Fuzz introspector: libwget_utils_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
36 67 8 :

['getpwnam_r', 'scratch_buffer_free', 'getlogin_r', 'glob_use_alloca', 'gl_scratch_buffer_grow', 'memchr', 'getenv', 'scratch_buffer_init']

121 939 rpl_glob call site: 00075 /src/wget2/lib/glob.c:602
17 17 1 :

['wget_buffer_memset_append']

17 35 convert_dec call site: 00258 /src/wget2/libwget/buffer_printf.c:219
17 17 1 :

['wget_buffer_memset_append']

17 35 convert_dec call site: 00261 /src/wget2/libwget/buffer_printf.c:227
16 24 5 :

['is_dir', 'strcpy', 'rpl_globfree', 'strlen', 'rpl_realloc']

18 30 rpl_glob call site: 00075 /src/wget2/lib/glob.c:1149
11 11 1 :

['rpl_nanosleep']

11 11 wget_millisleep call site: 00039 /src/wget2/libwget/utils.c:284
5 5 1 :

['glob_lstat']

22 47 glob_in_dir call site: 00134 /src/wget2/lib/glob.c:1303
2 2 1 :

['strchr']

40 202 rpl_glob call site: 00075 /src/wget2/lib/glob.c:1095
2 2 1 :

['strdup']

25 77 rpl_glob call site: 00075 /src/wget2/lib/glob.c:1120
2 2 2 :

['strlen', 'malloc']

13 32 glob_in_dir call site: 00160 /src/wget2/lib/glob.c:1438
2 2 1 :

['__errno_location']

2 2 rpl_glob call site: 00063 /src/wget2/lib/glob.c:303
0 447 1 :

['rpl_glob']

38 671 rpl_glob call site: 00075 /src/wget2/lib/glob.c:955
0 0 None 306 396 convert_dec call site: 00240 /src/wget2/libwget/buffer_printf.c:162

