Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
main2	memcached	c	heuristic 3	coverage link
memcached_thread_init	memcached	c	heuristic 3	coverage link
process_command_ascii	memcached	c	heuristic 3	coverage link
maxconns_handler	memcached	c	heuristic 3	coverage link
server_sockets	memcached	c	heuristic 3	coverage link
mcl::fp::init	bls-signatures	c++	heuristic 3	coverage link
Botan_Tests::PK_PQC_KEM_KAT_Test::run_one_test	bls-signatures	c++	heuristic 3	coverage link
cryptofuzz::module::CryptoPP_detail::Crypt	bls-signatures	c++	heuristic 3	coverage link
Botan_Tests::DLIES_KAT_Tests::run_one_test	bls-signatures	c++	heuristic 3	coverage link
Botan::CryptoBox::decrypt_bin	bls-signatures	c++	heuristic 3	coverage link
jsoncons::basic_bigint<std::__1::allocator<unsignedchar>>::operator-=(jsoncons::basic_bigint<std::__1::allocator<unsignedchar>>const&)	jsoncons	c++	heuristic 3	coverage link
voidjsoncons::basic_bigint<std::__1::allocator<unsignedchar>>::write_bytes_be<std::__1::allocator<unsignedchar>>(int&,std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>&)const	jsoncons	c++	heuristic 3	coverage link
jsoncons::basic_json_encoder<char,jsoncons::string_sink<std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>>,std::__1::allocator<char>>::write_bigint_value(std::__1::basic_string_view<char,std::__1::char_traits<char>>const&)	jsoncons	c++	heuristic 3	coverage link
LLVMFuzzerInitialize	qemu	c	heuristic 3	coverage link
hvf_sysreg_read	qemu	c	heuristic 3	coverage link
hvf_sysreg_write	qemu	c	heuristic 3	coverage link
img_convert	qemu	c	heuristic 3	coverage link
cpu_exec_setjmp	qemu	c	heuristic 3	coverage link
initTransportsRank	nccl	c++	heuristic 3	coverage link
ncclCommInitAll	nccl	c++	heuristic 3	coverage link
rasSockEventLoop	nccl	c++	heuristic 3	coverage link
rasMsgHandle	nccl	c++	heuristic 3	coverage link
ncclTopoGetSystem	nccl	c++	heuristic 3	coverage link
tesseract::TessTsvRenderer::AddImageHandler(tesseract::TessBaseAPI*)	tesseract-ocr	c++	heuristic 3	coverage link
tesseract::TessBoxTextRenderer::AddImageHandler(tesseract::TessBaseAPI*)	tesseract-ocr	c++	heuristic 3	coverage link
tesseract::TessTextRenderer::AddImageHandler(tesseract::TessBaseAPI*)	tesseract-ocr	c++	heuristic 3	coverage link
tesseract::TessBaseAPI::GetStrips(Pixa,int)	tesseract-ocr	c++	heuristic 3	coverage link
tesseract::TessBaseAPI::AdaptToWordStr(tesseract::PageSegMode,charconst*)	tesseract-ocr	c++	heuristic 3	coverage link
Tss2_Sys_GetCapability_Complete	tpm2-tss	c++	heuristic 3	coverage link
dumpstate	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_ContextSave	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_FlushContext	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_GetTime_Complete	tpm2-tss	c++	heuristic 3	coverage link
dict_regexp_open	postfix	c	heuristic 3	coverage link
dict_tcp_lookup	postfix	c	heuristic 3	coverage link
dict_cidr_open	postfix	c	heuristic 3	coverage link
dict_sockmap_lookup	postfix	c	heuristic 3	coverage link
dict_load_file_xt	postfix	c	heuristic 3	coverage link
spvtools::opt::LoopPeelingPass::ProcessLoop(spvtools::opt::Loop,spvtools::opt::CodeMetrics)	spirv-tools	c++	heuristic 3	coverage link
spvValidate	spirv-tools	c++	heuristic 3	coverage link
spvtools::opt::LoopUtils::PartiallyUnroll(unsignedlong)	spirv-tools	c++	heuristic 3	coverage link
spvtools::opt::LoopPeeling::PeelAfter(unsignedint)	spirv-tools	c++	heuristic 3	coverage link
