Project: mosquitto

Language c
OSS-Fuzz project link
Project repository link
Build status: Fuzzers failing: Build log
Build status: Code coverage succeeding: Build log
Build status: Fuzz Introspector succeeding: Build log
Fuzzer count 20
Lines of code 26179
Lines covered 7804
Code coverage 29.81%
Code coverage report Report link
Static reachability 2.25%
Fuzz Introspector report Report link (from 2025-03-27)
Fuzzer Code coverage (lines) Latest Report Comments
broker_fuzz_acl_file 3.24% (avg: 3.24%, max: 3.24%) 2025-03-27
broker_fuzz_handle_auth 0.0% (avg: 0.0%, max: 0.0%) 2025-03-27
broker_fuzz_handle_connect 0.0% (avg: 0.0%, max: 0.0%) 2025-03-27
broker_fuzz_handle_publish 0.0% (avg: 0.0%, max: 0.0%) 2025-03-27
broker_fuzz_handle_subscribe 0.0% (avg: 0.0%, max: 0.0%) 2025-03-27
broker_fuzz_handle_unsubscribe 0.0% (avg: 0.0%, max: 0.0%) 2025-03-27
broker_fuzz_password_file 3.11% (avg: 3.11%, max: 3.13%) 2025-03-27
broker_fuzz_psk_file 2.01% (avg: 2.01%, max: 2.01%) 2025-03-27
broker_fuzz_queue_msg 1.55% (avg: 1.55%, max: 1.55%) 2025-03-27
broker_fuzz_read_handle 14.8% (avg: 14.8%, max: 14.8%) 2025-03-27
broker_fuzz_test_config 8.25% (avg: 8.24%, max: 8.43%) 2025-03-27
db_dump_fuzz_load 34.03% (avg: 34.03%, max: 34.03%) 2025-03-27
db_dump_fuzz_load_client_stats 31.84% (avg: 31.84%, max: 31.84%) 2025-03-27
db_dump_fuzz_load_stats 30.89% (avg: 30.89%, max: 30.89%) 2025-03-27
dynsec_fuzz_load 4.09% (avg: 4.09%, max: 4.09%) 2025-03-27
libcommon_fuzz_pub_topic_check2 3.12% (avg: 3.12%, max: 3.12%) 2025-03-27
libcommon_fuzz_sub_topic_check2 4.38% (avg: 4.38%, max: 4.38%) 2025-03-27
libcommon_fuzz_topic_tokenise 14.64% (avg: 14.64%, max: 14.64%) 2025-03-27
libcommon_fuzz_utf8 100.0% (avg: 100.0%, max: 100.0%) 2025-03-27
mosquitto_passwd_fuzz_load 37.88% (avg: 32.22%, max: 33.54%) 2025-03-27

Historical Progression

Per Fuzzer Progression

Functions of interest to fuzz

This section outlines functions that may be of interest to fuzz. They are based on ranking functions that have a lot of complexity but currently exhibit low code coverage. The complexity is calculated based on the function itself as well as the functions called by the given function, i.e. the tree of code that the function triggers.


This is only a minor amount of introspection information available for this project. Please consult the Fuzz Introspector report for more information, e.g. the introspection table of all functions in the target project available here.

Function name Function source file Accumulated cyclomatic complexity Code coverage
mosquitto_main_loop /src/mosquitto/src/loop.c 4836 0.0%
service_main /src/mosquitto/src/service.c 4322 0.0%
WinMain /src/mosquitto/src/mosquitto.c 4309 0.0%
main /src/mosquitto/client/pub_client.c 4302 0.0%
client_request_response /src/mosquitto/apps/mosquitto_ctrl/client.c 3426 0.0%
mosquitto_subscribe_simple /src/mosquitto/lib/helpers.c 3335 0.0%
mosquitto_subscribe_callback /src/mosquitto/lib/helpers.c 3309 0.0%
dynsec__handle_command /src/mosquitto/plugins/dynamic-security/control.c 3254 0.0%
mux__handle /src/mosquitto/src/mux.c 3090 0.0%
mux_epoll__handle /src/mosquitto/src/mux_epoll.c 3057 0.0%