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 __assert_fail [call site] 00001
1 __assert_fail [call site] 00002
1 wget_strcmp [function] [call site] 00003
2 strcmp [call site] 00004
1 wget_strcmp [function] [call site] 00005
1 wget_strcmp [function] [call site] 00006
1 wget_strcmp [function] [call site] 00007
1 wget_strncmp [function] [call site] 00008
2 strncmp [call site] 00009
1 wget_strncmp [function] [call site] 00010
1 wget_strncmp [function] [call site] 00011
1 wget_strncmp [function] [call site] 00012
1 wget_strcasecmp [function] [call site] 00013
2 strcasecmp [call site] 00014
1 wget_strcasecmp [function] [call site] 00015
1 wget_strcasecmp [function] [call site] 00016
1 wget_strcasecmp [function] [call site] 00017
1 wget_strncasecmp [function] [call site] 00018
2 strncasecmp [call site] 00019
1 wget_strncasecmp [function] [call site] 00020
1 wget_strncasecmp [function] [call site] 00021
1 wget_strncasecmp [function] [call site] 00022
1 wget_strcasecmp_ascii [function] [call site] 00023
2 c_strcasecmp [function] [call site] 00024
1 wget_strcasecmp_ascii [function] [call site] 00027
1 wget_strcasecmp_ascii [function] [call site] 00028
1 wget_strcasecmp_ascii [function] [call site] 00029
1 wget_strncasecmp_ascii [function] [call site] 00030
2 c_strncasecmp [function] [call site] 00031
1 wget_strncasecmp_ascii [function] [call site] 00032
1 wget_strncasecmp_ascii [function] [call site] 00033
1 wget_strncasecmp_ascii [function] [call site] 00034
1 wget_strtolower [function] [call site] 00035
1 wget_strtolower [function] [call site] 00038
1 wget_millisleep [function] [call site] 00039
2 rpl_nanosleep [function] [call site] 00040
3 __errno_location [call site] 00041
3 nanosleep [call site] 00042
3 nanosleep [call site] 00043
1 wget_get_timemillis [function] [call site] 00044
2 gettime [function] [call site] 00045
3 clock_gettime [call site] 00046
1 wget_percent_unescape [function] [call site] 00047
1 wget_match_tail [function] [call site] 00050
2 strlen [call site] 00051
2 strcmp [call site] 00052
1 wget_match_tail [function] [call site] 00053
1 wget_match_tail [function] [call site] 00054
1 wget_match_tail_nocase [function] [call site] 00055
2 strlen [call site] 00056
2 wget_strcasecmp_ascii [function] [call site] 00057
1 wget_match_tail_nocase [function] [call site] 00058
1 wget_match_tail_nocase [function] [call site] 00059
1 wget_strnglob [function] [call site] 00060
2 wget_strmemdup [function] [call site] 00061
3 wget_malloc [function] [call site] 00062
2 rpl_glob [function] [call site] 00063
3 __errno_location [call site] 00064
3 strlen [call site] 00065
3 strchr [call site] 00066
3 strlen [call site] 00067
3 glob_use_alloca [function] [call site] 00068
3 next_brace_sub [function] [call site] 00069
3 rpl_free [function] [call site] 00070
4 __errno_location [call site] 00071
4 __errno_location [call site] 00072
3 next_brace_sub [function] [call site] 00073
3 strlen [call site] 00074
3 rpl_glob [function] [call site] 00075
4 rpl_globfree [function] [call site] 00077
4 next_brace_sub [function] [call site] 00080
4 strrchr [call site] 00082
4 strlen [call site] 00083
4 glob_use_alloca [function] [call site] 00084
4 rpl_glob [function] [call site] 00085
5 getenv [call site] 00086
5 scratch_buffer_init [function] [call site] 00087
5 getlogin_r [call site] 00088
5 strlen [call site] 00089
5 getpwnam_r [call site] 00090
5 gl_scratch_buffer_grow [function] [call site] 00091
6 scratch_buffer_free [function] [call site] 00092
6 __errno_location [call site] 00094
6 scratch_buffer_init [function] [call site] 00095
5 strdup [call site] 00096
5 scratch_buffer_free [function] [call site] 00097
5 strlen [call site] 00100
5 strlen [call site] 00101
5 glob_use_alloca [function] [call site] 00102
5 strchr [call site] 00106
5 strchr [call site] 00107
5 strchr [call site] 00108
5 memchr [call site] 00109
5 glob_use_alloca [function] [call site] 00110
5 scratch_buffer_init [function] [call site] 00111
5 getpwnam_r [call site] 00112
5 gl_scratch_buffer_grow [function] [call site] 00113
5 strlen [call site] 00115
5 strlen [call site] 00116
5 glob_use_alloca [function] [call site] 00117
5 scratch_buffer_free [function] [call site] 00119
5 scratch_buffer_free [function] [call site] 00121
5 rpl_realloc [function] [call site] 00123
6 realloc [call site] 00124
5 is_dir [function] [call site] 00125
6 fstatat [call site] 00126
5 strdup [call site] 00128
5 __glob_pattern_type [function] [call site] 00129
5 rpl_glob [function] [call site] 00130
6 glob_in_dir [function] [call site] 00131
7 strlen [call site] 00132
7 scratch_buffer_init [function] [call site] 00133
7 __glob_pattern_type [function] [call site] 00134
7 strlen [call site] 00135
7 glob_use_alloca [function] [call site] 00136
7 glob_lstat [function] [call site] 00137
8 fstatat [call site] 00138
7 __errno_location [call site] 00139
7 opendir [call site] 00141
7 __errno_location [call site] 00142
7 __errno_location [call site] 00143
7 dirfd [call site] 00144
7 convert_dirent [function] [call site] 00145
7 readdir [call site] 00146
7 convert_dirent [function] [call site] 00147
7 readdir_result_type [function] [call site] 00148
7 strlen [call site] 00149
7 gl_scratch_buffer_set_array_size [function] [call site] 00150
8 scratch_buffer_free [function] [call site] 00151
8 scratch_buffer_init [function] [call site] 00152
8 __errno_location [call site] 00153
8 scratch_buffer_free [function] [call site] 00154
8 scratch_buffer_init [function] [call site] 00155
7 fstatat [call site] 00157
7 fnmatch [call site] 00158
7 glob_use_alloca [function] [call site] 00159
7 strdup [call site] 00160