spvtools::opt::LoopPeeling::DuplicateAndConnectLoop(spvtools::opt::LoopUtils::LoopCloningResult*)	spirv-tools	c++	heuristic 3	coverage link
wmain	openvpn	c	heuristic 3	coverage link
openvpn_main	openvpn	c	heuristic 3	coverage link
multi_io_dispatch	openvpn	c	heuristic 3	coverage link
multi_process_io_udp	openvpn	c	heuristic 3	coverage link
multi_get_create_instance_udp	openvpn	c	heuristic 3	coverage link
Poco::Net::HTTPResponse::getCookies(std::__1::vector<Poco::Net::HTTPCookie,std::__1::allocator<Poco::Net::HTTPCookie>>&)const	poco	c++	heuristic 3	coverage link
Poco::Net::HTTPResponse::getDate()const	poco	c++	heuristic 3	coverage link
Poco::Dynamic::VarHolderImpl<std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>>::convert(Poco::LocalDateTime&)const	poco	c++	heuristic 3	coverage link
Poco::Dynamic::VarHolderImpl<std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>>::convert(Poco::Timestamp&)const	poco	c++	heuristic 3	coverage link
Poco::Dynamic::VarHolderImpl<std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>>::convert(float&)const	poco	c++	heuristic 3	coverage link
spvtools::SpirvTools::Validate(unsignedintconst*,unsignedlong)const	shaderc	c++	heuristic 3	coverage link
spvtools::opt::LoopPeelingPass::ProcessFunction(spvtools::opt::Function)::$_0::operator()(spvtools::opt::Loop)const	shaderc	c++	heuristic 3	coverage link
spvtools::opt::LoopUtils::PartiallyUnroll(unsignedlong)	shaderc	c++	heuristic 3	coverage link
spvValidate	shaderc	c++	heuristic 3	coverage link
spvtools::opt::LoopPeeling::PeelAfter(unsignedint)	shaderc	c++	heuristic 3	coverage link
gst_qtdemux_handle_sink_event	gstreamer	c++	heuristic 3	coverage link
gst_qtdemux_chain	gstreamer	c++	heuristic 3	coverage link
gst_qtdemux_process_adapter	gstreamer	c++	heuristic 3	coverage link
gst_matroska_demux_handle_src_event	gstreamer	c++	heuristic 3	coverage link
gst_matroska_demux_chain	gstreamer	c++	heuristic 3	coverage link
blake2b_compress_avx2	libsodium	c++	heuristic 3	coverage link
X509_load_cert_crl_file	boringssl	c++	heuristic 3	coverage link
X509_load_cert_file	boringssl	c++	heuristic 3	coverage link
X509_load_crl_file	boringssl	c++	heuristic 3	coverage link
X509_print_fp	boringssl	c++	heuristic 3	coverage link
check_crl(x509_store_ctx_st,X509_crl_st)	boringssl	c++	heuristic 3	coverage link
js_parse_class_default_ctor	quickjs	c	heuristic 3	coverage link
js_parse_expr2	quickjs	c	heuristic 3	coverage link
js_parse_class	quickjs	c	heuristic 3	coverage link
js_parse_for_in_of	quickjs	c	heuristic 3	coverage link
js_parse_cond_expr	quickjs	c	heuristic 3	coverage link
sync_multipart_handling_cb	libsoup	c++	heuristic 3	coverage link
do_sniffer_async_test	libsoup	c++	heuristic 3	coverage link
do_sniffer_sync_test	libsoup	c++	heuristic 3	coverage link
conditional_get_ready_cb	libsoup	c++	heuristic 3	coverage link
do_invalid_header_rfc9113_received_test	libsoup	c++	heuristic 3	coverage link
Pistache::Rest::Private::RouterHandler::onRequest(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Router::route(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Swagger::install(Pistache::Rest::Router&)::$_0::operator()(Pistache::Rest::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Tcp::Transport::asyncWriteImpl(int)	pistache	c++	heuristic 3	coverage link
Pistache::Http::Handler::onTimeout(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)	pistache	c++	heuristic 3	coverage link
