Fuzz introspector: wireshark/fuzz/fuzzshark.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
26 166 epan_dissect_run call site: {node_id} wtap_block_free_options
5 45 epan_get_frame_ts call site: {node_id} frame_data_sequence_find
5 51 frame_delta_abs_time call site: {node_id} epan_get_modified_block
2 15 ws_buffer_assure_space call site: {node_id}
2 21 LLVMFuzzerTestOneInput call site: {node_id} wslua_prime_dfilter
2 32 epan_dissect_run call site: {node_id} col_init
2 79 proto_is_protocol_enabled call site: {node_id} proto_is_protocol_enabled
2 162 wmem_free_all_real call site: {node_id} wmem_free
2 193 LLVMFuzzerTestOneInput call site: {node_id}
2 212 proto_tree_children_foreach call site: {node_id}
1 9 ws_buffer_init call site: {node_id}
1 62 dissect_record call site: {node_id}

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 wtap_rec_init [function] [call site] 00001
2 memset [function] [call site] 00002
2 ws_buffer_init [function] [call site] 00003
3 ws_assert [function] [call site] 00004
3 G_UNLIKELY [function] [call site] 00005
3 g_ptr_array_sized_new [function] [call site] 00006
3 g_ptr_array_remove_index [function] [call site] 00007
3 ws_assert [function] [call site] 00008
3 g_malloc [function] [call site] 00009
3 g_malloc [function] [call site] 00010
2 ws_buffer_init [function] [call site] 00011
1 ws_buffer_append [function] [call site] 00012
2 ws_assert [function] [call site] 00013
2 ws_buffer_assure_space [function] [call site] 00014
3 ws_assert [function] [call site] 00015
3 memmove [function] [call site] 00016
3 g_realloc [function] [call site] 00017
2 memcpy [function] [call site] 00018
1 frame_data_init [function] [call site] 00019
2 ws_assert [function] [call site] 00020
1 epan_dissect_run [function] [call site] 00021
2 wslua_prime_dfilter [function] [call site] 00022
3 dfilter_prime_proto_tree [function] [call site] 00023
4 proto_tree_prime_with_hfid [function] [call site] 00024
2 wmem_enter_packet_scope [function] [call site] 00025
3 ws_assert [function] [call site] 00026
3 ws_assert [function] [call site] 00027
3 wmem_in_scope [function] [call site] 00028
3 ws_assert [function] [call site] 00029
3 wmem_in_scope [function] [call site] 00030
3 wmem_enter_scope [function] [call site] 00031
2 dissect_record [function] [call site] 00032
3 ws_assert_not_reached [function] [call site] 00033
3 col_init [function] [call site] 00034
3 clear_address [function] [call site] 00035
3 clear_address [function] [call site] 00036
3 clear_address [function] [call site] 00037
3 clear_address [function] [call site] 00038
3 clear_address [function] [call site] 00039
3 clear_address [function] [call site] 00040
3 wmem_list_new [function] [call site] 00041
4 wmem_new [function] [call site] 00042
3 frame_delta_abs_time [function] [call site] 00043
4 epan_get_frame_ts [function] [call site] 00044
5 cap_file_provider_get_frame_ts [function] [call site] 00045
6 frame_data_sequence_find [function] [call site] 00046
7 LEAF_INDEX [function] [call site] 00047
7 LEAF_INDEX [function] [call site] 00048
7 LEAF_INDEX [function] [call site] 00049
5 ws_debug [function] [call site] 00050
4 nstime_delta [function] [call site] 00051
4 nstime_set_zero [function] [call site] 00052
3 nstime_copy [function] [call site] 00053
3 epan_get_modified_block [function] [call site] 00054
4 cap_file_provider_get_modified_block [function] [call site] 00055
5 g_tree_lookup [function] [call site] 00056
3 tvb_new_real_data [function] [call site] 00057
4 THROW_ON [function] [call site] 00058
4 tvb_new [function] [call site] 00059
5 ws_assert [function] [call site] 00060
5 g_slice_alloc [function] [call site] 00061
3 ws_buffer_start_ptr [function] [call site] 00062
4 ws_assert [function] [call site] 00063
