Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
cil_write_post_ast	selinux	c	heuristic 3	coverage link
cil_write_resolve_ast	selinux	c	heuristic 3	coverage link
cil_write_build_ast	selinux	c	heuristic 3	coverage link
cil_gen_policy	selinux	c	heuristic 3	coverage link
cil_block_te_rules_to_policy	selinux	c	heuristic 3	coverage link
levent_iface_trigger	lldpd	c	heuristic 3	coverage link
levent_iface_recv	lldpd	c	heuristic 3	coverage link
levent_iface_subscribe	lldpd	c	heuristic 3	coverage link
levent_ctl_accept	lldpd	c	heuristic 3	coverage link
levent_update_and_send	lldpd	c	heuristic 3	coverage link
compare_with_test_event	glaze	c++	heuristic 3	coverage link
glz::on_read	glaze	c++	heuristic 3	coverage link
glz::post_json	glaze	c++	heuristic 3	coverage link
glz::put_json	glaze	c++	heuristic 3	coverage link
brunsli::BrunsliEstimateDecoderPeakMemoryUsage(unsignedcharconst*,unsignedlong)	brunsli	c++	heuristic 3	coverage link
ext2fs_expand_dir	e2fsprogs	c	heuristic 3	coverage link
ext2fs_inline_data_init	e2fsprogs	c	heuristic 3	coverage link
ext2fs_add_journal_inode	e2fsprogs	c	heuristic 3	coverage link
ext2fs_inline_data_expand	e2fsprogs	c	heuristic 3	coverage link
ext2fs_file_set_size	e2fsprogs	c	heuristic 3	coverage link
WasmEdge::LLVM::Compiler::compile	wasmedge	c++	heuristic 3	coverage link
compileModule	wasmedge	c++	heuristic 3	coverage link
WasmEdge::Executor::Executor::runFunction	wasmedge	c++	heuristic 3	coverage link
WasmEdge::Runtime::Instance::Component::HostFunction::run	wasmedge	c++	heuristic 3	coverage link
WasmEdge::Runtime::Instance::Component::HostFunction::invoke	wasmedge	c++	heuristic 3	coverage link
stbi_is_16_bit_from_callbacks	stb	c++	heuristic 3	coverage link
stbi_is_16_bit_from_memory	stb	c++	heuristic 3	coverage link
main	irssi	c++	heuristic 3	coverage link
mainwindows_resize	irssi	c++	heuristic 3	coverage link
window_reparent	irssi	c++	heuristic 3	coverage link
mainwindow_destroy_full	irssi	c++	heuristic 3	coverage link
gui_window_reparent	irssi	c++	heuristic 3	coverage link
ures_getKeywordValues_59	libpsl	c++	heuristic 3	coverage link
icu_59::Locale::createFromName(charconst*)	libpsl	c++	heuristic 3	coverage link
ures_getVersion_59	libpsl	c++	heuristic 3	coverage link
ures_findResource_59	libpsl	c++	heuristic 3	coverage link
ures_openNoDefault_59	libpsl	c++	heuristic 3	coverage link
LLVMFuzzerInitialize	qemu	c++	heuristic 3	coverage link
qemu_init	qemu	c	heuristic 3	coverage link
hmp_exit_preconfig	qemu	c	heuristic 3	coverage link
hvf_handle_exception	qemu	c	heuristic 3	coverage link
cpu_exec_setjmp	qemu	c	heuristic 3	coverage link
HunspellImpl::HunspellImpl	hunspell	c++	heuristic 3	coverage link
LLVMFuzzerInitialize	hunspell	c++	heuristic 3	coverage link
Hunspell::Hunspell	hunspell	c++	heuristic 3	coverage link
Hunspell_create	hunspell	c++	heuristic 3	coverage link
Hunspell_create_key	hunspell	c++	heuristic 3	coverage link
ixmlParseBufferEx	pupnp	c	heuristic 3	coverage link
TidyXhtml	tidy-html5	c++	heuristic 3	coverage link
AccessibilityCheckNode	tidy-html5	c++	heuristic 3	coverage link
tidySaveSink	tidy-html5	c++	heuristic 3	coverage link
tidyDocSaveString	tidy-html5	c++	heuristic 3	coverage link
tidySaveString	tidy-html5	c++	heuristic 3	coverage link
re2::RE2::RE2(charconst*)	re2	c++	heuristic 3	coverage link
re2::Prog::BuildEntireDFA(re2::Prog::MatchKind,std::__1::function<void(intconst*,bool)>const&)	re2	c++	heuristic 3	coverage link
re2::DFA::BuildAllStates(std::__1::function<void(intconst*,bool)>const&)	re2	c++	heuristic 3	coverage link
re2::FilteredRE2::PrintPrefilter(int)	re2	c++	heuristic 3	coverage link
