Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
xmlSchemaValidateFile	xmlsec	c++	heuristic 3	coverage link
xmlSchemaValidateStreamInternal	xmlsec	c++	heuristic 3	coverage link
xmlSchemaValidateOneElement	xmlsec	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidate	xmlsec	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidateCtxt	xmlsec	c++	heuristic 3	coverage link
fu_util_firmware_read	fwupd	c	heuristic 3	coverage link
fu_util_get_report_metadata	fwupd	c	heuristic 3	coverage link
fu_util_esp_list	fwupd	c	heuristic 3	coverage link
fu_util_reboot_cleanup	fwupd	c	heuristic 3	coverage link
fu_util_install_blob	fwupd	c	heuristic 3	coverage link
run_tidy_parser	tidy-html5	c++	heuristic 3	coverage link
prvTidyParseBlock	tidy-html5	c++	heuristic 3	coverage link
prvTidyParseBody	tidy-html5	c++	heuristic 3	coverage link
prvTidyParseList	tidy-html5	c++	heuristic 3	coverage link
prvTidyParseHead	tidy-html5	c++	heuristic 3	coverage link
Terminal::Complete::init_diff[abi:cxx11]()const	mosh	c++	heuristic 3	coverage link
Terminal::Complete::diff_from[abi:cxx11](Terminal::Completeconst&)const	mosh	c++	heuristic 3	coverage link
Terminal::Framebuffer::resize(int,int)	mosh	c++	heuristic 3	coverage link
CSI_DL(Terminal::Framebuffer,Terminal::Dispatcher)	mosh	c++	heuristic 3	coverage link
CSI_IL(Terminal::Framebuffer,Terminal::Dispatcher)	mosh	c++	heuristic 3	coverage link
Gfx::opSetExtGState(Object*,int)	xpdf	c++	heuristic 3	coverage link
SplashOutputDev::doUpdateFont(GfxState*)	xpdf	c++	heuristic 3	coverage link
Gfx::opShowSpaceText(Object*,int)	xpdf	c++	heuristic 3	coverage link
Gfx::opShowText(Object*,int)	xpdf	c++	heuristic 3	coverage link
Gfx::doShowText(GString*)	xpdf	c++	heuristic 3	coverage link
server_handle_end_of_early_data	picotls	c++	heuristic 3	coverage link
update_traffic_key	picotls	c++	heuristic 3	coverage link
update_send_key	picotls	c++	heuristic 3	coverage link
ptls_minicrypto_load_private_key	picotls	c++	heuristic 3	coverage link
Hunspell_suggest	hunspell	c++	heuristic 3	coverage link
Hunspell::suggest(char**,charconst)	hunspell	c++	heuristic 3	coverage link
Hunspell::stem(char**,charconst)	hunspell	c++	heuristic 3	coverage link
Hunspell_stem	hunspell	c++	heuristic 3	coverage link
HunspellImpl::stem(char**,charconst)	hunspell	c++	heuristic 3	coverage link
mz_zip_locate_next_entry	minizip	c++	heuristic 3	coverage link
mz_zip_locate_first_entry	minizip	c++	heuristic 3	coverage link
mz_zip_goto_entry	minizip	c++	heuristic 3	coverage link
basicUnitTests	zstd	c++	heuristic 3	coverage link
BMK_syntheticTest	zstd	c++	heuristic 3	coverage link
fileCheck	zstd	c++	heuristic 3	coverage link
longUnitTests	zstd	c++	heuristic 3	coverage link
decompressFile_orDie	zstd	c++	heuristic 3	coverage link
Botan_Tests::PK_PQC_KEM_KAT_Test::run_one_test	botan	c++	heuristic 3	coverage link
Botan_Tests::DLIES_KAT_Tests::run_one_test	botan	c++	heuristic 3	coverage link
Botan::CryptoBox::decrypt_bin	botan	c++	heuristic 3	coverage link
Botan_Tests::make_and_sign_ca	botan	c++	heuristic 3	coverage link
botan_privkey_create_ecdh	botan	c++	heuristic 3	coverage link
conn_write_callback	tor	c++	heuristic 3	coverage link
control_event_logmsg	tor	c++	heuristic 3	coverage link
flush_queued_events_cb	tor	c++	heuristic 3	coverage link
handle_control_signal	tor	c++	heuristic 3	coverage link
run_connection_housekeeping	tor	c++	heuristic 3	coverage link