3 add_new_data_source [function] [call site] 00064
4 wmem_new [function] [call site] 00065
4 wmem_strdup [function] [call site] 00066
5 strlen [function] [call site] 00067
5 memcpy [function] [call site] 00068
5 wmem_alloc [function] [call site] 00069
6 g_malloc [function] [call site] 00070
6 ws_assert [function] [call site] 00071
6 walloc [function] [call site] 00072
4 g_slist_append [function] [call site] 00073
3 call_dissector_with_data [function] [call site] 00074
4 call_dissector_only [function] [call site] 00075
5 DISSECTOR_ASSERT [function] [call site] 00076
5 call_dissector_work [function] [call site] 00077
6 proto_is_protocol_enabled [function] [call site] 00078
7 proto_is_pino [function] [call site] 00079
7 proto_is_protocol_enabled [function] [call site] 00080
7 find_protocol_by_id [function] [call site] 00081
8 PROTO_REGISTRAR_GET_NTH [function] [call site] 00082
8 DISSECTOR_ASSERT [function] [call site] 00083
6 wmem_list_count [function] [call site] 00084
6 DISSECTOR_ASSERT [function] [call site] 00085
6 proto_is_pino [function] [call site] 00086
6 proto_get_protocol_short_name [function] [call site] 00087
6 add_layer [function] [call site] 00088
7 wmem_list_append [function] [call site] 00089
8 wmem_new [function] [call site] 00090
7 GINT_TO_POINTER [function] [call site] 00091
7 wmem_map_new [function] [call site] 00092
8 wmem_new [function] [call site] 00093
7 wmem_map_lookup [function] [call site] 00094
8 HASH [function] [call site] 00095
8 eql_func [function] [call site] 00096
7 GINT_TO_POINTER [function] [call site] 00097
7 wmem_new [function] [call site] 00098
7 wmem_map_insert [function] [call site] 00099
8 wmem_map_init_table [function] [call site] 00100
9 wmem_alloc0_array [function] [call site] 00101
9 CAPACITY [function] [call site] 00102
8 HASH [function] [call site] 00103
8 eql_func [function] [call site] 00104
8 wmem_new [function] [call site] 00105
8 CAPACITY [function] [call site] 00106
8 wmem_map_grow [function] [call site] 00107
9 CAPACITY [function] [call site] 00108
9 wmem_alloc0_array [function] [call site] 00109
9 CAPACITY [function] [call site] 00110
9 HASH [function] [call site] 00111
9 wmem_free [function] [call site] 00112
10 g_free [function] [call site] 00113
10 ws_assert [function] [call site] 00114
10 wfree [function] [call site] 00115
7 GINT_TO_POINTER [function] [call site] 00116
6 proto_get_id [function] [call site] 00117
6 call_dissector_work_error [function] [call site] 00118
7 col_get_writable [function] [call site] 00119
7 col_set_writable [function] [call site] 00120
7 copy_address_shallow [function] [call site] 00121
8 set_address [function] [call site] 00122
9 ws_assert [function] [call site] 00123
9 ws_assert [function] [call site] 00124
9 ws_assert [function] [call site] 00125
7 copy_address_shallow [function] [call site] 00126
7 copy_address_shallow [function] [call site] 00127
7 copy_address_shallow [function] [call site] 00128
7 copy_address_shallow [function] [call site] 00129
7 copy_address_shallow [function] [call site] 00130
7 call_dissector_through_handle [function] [call site] 00131
8 proto_is_pino [function] [call site] 00132
8 proto_get_protocol_short_name [function] [call site] 00133
8 ws_assert_not_reached [function] [call site] 00134
6 call_dissector_through_handle [function] [call site] 00135
6 proto_is_pino [function] [call site] 00136
6 wmem_list_count [function] [call site] 00137
6 remove_last_layer [function] [call site] 00138
7 wmem_list_tail [function] [call site] 00139
7 GPOINTER_TO_INT [function] [call site] 00140
7 wmem_list_frame_data [function] [call site] 00141
7 wmem_list_remove_frame [function] [call site] 00142
8 wmem_free [function] [call site] 00143
7 wmem_map_lookup [function] [call site] 00144
