Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
LZ4_compressHC	lz4	c++	heuristic 3	coverage link
LZ4_compress	lz4	c++	heuristic 3	coverage link
hsql::SQLParser::tokenize(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&,std::__1::vector<short,std::__1::allocator<short>>*)	sql-parser	c++	heuristic 3	coverage link
cmp_main	tor	c++	heuristic 3	coverage link
conn_write_callback	tor	c++	heuristic 3	coverage link
control_event_logmsg	tor	c++	heuristic 3	coverage link
flush_queued_events_cb	tor	c++	heuristic 3	coverage link
handle_control_signal	tor	c++	heuristic 3	coverage link
cmsCreateDeviceLinkFromCubeFileTHR	lcms	c++	heuristic 3	coverage link
cmsOpenProfileFromStreamTHR	lcms	c++	heuristic 3	coverage link
cmsOpenProfileFromIOhandler2THR	lcms	c++	heuristic 3	coverage link
cmsOpenProfileFromIOhandlerTHR	lcms	c++	heuristic 3	coverage link
cmsDupContext	lcms	c++	heuristic 3	coverage link
usrsctp_init_nothreads	usrsctp	c++	heuristic 3	coverage link
sctp6_connect	usrsctp	c++	heuristic 3	coverage link
sonewconn	usrsctp	c++	heuristic 3	coverage link
userspace_socket	usrsctp	c++	heuristic 3	coverage link
sctp_do_peeloff	usrsctp	c++	heuristic 3	coverage link
fuzz	wuffs	c++	heuristic 3	coverage link
send_msg_userauth_pubkey	dropbear	c++	heuristic 3	coverage link
isprime	dropbear	c++	heuristic 3	coverage link
getp	dropbear	c++	heuristic 3	coverage link
mp_prime_next_prime	dropbear	c++	heuristic 3	coverage link
mp_lcm	dropbear	c++	heuristic 3	coverage link
janus_sdp_generate_answer_mline	janus-gateway	c++	heuristic 3	coverage link
janus_sdp_generate_offer	janus-gateway	c++	heuristic 3	coverage link
card_edit	gnupg	c++	heuristic 3	coverage link
keyserver_refresh	gnupg	c++	heuristic 3	coverage link
keyserver_put	gnupg	c++	heuristic 3	coverage link
keyserver_fetch	gnupg	c++	heuristic 3	coverage link
import_old_secring	gnupg	c++	heuristic 3	coverage link
runas_matches_pw	sudoers	c	heuristic 3	coverage link
push_includedir	sudoers	c	heuristic 3	coverage link
userlist_matches	sudoers	c	heuristic 3	coverage link
user_matches	sudoers	c	heuristic 3	coverage link
push_include	sudoers	c	heuristic 3	coverage link
Pistache::Rest::Private::RouterHandler::onRequest(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Router::route(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Swagger::install(Pistache::Rest::Router&)::$_0::operator()(Pistache::Rest::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Tcp::Transport::asyncWriteImpl(int)	pistache	c++	heuristic 3	coverage link
Pistache::Http::Handler::onTimeout(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)	pistache	c++	heuristic 3	coverage link
tidyParseSource	tidy-html5	c++	heuristic 3	coverage link
AccessibilityCheckNode	tidy-html5	c++	heuristic 3	coverage link
tidySaveSink	tidy-html5	c++	heuristic 3	coverage link
tidyDocSaveString	tidy-html5	c++	heuristic 3	coverage link
tidySaveString	tidy-html5	c++	heuristic 3	coverage link
pkcs15_skey_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_dobj_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_pubkey_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_cert_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_prkey_set_attribute	opensc	c++	heuristic 3	coverage link
