Fuzz introspector: domtree
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
60 138 ExpressionParser::handle_if_lparen call site: {node_id} Lexer::scan_number
45 203 InstanceFlags::set_may_enter call site: {node_id} Lexer::scan_string
33 249 PackedOption::is_some call site: {node_id} Parser::cur_span
27 0 EP call site: {node_id} Component::get_export
25 507 ComponentItem::from call site: {node_id} calculate
24 297 ScopedHashMap::entry_with_depth call site: {node_id} Parser::expect
21 69 machreg_to_gpr call site: {node_id} AtomicOP::unset
16 37 CodeBuilder::alloc_local call site: {node_id} ScopeVec::push
10 537 Vec::repopulate call site: {node_id} BoxedSlice::is_valid
7 91 AtomicOP::unset call site: {node_id} list
6 402 TypeRegistryInner::register_singleton_rec_group call site: {node_id} iter_entity_range
5 30 ScopedHashMap::entry_with_depth call site: {node_id} CrashTestDummy::cloned

Fuzzer calltree

0 fuzz_target [function] [call site] 00000
1 int_in_range [function] [call site] 00001
1 int_in_range [function] [call site] 00002
1 RemoveBlock::new [function] [call site] 00003
2 RealFunction::entry_block [function] [call site] 00004
2 try_unwrap [function] [call site] 00005
3 clone [function] [call site] 00012
4 OnceLock::new [function] [call site] 00013
5 SendSyncUnsafeCell::new [function] [call site] 00014
5 MaybeUninit::uninit [function] [call site] 00016
4 wasmtime_caller_export_get [function] [call site] 00017
5 str::from_utf8 [function] [call site] 00018
5 slice_from_raw_parts [function] [call site] 00019
6 std::slice::from_raw_parts [function] [call site] 00020
5 Component::get_export [function] [call site] 00021
6 hashmap [function] [call site] 00022
7 ScopedHashMap::new [function] [call site] 00023
8 FxHashMap::default [function] [call site] 00024
7 test_vacant_entry_no_insert [function] [call site] 00025
8 ScopedHashMap::entry [function] [call site] 00026
9 ScopedHashMap::entry_with_depth [function] [call site] 00027
10 ContextArgs::len [function] [call site] 00028
11 ContextArgs::as_slice [function] [call site] 00029
10 ScopedHashMap::get [function] [call site] 00030
11 CrashTestDummy::cloned [function] [call site] 00032
12 load [function] [call site] 00033
13 get_memarg [function] [call site] 00034
13 CodeBuilder::alloc_local [function] [call site] 00035
14 Stack::push [function] [call site] 00036
14 u32::try_from [function] [call site] 00037
13 type_of_memory_access [function] [call site] 00038
13 ScopeVec::push [function] [call site] 00039
14 into [function] [call site] 00040
15 PathBuf::from [function] [call site] 00041
14 SmallVec::len [function] [call site] 00042
14 borrow_mut [function] [call site] 00043
14 PrimaryMap::last_mut [function] [call site] 00044
15 PrimaryMap::len [function] [call site] 00045
14 UnboxedValues::as_mut_ptr [function] [call site] 00047
14 core::slice::from_raw_parts_mut [function] [call site] 00048
13 Instruction::LocalSet [function] [call site] 00049
13 Instruction::Block [function] [call site] 00050
13 Instruction::Block [function] [call site] 00051
13 Instruction::MemorySize [function] [call site] 00052
13 int_const_inst [function] [call site] 00053
14 Instruction::I32Const [function] [call site] 00054
14 Instruction::I64Const [function] [call site] 00055
13 page_size [function] [call site] 00056
14 Parser::peek [function] [call site] 00057
15 peek [function] [call site] 00058
16 each_ip [function] [call site] 00059
17 enc_rie_f [function] [call site] 00060
18 machreg_to_gpr [function] [call site] 00061
19 u32::from [function] [call site] 00062
20 DiscriminantSize::byte_size [function] [call site] 00063
19 Reg::to_real_reg [function] [call site] 00064
