Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
plist_dict_merge	libplist	c++	heuristic 3	coverage link
plist_read_from_file	libplist	c++	heuristic 3	coverage link
plist_to_bin	libplist	c++	heuristic 3	coverage link
cli_bytecode_prepare2	clamav	c++	heuristic 3	coverage link
rtf_object_process	clamav	c++	heuristic 3	coverage link
Pages_cb	clamav	c++	heuristic 3	coverage link
Subject_cb	clamav	c++	heuristic 3	coverage link
Keywords_cb	clamav	c++	heuristic 3	coverage link
cb_flash	barebox	c	heuristic 3	coverage link
blspec_bootentry_generate	barebox	c	heuristic 3	coverage link
bootentry_scan_generate	barebox	c	heuristic 3	coverage link
extlinux_generate	barebox	c	heuristic 3	coverage link
bootchooser_entry_boot	barebox	c	heuristic 3	coverage link
YAML::LoadAll(charconst*)	yaml-cpp	c++	heuristic 3	coverage link
YAML::Load(charconst*)	yaml-cpp	c++	heuristic 3	coverage link
register_string_index	net-snmp	c++	heuristic 3	coverage link
unregister_string_index	net-snmp	c++	heuristic 3	coverage link
remove_index	net-snmp	c++	heuristic 3	coverage link
agentx_synch_response	net-snmp	c++	heuristic 3	coverage link
agentx_remove_agentcaps	net-snmp	c++	heuristic 3	coverage link
bpf_object_load	libbpf	c	heuristic 3	coverage link
bpf_object_prepare	libbpf	c	heuristic 3	coverage link
bpf_object__open_skeleton	libbpf	c	heuristic 3	coverage link
bpf_object__open_file	libbpf	c	heuristic 3	coverage link
bpf_program__attach_tracing_multi	libbpf	c	heuristic 3	coverage link
astcenc_get_block_info	astc-encoder	c++	heuristic 3	coverage link
TPM2_ValidateState	libtpms	c++	heuristic 3	coverage link
TPM2_Create	libtpms	c++	heuristic 3	coverage link
TPM2_Import	libtpms	c++	heuristic 3	coverage link
TPM2_Load	libtpms	c++	heuristic 3	coverage link
TPM2_PolicySigned	libtpms	c++	heuristic 3	coverage link
janus_sdp_generate_answer_mline	janus-gateway	c++	heuristic 3	coverage link
janus_sdp_generate_offer	janus-gateway	c++	heuristic 3	coverage link
exprtk::parser<double>::parse_pending_vector_index_operator(exprtk::details::expression_node<double>*&)	exprtk	c++	heuristic 3	coverage link
floatexprtk::details::numeric::details::process_impl<float>(exprtk::details::operator_type,float)	exprtk	c++	heuristic 3	coverage link
exprtk::parser<float>::parse_pending_vector_index_operator(exprtk::details::expression_node<float>*&)	exprtk	c++	heuristic 3	coverage link
exprtk::parser<double>::expression_generator<double>::synthesize_assignment_operation_expression(exprtk::details::operator_typeconst&,exprtk::details::expression_node<double>*(&)[2])	exprtk	c++	heuristic 3	coverage link
doubleexprtk::details::numeric::details::process_impl<double>(exprtk::details::operator_type,double)	exprtk	c++	heuristic 3	coverage link
_lou_compileDisplayRule	liblouis	c	heuristic 3	coverage link
_lou_compileTranslationRule	liblouis	c	heuristic 3	coverage link
lou_getTypeformForEmphClass	liblouis	c	heuristic 3	coverage link
analyzeTable	liblouis	c	heuristic 3	coverage link
lou_getTableInfo	liblouis	c	heuristic 3	coverage link
js_parse_statement_or_decl	quickjs	c	heuristic 3	coverage link
js_parse_class	quickjs	c	heuristic 3	coverage link
js_is_standard_regexp	quickjs	c	heuristic 3	coverage link
JS_ReadArray	quickjs	c	heuristic 3	coverage link
call_handler	quickjs	c	heuristic 3	coverage link
main	casync	c++	heuristic 3	coverage link
dispatch_verb	casync	c++	heuristic 3	coverage link
verb_mkdev	casync	c++	heuristic 3	coverage link
verb_mount	casync	c++	heuristic 3	coverage link
casync_statfs	casync	c++	heuristic 3	coverage link