ethernet_input	tinyusb	c++	heuristic 3	coverage link
http_accept	tinyusb	c++	heuristic 3	coverage link
http_close_conn	tinyusb	c++	heuristic 3	coverage link
http_close_or_abort_conn	tinyusb	c++	heuristic 3	coverage link
netif_input	tinyusb	c++	heuristic 3	coverage link
Botan::random_safe_prime	relic	c++	heuristic 3	coverage link
botan_mp_is_prime	relic	c++	heuristic 3	coverage link
Botan::monty_execute	relic	c++	heuristic 3	coverage link
fp_prime_set_pairf	relic	c++	heuristic 3	coverage link
Botan_Tests::PK_PQC_KEM_ACVP_KAT_KeyGen_Test::run_one_test	relic	c++	heuristic 3	coverage link
clib_package_install	clib	c	heuristic 3	coverage link
clib_package_install_executable	clib	c	heuristic 3	coverage link
clib_package_install_development	clib	c	heuristic 3	coverage link
install_packages	clib	c	heuristic 3	coverage link
clib_package_install_dependencies	clib	c	heuristic 3	coverage link
cil_write_post_ast	selinux	c	heuristic 3	coverage link
cil_write_resolve_ast	selinux	c	heuristic 3	coverage link
cil_write_build_ast	selinux	c	heuristic 3	coverage link
cil_write_policy_conf	selinux	c	heuristic 3	coverage link
cil_gen_policy	selinux	c	heuristic 3	coverage link
addChunk_iCCP(ucvector,LodePNGInfoconst,LodePNGCompressSettings*)	lodepng	c++	heuristic 3	coverage link
lodepng::compress(std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>&,std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>const&,LodePNGCompressSettingsconst&)	lodepng	c++	heuristic 3	coverage link
lodepng::decompress(std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>&,std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>const&,LodePNGDecompressSettingsconst&)	lodepng	c++	heuristic 3	coverage link
igmp_show_group_retransmission	frr	c++	heuristic 3	coverage link
main	frr	c++	heuristic 3	coverage link
main_ni	frr	c++	heuristic 3	coverage link
if_lookup_address_local	frr	c++	heuristic 3	coverage link
pim_show_neighbors_vrf_all_cmd_helper	frr	c++	heuristic 3	coverage link
op_open_file	opusfile	c	heuristic 3	coverage link
op_raw_seek	opusfile	c	heuristic 3	coverage link
op_test_memory	opusfile	c	heuristic 3	coverage link
op_test_close_on_failure	opusfile	c	heuristic 3	coverage link
op_test_file	opusfile	c	heuristic 3	coverage link
_ZN3tao5pegtl6tracerINS0_13tracer_traitsILb0ELb1ELm2ELm8EEEE5parseIN8usbguard10RuleParser12rule_grammarETtTpTyENS7_19rule_parser_actionsETtTpTyENS0_6normalERNS0_12string_inputILNS0_13tracking_modeE0ENS0_5ascii3eol7lf_crlfENSt3__112basic_stringIcNSG_11char_traitsIcEENSG_9allocatorIcEEEEEEJRNS6_4RuleEEEEbOT2_DpOT3_	usbguard	c++	heuristic 3	coverage link
_ZN3tao5pegtl14complete_traceIN8usbguard10RuleParser12rule_grammarETtTpTyENS3_19rule_parser_actionsETtTpTyENS0_6normalERNS0_12string_inputILNS0_13tracking_modeE0ENS0_5ascii3eol7lf_crlfENSt3__112basic_stringIcNSC_11char_traitsIcEENSC_9allocatorIcEEEEEEJRNS2_4RuleEEEEbOT2_DpOT3_	usbguard	c++	heuristic 3	coverage link
_ZN3tao5pegtl8internal5untilINS0_3eofEJNS0_4mustIJNS0_3sorIJN8usbguard10RuleParser7commentENS7_4ruleEEEEEEEEE5matchILNS0_10apply_modeE1ELNS0_11rewind_modeE1ETtTpTyENS7_19rule_parser_actionsETtTpTyENS0_13state_controlINS0_6normalEE4typeENS0_12string_inputILNS0_13tracking_modeE0ENS0_5ascii3eol7lf_crlfENSt3__112basic_stringIcNSQ_11char_traitsIcEENSQ_9allocatorIcEEEEEEJRNS6_4RuleERNS0_6tracerINS0_13tracer_traitsILb0ELb1ELm2ELm8EEEEEEEEbRT3_DpOT4_	usbguard	c++	heuristic 3	coverage link