7 GINT_TO_POINTER [function] [call site] 00145
7 wmem_list_tail [function] [call site] 00146
7 GPOINTER_TO_INT [function] [call site] 00147
7 wmem_list_frame_data [function] [call site] 00148
7 wmem_map_lookup [function] [call site] 00149
7 GINT_TO_POINTER [function] [call site] 00150
7 ws_assert [function] [call site] 00151
4 call_data_dissector [function] [call site] 00152
5 DISSECTOR_ASSERT [function] [call site] 00153
5 call_dissector_work [function] [call site] 00154
2 wmem_leave_packet_scope [function] [call site] 00155
3 ws_assert [function] [call site] 00156
3 ws_assert [function] [call site] 00157
3 wmem_in_scope [function] [call site] 00158
3 wmem_leave_scope [function] [call site] 00159
4 wmem_free_all [function] [call site] 00160
5 wmem_free_all_real [function] [call site] 00161
6 wmem_call_callbacks [function] [call site] 00162
7 cb [function] [call site] 00163
7 wmem_free [function] [call site] 00164
6 free_all [function] [call site] 00165
2 wtap_block_unref [function] [call site] 00166
3 g_atomic_int_dec_and_test [function] [call site] 00167
3 wtap_debug [function] [call site] 00168
3 rc_clear [function] [call site] 00169
3 nrb_free_mand [function] [call site] 00170
4 g_list_free_full [function] [call site] 00171
4 g_list_free_full [function] [call site] 00172
3 g_free [function] [call site] 00173
3 wtap_block_free_options [function] [call site] 00174
4 g_array_index [function] [call site] 00175
4 wtap_block_free_option [function] [call site] 00176
5 GET_OPTION_TYPE [function] [call site] 00177
5 g_free [function] [call site] 00178
5 g_bytes_unref [function] [call site] 00179
5 g_free [function] [call site] 00180
5 g_free [function] [call site] 00181
5 if_filter_free [function] [call site] 00182
6 g_free [function] [call site] 00183
6 g_free [function] [call site] 00184
5 wtap_packet_verdict_free [function] [call site] 00185
6 g_byte_array_free [function] [call site] 00186
5 wtap_packet_hash_free [function] [call site] 00187
6 g_byte_array_free [function] [call site] 00188
4 g_array_remove_range [function] [call site] 00189
3 g_array_free [function] [call site] 00190
3 g_free [function] [call site] 00191
3 wtap_debug [function] [call site] 00192
1 frame_data_destroy [function] [call site] 00193
2 g_slist_free [function] [call site] 00194
2 g_hash_table_destroy [function] [call site] 00195
1 epan_dissect_reset [function] [call site] 00196
2 ws_assert [function] [call site] 00197
2 wtap_block_unref [function] [call site] 00198
2 g_slist_free [function] [call site] 00199
2 free_data_sources [function] [call site] 00200
3 g_slist_free [function] [call site] 00201
2 tvb_free_chain [function] [call site] 00202
3 DISSECTOR_ASSERT [function] [call site] 00203
3 tvb_free_internal [function] [call site] 00204
4 DISSECTOR_ASSERT [function] [call site] 00205
4 tvb_free [function] [call site] 00206
5 tvb_free_chain [function] [call site] 00207
4 g_slice_free1 [function] [call site] 00208
2 proto_tree_reset [function] [call site] 00209
3 PTREE_DATA [function] [call site] 00210
3 proto_tree_children_foreach [function] [call site] 00211
4 func [function] [call site] 00212
3 g_hash_table_foreach [function] [call site] 00213
3 g_hash_table_remove_all [function] [call site] 00214
3 PROTO_NODE_INIT [function] [call site] 00215
2 wmem_free_all [function] [call site] 00216
2 memset [function] [call site] 00217
1 wtap_rec_cleanup [function] [call site] 00218
2 wtap_rec_reset [function] [call site] 00219
3 wtap_block_unref [function] [call site] 00220
2 ws_buffer_free [function] [call site] 00221
3 ws_assert [function] [call site] 00222
3 ws_assert [function] [call site] 00223
3 g_ptr_array_add [function] [call site] 00224
3 g_free [function] [call site] 00225
2 ws_buffer_free [function] [call site] 00226