Fuzz introspector: wireshark/fuzz/fuzzshark.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
234 0 EP call site: {node_id} epan_dissect_run

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 wtap_rec_init [function] [call site] 00001
2 ws_buffer_init [function] [call site] 00003
3 ws_assert [function] [call site] 00004
3 G_UNLIKELY [function] [call site] 00005
3 g_ptr_array_sized_new [function] [call site] 00006
3 g_ptr_array_remove_index [function] [call site] 00007
3 ws_assert [function] [call site] 00008
2 ws_buffer_init [function] [call site] 00011
1 wtap_setup_packet_rec [function] [call site] 00012
1 ws_buffer_append [function] [call site] 00013
2 ws_assert [function] [call site] 00014
2 ws_buffer_assure_space [function] [call site] 00015
1 frame_data_init [function] [call site] 00020
2 ws_assert [function] [call site] 00021
1 epan_dissect_run [function] [call site] 00022
2 wslua_prime_dfilter [function] [call site] 00023
3 dfilter_prime_proto_tree [function] [call site] 00024
4 proto_tree_prime_with_hfid [function] [call site] 00025
2 wmem_enter_packet_scope [function] [call site] 00026
3 ws_assert [function] [call site] 00027
3 ws_assert [function] [call site] 00028
3 wmem_in_scope [function] [call site] 00029
3 ws_assert [function] [call site] 00030
3 wmem_in_scope [function] [call site] 00031
3 wmem_enter_scope [function] [call site] 00032
2 dissect_record [function] [call site] 00033
3 clear_address [function] [call site] 00035
3 clear_address [function] [call site] 00036
3 clear_address [function] [call site] 00037
3 clear_address [function] [call site] 00038
3 clear_address [function] [call site] 00039
3 clear_address [function] [call site] 00040
3 wmem_list_new [function] [call site] 00041
3 frame_rel_first_frame_time [function] [call site] 00043
4 frame_delta_abs_time [function] [call site] 00044
5 epan_get_frame_ts [function] [call site] 00045
6 cap_file_provider_get_frame_ts [function] [call site] 00046
7 frame_data_sequence_find [function] [call site] 00047
8 LEAF_INDEX [function] [call site] 00048
8 LEAF_INDEX [function] [call site] 00049
8 LEAF_INDEX [function] [call site] 00050
5 nstime_set_zero [function] [call site] 00051
5 nstime_set_zero [function] [call site] 00052
5 epan_get_frame_ts [function] [call site] 00053
5 nstime_set_zero [function] [call site] 00054
5 nstime_delta [function] [call site] 00055
3 nstime_copy [function] [call site] 00056
3 epan_get_modified_block [function] [call site] 00057
4 cap_file_provider_get_modified_block [function] [call site] 00058
5 g_tree_lookup [function] [call site] 00059
3 tvb_new_real_data [function] [call site] 00060
3 ws_buffer_start_ptr [function] [call site] 00065
4 ws_assert [function] [call site] 00066
3 add_new_data_source [function] [call site] 00067
4 wmem_strdup [function] [call site] 00069
5 wmem_alloc [function] [call site] 00072
6 ws_assert [function] [call site] 00074
6 wmem_allocator_t*::walloc [function] [call site] 00075
4 g_slist_append [function] [call site] 00076
3 call_dissector_with_data [function] [call site] 00077
4 call_dissector_only [function] [call site] 00078
5 DISSECTOR_ASSERT [function] [call site] 00079
5 call_dissector_work [function] [call site] 00080
6 proto_is_protocol_enabled [function] [call site] 00081
7 proto_is_pino [function] [call site] 00082
7 proto_is_protocol_enabled [function] [call site] 00083
7 find_protocol_by_id [function] [call site] 00084
8 PROTO_REGISTRAR_GET_NTH [function] [call site] 00085
8 DISSECTOR_ASSERT [function] [call site] 00086
6 wmem_list_count [function] [call site] 00087
6 DISSECTOR_ASSERT [function] [call site] 00088
6 proto_is_pino [function] [call site] 00089
6 proto_get_protocol_short_name [function] [call site] 00090
6 add_layer [function] [call site] 00091
7 wmem_list_append [function] [call site] 00092
7 GINT_TO_POINTER [function] [call site] 00094
7 wmem_map_new [function] [call site] 00095
7 wmem_map_lookup [function] [call site] 00097
8 wmem_map_t*::eql_func [function] [call site] 00099
7 GINT_TO_POINTER [function] [call site] 00100
7 wmem_map_insert [function] [call site] 00102
8 wmem_map_init_table [function] [call site] 00103
9 wmem_alloc0_array [function] [call site] 00104
8 wmem_map_t*::eql_func [function] [call site] 00107
8 wmem_map_grow [function] [call site] 00110
9 wmem_alloc0_array [function] [call site] 00112
9 wmem_free [function] [call site] 00115
10 ws_assert [function] [call site] 00117
10 wmem_allocator_t*::wfree [function] [call site] 00118
7 GINT_TO_POINTER [function] [call site] 00119
6 proto_get_id [function] [call site] 00120