ssh_userauth_publickey_auto	libssh	c	heuristic 3	coverage link
ssh_userauth_agent	libssh	c	heuristic 3	coverage link
select_loop	libssh	c	heuristic 3	coverage link
ssh_event_add_connector	libssh	c	heuristic 3	coverage link
ssh_forward_accept	libssh	c	heuristic 3	coverage link
absl::Demangle	abseil-cpp	c++	heuristic 3	coverage link
absl::ConvertIntArg	abseil-cpp	c++	heuristic 3	coverage link
absl::FormatConvertImpl	abseil-cpp	c++	heuristic 3	coverage link
absl::ParseLenient	abseil-cpp	c++	heuristic 3	coverage link
absl::ParseLenientCivilTime	abseil-cpp	c++	heuristic 3	coverage link
str_cd_iconveh	libidn2	c++	heuristic 3	coverage link
hwloc_look_linuxfs	hwloc	c	heuristic 3	coverage link
hwloc_look_xml	hwloc	c	heuristic 3	coverage link
transform_distances	hwloc	c	heuristic 3	coverage link
add_distances	hwloc	c	heuristic 3	coverage link
output_console	hwloc	c	heuristic 3	coverage link
define_subgrps	netcdf	c++	heuristic 3	coverage link
define_grp	netcdf	c++	heuristic 3	coverage link
define_vars	netcdf	c++	heuristic 3	coverage link
nc_delete_mp	netcdf	c++	heuristic 3	coverage link
NCZ_ensure_quantizer	netcdf	c++	heuristic 3	coverage link
pybind11::cpp_function::dispatcher(_object,_object,_object*)	pybind11	c++	heuristic 3	coverage link
pybind11_meta_call	pybind11	c++	heuristic 3	coverage link
pybind11::detail::values_and_holders::values_and_holders(_object*)	pybind11	c++	heuristic 3	coverage link
pybind11_object_new	pybind11	c++	heuristic 3	coverage link
pybind11::detail::all_type_info_get_cache(_typeobject*)::{lambda(pybind11::detail::internals&)#1}::operator()(pybind11::detail::internals&)const	pybind11	c++	heuristic 3	coverage link
Archive::GetComment(std::__1::basic_string<wchar_t,std::__1::char_traits<wchar_t>,std::__1::allocator<wchar_t>>&)	unrar	c++	heuristic 3	coverage link
Archive::DoGetComment(std::__1::basic_string<wchar_t,std::__1::char_traits<wchar_t>,std::__1::allocator<wchar_t>>&)	unrar	c++	heuristic 3	coverage link
Archive::ReadCommentData(std::__1::basic_string<wchar_t,std::__1::char_traits<wchar_t>,std::__1::allocator<wchar_t>>&)	unrar	c++	heuristic 3	coverage link
QuickOpen::Seek(long,int)	unrar	c++	heuristic 3	coverage link
Archive::SearchBlock(HEADER_TYPE)	unrar	c++	heuristic 3	coverage link
tsm_vte_input	libtsm	c++	heuristic 3	coverage link
parse_data	libtsm	c++	heuristic 3	coverage link
do_action	libtsm	c++	heuristic 3	coverage link
do_execute	libtsm	c++	heuristic 3	coverage link
do_esc	libtsm	c++	heuristic 3	coverage link
libssh2_poll	libssh2	c++	heuristic 3	coverage link
libssh2_session_startup	libssh2	c++	heuristic 3	coverage link
libssh2_channel_handle_extended_data2	libssh2	c++	heuristic 3	coverage link
libssh2_channel_flush_ex	libssh2	c++	heuristic 3	coverage link
libssh2_channel_handle_extended_data	libssh2	c++	heuristic 3	coverage link
main	xnnpack	c++	heuristic 3	coverage link
xnnpack_fully_connected_qd8_f32_qc4w	xnnpack	c++	heuristic 3	coverage link
xnn_subgraph_optimize	xnnpack	c++	heuristic 3	coverage link
xnn_create_runtime	xnnpack	c++	heuristic 3	coverage link
benchmark_binary_operator	xnnpack	c++	heuristic 3	coverage link
draco::CornerTable::Init(draco::IndexTypeVector<draco::IndexType<unsignedint,draco::FaceIndex_tag_type_>,std::__1::array<draco::IndexType<unsignedint,draco::VertexIndex_tag_type_>,3ul>>const&)	draco	c++	heuristic 3	coverage link