20 pinned_vreg_to_preg [function] [call site] 00065
21 VReg::vreg [function] [call site] 00066
21 PReg::from_index [function] [call site] 00068
19 PReg::hw_enc [function] [call site] 00069
17 next_test_ip4 [function] [call site] 00070
18 base_port [function] [call site] 00071
19 String::from [function] [call site] 00072
19 env::current_dir [function] [call site] 00073
19 into_os_string [function] [call site] 00074
19 wtf8buf_into_string [function] [call site] 00075
20 from_str [function] [call site] 00076
21 Store::call_hook [function] [call site] 00077
22 CallHookInner::Sync [function] [call site] 00079
20 CodePoint::from_u32 [function] [call site] 00080
18 SocketAddr::V4 [function] [call site] 00081
17 next_test_ip6 [function] [call site] 00082
18 SocketAddr::V6 [function] [call site] 00083
15 Parser::cursor [function] [call site] 00084
14 Parser::peek2 [function] [call site] 00085
15 T::peek2 [function] [call site] 00086
14 Parser::parens [function] [call site] 00089
15 AtomicOP::unset [function] [call site] 00090
16 SolverCtx::sign_extend [function] [call site] 00091
17 list [function] [call site] 00092
18 Backend::from [function] [call site] 00093
18 OpenvinoBackend::default [function] [call site] 00095
18 WinMLBackend::default [function] [call site] 00096
18 OnnxBackend::default [function] [call site] 00097
18 PytorchBackend::default [function] [call site] 00098
16 Inst::load_int_mask [function] [call site] 00099
17 Type::is_int [function] [call site] 00100
17 Type::bits [function] [call site] 00101
18 Type::is_dynamic_vector [function] [call site] 00102
18 Type::lane_bits [function] [call site] 00103
19 Type::lane_type [function] [call site] 00104
18 Type::lane_count [function] [call site] 00106
19 Type::log2_lane_count [function] [call site] 00107
17 Inst::load_imm12 [function] [call site] 00108
17 Imm12::from_i16 [function] [call site] 00115
17 Writable::to_reg [function] [call site] 00116
16 WritableReg::to_reg [function] [call site] 00117
16 Inst::construct_bit_not [function] [call site] 00118
16 WritableReg::to_reg [function] [call site] 00119
16 WritableReg::to_reg [function] [call site] 00120
16 WritableReg::to_reg [function] [call site] 00121
15 ExpressionParser::handle_if_lparen [function] [call site] 00124
16 mem::replace [function] [call site] 00133
16 Instruction::End [function] [call site] 00134
16 ExpressionParser::push_instr [function] [call site] 00135
16 Instruction::Else [function] [call site] 00137
16 Parser::error [function] [call site] 00140
17 to_string [function] [call site] 00141
18 Lexer::scan_chars [function] [call site] 00142
19 Lexer::loc [function] [call site] 00143
19 Lexer::next_ch [function] [call site] 00144
20 Lexer::next [function] [call site] 00146
21 Lexer::scan_comment [function] [call site] 00148
22 Lexer::rest_of_line [function] [call site] 00149
22 Token::Comment [function] [call site] 00152
21 Lexer::scan_char [function] [call site] 00154
21 Lexer::scan_number [function] [call site] 00166
22 Lexer::looking_at_numeric [function] [call site] 00167
23 Lexer::looking_at [function] [call site] 00168
24 starts_with [function] [call site] 00169
22 Token::Float [function] [call site] 00171
22 Token::Integer [function] [call site] 00172
21 Lexer::scan_word [function] [call site] 00179
22 is_ascii_alphabetic [function] [call site] 00181
22 split_entity_name [function] [call site] 00182
23 str::split_at [function] [call site] 00183
23 str::len [function] [call site] 00184
23 trailing_digits [function] [call site] 00185
24 str::as_bytes [function] [call site] 00186
24 iter [function] [call site] 00187
25 cstr_to_path [function] [call site] 00189