operate	proj4	c++	heuristic 3	coverage link
serial_transfers	proj4	c++	heuristic 3	coverage link
WKTParser::Private::buildVerticalReferenceFrame( constWKTNodeNNPtr&node,constWKTNodeNNPtr&dynamicNode)	proj4	c++	heuristic 3	coverage link
t643_test_once	proj4	c++	heuristic 3	coverage link
SingleOperation::exportToPROJStringChangeVerticalUnit	proj4	c++	heuristic 3	coverage link
ixmlParseBufferEx	pupnp	c	heuristic 3	coverage link
njs_parser_export	njs	c++	heuristic 3	coverage link
njs_module_loader	njs	c++	heuristic 3	coverage link
njs_import_jwk_rsa	njs	c++	heuristic 3	coverage link
njs_engine_njs_output	njs	c++	heuristic 3	coverage link
njs_export_jwk_asymmetric	njs	c++	heuristic 3	coverage link
nlstdir	proftpd	c	heuristic 3	coverage link
log_sess_reinit_ev	proftpd	c	heuristic 3	coverage link
core_chdir	proftpd	c	heuristic 3	coverage link
nlstfile	proftpd	c	heuristic 3	coverage link
sendline	proftpd	c	heuristic 3	coverage link
_lwt_LoadGeometryRecursive	postgis	c++	heuristic 3	coverage link
lwt_LoadGeometry	postgis	c++	heuristic 3	coverage link
rt_raster_surface	postgis	c++	heuristic 3	coverage link
pgui_action_import	postgis	c++	heuristic 3	coverage link
lwgeom_maxdistance3d_tolerance	postgis	c++	heuristic 3	coverage link
bcf_index_build	htslib	c++	heuristic 3	coverage link
bcf_index_build2	htslib	c++	heuristic 3	coverage link
sam_index_build	htslib	c++	heuristic 3	coverage link
cram_index_build	htslib	c++	heuristic 3	coverage link
cram_open	htslib	c++	heuristic 3	coverage link
OSS_FUZZ_png_read_image	libpng	c++	heuristic 3	coverage link
_ZN11ArduinoJson8V742HB4215deserializeJsonIRNS0_12JsonDocumentEKhJRmETnNS0_6detail9enable_ifIXsr6detail26is_deserialize_destinationIT_EE5valueEiE4typeELi0EEENS0_20DeserializationErrorEOS8_PT0_DpOT1_	arduinojson	c++	heuristic 3	coverage link
ArduinoJson::V742HB42::DeserializationError::CodeArduinoJson::V742HB42::detail::JsonDeserializer<ArduinoJson::V742HB42::detail::BoundedReader<unsignedcharconst*,void>>::parseVariant<ArduinoJson::V742HB42::detail::AllowAllFilter>(ArduinoJson::V742HB42::detail::VariantData&,ArduinoJson::V742HB42::detail::AllowAllFilter,ArduinoJson::V742HB42::DeserializationOption::NestingLimit)	arduinojson	c++	heuristic 3	coverage link
ArduinoJson::V742HB42::DeserializationError::CodeArduinoJson::V742HB42::detail::JsonDeserializer<ArduinoJson::V742HB42::detail::BoundedReader<unsignedcharconst*,void>>::parseArray<ArduinoJson::V742HB42::detail::AllowAllFilter>(ArduinoJson::V742HB42::detail::ArrayData&,ArduinoJson::V742HB42::detail::AllowAllFilter,ArduinoJson::V742HB42::DeserializationOption::NestingLimit)	arduinojson	c++	heuristic 3	coverage link
ArduinoJson::V742HB42::DeserializationErrorArduinoJson::V742HB42::detail::MsgPackDeserializer<ArduinoJson::V742HB42::detail::BoundedReader<unsignedcharconst*,void>>::parse<ArduinoJson::V742HB42::detail::AllowAllFilter>(ArduinoJson::V742HB42::detail::VariantData&,ArduinoJson::V742HB42::detail::AllowAllFilter,ArduinoJson::V742HB42::DeserializationOption::NestingLimit)	arduinojson	c++	heuristic 3	coverage link
