Fuzz introspector: libwget_xml_parse_buffer_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
34 34 1 :

['wget_buffer_memset_append']

34 88 copy_string call site: 00045 /src/wget2/libwget/buffer_printf.c:75
2 2 1 :

['strlen']

36 108 copy_string call site: 00043 /src/wget2/libwget/buffer_printf.c:66
2 2 1 :

['gettext']

2 2 wget_xml_parse_file call site: 00136 /src/wget2/libwget/xml.c:652
0 433 1 :

['wget_xml_parse_buffer']

4 437 wget_xml_parse_file call site: 00138 /src/wget2/libwget/xml.c:665
0 433 1 :

['wget_xml_parse_buffer']

0 438 wget_xml_parse_file call site: 00146 /src/wget2/libwget/xml.c:692
0 0 None 450 645 wget_buffer_vprintf_append call site: 00017 /src/wget2/libwget/buffer_printf.c:346
0 0 None 450 645 wget_buffer_vprintf_append call site: 00018 /src/wget2/libwget/buffer_printf.c:359
0 0 None 450 645 wget_buffer_vprintf_append call site: 00018 /src/wget2/libwget/buffer_printf.c:363
0 0 None 450 645 wget_buffer_vprintf_append call site: 00022 /src/wget2/libwget/buffer_printf.c:368
0 0 None 450 645 wget_buffer_vprintf_append call site: 00025 /src/wget2/libwget/buffer_printf.c:372
0 0 None 450 645 wget_buffer_vprintf_append call site: 00027 /src/wget2/libwget/buffer_printf.c:377
0 0 None 450 645 wget_buffer_vprintf_append call site: 00034 /src/wget2/libwget/buffer_printf.c:395

