Fuzz introspector: http_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
30 30 2 :

['strcmp', 'event_warn']

78 612 evhttp_parse_request_line call site: 00160 /src/libevent/http.c:2013
28 34 2 :

['event_warn', 'event_mm_free_']

28 34 evhttp_add_header_internal call site: 00288 /src/libevent/http.c:2183
28 28 1 :

['event_warn']

28 28 evbuffer_readln call site: 00145 /src/libevent/buffer.c:1732
28 28 1 :

['event_warn']

28 28 evhttp_htmlescape call site: 00332 /src/libevent/http.c:294
28 28 1 :

['event_warn']

28 28 evhttp_request_get_host call site: 00303 /src/libevent/http.c:4523
28 28 1 :

['event_warn']

28 28 evhttp_new_object call site: 00003 /src/libevent/http.c:3988
28 28 1 :

['event_warn']

28 28 parse_authority call site: 00205 /src/libevent/http.c:5113
24 24 1 :

['event_debugx_']

24 24 evhttp_parse_request_line call site: 00166 /src/libevent/http.c:2044
2 14 2 :

['event_mm_strdup_', 'strchr']

2 14 parse_authority call site: 00184 /src/libevent/http.c:5073
2 2 1 :

['__bswap_32']

4 4 evutil_inet_pton call site: 00193 /src/libevent/evutil.c:2240
0 0 None 57 104 evbuffer_search_eol call site: 00127 /src/libevent/buffer.c:1641
0 0 None 52 494 evbuffer_chain_free call site: 00030 /src/libevent/buffer.c:222