_ZN11ArduinoJson8V742HB426detail11deserializeINS1_19MsgPackDeserializerERNS0_12JsonDocumentEKhmJETnNS1_9enable_ifIXsr11is_integralIT2_EE5valueEiE4typeELi0EEENS0_20DeserializationErrorEOT0_PT1_S8_DpT3_	arduinojson	c++	heuristic 3	coverage link
json_dump_file	jansson	c++	heuristic 3	coverage link
json_dumpf	jansson	c++	heuristic 3	coverage link
json_dumpfd	jansson	c++	heuristic 3	coverage link
strtod__unused	jansson	c++	heuristic 3	coverage link
json_loadfd	jansson	c++	heuristic 3	coverage link
google::SetLogSymlink(int,charconst*)	myanmar-tools	c++	heuristic 3	coverage link
google::operator<<(std::__1::basic_ostream<char,std::__1::char_traits<char>>&,google::PRIVATE_Counterconst&)	myanmar-tools	c++	heuristic 3	coverage link
google::LogMessageFatal::LogMessageFatal(charconst*,int)	myanmar-tools	c++	heuristic 3	coverage link
google::TruncateLogFile(charconst*,long,long)	myanmar-tools	c++	heuristic 3	coverage link
google::SendEmail(charconst,charconst,charconst*)	myanmar-tools	c++	heuristic 3	coverage link
hwloc_look_linuxfs	hwloc	c	heuristic 3	coverage link
hwloc_look_xml	hwloc	c	heuristic 3	coverage link
transform_distances	hwloc	c	heuristic 3	coverage link
add_distances	hwloc	c	heuristic 3	coverage link
output_console	hwloc	c	heuristic 3	coverage link
bpf_object_load	libbpf	c	heuristic 3	coverage link
bpf_object_prepare	libbpf	c	heuristic 3	coverage link
bpf_object__open_skeleton	libbpf	c	heuristic 3	coverage link
bpf_object__open_file	libbpf	c	heuristic 3	coverage link
bpf_program__set_attach_target	libbpf	c	heuristic 3	coverage link
LLVMFuzzerInitialize	yara	c++	heuristic 3	coverage link
yr_lex_parse_rules_fd	yara	c++	heuristic 3	coverage link
yr_lex_parse_rules_file	yara	c++	heuristic 3	coverage link
yr_lex_parse_rules_bytes	yara	c++	heuristic 3	coverage link
yr_scanner_scan_file	yara	c++	heuristic 3	coverage link
f_y1	jq	c	heuristic 3	coverage link
f_sinh	jq	c	heuristic 3	coverage link
jq_util_input_next_input_cb	jq	c	heuristic 3	coverage link
f_log2	jq	c	heuristic 3	coverage link
f_asinh	jq	c	heuristic 3	coverage link
Sass::Parser::parse_selector_schema	libsass	c++	heuristic 3	coverage link
Sass::Parser::parse_interpolated_chunk	libsass	c++	heuristic 3	coverage link
protobuf_mutator::Mutator::Mutate(google::protobuf::Message*,unsignedlong)	libprotobuf-mutator	c++	heuristic 3	coverage link
protobuf_mutator::FieldMutator::Mutate(std::__1::unique_ptr<google::protobuf::Message,std::__1::default_delete<google::protobuf::Message>>*)const	libprotobuf-mutator	c++	heuristic 3	coverage link
boolprotobuf_mutator::(anonymousnamespace)::CanCopyAndDifferentField::ForType<std::__1::unique_ptr<google::protobuf::Message,std::__1::default_delete<google::protobuf::Message>>>(protobuf_mutator::ConstFieldInstanceconst&,protobuf_mutator::ConstFieldInstanceconst&,int)const	libprotobuf-mutator	c++	heuristic 3	coverage link