_ZN3tao5pegtl8internal3seqIJN8usbguard10RuleParser15rule_attributesENS1_4starINS0_4plusINS0_5ascii5blankEJEEEJS5_EEEEE5matchILNS0_10apply_modeE1ELNS0_11rewind_modeE0ETtTpTyENS4_19rule_parser_actionsETtTpTyENS0_13state_controlINS0_6normalEE4typeENS0_12string_inputILNS0_13tracking_modeE0ENS8_3eol7lf_crlfENSt3__112basic_stringIcNSP_11char_traitsIcEENSP_9allocatorIcEEEEEEJRNS3_4RuleERNS0_6tracerINS0_13tracer_traitsILb0ELb1ELm2ELm8EEEEEEEEbRT3_DpOT4_	usbguard	c++	heuristic 3	coverage link
_ZN3tao5pegtl8internal4mustIJNS0_3sorIJN8usbguard10RuleParser7commentENS5_4ruleEEEEEE5matchILNS0_10apply_modeE1ELNS0_11rewind_modeE0ETtTpTyENS5_19rule_parser_actionsETtTpTyENS0_13state_controlINS0_6normalEE4typeENS0_12string_inputILNS0_13tracking_modeE0ENS0_5ascii3eol7lf_crlfENSt3__112basic_stringIcNSN_11char_traitsIcEENSN_9allocatorIcEEEEEEJRNS4_4RuleERNS0_6tracerINS0_13tracer_traitsILb0ELb1ELm2ELm8EEEEEEEEbRT3_DpOT4_	usbguard	c++	heuristic 3	coverage link
hb_aat_layout_position(hb_ot_shape_plan_tconst,hb_font_t,hb_buffer_t*)	libass	c++	heuristic 3	coverage link
hb_ot_layout_lookups_substitute_closure	libass	c++	heuristic 3	coverage link
hb_ot_layout_lookup_substitute_closure	libass	c++	heuristic 3	coverage link
initial_reordering_indic(hb_ot_shape_plan_tconst,hb_font_t,hb_buffer_t*)	libass	c++	heuristic 3	coverage link
boolAAT::hb_aat_apply_context_t::dispatch<AAT::KerxSubTableFormat0<OT::KernAATSubTableHeader>>(AAT::KerxSubTableFormat0<OT::KernAATSubTableHeader>const&)	libass	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptCaseLabel(TIntermNode*&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptConditionalExpression(glslang::TIntermTyped*&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptStreamOutTemplateType(glslang::TType&,glslang::TLayoutGeometry&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptPostDecls(glslang::TQualifier&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptScopedCompoundStatement(TIntermNode*&)	glslang	c++	heuristic 3	coverage link
TIFFOpen	libtiff	c++	heuristic 3	coverage link
TIFFFdOpen	libtiff	c++	heuristic 3	coverage link
TIFFSetDirectory	libtiff	c++	heuristic 3	coverage link
TIFFWriteCustomDirectory	libtiff	c++	heuristic 3	coverage link
TIFFReadGPSDirectory	libtiff	c++	heuristic 3	coverage link
read_pattern_file	apache-httpd	c	heuristic 3	coverage link
pcre2_jit_compile	apache-httpd	c	heuristic 3	coverage link
jit_compile	apache-httpd	c	heuristic 3	coverage link
sed_finalize_eval	apache-httpd	c	heuristic 3	coverage link
command	apache-httpd	c	heuristic 3	coverage link
duckdb::SingleFileStorageManager::LoadDatabase(duckdb::StorageOptions)	duckdb	c++	heuristic 3	coverage link
duckdb::WriteAheadLog::ReplayInternal(duckdb::AttachedDatabase&,duckdb::unique_ptr<duckdb::FileHandle,std::__1::default_delete<duckdb::FileHandle>,true>)	duckdb	c++	heuristic 3	coverage link
duckdb_arrow_scan	duckdb	c++	heuristic 3	coverage link
arrow_array_stream_wrapper::(anonymousnamespace)::Ingest(_duckdb_connection,charconst,ArrowArrayStream*)	duckdb	c++	heuristic 3	coverage link
duckdb_query_arrow	duckdb	c++	heuristic 3	coverage link
Gfx::opSetExtGState(Object*,int)	xpdf	c++	heuristic 3	coverage link
SplashOutputDev::doUpdateFont(GfxState*)	xpdf	c++	heuristic 3	coverage link
Gfx::opShowSpaceText(Object*,int)	xpdf	c++	heuristic 3	coverage link
Gfx::opShowText(Object*,int)	xpdf	c++	heuristic 3	coverage link
Gfx::doShowText(GString*)	xpdf	c++	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150