Fuzz introspector: Fuzz_http
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
133 136 2 :

['nxt_process_arguments', 'nxt_log_start']

133 136 nxt_lib_start call site: 00064 /src/unit/src/nxt_lib.c:113
48 48 1 :

['nxt_lvlhsh_bucket_convertion_insert']

48 48 nxt_lvlhsh_level_convertion_insert call site: 00077 /src/unit/src/nxt_lvlhsh.c:526
6 6 3 :

['open64', 'close', 'read']

8 15 nxt_random_stir call site: 00058 /src/unit/src/nxt_random.c:85
6 6 3 :

['open64', 'dup2', 'close']

6 6 nxt_stderr_start call site: 00003 /src/unit/src/nxt_file.c:611
5 5 1 :

['nxt_thread_time_shared']

5 5 nxt_thread_time_update call site: 00015 /src/unit/src/nxt_thread_time.c:52
2 7 2 :

['nxt_thread_tid', 'gettimeofday']

2 9 nxt_random_stir call site: 00059 /src/unit/src/nxt_random.c:94
0 142 1 :

['nxt_mp_alloc_large']

0 142 nxt_mp_get call site: 00099 /src/unit/src/nxt_mp.c:1005
0 0 None 16 43 nxt_vsprintf call site: 00000 /src/unit/src/nxt_sprintf.c:302
0 0 None 16 43 nxt_vsprintf call site: 00000 /src/unit/src/nxt_sprintf.c:310
0 0 None 16 43 nxt_vsprintf call site: 00000 /src/unit/src/nxt_sprintf.c:316
0 0 None 16 43 nxt_vsprintf call site: 00000 /src/unit/src/nxt_sprintf.c:543
0 0 None 14 128 nxt_strerror_start call site: 00021 /src/unit/src/nxt_errno.c:71

