Fuzz introspector: wget_robots_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
774 774 5 :

['load_system_priority_file', 'update_system_wide_priority_string', 'gnutls_strerror', 'construct_system_wide_priority_string', '_gnutls_buffer_clear']

874 874 _gnutls_update_system_priorities call site: 00000 /src/gnutls/lib/priority.c:2286
724 2053 19 :

['capabilities_to_zhaoxin_edx', 'check_avx_movbe', 'check_phe_partial', 'capabilities_to_intel_cpuid', 'check_padlock', 'check_sha', 'check_phe', '_gnutls_priority_update_non_aesni', 'gnutls_crypto_single_cipher_register', 'read_cpuid_vals', 'gnutls_crypto_single_mac_register', 'gnutls_crypto_single_digest_register', 'check_pclmul', 'check_fast_pclmul', '_gnutls_log', 'check_optimized_aes', 'check_ssse3', 'padlock_capability', 'check_phe_sha512']

724 2053 register_x86_padlock_crypto call site: 00000 /src/gnutls/lib/accelerated/x86/x86-common.c:383
47 47 1 :

['capabilities_to_intel_cpuid']

439 1303 register_x86_intel_crypto call site: 00000 /src/gnutls/lib/accelerated/x86/x86-common.c:817
25 30 2 :

['grow_hash_table', 'find_cell']

25 30 hash_table_put call site: 00221 /src/wget/src/hash.c:438
18 18 1 :

['_gnutls_asn2err']

40 40 _gnutls_global_init call site: 00000 /src/gnutls/lib/global.c:306
16 16 1 :

['_asn1_delete_list_and_nodes']

16 16 asn1_array2tree call site: 00000 /src/gnutls/lib/minitasn1/structure.c:275
12 12 2 :

['_gnutls_log', 'atoi']

22 1565 lib_init call site: 00000 /src/gnutls/lib/global.c:520
10 10 1 :

['_gnutls_log']

10 10 register_x86_intel_crypto call site: 00000 /src/gnutls/lib/accelerated/x86/x86-common.c:1027
10 10 1 :

['_gnutls_log']

10 10 _algo_register call site: 00000 /src/gnutls/lib/crypto-backend.c:67
10 10 1 :

['_gnutls_log']

10 10 _algo_register call site: 00000 /src/gnutls/lib/crypto-backend.c:87
6 6 3 :

['gnutls_global_set_log_level', 'atoi', 'gnutls_global_set_log_function']

166 2006 _gnutls_global_init call site: 00000 /src/gnutls/lib/global.c:262
6 6 1 :

['memcmp']

6 6 check_x86_cpu_vendor call site: 00000 /src/gnutls/lib/accelerated/x86/x86-common.c:792