verify_host_key_callback	openssh	c++	heuristic 3	coverage link
sign_and_send_pubkey	openssh	c++	heuristic 3	coverage link
getpwnamallow	openssh	c++	heuristic 3	coverage link
session_exec_req	openssh	c++	heuristic 3	coverage link
do_exec_pty	openssh	c++	heuristic 3	coverage link
GetStructFromINCHIEx	inchi	c	heuristic 3	coverage link
CheckINCHI	inchi	c	heuristic 3	coverage link
GetINCHIfromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromStdINCHI	inchi	c	heuristic 3	coverage link
stbi_is_16_bit_from_callbacks	stb	c++	heuristic 3	coverage link
stbi_is_16_bit_from_memory	stb	c++	heuristic 3	coverage link
vlc_demux_process_path	vlc	c	heuristic 3	coverage link
vlc_demux_process_memory	vlc	c	heuristic 3	coverage link
test_media_list_player_set_media_list_after_stop	vlc	c	heuristic 3	coverage link
test_media_list_player_set_media_list_not_found	vlc	c	heuristic 3	coverage link
test_media_list_player_set_media_list_not_found_hierarchical	vlc	c	heuristic 3	coverage link
cf_v3_text_pdf_duplex_boundary_legacy	cups-filters	c++	heuristic 3	coverage link
cf_v3_text_pdf_duplex_continuation_legacy	cups-filters	c++	heuristic 3	coverage link
cf_v3_text_pdf_shared_output_legacy	cups-filters	c++	heuristic 3	coverage link
cf_v3_text_pdf_deep_plain_legacy	cups-filters	c++	heuristic 3	coverage link
cf_v3_text_pdf_deep_c_legacy	cups-filters	c++	heuristic 3	coverage link
Botan_Tests::PK_PQC_KEM_KAT_Test::run_one_test	botan	c++	heuristic 3	coverage link
Botan_Tests::PK_PQC_KEM_ACVP_KAT_KeyGen_Test::run_one_test	botan	c++	heuristic 3	coverage link
Botan_Tests::PK_Encryption_Options_Test::run_one_test	botan	c++	heuristic 3	coverage link
Botan_CLI::PerfTest_ASN1_Parsing::make_certificate	botan	c++	heuristic 3	coverage link
Botan_Tests::PKCS12_Tests::test_mixed_encryption	botan	c++	heuristic 3	coverage link
workbook_add_worksheet	libxlsxwriter	c	heuristic 3	coverage link
workbook_add_chartsheet	libxlsxwriter	c	heuristic 3	coverage link
new_workbook_opt	libxlsxwriter	c	heuristic 3	coverage link
workbook_new_opt	libxlsxwriter	c	heuristic 3	coverage link
_chart_write_ser	libxlsxwriter	c	heuristic 3	coverage link
osquery::do_meta_command	osquery	c++	heuristic 3	coverage link
osquery::process_input	osquery	c++	heuristic 3	coverage link
data_func(_ExifContent,void)	libexif	c++	heuristic 3	coverage link
exif_content_dump	libexif	c++	heuristic 3	coverage link
exif_entry_dump	libexif	c++	heuristic 3	coverage link
LibRaw::open_buffer	libraw	c++	heuristic 3	coverage link
LibRaw::parse_makernote_0xc634	libraw	c++	heuristic 3	coverage link
LibRaw::parse_makernote	libraw	c++	heuristic 3	coverage link
LibRaw::parseNikonMakernote	libraw	c++	heuristic 3	coverage link
LibRaw::identify_finetune_dcr	libraw	c++	heuristic 3	coverage link
_cairo_pdf_surface_write_smask_group	cairo	c	heuristic 3	coverage link
_cairo_traps_compositor_paint	cairo	c	heuristic 3	coverage link
cairo_svg_surface_create	cairo	c	heuristic 3	coverage link
_cairo_svg_surface_paint_impl	cairo	c	heuristic 3	coverage link
_cairo_svg_document_emit_bitmap_glyph_data	cairo	c	heuristic 3	coverage link
main2	proftpd	c	heuristic 3	coverage link
nlstdir	proftpd	c	heuristic 3	coverage link
core_chdir	proftpd	c	heuristic 3	coverage link
ctrls_postparse_ev	proftpd	c	heuristic 3	coverage link
data_passive_open	proftpd	c	heuristic 3	coverage link
nlohmann::detail::parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>::parse(bool,nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>&)	phosphor-state-manager	c++	heuristic 3	coverage link