26 CStr::from_ptr [function] [call site] 00190
26 socket_v6_to_str [function] [call site] 00191
27 set_scope_id [function] [call site] 00192
25 UnixListener::bind [function] [call site] 00194
25 spawn [function] [call site] 00195
26 with_ambient_tokio_runtime [function] [call site] 00196
27 tokio::runtime::Handle::try_current [function] [call site] 00197
27 InstanceFlags::set_may_enter [function] [call site] 00198
28 InstanceFlags::as_raw [function] [call site] 00199
29 GuestPtr::as_ptr [function] [call site] 00200
30 GuestPtr::new [function] [call site] 00201
30 GuestPtr::offset_base [function] [call site] 00202
28 VMGlobalDefinition::as_i32_mut [function] [call site] 00203
26 AbortOnDropJoinHandle [function] [call site] 00204
25 UnixStream::connect [function] [call site] 00205
24 ProgPoint::prev [function] [call site] 00206
24 take_while [function] [call site] 00207
24 WasiImpl::keep_alive_count [function] [call site] 00208
25 WasiImpl::table [function] [call site] 00209
26 T::table [function] [call site] 00210
23 starts_with [function] [call site] 00211
22 and_then [function] [call site] 00212
22 Self::numbered_entity [function] [call site] 00213
22 value_type [function] [call site] 00215
23 reference_type [function] [call site] 00216
24 WasmHeapType::top [function] [call site] 00217
23 dynTargetIsa::pointer_type [function] [call site] 00218
22 unwrap_or_else [function] [call site] 00219
22 Token::Identifier [function] [call site] 00220
21 Lexer::scan_name [function] [call site] 00222
22 Token::Name [function] [call site] 00223
21 Lexer::scan_string [function] [call site] 00225
22 Lexer::error [function] [call site] 00227
23 Span::new_single [function] [call site] 00228
22 Token::String [function] [call site] 00229
21 Lexer::scan_hex_sequence [function] [call site] 00231
22 char::is_digit [function] [call site] 00232
22 Token::HexSequence [function] [call site] 00233
21 Lexer::looking_at_srcloc [function] [call site] 00234
22 char::is_digit [function] [call site] 00235
21 Lexer::scan_srcloc [function] [call site] 00237
22 char::is_digit [function] [call site] 00238
22 Token::SourceLoc [function] [call site] 00239
18 KebabString::new [function] [call site] 00243
19 KebabStr::new [function] [call site] 00244
20 Self::new_unchecked [function] [call site] 00245
20 implAsRef+a::is_kebab_case [function] [call site] 00246
19 PackedOption::is_some [function] [call site] 00248
20 is_reserved_value [function] [call site] 00249
18 to_digit [function] [call site] 00254
18 to_digit [function] [call site] 00255
18 std::char::from_u32 [function] [call site] 00256
15 Parser::is_rparen [function] [call site] 00258
16 Parser::is [function] [call site] 00259
14 Parser::cur_span [function] [call site] 00263
14 is_power_of_two [function] [call site] 00264
14 Error::new [function] [call site] 00268
15 ErrorKind::Custom [function] [call site] 00269
13 int_mul_inst [function] [call site] 00271
13 Instruction::LocalGet [function] [call site] 00272
13 int_add_inst [function] [call site] 00273
13 int_le_u_inst [function] [call site] 00274
13 Instruction::BrIf [function] [call site] 00275
13 Instruction::LocalGet [function] [call site] 00276
13 int_le_s_inst [function] [call site] 00277
13 Instruction::BrIf [function] [call site] 00278
13 Instruction::LocalGet [function] [call site] 00279
13 Instruction::LocalSet [function] [call site] 00280
13 Instruction::Br [function] [call site] 00281
13 dummy_value_inst [function] [call site] 00282
14 Instruction::I32Const [function] [call site] 00283
14 Instruction::I64Const [function] [call site] 00284
14 Instruction::F32Const [function] [call site] 00285