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 evhttp_new [function] [call site] 00001
2 evhttp_new_object [function] [call site] 00002
3 event_mm_calloc_ [function] [call site] 00003
4 calloc [call site] 00004
4 __errno_location [call site] 00005
3 event_warn [function] [call site] 00006
4 __errno_location [call site] 00007
4 event_logv_ [function] [call site] 00008
5 evutil_vsnprintf [function] [call site] 00009
6 vsnprintf [call site] 00010
5 strlen [call site] 00011
5 evutil_snprintf [function] [call site] 00012
6 evutil_vsnprintf [function] [call site] 00013
5 event_log [function] [call site] 00014
6 fprintf [call site] 00015
3 evhttp_set_max_headers_size [function] [call site] 00016
3 evhttp_set_max_body_size [function] [call site] 00017
3 evhttp_set_default_content_type [function] [call site] 00018
3 evhttp_set_allowed_methods [function] [call site] 00019
1 evbuffer_new [function] [call site] 00020
2 event_mm_calloc_ [function] [call site] 00021
1 evbuffer_add [function] [call site] 00022
2 evbuffer_chain_insert_new [function] [call site] 00023
3 evbuffer_chain_new_membuf [function] [call site] 00024
4 evbuffer_chain_new [function] [call site] 00025
5 event_mm_malloc_ [function] [call site] 00026
3 evbuffer_chain_insert [function] [call site] 00027
4 evbuffer_free_trailing_empty_chains [function] [call site] 00028
5 evbuffer_free_all_chains [function] [call site] 00029
6 evbuffer_chain_free [function] [call site] 00030
7 evbuffer_file_segment_free [function] [call site] 00031
8 get_page_size [function] [call site] 00032
9 sysconf [call site] 00033
8 munmap [call site] 00034
8 event_warn [function] [call site] 00035
8 event_mm_free_ [function] [call site] 00036
8 close [call site] 00037
8 event_mm_free_ [function] [call site] 00038
7 evbuffer_chain_free [function] [call site] 00039
8 evbuffer_decref_and_unlock_ [function] [call site] 00040
9 evbuffer_chain_free [function] [call site] 00041
10 event_mm_free_ [function] [call site] 00042
9 evbuffer_remove_all_callbacks [function] [call site] 00043
10 event_mm_free_ [function] [call site] 00044
9 event_deferred_cb_cancel_ [function] [call site] 00045
10 event_callback_cancel_ [function] [call site] 00046
11 event_callback_cancel_nolock_ [function] [call site] 00047
12 event_del_nolock_ [function] [call site] 00048
13 event_debugx_ [function] [call site] 00049
14 event_logv_ [function] [call site] 00050
13 event_queue_remove_timeout [function] [call site] 00051
14 is_common_timeout [function] [call site] 00052
14 get_common_timeout_list [function] [call site] 00053
14 min_heap_erase_ [function] [call site] 00054
15 min_heap_shift_up_unconditional_ [function] [call site] 00055
15 min_heap_shift_down_ [function] [call site] 00056
13 event_queue_remove_active [function] [call site] 00057
13 event_queue_remove_active_later [function] [call site] 00058
13 event_queue_remove_inserted [function] [call site] 00059
13 evmap_io_del_ [function] [call site] 00060
13 evmap_signal_del_ [function] [call site] 00061
13 event_haveevents [function] [call site] 00062
13 evthread_notify_base [function] [call site] 00063
13 event_debug_note_del_ [function] [call site] 00064
14 event_debug_map_HT_FIND [function] [call site] 00065
15 event_debug_map_HT_FIND_P_ [function] [call site] 00066
14 event_errx [function] [call site] 00067
15 event_logv_ [function] [call site] 00068
15 event_exit [function] [call site] 00069
16 exit [call site] 00070
16 abort [call site] 00071
16 exit [call site] 00072
12 event_queue_remove_active [function] [call site] 00073
12 event_queue_remove_active_later [function] [call site] 00074
9 event_mm_free_ [function] [call site] 00075
2 evbuffer_chain_should_realign [function] [call site] 00076
2 evbuffer_chain_align [function] [call site] 00077
2 evbuffer_chain_new_membuf [function] [call site] 00078
2 evbuffer_chain_insert [function] [call site] 00079
2 evbuffer_invoke_callbacks_ [function] [call site] 00080
3 event_deferred_cb_schedule_ [function] [call site] 00081
4 event_callback_activate_later_nolock_ [function] [call site] 00082
