
3 evbuffer_add [function] [call site] 00435
3 json_string_append [function] [call site] 00436
3 evbuffer_add [function] [call site] 00437
2 xmemdup [function] [call site] 00438
3 xmalloc [function] [call site] 00439
3 memcpy [function] [call site] 00440
2 EVBUFFER_DATA [function] [call site] 00441
2 EVBUFFER_LENGTH [function] [call site] 00442
2 evbuffer_free [function] [call site] 00443
3 EVBUFFER_LOCK [function] [call site] 00444
3 evbuffer_decref_and_unlock_ [function] [call site] 00445
1 free [function] [call site] 00446
1 json_destroy_node [function] [call site] 00447
1 free [function] [call site] 00448