protobuf_mutator::(anonymousnamespace)::CanCopyAndDifferentField::IsEqual(std::__1::unique_ptr<google::protobuf::Message,std::__1::default_delete<google::protobuf::Message>>const&,std::__1::unique_ptr<google::protobuf::Message,std::__1::default_delete<google::protobuf::Message>>const&)const	libprotobuf-mutator	c++	heuristic 3	coverage link
google::protobuf::util::MessageDifferencer::MatchRepeatedFieldIndices(google::protobuf::Messageconst&,google::protobuf::Messageconst&,int,google::protobuf::FieldDescriptorconst,google::protobuf::util::MessageDifferencer::MapKeyComparatorconst,std::__1::vector<google::protobuf::util::MessageDifferencer::SpecificField,std::__1::allocator<google::protobuf::util::MessageDifferencer::SpecificField>>const&,std::__1::vector<int,std::__1::allocator<int>>,std::__1::vector<int,std::__1::allocator<int>>)::$_0::operator()(int,int)const	libprotobuf-mutator	c++	heuristic 3	coverage link
xmlSchemaValidateFile	xmlsec	c++	heuristic 3	coverage link
xmlSchemaValidateStreamInternal	xmlsec	c++	heuristic 3	coverage link
xmlSchemaValidateOneElement	xmlsec	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidate	xmlsec	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidateCtxt	xmlsec	c++	heuristic 3	coverage link
flatbuffers::tests::ParseAndGenerateTextTest	flatbuffers	c++	heuristic 3	coverage link
flatbuffers::Registry::TextToFlatBuffer	flatbuffers	c++	heuristic 3	coverage link
flatbuffers::java::JavaGenerator::GenStruct	flatbuffers	c++	heuristic 3	coverage link
Parser::Parse	flatbuffers	c++	heuristic 3	coverage link
Parser::ParseRoot	flatbuffers	c++	heuristic 3	coverage link
dump_extlink	hdf5	c	heuristic 3	coverage link
test_table	hdf5	c	heuristic 3	coverage link
H5D__virtual_write	hdf5	c	heuristic 3	coverage link
monitor_dataset	hdf5	c	heuristic 3	coverage link
H5D__virtual_read_one	hdf5	c	heuristic 3	coverage link
dwg_add_dat	libredwg	c	heuristic 3	coverage link
main	libredwg	c	heuristic 3	coverage link
test_object	libredwg	c	heuristic 3	coverage link
test_dxf	libredwg	c	heuristic 3	coverage link
test_add	libredwg	c	heuristic 3	coverage link
configure	ntpsec	c	heuristic 3	coverage link
read_network_packet	ntpsec	c	heuristic 3	coverage link
teljjy_conn_data	ntpsec	c	heuristic 3	coverage link
modem_poll	ntpsec	c	heuristic 3	coverage link
trimble_poll	ntpsec	c	heuristic 3	coverage link
GEOSMakeValidWithParams	geos	c++	heuristic 3	coverage link
GEOSMakeValid_r	geos	c++	heuristic 3	coverage link
_Z7executeIN12_GLOBAL__N_116InterruptManagerEZ23GEOSSingleSidedBuffer_rE3$_0TnNSt3__19enable_ifIXntsr3std7is_voidIDTclclsr3stdE7declvalIT0_EEEEEE5valueEDnE4typeELDn0EEDTclfp0_EEP20GEOSContextHandle_HSOS5_	geos	c++	heuristic 3	coverage link
geos::geom::util::GeometryFixer::fixCollection(geos::geom::GeometryCollectionconst*)const	geos	c++	heuristic 3	coverage link
geos::geom::util::GeometryFixer::getResult()const	geos	c++	heuristic 3	coverage link
libusb_get_bos_descriptor	libusb	c++	heuristic 3	coverage link
linux_get_parent_info	libusb	c++	heuristic 3	coverage link
libusb_handle_events_completed	libusb	c++	heuristic 3	coverage link
libusb_handle_events_timeout_completed	libusb	c++	heuristic 3	coverage link
libusb_handle_events_timeout	libusb	c++	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150