absl::profiling_internal::SampleRecorder<absl::container_internal::HashtablezInfo>::Unregister(absl::container_internal::HashtablezInfo*)	re2	c++	heuristic 3	coverage link
read_pattern_file	apache-httpd	c	heuristic 3	coverage link
dirsection	apache-httpd	c	heuristic 3	coverage link
filesection	apache-httpd	c	heuristic 3	coverage link
re_check	apache-httpd	c	heuristic 3	coverage link
mod_proxy_html	apache-httpd	c	heuristic 3	coverage link
xmllintShell	libxml2	c++	heuristic 3	coverage link
xmlSchemaValidateStreamInternal	libxml2	c++	heuristic 3	coverage link
xmlSchemaValidateOneElement	libxml2	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidate	libxml2	c++	heuristic 3	coverage link
xmlTextReaderSchemaValidateCtxt	libxml2	c++	heuristic 3	coverage link
send_msg_userauth_pubkey	dropbear	c++	heuristic 3	coverage link
isprime	dropbear	c++	heuristic 3	coverage link
mp_prime_next_prime	dropbear	c++	heuristic 3	coverage link
lcm	dropbear	c++	heuristic 3	coverage link
getp	dropbear	c++	heuristic 3	coverage link
parse_options	fio	c++	heuristic 3	coverage link
parse_cmd_line	fio	c++	heuristic 3	coverage link
handle_command	fio	c++	heuristic 3	coverage link
do_io	fio	c++	heuristic 3	coverage link
init_blktrace_read	fio	c++	heuristic 3	coverage link
mch_cli_server_start	varnish	c	heuristic 3	coverage link
mch_cli_server_stop	varnish	c	heuristic 3	coverage link
mgt_sigint	varnish	c	heuristic 3	coverage link
cnt_lookup	varnish	c	heuristic 3	coverage link
vcc_expr_not	varnish	c	heuristic 3	coverage link
mpz_probab_prime_p	nettle	c++	heuristic 3	coverage link
nettle_rsa_compute_root	nettle	c++	heuristic 3	coverage link
mpz_sqrt	nettle	c++	heuristic 3	coverage link
mpz_sqrtrem	nettle	c++	heuristic 3	coverage link
gmp_stronglucas	nettle	c++	heuristic 3	coverage link
Tss2_Sys_GetCapability_Complete	tpm2-tss	c++	heuristic 3	coverage link
dumpstate	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_ContextSave	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_ContextLoad	tpm2-tss	c++	heuristic 3	coverage link
Tss2_Sys_GetTime_Complete	tpm2-tss	c++	heuristic 3	coverage link
guetzli::OutputImage::Downsample(guetzli::OutputImage::DownsampleConfigconst&)	guetzli	c++	heuristic 3	coverage link
butteraugli::ButteraugliDiffmap(std::__1::vector<butteraugli::Image<float>,std::__1::allocator<butteraugli::Image<float>>>const&,std::__1::vector<butteraugli::Image<float>,std::__1::allocator<butteraugli::Image<float>>>const&,butteraugli::Image<float>&)	guetzli	c++	heuristic 3	coverage link
butteraugli::ButteraugliComparator::Mask(std::__1::vector<butteraugli::Image<float>,std::__1::allocator<butteraugli::Image<float>>>,std::__1::vector<butteraugli::Image<float>,std::__1::allocator<butteraugli::Image<float>>>)const	guetzli	c++	heuristic 3	coverage link
omain	xs	c	heuristic 3	coverage link
main262	xs	c	heuristic 3	coverage link
fxRunModuleFileInCompartment	xs	c	heuristic 3	coverage link
fx_callbackTimer	xs	c	heuristic 3	coverage link
fxSetHostData	xs	c	heuristic 3	coverage link
_Z7executeIN12_GLOBAL__N_116InterruptManagerEZ21GEOSSubdivideByGrid_rE3$_0TnNSt3__19enable_ifIXntsr3std7is_voidIDTclclsr3stdE7declvalIT0_EEEEEE5valueEDnE4typeELDn0EEDTclfp0_EEP20GEOSContextHandle_HSOS5_	geos	c++	heuristic 3	coverage link
geos::operation::grid::Cell::getCoveredPolygons(geos::geom::GeometryFactoryconst&)const	geos	c++	heuristic 3	coverage link
_Z7executeIN12_GLOBAL__N_116InterruptManagerEZ23GEOSSingleSidedBuffer_rE3$_0TnNSt3__19enable_ifIXntsr3std7is_voidIDTclclsr3stdE7declvalIT0_EEEEEE5valueEDnE4typeELDn0EEDTclfp0_EEP20GEOSContextHandle_HSOS5_	geos	c++	heuristic 3	coverage link