5 event_queue_insert_active_later [function] [call site] 00083
5 evthread_notify_base [function] [call site] 00084
4 event_callback_activate_nolock_ [function] [call site] 00085
5 event_queue_remove_active_later [function] [call site] 00086
5 event_queue_insert_active [function] [call site] 00087
5 evthread_notify_base [function] [call site] 00088
3 evbuffer_incref_and_lock_ [function] [call site] 00089
3 bufferevent_incref [function] [call site] 00090
3 evbuffer_run_callbacks [function] [call site] 00091
1 evhttp_request_new [function] [call site] 00092
2 event_mm_calloc_ [function] [call site] 00093
2 event_mm_calloc_ [function] [call site] 00094
2 event_mm_calloc_ [function] [call site] 00095
2 evbuffer_new [function] [call site] 00096
2 evbuffer_new [function] [call site] 00097
2 event_warn [function] [call site] 00098
2 event_warn [function] [call site] 00099
2 evhttp_request_free [function] [call site] 00100
3 event_mm_free_ [function] [call site] 00101
3 event_mm_free_ [function] [call site] 00102
3 evhttp_uri_free [function] [call site] 00103
4 event_mm_free_ [function] [call site] 00104
4 event_mm_free_ [function] [call site] 00105
4 event_mm_free_ [function] [call site] 00106
4 event_mm_free_ [function] [call site] 00107
4 event_mm_free_ [function] [call site] 00108
4 event_mm_free_ [function] [call site] 00109
4 event_mm_free_ [function] [call site] 00110
4 event_mm_free_ [function] [call site] 00111
3 event_mm_free_ [function] [call site] 00112
3 event_mm_free_ [function] [call site] 00113
3 evhttp_clear_headers [function] [call site] 00114
4 event_mm_free_ [function] [call site] 00115
4 event_mm_free_ [function] [call site] 00116
4 event_mm_free_ [function] [call site] 00117
3 event_mm_free_ [function] [call site] 00118
3 evhttp_clear_headers [function] [call site] 00119
3 event_mm_free_ [function] [call site] 00120
3 evbuffer_free [function] [call site] 00121
4 evbuffer_decref_and_unlock_ [function] [call site] 00122
3 evbuffer_free [function] [call site] 00123
3 event_mm_free_ [function] [call site] 00124
1 evhttp_parse_firstline_ [function] [call site] 00125
2 evbuffer_readln [function] [call site] 00126
3 evbuffer_search_eol [function] [call site] 00127
4 evbuffer_find_eol_char [function] [call site] 00128
5 find_eol_char [function] [call site] 00129
6 memchr [call site] 00130
6 memchr [call site] 00131
4 evbuffer_strspn [function] [call site] 00132
4 evbuffer_search [function] [call site] 00133
5 evbuffer_search_range [function] [call site] 00134
6 memchr [call site] 00135
6 evbuffer_ptr_memcmp [function] [call site] 00136
7 memcmp [call site] 00137
4 evbuffer_strchr [function] [call site] 00138
5 memchr [call site] 00139
4 evbuffer_ptr_subtract [function] [call site] 00140
5 evbuffer_ptr_set [function] [call site] 00141
4 evbuffer_getchr [function] [call site] 00142
4 evbuffer_strchr [function] [call site] 00143
4 evbuffer_strchr [function] [call site] 00144
3 event_mm_malloc_ [function] [call site] 00145
3 event_warn [function] [call site] 00146
3 evbuffer_remove [function] [call site] 00147
4 evbuffer_copyout_from [function] [call site] 00148
4 evbuffer_drain [function] [call site] 00149
5 HAS_PINNED_R [function] [call site] 00150
5 evbuffer_chain_free [function] [call site] 00151
5 ZERO_CHAIN [function] [call site] 00152
5 evbuffer_chain_free [function] [call site] 00153
5 evbuffer_invoke_callbacks_ [function] [call site] 00154
3 evbuffer_drain [function] [call site] 00155
2 evbuffer_get_length [function] [call site] 00156
2 event_mm_free_ [function] [call site] 00157
2 evhttp_parse_request_line [function] [call site] 00158
3 strsep [call site] 00159
3 strrchr [call site] 00160
3 strcmp [call site] 00161
3 event_debugx_ [function] [call site] 00162
3 evhttp_parse_http_version [function] [call site] 00163
4 __isoc99_sscanf [call site] 00164
4 event_debugx_ [function] [call site] 00165
3 event_mm_strdup_ [function] [call site] 00166
4 __errno_location [call site] 00167
4 strlen [call site] 00168
4 strdup [call site] 00169
4 __errno_location [call site] 00170
