Fuzz introspector: uri_dissect_query_malloc_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 0 None 0 36 uriEscapeExA call site: 00020 /src/uriparser/src/UriEscape.c:105
0 0 None 0 36 uriEscapeExA call site: 00020 /src/uriparser/src/UriEscape.c:191
0 0 None 0 36 uriEscapeExA call site: 00020 /src/uriparser/src/UriEscape.c:211
0 0 None 0 4 uriUnescapeInPlaceExA call site: 00010 /src/uriparser/src/UriEscape.c:426
0 0 None 0 0 uriAppendQueryItemA call site: 00007 /src/uriparser/src/UriQuery.c:317
0 0 None 0 0 uriAppendQueryItemA call site: 00008 /src/uriparser/src/UriQuery.c:337

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 consumeRemainingBytesAsString(FuzzedDataProvider&) [function] [call site] 00001
2 tryConsumeBytesAsString(FuzzedDataProvider&, unsigned long) [function] [call site] 00002
1 uriDissectQueryMallocA [function] [call site] 00003
2 uriDissectQueryMallocExA [function] [call site] 00004
3 uriDissectQueryMallocExMmA [function] [call site] 00005
4 uriMemoryManagerIsComplete [function] [call site] 00006
4 uriAppendQueryItemA [function] [call site] 00007
5 uriUnescapeInPlaceExA [function] [call site] 00008
6 uriHexdigToIntA [function] [call site] 00009
6 uriHexdigToIntA [function] [call site] 00010
5 uriUnescapeInPlaceExA [function] [call site] 00011
4 uriAppendQueryItemA [function] [call site] 00012
4 uriFreeQueryListMmA [function] [call site] 00013
5 uriMemoryManagerIsComplete [function] [call site] 00014
1 uriComposeQueryCharsRequiredA [function] [call site] 00015
2 uriComposeQueryCharsRequiredExA [function] [call site] 00016
3 uriComposeQueryEngineA [function] [call site] 00017
4 strlen [call site] 00018
4 strlen [call site] 00019
4 uriEscapeExA [function] [call site] 00020
5 uriHexToLetterExA [function] [call site] 00021
5 uriHexToLetterExA [function] [call site] 00022
4 uriEscapeExA [function] [call site] 00023
1 uriFreeQueryListA [function] [call site] 00024
2 uriFreeQueryListMmA [function] [call site] 00025
1 uriComposeQueryA [function] [call site] 00026
2 uriComposeQueryExA [function] [call site] 00027
3 uriComposeQueryEngineA [function] [call site] 00028
1 uriFreeQueryListA [function] [call site] 00029