geos::geom::util::GeometryFixer::fixCollection(geos::geom::GeometryCollectionconst*)const	geos	c++	heuristic 3	coverage link
geos::geom::util::GeometryFixer::getResult()const	geos	c++	heuristic 3	coverage link
teken_state_5	libteken	c++	heuristic 3	coverage link
teken_state_numbers	libteken	c++	heuristic 3	coverage link
teken_state_init	libteken	c++	heuristic 3	coverage link
teken_state_1	libteken	c++	heuristic 3	coverage link
teken_state_8	libteken	c++	heuristic 3	coverage link
muduo::TimeZone::loadZoneFile(charconst*)	muduo	c++	heuristic 3	coverage link
igl::MshLoader::MshLoader(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&)	libigl	c++	heuristic 3	coverage link
LZ4_compress	lz4	c++	heuristic 3	coverage link
LZ4_compressHC	lz4	c++	heuristic 3	coverage link
mz_zip_open	minizip	c++	heuristic 3	coverage link
mz_stream_ppmd_write	minizip	c++	heuristic 3	coverage link
mz_zip_locate_entry	minizip	c++	heuristic 3	coverage link
Ppmd8_EncodeSymbol	minizip	c++	heuristic 3	coverage link
mz_zip_entry_close_raw	minizip	c++	heuristic 3	coverage link
dtrust_pin_cmd	opensc	c++	heuristic 3	coverage link
lteid_pin_cmd	opensc	c++	heuristic 3	coverage link
pkcs15_skey_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_dobj_set_attribute	opensc	c++	heuristic 3	coverage link
pkcs15_pubkey_set_attribute	opensc	c++	heuristic 3	coverage link
str_cd_iconveh	libidn2	c++	heuristic 3	coverage link
ncclCommInitAll	nccl	c++	heuristic 3	coverage link
ncclDevCommCreate	nccl	c++	heuristic 3	coverage link
groupLaunch(ncclAsyncJob,ncclSimInfo_v22200)	nccl	c++	heuristic 3	coverage link
rasSockEventLoop(rasSocket*,int)	nccl	c++	heuristic 3	coverage link
ncclCollPreconnect(ncclComm,bool)	nccl	c++	heuristic 3	coverage link
server_handle_end_of_early_data	picotls	c++	heuristic 3	coverage link
update_traffic_key	picotls	c++	heuristic 3	coverage link
update_send_key	picotls	c++	heuristic 3	coverage link
ptls_minicrypto_load_private_key	picotls	c++	heuristic 3	coverage link
httpAddrGetList	libcups	c++	heuristic 3	coverage link
dng_camera_profile::HueSatMapForWhite(dng_xy_coordconst&)const	dng_sdk	c++	heuristic 3	coverage link
dng_hue_sat_map::Interpolate(dng_hue_sat_mapconst&,dng_hue_sat_mapconst&,double)	dng_sdk	c++	heuristic 3	coverage link
main2(int,char**)	dng_sdk	c++	heuristic 3	coverage link
allocate_idx_list	net-snmp	c++	heuristic 3	coverage link
release_idx_list	net-snmp	c++	heuristic 3	coverage link
register_string_index	net-snmp	c++	heuristic 3	coverage link
unregister_string_index	net-snmp	c++	heuristic 3	coverage link
remove_index	net-snmp	c++	heuristic 3	coverage link
subscribe_cb	hiredis	c	heuristic 3	coverage link
subscribe_with_timeout_cb	hiredis	c	heuristic 3	coverage link
subscribe_channel_a_cb	hiredis	c	heuristic 3	coverage link
monitor_cb	hiredis	c	heuristic 3	coverage link
do_aconnect	hiredis	c	heuristic 3	coverage link
hb_ot_layout_lookups_substitute_closure	libass	c++	heuristic 3	coverage link
hb_ot_layout_lookup_substitute_closure	libass	c++	heuristic 3	coverage link
initial_reordering_indic(hb_ot_shape_plan_tconst,hb_font_t,hb_buffer_t*)	libass	c++	heuristic 3	coverage link
OT::hb_closure_context_t::return_tOT::Layout::GSUB_impl::SubstLookup::dispatch<OT::hb_closure_context_t>(OT::hb_closure_context_t*)const	libass	c++	heuristic 3	coverage link
OT::hb_closure_context_t::return_tOT::Layout::GSUB_impl::SubstLookupSubTable::dispatch<OT::hb_closure_context_t>(OT::hb_closure_context_t*,unsignedint)const	libass	c++	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150