14 Instruction::F64Const [function] [call site] 00286
14 Instruction::V128Const [function] [call site] 00287
14 Instruction::RefNull [function] [call site] 00288
13 Instruction::LocalSet [function] [call site] 00289
13 Instruction::LocalGet [function] [call site] 00290
10 Entry::Occupied [function] [call site] 00293
10 Entry::Vacant [function] [call site] 00294
10 InsertLoc::Occupied [function] [call site] 00295
10 Entry::Vacant [function] [call site] 00296
10 InsertLoc::Vacant [function] [call site] 00297
9 ScopedHashMap::depth [function] [call site] 00298
10 test_checked_sub [function] [call site] 00299
8 test_swap_front_back_remove [function] [call site] 00307
9 VecDeque::with_capacity [function] [call site] 00308
9 ListPool::with_capacity [function] [call site] 00309
10 Vec::with_capacity [function] [call site] 00310
10 ScopeVec::new [function] [call site] 00311
11 Default::default [function] [call site] 00312
9 test_into_iter_collect [function] [call site] 00313
10 BinaryHeap::from [function] [call site] 00314
10 IndexSet::into_iter [function] [call site] 00315
9 push_front [function] [call site] 00316
9 push_back [function] [call site] 00317
9 test [function] [call site] 00318
10 is_absolute [function] [call site] 00319
10 current_dir [function] [call site] 00320
8 AdaptiveMap::is_empty [function] [call site] 00321
9 AdaptiveMap::iter [function] [call site] 00322
10 AdaptiveMapIter::Small [function] [call site] 00323
10 AdaptiveMapIter::Large [function] [call site] 00324
9 vectorizelanes_all [function] [call site] 00325
10 DataValueExt::vector [function] [call site] 00326
9 DataFlowGraph::overwrite_inst_values [function] [call site] 00327
10 InstructionData::map_values [function] [call site] 00328
7 IndexSet::union_with [function] [call site] 00329
8 IndexSet::elem [function] [call site] 00330
9 IndexSet::get [function] [call site] 00331
9 IndexSet::set [function] [call site] 00332
9 AdaptiveMap::get_or_insert [function] [call site] 00333
10 Self::Large [function] [call site] 00336
10 test_zip [function] [call site] 00338
11 Allocation::is_none [function] [call site] 00339
12 Allocation::kind [function] [call site] 00340
10 Entry::or_insert [function] [call site] 00342
11 OccupiedEntry::into_mut [function] [call site] 00343
6 ComponentItem::from [function] [call site] 00344
7 Self::Component [function] [call site] 00345
7 Component::from [function] [call site] 00346
7 Self::ComponentInstance [function] [call site] 00349
7 ComponentInstance::from [function] [call site] 00350
7 Self::ComponentFunc [function] [call site] 00352
7 ComponentFunc::from [function] [call site] 00353
7 Self::Type [function] [call site] 00355
7 Type::from [function] [call site] 00356
8 Type::List [function] [call site] 00357
8 Type::Record [function] [call site] 00360
8 Type::Tuple [function] [call site] 00363
8 Type::Variant [function] [call site] 00366
8 Variant::from [function] [call site] 00367
8 Type::Enum [function] [call site] 00369
8 Type::Option [function] [call site] 00372
8 OptionType::from [function] [call site] 00373
9 OptionType [function] [call site] 00374
8 Type::Result [function] [call site] 00375
8 ResultType::from [function] [call site] 00376
9 ResultType [function] [call site] 00377
8 Type::Flags [function] [call site] 00378
8 Type::Own [function] [call site] 00381
8 InstanceType::resource_type [function] [call site] 00382
9 unwrap_or_else [function] [call site] 00384
9 ResourceType::uninstantiated [function] [call site] 00385
8 Type::Borrow [function] [call site] 00386
7 Self::Module [function] [call site] 00387
7 Self::CoreFunc [function] [call site] 00390