3 event_debugx_ [function] [call site] 00171
3 evhttp_uri_parse_authority [function] [call site] 00172
4 event_mm_calloc_ [function] [call site] 00173
4 end_of_authority [function] [call site] 00174
4 parse_authority [function] [call site] 00175
5 event_mm_strdup_ [function] [call site] 00176
5 event_warn [function] [call site] 00177
5 strchr [call site] 00178
5 userinfo_ok [function] [call site] 00179
6 EVUTIL_ISXDIGIT_ [function] [call site] 00180
6 EVUTIL_ISXDIGIT_ [function] [call site] 00181
5 event_mm_strdup_ [function] [call site] 00182
5 event_warn [function] [call site] 00183
5 strncmp [call site] 00184
5 strchr [call site] 00185
5 event_mm_strdup_ [function] [call site] 00186
5 EVUTIL_ISDIGIT_ [function] [call site] 00187
5 parse_port [function] [call site] 00188
6 EVUTIL_ISDIGIT_ [function] [call site] 00189
5 bracket_addr_ok [function] [call site] 00190
6 EVUTIL_ISXDIGIT_ [function] [call site] 00191
6 EVUTIL_ISXDIGIT_ [function] [call site] 00192
6 evutil_inet_pton [function] [call site] 00193
7 __isoc99_sscanf [call site] 00194
7 __bswap_32 [function] [call site] 00195
7 strchr [call site] 00196
7 strlen [call site] 00197
7 EVUTIL_ISDIGIT_ [function] [call site] 00198
7 __isoc99_sscanf [call site] 00199
7 EVUTIL_ISXDIGIT_ [function] [call site] 00200
7 strtol [call site] 00201
5 regname_ok [function] [call site] 00202
6 EVUTIL_ISXDIGIT_ [function] [call site] 00203
6 EVUTIL_ISXDIGIT_ [function] [call site] 00204
5 event_mm_malloc_ [function] [call site] 00205
5 event_warn [function] [call site] 00206
4 event_mm_strdup_ [function] [call site] 00207
4 event_warn [function] [call site] 00208
4 event_warn [function] [call site] 00209
4 evhttp_uri_free [function] [call site] 00210
3 evhttp_uri_parse_with_flags [function] [call site] 00211
4 event_mm_calloc_ [function] [call site] 00212
4 event_mm_strdup_ [function] [call site] 00213
4 strchr [call site] 00214
4 scheme_ok [function] [call site] 00215
5 EVUTIL_ISALPHA_ [function] [call site] 00216
5 EVUTIL_ISALNUM_ [function] [call site] 00217
4 event_mm_strdup_ [function] [call site] 00218
4 end_of_authority [function] [call site] 00219
4 parse_authority [function] [call site] 00220
4 end_of_path [function] [call site] 00221
5 EVUTIL_ISXDIGIT_ [function] [call site] 00222
5 EVUTIL_ISXDIGIT_ [function] [call site] 00223
5 strlen [call site] 00224
4 end_of_path [function] [call site] 00225
4 end_of_path [function] [call site] 00226
4 path_matches_noscheme [function] [call site] 00227
4 event_mm_strdup_ [function] [call site] 00228
4 event_mm_strdup_ [function] [call site] 00229
4 event_mm_strdup_ [function] [call site] 00230
4 event_mm_free_ [function] [call site] 00231
4 event_warn [function] [call site] 00232
4 event_warn [function] [call site] 00233
4 evhttp_uri_free [function] [call site] 00234
4 event_mm_free_ [function] [call site] 00235
3 evhttp_uri_get_scheme [function] [call site] 00236
3 evhttp_uri_get_host [function] [call site] 00237
3 evutil_ascii_strcasecmp [function] [call site] 00238
4 EVUTIL_TOLOWER_ [function] [call site] 00239
4 EVUTIL_TOLOWER_ [function] [call site] 00240
3 evutil_ascii_strcasecmp [function] [call site] 00241
3 evhttp_find_vhost [function] [call site] 00242
4 evhttp_find_alias [function] [call site] 00243
5 evutil_ascii_strcasecmp [function] [call site] 00244
5 evhttp_find_alias [function] [call site] 00245
4 prefix_suffix_match [function] [call site] 00246
5 prefix_suffix_match [function] [call site] 00247
6 EVUTIL_TOLOWER_ [function] [call site] 00248
2 evhttp_parse_response_line [function] [call site] 00249
3 strsep [call site] 00250
3 strsep [call site] 00251
3 evhttp_parse_http_version [function] [call site] 00252
3 atoi [function] [call site] 00253
4 strtol [call site] 00254
3 evhttp_valid_response_code [function] [call site] 00255
3 event_debugx_ [function] [call site] 00256
3 event_mm_free_ [function] [call site] 00257
3 event_mm_strdup_ [function] [call site] 00258
3 event_warn [function] [call site] 00259
2 event_mm_free_ [function] [call site] 00260