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 dup [call site] 00001
1 open [call site] 00002
1 dup2 [call site] 00003
1 close [call site] 00004
1 res_parse [function] [call site] 00005
2 xcalloc [function] [call site] 00006
3 calloc [call site] 00007
3 check_nonnull [function] [call site] 00008
4 xalloc_die [function] [call site] 00009
5 dgettext [call site] 00010
5 error [call site] 00011
5 abort [call site] 00012
2 memchr [call site] 00013
2 c_isspace [function] [call site] 00014
2 c_isspace [function] [call site] 00015
2 c_isspace [function] [call site] 00016
2 c_isalnum [function] [call site] 00017
2 c_isspace [function] [call site] 00018
2 debug_logprintf [function] [call site] 00019
3 log_vprintf_internal [function] [call site] 00020
4 get_log_fp [function] [call site] 00021
4 get_warc_log_fp [function] [call site] 00022
4 vfprintf [call site] 00023
4 vsnprintf [call site] 00024
4 xrealloc [function] [call site] 00025
5 rpl_realloc [function] [call site] 00026
6 realloc [call site] 00027
5 xalloc_die [function] [call site] 00028
4 saved_append [function] [call site] 00030
5 strchr [call site] 00031
5 strlen [call site] 00032
5 saved_append_1 [function] [call site] 00033
6 free_log_line [function] [call site] 00034
7 rpl_free [function] [call site] 00035
8 __errno_location [call site] 00036
8 __errno_location [call site] 00037
6 strdupdelim [function] [call site] 00038
6 strlen [call site] 00045
6 strlen [call site] 00047
4 fputs [call site] 00049
4 fputs [call site] 00050
4 logflush [function] [call site] 00052
5 get_log_fp [function] [call site] 00053
5 get_warc_log_fp [function] [call site] 00054
5 rpl_fflush [function] [call site] 00055
6 __freading [call site] 00056
6 fflush [call site] 00057
6 clear_ungetc_buffer_preserving_position [function] [call site] 00058
7 rpl_fseeko [function] [call site] 00059
8 fileno [call site] 00060
8 lseek [call site] 00061
8 fseeko [call site] 00062
6 fflush [call site] 00063
5 rpl_fflush [function] [call site] 00064
2 c_isspace [function] [call site] 00065
2 c_strncasecmp [function] [call site] 00066
2 match_user_agent [function] [call site] 00069
3 c_strncasecmp [function] [call site] 00070
2 c_strncasecmp [function] [call site] 00071
2 c_strncasecmp [function] [call site] 00075
2 debug_logprintf [function] [call site] 00077
2 prune_non_exact [function] [call site] 00078
1 res_match_path [function] [call site] 00083
2 quote [function] [call site] 00089
3 quote_n [function] [call site] 00090
4 quote_n_mem [function] [call site] 00091
5 quotearg_n_options [function] [call site] 00092
6 __errno_location [call site] 00093
6 abort [call site] 00094
6 quotearg_buffer_restyled [function] [call site] 00098
7 __ctype_get_mb_cur_max [call site] 00099
7 gettext_quote [function] [call site] 00100
8 dgettext [call site] 00101
8 locale_charset [function] [call site] 00102
9 rpl_nl_langinfo [function] [call site] 00103
10 nl_langinfo [call site] 00104
8 c_strcasecmp [function] [call site] 00105
8 c_strcasecmp [function] [call site] 00106
7 gettext_quote [function] [call site] 00107
7 strlen [call site] 00108
7 abort [call site] 00109
7 strlen [call site] 00110
7 memcmp [call site] 00111
7 __ctype_b_loc [call site] 00112
7 strlen [call site] 00114
7 rpl_mbrtoc32 [function] [call site] 00115
8 mbrtoc32 [call site] 00116
8 hard_locale [function] [call site] 00117
9 setlocale_null_r [function] [call site] 00118
10 setlocale_null_r_unlocked [function] [call site] 00119
11 setlocale_null_unlocked [function] [call site] 00120
12 setlocale [call site] 00121
11 strlen [call site] 00122
9 strcmp [call site] 00123
7 c32isprint [function] [call site] 00124
8 iswprint [call site] 00125
7 mbsinit [call site] 00126
7 quotearg_buffer_restyled [function] [call site] 00127
8 quotearg_buffer_restyled [function] [call site] 00128
6 quotearg_buffer_restyled [function] [call site] 00132
6 __errno_location [call site] 00133
2 debug_logprintf [function] [call site] 00134
1 res_register_specs [function] [call site] 00135
2 snprintf [call site] 00136
2 aprintf [function] [call site] 00137
3 vasprintf [call site] 00138
3 __errno_location [call site] 00139
3 memfatal [function] [call site] 00140
4 log_set_save_context [function] [call site] 00141
4 gettext [call site] 00142
4 logprintf [function] [call site] 00143
5 __errno_location [call site] 00144
5 check_redirect_output [function] [call site] 00145
6 tcgetpgrp [call site] 00146
6 getpgrp [call site] 00147
6 redirect_output [function] [call site] 00148
7 fprintf [call site] 00149
7 unique_create [function] [call site] 00150
8 unique_name [function] [call site] 00151
9 file_exists_p [function] [call site] 00152
10 __errno_location [call site] 00153
10 stat [call site] 00154
10 getuid [call site] 00155
10 group_member [call site] 00156
10 __errno_location [call site] 00157
10 __errno_location [call site] 00158
9 unique_name_1 [function] [call site] 00159
10 strlen [call site] 00160
10 number_to_string [function] [call site] 00162
10 file_exists_p [function] [call site] 00163
8 fopen_excl [function] [call site] 00165
9 open [call site] 00166
9 fdopen [call site] 00167
8 __errno_location [call site] 00168
8 unique_name [function] [call site] 00170
7 gettext [call site] 00173
7 fprintf [call site] 00175
7 log_dump_context [function] [call site] 00176
8 get_log_fp [function] [call site] 00177
8 get_warc_log_fp [function] [call site] 00178
8 fputs [call site] 00179
8 fputs [call site] 00180
8 fputs [call site] 00181
8 fputs [call site] 00182
8 rpl_fflush [function] [call site] 00183
8 rpl_fflush [function] [call site] 00184
7 gettext [call site] 00185
7 __errno_location [call site] 00186
7 strerror [call site] 00187
7 fprintf [call site] 00188
7 gettext [call site] 00189
7 fprintf [call site] 00191
7 log_dump_context [function] [call site] 00192
7 log_dump_context [function] [call site] 00193
6 redirect_output [function] [call site] 00194
5 __errno_location [call site] 00195
5 log_vprintf_internal [function] [call site] 00196
5 __errno_location [call site] 00197
5 exit_wget [function] [call site] 00198
4 gettext [call site] 00199
4 logprintf [function] [call site] 00200
4 exit_wget [function] [call site] 00201
2 make_nocase_string_hash_table [function] [call site] 00202
3 hash_table_new [function] [call site] 00203
4 prime_size [function] [call site] 00205
5 abort [call site] 00206
3 hash_string_nocase [function] [call site] 00208
3 string_cmp_nocase [function] [call site] 00211
4 strcasecmp [call site] 00212
2 hash_table_get_pair [function] [call site] 00213
3 find_cell [function] [call site] 00214
2 hash_table_put [function] [call site] 00220
3 find_cell [function] [call site] 00221
3 grow_hash_table [function] [call site] 00222
3 find_cell [function] [call site] 00226
2 hash_table_put [function] [call site] 00228
1 res_cleanup [function] [call site] 00229
2 hash_table_iterate [function] [call site] 00230
2 hash_table_iter_next [function] [call site] 00231
2 free_specs [function] [call site] 00233
2 hash_table_destroy [function] [call site] 00234
1 dup2 [call site] 00237
1 close [call site] 00238