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 nxt_lib_start [function] [call site] 00001
2 nxt_stderr_start [function] [call site] 00002
3 fcntl64 [call site] 00003
3 fcntl64 [call site] 00004
3 open64 [call site] 00005
3 dup2 [call site] 00006
3 close [call site] 00007
2 nxt_log_start [function] [call site] 00008
2 getpid [call site] 00009
2 getppid [call site] 00010
2 geteuid [call site] 00011
2 getegid [call site] 00012
2 mallopt [call site] 00013
2 pthread_self [call site] 00014
2 nxt_thread_time_update [function] [call site] 00015
3 nxt_thread_time_shared [function] [call site] 00016
3 nxt_monotonic_time [function] [call site] 00017
4 clock_gettime [call site] 00018
2 nxt_strerror_start [function] [call site] 00019
3 __errno_location [call site] 00020
3 strerror [call site] 00021
3 strlen [call site] 00022
3 __errno_location [call site] 00023
3 memcmp [call site] 00024
3 nxt_malloc [function] [call site] 00025
4 nxt_malloc_log [function] [call site] 00026
4 nxt_malloc_log [function] [call site] 00027
4 nxt_log_moderate_allow [function] [call site] 00028
5 nxt_thread_time [function] [call site] 00029
6 nxt_thread_realtime_update [function] [call site] 00030
7 nxt_realtime [function] [call site] 00031
8 clock_gettime [call site] 00032
7 nxt_realtime [function] [call site] 00033
5 nxt_thread_spin_lock [function] [call site] 00034
6 pthread_yield [call site] 00035
5 nxt_thread_spin_unlock [function] [call site] 00036
5 nxt_log_moderate_timer_handler [function] [call site] 00037
6 nxt_thread_spin_lock [function] [call site] 00038
6 nxt_thread_time [function] [call site] 00039
6 nxt_thread_spin_unlock [function] [call site] 00040
5 nxt_timer_add [function] [call site] 00041
6 abs [call site] 00042
6 nxt_timer_change [function] [call site] 00043
7 nxt_timer_changes_commit [function] [call site] 00044
8 nxt_rbtree_delete [function] [call site] 00045
9 nxt_rbtree_delete_fixup [function] [call site] 00046
8 nxt_rbtree_insert [function] [call site] 00047
9 nxt_rbtree_insert_fixup [function] [call site] 00048
6 nxt_timer_change [function] [call site] 00049
4 __errno_location [call site] 00050
3 strerror [call site] 00051
3 strlen [call site] 00052
3 nxt_runtime_strerror [function] [call site] 00053
2 sysconf [call site] 00054
2 nxt_thread_spin_init [function] [call site] 00055
2 nxt_random_init [function] [call site] 00056
3 nxt_random_stir [function] [call site] 00057
4 getrandom [call site] 00058
4 close [call site] 00059
4 gettimeofday [call site] 00060
4 nxt_thread_tid [function] [call site] 00061
5 syscall [call site] 00062
4 nxt_random_add [function] [call site] 00063
2 getpagesize [call site] 00064
2 nxt_process_arguments [function] [call site] 00065
3 strlen [call site] 00066
3 nxt_malloc [function] [call site] 00067
3 nxt_malloc [function] [call site] 00068
3 strlen [call site] 00069
3 nxt_malloc [function] [call site] 00070
3 strlen [call site] 00071
2 nxt_log_start [function] [call site] 00072
1 nxt_http_fields_hash [function] [call site] 00073
2 nxt_lvlhsh_insert [function] [call site] 00074
3 nxt_lvlhsh_bucket_insert [function] [call site] 00075
4 nxt_lvlhsh_convert_bucket_to_level [function] [call site] 00076
5 nxt_lvlhsh_level_convertion_insert [function] [call site] 00077
6 nxt_lvlhsh_new_bucket [function] [call site] 00078
6 nxt_lvlhsh_bucket_convertion_insert [function] [call site] 00079
7 nxt_lvlhsh_convert_bucket_to_level [function] [call site] 00080
8 nxt_lvlhsh_free_level [function] [call site] 00081
7 nxt_lvlhsh_level_insert [function] [call site] 00082
8 nxt_lvlhsh_bucket_insert [function] [call site] 00083
9 nxt_lvlhsh_level_insert [function] [call site] 00084
10 nxt_lvlhsh_level_insert [function] [call site] 00085
11 nxt_lvlhsh_new_bucket [function] [call site] 00086
9 nxt_lvlhsh_new_bucket [function] [call site] 00087
7 nxt_lvlhsh_new_bucket [function] [call site] 00088
3 nxt_lvlhsh_level_insert [function] [call site] 00089
3 nxt_lvlhsh_new_bucket [function] [call site] 00090
1 nxt_http_parse_fuzz [function] [call site] 00091
2 nxt_mp_create [function] [call site] 00092
3 nxt_zalloc [function] [call site] 00093
4 nxt_malloc [function] [call site] 00094
3 nxt_rbtree_init [function] [call site] 00095
3 nxt_mp_rbtree_compare [function] [call site] 00096
2 nxt_http_parse_request_init [function] [call site] 00097
3 nxt_list_create [function] [call site] 00098
4 nxt_mp_get [function] [call site] 00099
5 nxt_mp_get_small [function] [call site] 00100
6 nxt_thread_tid [function] [call site] 00101
6 raise [call site] 00102
6 nxt_mp_alloc_page [function] [call site] 00103
7 nxt_mp_alloc_cluster [function] [call site] 00104
8 nxt_zalloc [function] [call site] 00105
8 nxt_memalign [function] [call site] 00106
9 posix_memalign [call site] 00107
9 nxt_malloc_log [function] [call site] 00108
9 nxt_log_moderate_allow [function] [call site] 00109
8 nxt_free [function] [call site] 00110
9 nxt_malloc_log [function] [call site] 00111
8 nxt_rbtree_insert [function] [call site] 00112
5 nxt_mp_alloc_large [function] [call site] 00113
6 nxt_thread_tid [function] [call site] 00114
6 raise [call site] 00115
6 nxt_malloc [function] [call site] 00116
6 nxt_memalign [function] [call site] 00117
6 nxt_memalign [function] [call site] 00119
6 nxt_rbtree_insert [function] [call site] 00120
2 nxt_http_parse_request [function] [call site] 00121
3 nxt_http_parse_request_line [function] [call site] 00122
4 nxt_http_parse_unusual_target [function] [call site] 00123
4 memcmp [call site] 00124
4 memcmp [call site] 00125
4 nxt_http_parse_complex_target [function] [call site] 00126
5 nxt_mp_alloc [function] [call site] 00127
6 nxt_mp_alloc_small [function] [call site] 00128
7 nxt_thread_tid [function] [call site] 00129
7 raise [call site] 00130
7 nxt_mp_alloc_page [function] [call site] 00131
7 nxt_mp_alloc_page [function] [call site] 00132
6 nxt_mp_alloc_large [function] [call site] 00133
4 nxt_http_parse_field_name [function] [call site] 00134
5 nxt_http_parse_field_name [function] [call site] 00135
6 nxt_http_parse_field_value [function] [call site] 00136
7 nxt_http_parse_field_value [function] [call site] 00137
8 nxt_http_lookup_field_end [function] [call site] 00138
8 nxt_http_parse_field_value [function] [call site] 00139
9 nxt_http_parse_field_end [function] [call site] 00140
10 nxt_http_parse_field_end [function] [call site] 00141
11 nxt_list_add [function] [call site] 00142
12 nxt_mp_get [function] [call site] 00143
11 nxt_http_parse_field_name [function] [call site] 00144
12 nxt_http_parse_field_end [function] [call site] 00145
4 nxt_http_parse_field_name [function] [call site] 00146
4 memcmp [call site] 00147
2 nxt_http_fields_process [function] [call site] 00148
3 nxt_lvlhsh_find [function] [call site] 00149
4 nxt_lvlhsh_bucket_find [function] [call site] 00150
4 nxt_lvlhsh_level_find [function] [call site] 00151
5 nxt_lvlhsh_bucket_find [function] [call site] 00152
5 nxt_lvlhsh_level_find [function] [call site] 00153
2 nxt_mp_destroy [function] [call site] 00154
3 nxt_thread_tid [function] [call site] 00155
3 raise [call site] 00156
3 nxt_rbtree_destroy_next [function] [call site] 00157