7 FuncType::from_wasm_func_type [function] [call site] 00391
8 RegisteredType::new [function] [call site] 00392
9 Engine::gc_runtime [function] [call site] 00393
9 Engine::signatures [function] [call site] 00395
9 TypeRegistryInner::assert_canonicalized_for_runtime_usage_in_this_registry [function] [call site] 00397
10 Arc::trace [function] [call site] 00398
9 TypeRegistryInner::register_singleton_rec_group [function] [call site] 00399
10 PrimaryMap::default [function] [call site] 00400
11 PrimaryMap::new [function] [call site] 00401
10 TypeRegistryInner::register_rec_group [function] [call site] 00402
11 Vec::with_capacity [function] [call site] 00403
11 implExactSizeIterator::len [function] [call site] 00404
11 implExactSizeIterator::zip [function] [call site] 00405
11 iter_entity_range [function] [call site] 00406
11 Arc::canonicalize_for_hash_consing [function] [call site] 00407
11 RecGroupEntry::incref [function] [call site] 00408
12 fetch_add [function] [call site] 00409
11 trace_engine_indices [function] [call site] 00410
11 u32::try_from [function] [call site] 00411
11 Arc::canonicalize_for_runtime_usage [function] [call site] 00412
11 TypeRegistryInner::insert_one_type_from_rec_group [function] [call site] 00413
12 PackedOption::expect [function] [call site] 00415
13 PackedOption::expand [function] [call site] 00416
14 PackedOption::is_none [function] [call site] 00417
15 is_reserved_value [function] [call site] 00418
12 DrcCompiler::layouts [function] [call site] 00420
12 NullTypeLayouts::array_layout [function] [call site] 00421
13 common_array_layout [function] [call site] 00422
14 field [function] [call site] 00423
15 align_up [function] [call site] 00424
16 u32::is_power_of_two [function] [call site] 00425
16 u32::is_power_of_two [function] [call site] 00426
16 u32::checked_add [function] [call site] 00427
14 byte_size_of_wasm_ty_in_gc_heap [function] [call site] 00429
12 FuncEnvironment::struct_layout [function] [call site] 00431
13 FuncEnvironment::gc_layout [function] [call site] 00432
14 Map::contains_key [function] [call site] 00433
14 gc_compiler [function] [call site] 00434
13 ModuleTypesBuilder::unwrap_struct [function] [call site] 00443
12 alloc [function] [call site] 00446
13 Allocation::reg [function] [call site] 00447
14 Allocation::new [function] [call site] 00448
14 PReg::index [function] [call site] 00449
12 slab_id_to_shared_type_index [function] [call site] 00450
13 VMSharedTypeIndex::new [function] [call site] 00451
13 SlabId::into_raw [function] [call site] 00453
13 is_reserved_value [function] [call site] 00454
12 EngineOrModuleTypeIndex::unwrap_engine_type_index [function] [call site] 00455
13 EngineOrModuleTypeIndex::as_engine_type_index [function] [call site] 00456
13 unwrap_or_else [function] [call site] 00458
12 TypeRegistryInner::supertypes [function] [call site] 00459
13 and_then [function] [call site] 00460
13 as_deref [function] [call site] 00461
13 unwrap_or [function] [call site] 00462
12 Vec::with_capacity [function] [call site] 00463
12 iter::once [function] [call site] 00466
12 PrimaryMap::into_boxed_slice [function] [call site] 00468
13 BoxedSlice::from_raw [function] [call site] 00469
14 Box::from_raw [function] [call site] 00470
13 Box::into_raw [function] [call site] 00471
11 RecGroupEntry [function] [call site] 00473
11 shared_type_index_to_slab_id [function] [call site] 00475
12 VMSharedTypeIndex::is_reserved_value [function] [call site] 00476
12 SlabId::from_raw [function] [call site] 00477
12 VMSharedTypeIndex::bits [function] [call site] 00478
11 ModuleTypesBuilder::intern_trampoline_type [function] [call site] 00479
12 EntityType::unwrap_func [function] [call site] 00480