6 call_dissector_work_error [function] [call site] 00121
7 col_get_writable [function] [call site] 00122
7 col_set_writable [function] [call site] 00123
7 copy_address_shallow [function] [call site] 00124
8 set_address [function] [call site] 00125
7 copy_address_shallow [function] [call site] 00129
7 copy_address_shallow [function] [call site] 00130
7 copy_address_shallow [function] [call site] 00131
7 copy_address_shallow [function] [call site] 00132
7 copy_address_shallow [function] [call site] 00133
7 call_dissector_through_handle [function] [call site] 00134
8 proto_is_pino [function] [call site] 00135
8 proto_get_protocol_short_name [function] [call site] 00136
8 ws_assert_not_reached [function] [call site] 00137
6 call_dissector_through_handle [function] [call site] 00138
6 proto_is_pino [function] [call site] 00139
6 wmem_list_count [function] [call site] 00140
6 remove_last_layer [function] [call site] 00141
7 wmem_list_tail [function] [call site] 00142
7 GPOINTER_TO_INT [function] [call site] 00143
7 wmem_list_frame_data [function] [call site] 00144
7 wmem_list_remove_frame [function] [call site] 00145
8 wmem_free [function] [call site] 00146
7 wmem_map_lookup [function] [call site] 00147
7 GINT_TO_POINTER [function] [call site] 00148
4 call_data_dissector [function] [call site] 00149
5 DISSECTOR_ASSERT [function] [call site] 00150
5 call_dissector_work [function] [call site] 00151
2 wmem_leave_packet_scope [function] [call site] 00152
3 ws_assert [function] [call site] 00153
3 ws_assert [function] [call site] 00154
3 wmem_in_scope [function] [call site] 00155
3 wmem_leave_scope [function] [call site] 00156
4 wmem_free_all [function] [call site] 00157
5 wmem_free_all_real [function] [call site] 00158
6 wmem_call_callbacks [function] [call site] 00159
6 rtpstream_info_free_all [function] [call site] 00162
7 rtpstream_info_free_data [function] [call site] 00163
8 rtpstream_id_free [function] [call site] 00165
9 free_address [function] [call site] 00166
10 free_address_wmem [function] [call site] 00167
11 ws_assert [function] [call site] 00168
11 wmem_free [function] [call site] 00169
11 clear_address [function] [call site] 00170
9 free_address [function] [call site] 00171
2 wtap_block_unref [function] [call site] 00174
3 g_atomic_int_dec_and_test [function] [call site] 00175
3 wtap_debug [function] [call site] 00176
3 nrb_free_mand [function] [call site] 00178
4 g_list_free_full [function] [call site] 00179
4 g_list_free_full [function] [call site] 00180
3 wtap_block_free_options [function] [call site] 00182
4 g_array_index [function] [call site] 00183
4 wtap_block_free_option [function] [call site] 00184
5 GET_OPTION_TYPE [function] [call site] 00185
5 g_bytes_unref [function] [call site] 00187
5 wtap_packet_verdict_free [function] [call site] 00193
6 g_byte_array_free [function] [call site] 00194
5 wtap_packet_hash_free [function] [call site] 00195
6 g_byte_array_free [function] [call site] 00196
4 g_array_remove_range [function] [call site] 00197
3 g_array_free [function] [call site] 00198
3 wtap_debug [function] [call site] 00200
1 frame_data_destroy [function] [call site] 00201
2 g_slist_free [function] [call site] 00202
2 g_hash_table_destroy [function] [call site] 00203
1 epan_dissect_reset [function] [call site] 00204
2 ws_assert [function] [call site] 00205
2 wtap_block_unref [function] [call site] 00206
2 g_slist_free [function] [call site] 00207
2 free_data_sources [function] [call site] 00208
3 g_slist_free [function] [call site] 00209
2 tvb_free_chain [function] [call site] 00210
3 DISSECTOR_ASSERT [function] [call site] 00211
3 tvb_free_internal [function] [call site] 00212
4 DISSECTOR_ASSERT [function] [call site] 00213
4 tvb_free [function] [call site] 00214
5 tvb_free_chain [function] [call site] 00215
4 g_slice_free1 [function] [call site] 00216
2 proto_tree_reset [function] [call site] 00217
3 PTREE_DATA [function] [call site] 00218
3 proto_tree_children_foreach [function] [call site] 00219
3 g_hash_table_foreach [function] [call site] 00221
3 g_hash_table_remove_all [function] [call site] 00222
3 PROTO_NODE_INIT [function] [call site] 00223
2 wmem_free_all [function] [call site] 00224
1 wtap_rec_cleanup [function] [call site] 00226
2 wtap_rec_reset [function] [call site] 00227
3 wtap_block_unref [function] [call site] 00228
2 ws_buffer_free [function] [call site] 00229
3 ws_assert [function] [call site] 00230
3 ws_assert [function] [call site] 00231
3 g_ptr_array_add [function] [call site] 00232
2 ws_buffer_free [function] [call site] 00234