Fuzz introspector: fuzz_http_h1p
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
104 107 2 :

['nxt_log_start', 'nxt_process_arguments']

104 107 nxt_lib_start call site: 00000 /src/unit/src/nxt_lib.c:132
42 42 1 :

['nxt_lvlhsh_bucket_convertion_insert']

42 42 nxt_lvlhsh_level_convertion_insert call site: 00000 /src/unit/src/nxt_lvlhsh.c:526
7 7 2 :

['nxt_thread_tid', 'gettimeofday']

7 9 nxt_random_stir call site: 00000 /src/unit/src/nxt_random.c:94
6 6 3 :

['close', 'open64', 'read']

13 15 nxt_random_stir call site: 00000 /src/unit/src/nxt_random.c:85
6 6 3 :

['close', 'open64', 'dup2']

6 6 nxt_stderr_start call site: 00000 /src/unit/src/nxt_file.c:693
5 5 1 :

['nxt_thread_time_shared']

5 5 nxt_thread_time_update call site: 00000 /src/unit/src/nxt_thread_time.c:52
0 0 None 14 101 nxt_strerror_start call site: 00000 /src/unit/src/nxt_errno.c:71
0 0 None 0 105 nxt_mp_get_small call site: 00026 /src/unit/src/nxt_mp.c:617
0 0 None 0 87 nxt_lvlhsh_bucket_insert call site: 00000 /src/unit/src/nxt_lvlhsh.c:371
0 0 None 0 0 LLVMFuzzerInitialize call site: 00000 /src/unit/fuzzing/nxt_http_h1p_fuzz.c:27
0 0 None 0 0 LLVMFuzzerInitialize call site: 00000 /src/unit/fuzzing/nxt_http_h1p_fuzz.c:33
0 0 None 0 0 nxt_strerror_start call site: 00000 /src/unit/src/nxt_errno.c:106

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 nxt_mp_create [function] [call site] 00001
2 nxt_zalloc [function] [call site] 00002
3 nxt_malloc [function] [call site] 00003
4 nxt_malloc_log [function] [call site] 00004
4 nxt_log_moderate_allow [function] [call site] 00005
5 nxt_thread_time [function] [call site] 00006
6 nxt_thread_realtime_update [function] [call site] 00007
7 nxt_realtime [function] [call site] 00008
8 clock_gettime [call site] 00009
5 nxt_thread_spin_lock [function] [call site] 00010
6 pthread_yield [call site] 00011
5 nxt_thread_spin_unlock [function] [call site] 00012
5 nxt_timer_add [function] [call site] 00013
6 nxt_timer_change [function] [call site] 00014
7 nxt_timer_changes_commit [function] [call site] 00015
8 nxt_rbtree_delete [function] [call site] 00016
9 nxt_rbtree_delete_fixup [function] [call site] 00017
8 nxt_rbtree_insert [function] [call site] 00018
9 nxt_rbtree_insert_fixup [function] [call site] 00019
6 nxt_timer_change [function] [call site] 00020
4 __errno_location [call site] 00021
2 nxt_rbtree_init [function] [call site] 00022
2 nxt_mp_rbtree_compare [function] [call site] 00023
1 nxt_mp_zget [function] [call site] 00024
2 nxt_mp_get [function] [call site] 00025
3 nxt_mp_get_small [function] [call site] 00026
4 nxt_mp_alloc_page [function] [call site] 00027
5 nxt_mp_alloc_cluster [function] [call site] 00028
6 nxt_zalloc [function] [call site] 00029
6 nxt_memalign [function] [call site] 00030
7 posix_memalign [call site] 00031
7 nxt_malloc_log [function] [call site] 00032
7 nxt_log_moderate_allow [function] [call site] 00033
6 nxt_rbtree_insert [function] [call site] 00034
3 nxt_mp_alloc_large [function] [call site] 00035
4 nxt_malloc [function] [call site] 00036
4 nxt_memalign [function] [call site] 00037
4 nxt_memalign [function] [call site] 00038
4 nxt_rbtree_insert [function] [call site] 00039
1 nxt_mp_zget [function] [call site] 00040
1 nxt_mp_zget [function] [call site] 00041
1 nxt_mp_zget [function] [call site] 00042
1 nxt_http_parse_request_init [function] [call site] 00043
2 nxt_list_create [function] [call site] 00044
3 nxt_mp_get [function] [call site] 00045
1 nxt_http_parse_request [function] [call site] 00046
1 nxt_http_fields_process [function] [call site] 00047
2 nxt_lvlhsh_find [function] [call site] 00048
3 nxt_lvlhsh_bucket_find [function] [call site] 00049
3 nxt_lvlhsh_level_find [function] [call site] 00050
4 nxt_lvlhsh_bucket_find [function] [call site] 00051
4 nxt_lvlhsh_level_find [function] [call site] 00052
1 nxt_mp_destroy [function] [call site] 00053
2 nxt_rbtree_destroy_next [function] [call site] 00054