nlohmann::detail::json_sax_dom_parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>::start_object(unsignedlong)	phosphor-state-manager	c++	heuristic 3	coverage link
nlohmann::detail::json_sax_dom_callback_parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>::start_array(unsignedlong)	phosphor-state-manager	c++	heuristic 3	coverage link
nlohmann::detail::json_sax_dom_callback_parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>::start_object(unsignedlong)	phosphor-state-manager	c++	heuristic 3	coverage link
boolnlohmann::detail::parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>::sax_parse_internal<nlohmann::detail::json_sax_dom_parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>>(nlohmann::detail::json_sax_dom_parser<nlohmann::basic_json<std::__1::map,std::__1::vector,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>,bool,long,unsignedlong,double,std::__1::allocator,nlohmann::adl_serializer>>*)	phosphor-state-manager	c++	heuristic 3	coverage link
asn1_expand_any_defined_by	libtasn1	c++	heuristic 3	coverage link
asn1_find_structure_from_oid	libtasn1	c++	heuristic 3	coverage link
git_submodule_update	libgit2	c++	heuristic 3	coverage link
git_submodule_clone	libgit2	c++	heuristic 3	coverage link
clone_local_into	libgit2	c++	heuristic 3	coverage link
git_remote_push	libgit2	c++	heuristic 3	coverage link
git_remote_upload	libgit2	c++	heuristic 3	coverage link
b2nd_save	c-blosc2	c++	heuristic 3	coverage link
run	c-blosc2	c++	heuristic 3	coverage link
b2nd_full	c-blosc2	c++	heuristic 3	coverage link
b2nd_to_cbuffer	c-blosc2	c++	heuristic 3	coverage link
b2nd_squeeze	c-blosc2	c++	heuristic 3	coverage link
ures_getKeywordValues_59	libpsl	c++	heuristic 3	coverage link
icu_59::Locale::createFromName(charconst*)	libpsl	c++	heuristic 3	coverage link
ures_getVersion_59	libpsl	c++	heuristic 3	coverage link
ures_findResource_59	libpsl	c++	heuristic 3	coverage link
ures_openNoDefault_59	libpsl	c++	heuristic 3	coverage link
ext2fs_expand_dir	e2fsprogs	c	heuristic 3	coverage link
ext2fs_inline_data_init	e2fsprogs	c	heuristic 3	coverage link
ext2fs_add_journal_inode	e2fsprogs	c	heuristic 3	coverage link
ext2fs_inline_data_expand	e2fsprogs	c	heuristic 3	coverage link
ext2fs_file_set_size	e2fsprogs	c	heuristic 3	coverage link
usrsctp_init_nothreads	usrsctp	c++	heuristic 3	coverage link
sctp6_connect	usrsctp	c++	heuristic 3	coverage link
sonewconn	usrsctp	c++	heuristic 3	coverage link
userspace_socket	usrsctp	c++	heuristic 3	coverage link
sctp_do_peeloff	usrsctp	c++	heuristic 3	coverage link
idn2_to_ascii_lz	libidn2	c++	heuristic 3	coverage link
idn2_lookup_ul	libidn2	c++	heuristic 3	coverage link
idn2_to_ascii_4z	libidn2	c++	heuristic 3	coverage link
_tr46	libidn2	c++	heuristic 3	coverage link
_idn2_label_test	libidn2	c++	heuristic 3	coverage link
google::SetLogSymlink(int,charconst*)	myanmar-tools	c++	heuristic 3	coverage link
google::operator<<(std::__1::basic_ostream<char,std::__1::char_traits<char>>&,google::PRIVATE_Counterconst&)	myanmar-tools	c++	heuristic 3	coverage link
google::LogMessageFatal::LogMessageFatal(charconst*,int)	myanmar-tools	c++	heuristic 3	coverage link
google::TruncateLogFile(charconst*,long,long)	myanmar-tools	c++	heuristic 3	coverage link
google::SendEmail(charconst,charconst,charconst*)	myanmar-tools	c++	heuristic 3	coverage link
dhcp_packet	dnsmasq	c	heuristic 3	coverage link
apply_delay	dnsmasq	c	heuristic 3	coverage link
poll_resolv	dnsmasq	c	heuristic 3	coverage link
main2	dnsmasq	c	heuristic 3	coverage link
receive_query	dnsmasq	c	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150