draco::CornerTable::Create(draco::IndexTypeVector<draco::IndexType<unsignedint,draco::FaceIndex_tag_type_>,std::__1::array<draco::IndexType<unsignedint,draco::VertexIndex_tag_type_>,3ul>>const&)	draco	c++	heuristic 3	coverage link
BAG::Metadata::Metadata(std::__1::shared_ptr<BAG::Dataset>)	opennavsurf-bag	c++	heuristic 3	coverage link
BAG::bagImportMetadataFromXmlFile(charconst*,BagMetadata&,bool)	opennavsurf-bag	c++	heuristic 3	coverage link
BAG::bagImportMetadataFromXmlV1(_xmlDocconst&,BagMetadata&)	opennavsurf-bag	c++	heuristic 3	coverage link
BAG::decodeReferenceSystemInfo(_xmlNode&,BagReferenceSystem&,unsignedshort)	opennavsurf-bag	c++	heuristic 3	coverage link
addtoclib	lua	c	heuristic 3	coverage link
lstop	lua	c	heuristic 3	coverage link
luaL_unref	lua	c	heuristic 3	coverage link
loadfunc	lua	c	heuristic 3	coverage link
lookforfunc	lua	c	heuristic 3	coverage link
LibRaw::open_buffer	libraw	c++	heuristic 3	coverage link
LibRaw::parse_makernote_0xc634	libraw	c++	heuristic 3	coverage link
LibRaw::parse_makernote	libraw	c++	heuristic 3	coverage link
LibRaw::parseNikonMakernote	libraw	c++	heuristic 3	coverage link
LibRaw::identify_finetune_dcr	libraw	c++	heuristic 3	coverage link
b2nd_save	c-blosc2	c++	heuristic 3	coverage link
b2nd_copy	c-blosc2	c++	heuristic 3	coverage link
b2nd_to_cbuffer	c-blosc2	c++	heuristic 3	coverage link
b2nd_full	c-blosc2	c++	heuristic 3	coverage link
blosc2_schunk_copy	c-blosc2	c++	heuristic 3	coverage link
ada_idna_to_ascii	ada-url	c++	heuristic 3	coverage link
mu::ParserBase::Eval(double*,int)	muparser	c++	heuristic 3	coverage link
mu::ParserBase::Eval(int&)const	muparser	c++	heuristic 3	coverage link
data_func(_ExifContent,void)	libexif	c++	heuristic 3	coverage link
exif_content_dump	libexif	c++	heuristic 3	coverage link
exif_entry_dump	libexif	c++	heuristic 3	coverage link
PackUnix::pack2(OutputFile*,Filter&)	upx	c++	heuristic 3	coverage link
PackLinuxElf64amd::pack1(OutputFile*,Filter&)	upx	c++	heuristic 3	coverage link
PackLinuxElf64ppc::pack1(OutputFile*,Filter&)	upx	c++	heuristic 3	coverage link
PackLinuxElf64ppcle::pack1(OutputFile*,Filter&)	upx	c++	heuristic 3	coverage link
PackLinuxElf32ppc::pack1(OutputFile*,Filter&)	upx	c++	heuristic 3	coverage link
ures_getKeywordValues_59	libpsl	c++	heuristic 3	coverage link
icu_59::Locale::createFromName(charconst*)	libpsl	c++	heuristic 3	coverage link
ures_getVersion_59	libpsl	c++	heuristic 3	coverage link
ures_findResource_59	libpsl	c++	heuristic 3	coverage link
ures_openNoDefault_59	libpsl	c++	heuristic 3	coverage link
GetStructFromINCHIEx	inchi	c	heuristic 3	coverage link
CheckINCHI	inchi	c	heuristic 3	coverage link
GetINCHIfromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromStdINCHI	inchi	c	heuristic 3	coverage link
get_one_thread_frames_cb	elfutils	c++	heuristic 3	coverage link
dwfl_frame_pc	elfutils	c++	heuristic 3	coverage link
dwfl_module_address_section	elfutils	c++	heuristic 3	coverage link
dwfl_module_relocate_address	elfutils	c++	heuristic 3	coverage link
riscv_return_value_location_lp64	elfutils	c++	heuristic 3	coverage link
decode_all	dav1d	c++	heuristic 3	coverage link
sqlite3_open16	sqlite3	c++	heuristic 3	coverage link
sqlite3_blob_reopen	sqlite3	c++	heuristic 3	coverage link
blobSeekToRow	sqlite3	c++	heuristic 3	coverage link
findBtree	sqlite3	c++	heuristic 3	coverage link
valueFromValueList	sqlite3	c++	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150