1 evhttp_parse_headers_ [function] [call site] 00261
2 evbuffer_readln [function] [call site] 00262
2 event_mm_free_ [function] [call site] 00263
2 evhttp_append_to_last_header [function] [call site] 00264
3 strlen [call site] 00265
3 evutil_rtrim_lws_ [function] [call site] 00266
4 strlen [call site] 00267
3 strlen [call site] 00268
3 event_mm_realloc_ [function] [call site] 00269
4 realloc [call site] 00270
2 strsep [call site] 00271
2 strspn [call site] 00272
2 evutil_rtrim_lws_ [function] [call site] 00273
2 evhttp_add_header [function] [call site] 00274
3 event_debugx_ [function] [call site] 00275
3 strchr [call site] 00276
3 event_debugx_ [function] [call site] 00277
3 evhttp_header_is_valid_value [function] [call site] 00278
4 strpbrk [call site] 00279
4 strspn [call site] 00280
3 event_debugx_ [function] [call site] 00281
3 evhttp_add_header_internal [function] [call site] 00282
4 event_mm_calloc_ [function] [call site] 00283
4 event_warn [function] [call site] 00284
4 event_mm_strdup_ [function] [call site] 00285
4 event_mm_free_ [function] [call site] 00286
4 event_warn [function] [call site] 00287
4 event_mm_strdup_ [function] [call site] 00288
4 event_mm_free_ [function] [call site] 00289
4 event_mm_free_ [function] [call site] 00290
4 event_warn [function] [call site] 00291
2 event_mm_free_ [function] [call site] 00292
2 evbuffer_get_length [function] [call site] 00293
2 event_mm_free_ [function] [call site] 00294
1 evhttp_parse_headers_ [function] [call site] 00295
1 evhttp_request_get_input_headers [function] [call site] 00296
1 evhttp_request_get_host [function] [call site] 00297
2 evhttp_uri_get_host [function] [call site] 00298
2 evhttp_find_header [function] [call site] 00299
3 evutil_ascii_strcasecmp [function] [call site] 00300
2 strlen [call site] 00301
2 EVUTIL_ISDIGIT_ [function] [call site] 00302
2 event_mm_malloc_ [function] [call site] 00303
2 event_warn [function] [call site] 00304
1 evhttp_encode_uri [function] [call site] 00305
2 evhttp_uriencode [function] [call site] 00306
3 evbuffer_new [function] [call site] 00307
3 strlen [call site] 00308
3 evbuffer_add [function] [call site] 00309
3 evbuffer_add_printf [function] [call site] 00310
4 evbuffer_add_vprintf [function] [call site] 00311
5 evbuffer_expand_singlechain [function] [call site] 00312
6 evbuffer_chain_should_realign [function] [call site] 00313
6 evbuffer_chain_align [function] [call site] 00314
6 evbuffer_chain_new_membuf [function] [call site] 00315
6 evbuffer_chain_free [function] [call site] 00316
6 evbuffer_chain_insert_new [function] [call site] 00317
5 evutil_vsnprintf [function] [call site] 00318
5 advance_last_with_data [function] [call site] 00319
5 evbuffer_invoke_callbacks_ [function] [call site] 00320
5 evbuffer_expand_singlechain [function] [call site] 00321
3 evbuffer_add [function] [call site] 00322
3 evbuffer_add [function] [call site] 00323
3 evbuffer_get_length [function] [call site] 00324
3 event_mm_malloc_ [function] [call site] 00325
3 evbuffer_get_length [function] [call site] 00326
3 evbuffer_free [function] [call site] 00327
1 evhttp_htmlescape [function] [call site] 00328
2 strlen [call site] 00329
2 html_replace [function] [call site] 00330
2 event_warn [function] [call site] 00331
2 event_mm_malloc_ [function] [call site] 00332
2 event_warn [function] [call site] 00333
2 html_replace [function] [call site] 00334
1 evhttp_uri_parse [function] [call site] 00335
2 evhttp_uri_parse_with_flags [function] [call site] 00336
1 evhttp_uri_join [function] [call site] 00337
2 evbuffer_new [function] [call site] 00338
2 strlen [call site] 00339
2 evbuffer_add [function] [call site] 00340
2 evbuffer_add [function] [call site] 00341
2 evbuffer_add [function] [call site] 00342
2 evbuffer_add_printf [function] [call site] 00343
2 evbuffer_add_printf [function] [call site] 00344
2 evbuffer_add [function] [call site] 00345
2 evbuffer_add_printf [function] [call site] 00346
2 evbuffer_add [function] [call site] 00347
2 strlen [call site] 00348
2 evbuffer_add [function] [call site] 00349
