Fuzz introspector: json_load_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
4 14 loader_log call site: 00014 util_SubmitDebugUtilsMessageEXT
2 8 loader_read_entire_file call site: 00008 create_callback_file
2 23 loader_read_entire_file call site: 00023 loader_log
2 79 ensure call site: 00079 loader_free
2 92 print_number call site: 00092 ensure
1 12 loader_read_entire_file call site: 00012 loader_log
1 21 loader_calloc call site: 00021 loader_log
1 66 parse_array call site: 00066 buffer_skip_whitespace
1 68 loader_cJSON_ParseWithLengthOpts call site: 00068 loader_log
1 72 loader_instance_heap_free call site: 00072 loader_cJSON_Delete
1 82 loader_realloc call site: 00082 loader_free
1 96 print_string call site: 00096 ensure

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 getpid [call site] 00001
1 sprintf [call site] 00002
1 fopen [call site] 00003
1 fwrite [call site] 00004
1 fclose [call site] 00005
1 loader_get_json [function] [call site] 00006
2 loader_read_entire_file [function] [call site] 00007
3 fopen [call site] 00008
3 create_callback_file [function] [call site] 00009
3 fopen [call site] 00010
3 fileno [call site] 00011
3 fstat [call site] 00012
3 loader_log [function] [call site] 00013
4 vsnprintf [call site] 00014
4 util_SubmitDebugUtilsMessageEXT [function] [call site] 00015
5 debug_utils_AnnotFlagsToReportFlags [function] [call site] 00016
5 debug_utils_AnnotObjectToDebugReportObject [function] [call site] 00017
6 convertCoreObjectToDebugReportObject [function] [call site] 00018
3 loader_instance_heap_calloc [function] [call site] 00019
4 loader_calloc [function] [call site] 00020
5 calloc [call site] 00021
3 loader_log [function] [call site] 00022
3 fread [call site] 00023
3 loader_log [function] [call site] 00024
3 loader_log [function] [call site] 00025
3 fclose [call site] 00026
2 loader_cJSON_ParseWithLength [function] [call site] 00027
3 loader_cJSON_ParseWithLengthOpts [function] [call site] 00028
4 cJSON_New_Item [function] [call site] 00029
5 loader_calloc [function] [call site] 00030
4 skip_utf8_bom [function] [call site] 00031
5 strncmp [call site] 00032
4 buffer_skip_whitespace [function] [call site] 00033
4 parse_value [function] [call site] 00034
5 strncmp [call site] 00035
5 strncmp [call site] 00036
5 strncmp [call site] 00037
5 parse_string [function] [call site] 00038
6 loader_calloc [function] [call site] 00039
6 utf16_literal_to_utf8 [function] [call site] 00040
7 parse_hex4 [function] [call site] 00041
7 parse_hex4 [function] [call site] 00042
6 loader_free [function] [call site] 00043
5 parse_number [function] [call site] 00044
6 strtod [call site] 00045
5 parse_array [function] [call site] 00046
6 buffer_skip_whitespace [function] [call site] 00047
6 cJSON_New_Item [function] [call site] 00048
6 buffer_skip_whitespace [function] [call site] 00049
6 parse_value [function] [call site] 00050
7 parse_object [function] [call site] 00051
8 buffer_skip_whitespace [function] [call site] 00052
8 cJSON_New_Item [function] [call site] 00053
8 buffer_skip_whitespace [function] [call site] 00054
8 parse_string [function] [call site] 00055
8 buffer_skip_whitespace [function] [call site] 00056
8 buffer_skip_whitespace [function] [call site] 00057
8 parse_value [function] [call site] 00058
8 buffer_skip_whitespace [function] [call site] 00059
8 loader_cJSON_Delete [function] [call site] 00060
9 loader_cJSON_Delete [function] [call site] 00061
10 loader_free [function] [call site] 00062
10 loader_free [function] [call site] 00063
10 loader_free [function] [call site] 00064
6 buffer_skip_whitespace [function] [call site] 00065
6 loader_cJSON_Delete [function] [call site] 00066
4 buffer_skip_whitespace [function] [call site] 00067
4 loader_cJSON_Delete [function] [call site] 00068
2 loader_log [function] [call site] 00069
2 loader_log [function] [call site] 00070
2 loader_instance_heap_free [function] [call site] 00071
3 loader_free [function] [call site] 00072
2 loader_cJSON_Delete [function] [call site] 00073
1 loader_cJSON_Print [function] [call site] 00074
2 print [function] [call site] 00075
3 loader_calloc [function] [call site] 00076
3 print_value [function] [call site] 00077
4 ensure [function] [call site] 00078
5 loader_realloc [function] [call site] 00079
6 loader_alloc [function] [call site] 00080
6 loader_free [function] [call site] 00081
6 realloc [call site] 00082
5 loader_free [function] [call site] 00083
4 ensure [function] [call site] 00084
4 ensure [function] [call site] 00085
4 print_number [function] [call site] 00086
5 snprintf [call site] 00087
5 snprintf [call site] 00088
5 __isoc99_sscanf [call site] 00089
5 compare_double [function] [call site] 00090
5 snprintf [call site] 00091
5 ensure [function] [call site] 00092
4 strlen [call site] 00093
4 ensure [function] [call site] 00094
4 print_string [function] [call site] 00095
5 print_string_ptr [function] [call site] 00096
6 ensure [function] [call site] 00097
6 ensure [function] [call site] 00098
6 snprintf [call site] 00099
4 print_array [function] [call site] 00100
5 ensure [function] [call site] 00101
5 print_value [function] [call site] 00102
6 print_object [function] [call site] 00103
7 ensure [function] [call site] 00104
7 ensure [function] [call site] 00105
7 print_string_ptr [function] [call site] 00106
7 update_offset [function] [call site] 00107
8 strlen [call site] 00108
7 ensure [function] [call site] 00109
7 print_value [function] [call site] 00110
7 update_offset [function] [call site] 00111
7 ensure [function] [call site] 00112
7 ensure [function] [call site] 00113
5 update_offset [function] [call site] 00114
5 ensure [function] [call site] 00115
5 ensure [function] [call site] 00116
3 update_offset [function] [call site] 00117
3 loader_realloc [function] [call site] 00118
3 loader_free [function] [call site] 00119
1 loader_cJSON_Delete [function] [call site] 00120
1 unlink [call site] 00121