7 strlen [call site] 00161
7 rpl_realloc [function] [call site] 00162
7 __errno_location [call site] 00166
7 closedir [call site] 00167
7 __errno_location [call site] 00168
7 scratch_buffer_free [function] [call site] 00169
6 rpl_globfree [function] [call site] 00170
6 rpl_globfree [function] [call site] 00171
6 prefix_array [function] [call site] 00172
7 strlen [call site] 00173
7 strlen [call site] 00174
6 rpl_globfree [function] [call site] 00177
6 rpl_globfree [function] [call site] 00178
6 rpl_globfree [function] [call site] 00179
6 rpl_realloc [function] [call site] 00180
6 strdup [call site] 00181
6 rpl_globfree [function] [call site] 00182
6 rpl_globfree [function] [call site] 00183
6 rpl_globfree [function] [call site] 00184
6 rpl_globfree [function] [call site] 00185
6 strchr [call site] 00186
6 glob_in_dir [function] [call site] 00187
6 prefix_array [function] [call site] 00188
6 rpl_globfree [function] [call site] 00189
6 strlen [call site] 00191
6 rpl_realloc [function] [call site] 00192
6 rpl_globfree [function] [call site] 00193
6 strcpy [call site] 00194
6 qsort [call site] 00195
6 collated_compare [function] [call site] 00196
7 strcoll [call site] 00197
2 wget_aprintf [function] [call site] 00199
3 wget_vasprintf [function] [call site] 00200
4 wget_buffer_init [function] [call site] 00201
5 wget_malloc [function] [call site] 00202
4 wget_buffer_vprintf [function] [call site] 00203
5 wget_buffer_vprintf_append [function] [call site] 00204
6 wget_buffer_memcat [function] [call site] 00205
7 buffer_realloc [function] [call site] 00206
8 wget_realloc [function] [call site] 00207
8 wget_malloc [function] [call site] 00208
6 wget_buffer_strcat [function] [call site] 00209
7 strlen [call site] 00210
7 wget_buffer_memcat [function] [call site] 00211
6 convert_dec_fast [function] [call site] 00212
7 wget_buffer_memcat [function] [call site] 00213
6 wget_buffer_memcat [function] [call site] 00214
6 convert_pointer [function] [call site] 00215
7 wget_buffer_memcat [function] [call site] 00216
7 wget_buffer_memcat [function] [call site] 00217
7 wget_buffer_memcat [function] [call site] 00218
6 wget_buffer_memset_append [function] [call site] 00219
7 buffer_realloc [function] [call site] 00220
6 read_flag_chars [function] [call site] 00221
6 read_field_width [function] [call site] 00222
7 c_isdigit [function] [call site] 00223
6 read_field_width [function] [call site] 00224
6 read_precision [function] [call site] 00225
6 read_precision [function] [call site] 00228
6 copy_string [function] [call site] 00229
7 wget_buffer_strcat [function] [call site] 00230
7 strnlen [call site] 00231
7 strlen [call site] 00232
7 wget_buffer_memcat [function] [call site] 00233
7 wget_buffer_memset_append [function] [call site] 00234
7 wget_buffer_memset_append [function] [call site] 00235
7 wget_buffer_memcat [function] [call site] 00236
7 wget_buffer_memcat [function] [call site] 00237
7 wget_buffer_memcat [function] [call site] 00238
6 copy_string [function] [call site] 00239
6 convert_dec [function] [call site] 00240
7 wget_buffer_memset_append [function] [call site] 00241
7 wget_buffer_memset_append [function] [call site] 00242
7 wget_buffer_memcat [function] [call site] 00243
7 wget_buffer_memset_append [function] [call site] 00244
7 wget_buffer_memcat [function] [call site] 00245
7 wget_buffer_memset_append [function] [call site] 00246
7 wget_buffer_memset_append [function] [call site] 00247
7 wget_buffer_memset_append [function] [call site] 00248
7 wget_buffer_memset_append [function] [call site] 00249
7 wget_buffer_memset_append [function] [call site] 00250
7 wget_buffer_memset_append [function] [call site] 00251
7 wget_buffer_memset_append [function] [call site] 00252
7 wget_buffer_memset_append [function] [call site] 00253
7 wget_buffer_memset_append [function] [call site] 00254
7 wget_buffer_memset_append [function] [call site] 00255
7 wget_buffer_memset_append [function] [call site] 00256
7 wget_buffer_memcat [function] [call site] 00257
7 wget_buffer_memset_append [function] [call site] 00258
7 wget_buffer_memset_append [function] [call site] 00259
7 wget_buffer_memcat [function] [call site] 00260
7 wget_buffer_memset_append [function] [call site] 00261
7 wget_buffer_memset_append [function] [call site] 00262
7 wget_buffer_memcat [function] [call site] 00263
6 convert_dec [function] [call site] 00264
6 convert_dec [function] [call site] 00265
6 convert_dec [function] [call site] 00266
6 convert_dec [function] [call site] 00267
6 convert_dec [function] [call site] 00268
6 wget_buffer_memset_append [function] [call site] 00269
4 wget_realloc [function] [call site] 00270
2 rpl_globfree [function] [call site] 00271
1 wget_human_readable [function] [call site] 00272
2 wget_snprintf [function] [call site] 00273
3 wget_vsnprintf [function] [call site] 00274
4 wget_buffer_init [function] [call site] 00275
4 wget_buffer_vprintf [function] [call site] 00276
4 wget_buffer_deinit [function] [call site] 00277
4 wget_buffer_deinit [function] [call site] 00278
2 wget_snprintf [function] [call site] 00279
2 wget_snprintf [function] [call site] 00280
1 wget_human_readable [function] [call site] 00281
1 wget_get_screen_size [function] [call site] 00282
2 fileno [call site] 00283
2 rpl_ioctl [function] [call site] 00284
3 ioctl [call site] 00285
1 wget_memtohex [function] [call site] 00286
1 wget_memtohex [function] [call site] 00287
1 wget_memtohex [function] [call site] 00288
1 wget_memtohex [function] [call site] 00289
1 wget_memtohex [function] [call site] 00290
1 wget_memtohex [function] [call site] 00291
1 wget_memtohex [function] [call site] 00292