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 __assert_fail [call site] 00001
1 wget_xml_parse_buffer [function] [call site] 00002
2 parseXML [function] [call site] 00003
3 wget_strlcpy [function] [call site] 00004
4 strlen [call site] 00005
3 getContent [function] [call site] 00006
3 wget_debug_printf [function] [call site] 00007
3 getToken [function] [call site] 00008
4 strchr [call site] 00009
4 wget_debug_printf [function] [call site] 00010
3 getToken [function] [call site] 00011
3 wget_snprintf [function] [call site] 00012
4 wget_vsnprintf [function] [call site] 00013
5 wget_buffer_init [function] [call site] 00014
6 wget_malloc [function] [call site] 00015
5 wget_buffer_vprintf [function] [call site] 00016
6 wget_buffer_vprintf_append [function] [call site] 00017
7 wget_buffer_memcat [function] [call site] 00018
8 buffer_realloc [function] [call site] 00019
9 wget_realloc [function] [call site] 00020
9 wget_malloc [function] [call site] 00021
7 wget_buffer_strcat [function] [call site] 00022
8 strlen [call site] 00023
8 wget_buffer_memcat [function] [call site] 00024
7 convert_dec_fast [function] [call site] 00025
8 wget_buffer_memcat [function] [call site] 00026
7 wget_buffer_memcat [function] [call site] 00027
7 convert_pointer [function] [call site] 00028
8 wget_buffer_memcat [function] [call site] 00029
8 wget_buffer_memcat [function] [call site] 00030
8 wget_buffer_memcat [function] [call site] 00031
7 wget_buffer_memset_append [function] [call site] 00032
8 buffer_realloc [function] [call site] 00033
7 read_flag_chars [function] [call site] 00034
7 read_field_width [function] [call site] 00035
8 c_isdigit [function] [call site] 00036
7 read_field_width [function] [call site] 00037
7 read_precision [function] [call site] 00038
8 c_isdigit [function] [call site] 00039
8 c_isdigit [function] [call site] 00040
7 read_precision [function] [call site] 00041
7 copy_string [function] [call site] 00042
8 wget_buffer_strcat [function] [call site] 00043
8 strnlen [call site] 00044
8 strlen [call site] 00045
8 wget_buffer_memcat [function] [call site] 00046
8 wget_buffer_memset_append [function] [call site] 00047
8 wget_buffer_memset_append [function] [call site] 00048
8 wget_buffer_memcat [function] [call site] 00049
8 wget_buffer_memcat [function] [call site] 00050
8 wget_buffer_memcat [function] [call site] 00051
7 copy_string [function] [call site] 00052
7 convert_dec [function] [call site] 00053
8 wget_buffer_memset_append [function] [call site] 00054
8 wget_buffer_memset_append [function] [call site] 00055
8 wget_buffer_memcat [function] [call site] 00056
8 wget_buffer_memset_append [function] [call site] 00057
8 wget_buffer_memcat [function] [call site] 00058
8 wget_buffer_memset_append [function] [call site] 00059
8 wget_buffer_memset_append [function] [call site] 00060
8 wget_buffer_memset_append [function] [call site] 00061
8 wget_buffer_memset_append [function] [call site] 00062
8 wget_buffer_memset_append [function] [call site] 00063
8 wget_buffer_memset_append [function] [call site] 00064
8 wget_buffer_memset_append [function] [call site] 00065
8 wget_buffer_memset_append [function] [call site] 00066
8 wget_buffer_memset_append [function] [call site] 00067
8 wget_buffer_memset_append [function] [call site] 00068
8 wget_buffer_memset_append [function] [call site] 00069
8 wget_buffer_memcat [function] [call site] 00070
8 wget_buffer_memset_append [function] [call site] 00071
8 wget_buffer_memcat [function] [call site] 00072
8 wget_buffer_memset_append [function] [call site] 00073
8 wget_buffer_memset_append [function] [call site] 00074
8 wget_buffer_memcat [function] [call site] 00075
7 convert_dec [function] [call site] 00076
7 convert_dec [function] [call site] 00077
7 convert_dec [function] [call site] 00078
7 convert_dec [function] [call site] 00079
7 convert_dec [function] [call site] 00080
7 wget_buffer_memset_append [function] [call site] 00081
5 wget_buffer_deinit [function] [call site] 00082
5 wget_buffer_deinit [function] [call site] 00083
3 wget_snprintf [function] [call site] 00084
3 getToken [function] [call site] 00085
3 strncmp [call site] 00086
3 wget_strcasecmp_ascii [function] [call site] 00087
4 c_strcasecmp [function] [call site] 00088
5 c_tolower [function] [call site] 00089
5 c_tolower [function] [call site] 00090
3 wget_debug_printf [function] [call site] 00091
3 getScriptContent [function] [call site] 00092
4 strncmp [call site] 00093
4 strncmp [call site] 00094
4 wget_strncasecmp_ascii [function] [call site] 00095
5 c_strncasecmp [function] [call site] 00096
3 wget_debug_printf [function] [call site] 00097
3 wget_strcasecmp_ascii [function] [call site] 00098
3 getStyleContent [function] [call site] 00099
4 wget_strncasecmp_ascii [function] [call site] 00100
3 wget_debug_printf [function] [call site] 00101
3 parseXML [function] [call site] 00102
4 getValue [function] [call site] 00103
5 getHTMLValue [function] [call site] 00104
6 strchr [call site] 00105
6 wget_debug_printf [function] [call site] 00106
5 getToken [function] [call site] 00107
4 wget_debug_printf [function] [call site] 00108
4 wget_debug_printf [function] [call site] 00109
4 strncmp [call site] 00110
4 getToken [function] [call site] 00111
4 wget_malloc [function] [call site] 00112
4 getToken [function] [call site] 00113
4 strncmp [call site] 00114
4 getProcessing [function] [call site] 00115
5 getUnparsed [function] [call site] 00116
4 wget_debug_printf [function] [call site] 00117
4 strncmp [call site] 00118
4 getSpecial [function] [call site] 00119
5 getUnparsed [function] [call site] 00120
4 wget_debug_printf [function] [call site] 00121
4 strncmp [call site] 00122
4 getComment [function] [call site] 00123
5 getUnparsed [function] [call site] 00124
4 wget_debug_printf [function] [call site] 00125
1 wget_xml_parse_buffer [function] [call site] 00126
1 _cb(void*, int, char const*, char const*, char const*, unsigned long, unsigned long) [function] [call site] 00127
1 wget_html_parse_buffer [function] [call site] 00128
2 wget_xml_parse_buffer [function] [call site] 00129
1 _cb(void*, int, char const*, char const*, char const*, unsigned long, unsigned long) [function] [call site] 00130
1 wget_html_parse_buffer [function] [call site] 00131
1 _cb(void*, int, char const*, char const*, char const*, unsigned long, unsigned long) [function] [call site] 00132
1 wget_html_parse_file [function] [call site] 00133
2 wget_xml_parse_file [function] [call site] 00134
3 strcmp [call site] 00135
3 open [call site] 00136
3 fstat [call site] 00137
3 mmap [call site] 00138
3 wget_xml_parse_buffer [function] [call site] 00139
3 munmap [call site] 00140
3 close [call site] 00141
3 gettext [call site] 00142
3 wget_error_printf [function] [call site] 00143
3 wget_buffer_init [function] [call site] 00144
3 read [call site] 00145
3 wget_buffer_memcat [function] [call site] 00146
3 wget_xml_parse_buffer [function] [call site] 00147
3 wget_buffer_deinit [function] [call site] 00148
1 freopen [call site] 00149
1 wget_html_parse_file [function] [call site] 00150