2 evbuffer_add [function] [call site] 00350
2 strlen [call site] 00351
2 evbuffer_add [function] [call site] 00352
2 evbuffer_add_printf [function] [call site] 00353
2 strlen [call site] 00354
2 evbuffer_add [function] [call site] 00355
2 evbuffer_add [function] [call site] 00356
2 strlen [call site] 00357
2 evbuffer_add [function] [call site] 00358
2 evbuffer_add [function] [call site] 00359
2 strlen [call site] 00360
2 evbuffer_add [function] [call site] 00361
2 evbuffer_add [function] [call site] 00362
2 evbuffer_get_length [function] [call site] 00363
2 evbuffer_remove [function] [call site] 00364
2 evbuffer_free [function] [call site] 00365
1 evhttp_uri_free [function] [call site] 00366
1 evhttp_request_free [function] [call site] 00367
1 evbuffer_free [function] [call site] 00368
1 evhttp_free [function] [call site] 00369
2 evconnlistener_free [function] [call site] 00370
3 listener_decref_and_unlock [function] [call site] 00371
4 event_mm_free_ [function] [call site] 00372
2 event_mm_free_ [function] [call site] 00373
2 evhttp_connection_free [function] [call site] 00374
3 evhttp_connected [function] [call site] 00375
3 evhttp_request_free_ [function] [call site] 00376
4 evhttp_request_free_auto [function] [call site] 00377
5 evhttp_request_free [function] [call site] 00378
3 event_initialized [function] [call site] 00379
3 event_del [function] [call site] 00380
4 event_del_ [function] [call site] 00381
5 event_del_nolock_ [function] [call site] 00382
3 event_debug_unassign [function] [call site] 00383
4 event_debug_assert_not_added_ [function] [call site] 00384
5 event_debug_map_HT_FIND [function] [call site] 00385
5 event_errx [function] [call site] 00386
4 event_debug_note_teardown_ [function] [call site] 00387
5 event_debug_map_HT_REMOVE [function] [call site] 00388
5 event_mm_free_ [function] [call site] 00389
3 event_deferred_cb_cancel_ [function] [call site] 00390
3 bufferevent_free [function] [call site] 00391
4 bufferevent_setcb [function] [call site] 00392
4 bufferevent_cancel_all_ [function] [call site] 00393
4 bufferevent_decref_and_unlock_ [function] [call site] 00394
5 event_initialized [function] [call site] 00395
5 evbuffer_get_callbacks_ [function] [call site] 00396
5 evbuffer_get_callbacks_ [function] [call site] 00397
5 event_callback_finalize_many_ [function] [call site] 00398
6 event_debugx_ [function] [call site] 00399
6 event_callback_finalize_nolock_ [function] [call site] 00400
7 event_del_nolock_ [function] [call site] 00401
7 event_callback_cancel_nolock_ [function] [call site] 00402
7 event_callback_activate_nolock_ [function] [call site] 00403
6 event_callback_cancel_nolock_ [function] [call site] 00404
6 event_callback_finalize_nolock_ [function] [call site] 00405
5 bufferevent_finalize_cb_ [function] [call site] 00406
6 bufferevent_get_underlying [function] [call site] 00407
6 evbuffer_free [function] [call site] 00408
6 evbuffer_free [function] [call site] 00409
6 bufferevent_remove_from_rate_limit_group_internal_ [function] [call site] 00410
7 bufferevent_unsuspend_read_ [function] [call site] 00411
7 bufferevent_unsuspend_write_ [function] [call site] 00412
6 event_mm_free_ [function] [call site] 00413
6 event_mm_free_ [function] [call site] 00414
6 bufferevent_decref [function] [call site] 00415
7 bufferevent_decref_and_unlock_ [function] [call site] 00416
3 event_mm_free_ [function] [call site] 00417
3 event_mm_free_ [function] [call site] 00418
3 event_mm_free_ [function] [call site] 00419
3 event_mm_free_ [function] [call site] 00420
2 evws_connection_free [function] [call site] 00421
3 bufferevent_free [function] [call site] 00422
3 evbuffer_free [function] [call site] 00423
3 event_mm_free_ [function] [call site] 00424
2 event_mm_free_ [function] [call site] 00425
2 event_mm_free_ [function] [call site] 00426
2 evhttp_free [function] [call site] 00427
3 event_mm_free_ [function] [call site] 00428
3 event_mm_free_ [function] [call site] 00429
3 event_mm_free_ [function] [call site] 00430
3 event_mm_free_ [function] [call site] 00431