12 ModuleTypesBuilder::trampoline_type [function] [call site] 00481
12 WasmCompositeInnerType::Func [function] [call site] 00482
12 ModuleTypes::set_trampoline_type [function] [call site] 00483
13 ModuleInternedTypeIndex::is_reserved_value [function] [call site] 00484
13 ModuleInternedTypeIndex::is_reserved_value [function] [call site] 00485
13 WasmCompositeInnerType::is_func [function] [call site] 00486
13 WasmFuncType::is_trampoline_type [function] [call site] 00487
14 WasmFuncType::params [function] [call site] 00488
14 WasmFuncType::trampoline_type [function] [call site] 00489
15 Cow::Borrowed [function] [call site] 00490
15 Cow::Owned [function] [call site] 00491
15 WasmFuncType::returns [function] [call site] 00492
12 ModuleTypes::next_ty [function] [call site] 00494
13 PrimaryMap::next_key [function] [call site] 00495
12 ModuleTypes::push_rec_group [function] [call site] 00496
13 ModuleTypes::push [function] [call site] 00497
11 wasmtime_environ::WasmCompositeInnerType::Func [function] [call site] 00498
11 UntypedValue::into_owned [function] [call site] 00499
12 UntypedValue::new [function] [call site] 00500
10 iter::once [function] [call site] 00502
9 RegisteredType::clone [function] [call site] 00503
9 RegisteredType::from_parts [function] [call site] 00505
8 WasmCompositeInnerType::Func [function] [call site] 00506
7 Self::Resource [function] [call site] 00507
5 initialize [function] [call site] 00508
6 std::mem::MaybeUninit::as_mut_ptr [function] [call site] 00509
3 Arc::downgrade [function] [call site] 00510
1 Block::push [function] [call site] 00511
1 Block::push [function] [call site] 00512
1 Block::push [function] [call site] 00513
1 Block::push [function] [call site] 00514
1 Block::index [function] [call site] 00515
1 Block::Ok [function] [call site] 00516
1 Block::push [function] [call site] 00517
1 Block::is_empty [function] [call site] 00518
1 Block::index [function] [call site] 00519
1 Block::index [function] [call site] 00520
1 Block::choose [function] [call site] 00521
1 Block::push [function] [call site] 00522
1 Block::Ok [function] [call site] 00523
1 Block::insert [function] [call site] 00524
1 Block::insert [function] [call site] 00525
1 Block::is_valid [function] [call site] 00526
1 Block::insert [function] [call site] 00527
1 Block::len [function] [call site] 00528
1 Block::insert [function] [call site] 00529
1 Block::Ok [function] [call site] 00530
1 calculate [function] [call site] 00531
2 Vec::repopulate [function] [call site] 00532
3 Set::clear [function] [call site] 00533
4 NodePool::free_tree [function] [call site] 00534
5 NodePool::free_node [function] [call site] 00535
3 SecondaryMap::resize [function] [call site] 00537
2 Block::invalid [function] [call site] 00539
2 Block::index [function] [call site] 00540
2 Block::invalid [function] [call site] 00541
2 BoxedSlice::is_valid [function] [call site] 00542
3 BoxedSlice::len [function] [call site] 00544
2 ValueRegs::is_invalid [function] [call site] 00545
3 is_invalid_sentinel [function] [call site] 00546
2 merge_sets [function] [call site] 00547
3 Block::is_invalid [function] [call site] 00548
3 Block::is_invalid [function] [call site] 00549
3 Block::invalid [function] [call site] 00550
3 Block::index [function] [call site] 00551
3 Block::index [function] [call site] 00552
3 Block::index [function] [call site] 00553
3 Block::index [function] [call site] 00554
2 Block::index [function] [call site] 00555
2 Block::invalid [function] [call site] 00556
1 Block::index [function] [call site] 00557
1 domtree::index [function] [call site] 00558
1 check_idom_violations [function] [call site] 00559