Target oracle

This page shows functions across the entire OSS-Fuzz database that are determined to be likely interesting targets. This suggestion comes from various heuristics that often encapsulate functions that are likely good to fuzz or are, perhaps, easy to fuzz. For each suggestion a justification is included as to why this target is interesting, by way of referencing a given heuristic.

Function name	Project	Language	Reason	Coverage link
op_alias_dialog	neomutt	c++	heuristic 3	coverage link
alias_dialog	neomutt	c++	heuristic 3	coverage link
op_followup	neomutt	c++	heuristic 3	coverage link
op_forward_to_group	neomutt	c++	heuristic 3	coverage link
mutt_send_list_subscribe	neomutt	c++	heuristic 3	coverage link
input_kex_gen_reply	hpn-ssh	c++	heuristic 3	coverage link
input_kex_dh_gex_request	hpn-ssh	c++	heuristic 3	coverage link
input_kex_dh_gex_init	hpn-ssh	c++	heuristic 3	coverage link
ssh_dispatch_run_fatal	hpn-ssh	c++	heuristic 3	coverage link
ssh_dispatch_run	hpn-ssh	c++	heuristic 3	coverage link
create_dp_netdev	openvswitch	c++	heuristic 3	coverage link
dpif_netdev_port_add	openvswitch	c++	heuristic 3	coverage link
dpif_netdev_port_del	openvswitch	c++	heuristic 3	coverage link
dpif_netdev_execute	openvswitch	c++	heuristic 3	coverage link
packet_batch_per_flow_execute	openvswitch	c++	heuristic 3	coverage link
parseAndPrintFile	xmlsec	c++	heuristic 3	coverage link
xstcMetadata	xmlsec	c++	heuristic 3	coverage link
xmlSchemaValidateFile	xmlsec	c++	heuristic 3	coverage link
processSchema	xmlsec	c++	heuristic 3	coverage link
xmlSchemaParseSchemaTopLevel	xmlsec	c++	heuristic 3	coverage link
plist_read_from_file	libplist	c++	heuristic 3	coverage link
plist_to_bin	libplist	c++	heuristic 3	coverage link
row_decode_worker_hook	libvpx	c++	heuristic 3	coverage link
vp9_loopfilter_job	libvpx	c++	heuristic 3	coverage link
vlc_demux_process_path	vlc	c	heuristic 3	coverage link
vlc_demux_process_memory	vlc	c	heuristic 3	coverage link
test_media_list_player_next	vlc	c	heuristic 3	coverage link
test_media_list_player_playback_options	vlc	c	heuristic 3	coverage link
test_media_player_pause_stop	vlc	c	heuristic 3	coverage link
main2	flex	c	heuristic 3	coverage link
flex_main	flex	c	heuristic 3	coverage link
flexinit	flex	c	heuristic 3	coverage link
rops_handle_POLLIN_h1	libwebsockets	c	heuristic 3	coverage link
rops_handle_POLLIN_ws	libwebsockets	c	heuristic 3	coverage link
lws_read_h1	libwebsockets	c	heuristic 3	coverage link
rops_handle_POLLIN_listen	libwebsockets	c	heuristic 3	coverage link
lws_ss_adopt_raw	libwebsockets	c	heuristic 3	coverage link
x86_decode_insn	xen	c	heuristic 3	coverage link
update_thread_func	tinysparql	c	heuristic 3	coverage link
tracker_data_update_sparql_blank	tinysparql	c	heuristic 3	coverage link
tracker_direct_statement_update	tinysparql	c	heuristic 3	coverage link
query_thread_pool_func	tinysparql	c	heuristic 3	coverage link
serialize_in_thread	tinysparql	c	heuristic 3	coverage link
Pistache::Rest::Private::RouterHandler::onRequest(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Router::route(Pistache::Http::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Rest::Swagger::install(Pistache::Rest::Router&)::$_0::operator()(Pistache::Rest::Requestconst&,Pistache::Http::ResponseWriter)const	pistache	c++	heuristic 3	coverage link
Pistache::Tcp::Transport::handleWriteQueue(bool)	pistache	c++	heuristic 3	coverage link
Pistache::Tcp::Transport::asyncWriteImpl(int)	pistache	c++	heuristic 3	coverage link
aot_compile_func	wamr	c	heuristic 3	coverage link
wasm_module_new_ex	wamr	c	heuristic 3	coverage link
wasm_loader_load_from_sections	wamr	c	heuristic 3	coverage link
aot_create_comp_context	wamr	c	heuristic 3	coverage link
aot_compile_op_f64_promote_f32	wamr	c	heuristic 3	coverage link
piex::(anonymousnamespace)::RafGetOrientation(piex::StreamInterface,unsignedint)	piex	c++	heuristic 3	coverage link
piex::GetOrientation(piex::StreamInterface,unsignedint)	piex	c++	heuristic 3	coverage link
piex::Cr3GetOrientation(piex::StreamInterface,unsignedint)	piex	c++	heuristic 3	coverage link
piex::GetExifOrientation(piex::StreamInterface,unsignedint,unsignedint)	piex	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptCaseLabel(TIntermNode*&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptInitializer(glslang::TIntermTyped*&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptStreamOutTemplateType(glslang::TType&,glslang::TLayoutGeometry&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptPostDecls(glslang::TQualifier&)	glslang	c++	heuristic 3	coverage link
glslang::HlslGrammar::acceptScopedCompoundStatement(TIntermNode*&)	glslang	c++	heuristic 3	coverage link
opendnp3::OContext::ContinueMultiFragResponse(opendnp3::Addressesconst&,opendnp3::SequenceNum<unsignedchar,(unsignedchar)16>const&)	opendnp3	c++	heuristic 3	coverage link
opendnp3::OContext::BeginRetransmitLastResponse(unsignedshort)	opendnp3	c++	heuristic 3	coverage link
opendnp3::StateUnsolicitedConfirmWait::OnConfirmTimeout(opendnp3::OContext&)	opendnp3	c++	heuristic 3	coverage link
asn1_expand_any_defined_by	libtasn1	c++	heuristic 3	coverage link
asn1_find_structure_from_oid	libtasn1	c++	heuristic 3	coverage link
roaring64_bitmap_and_inplace	croaring	c	heuristic 3	coverage link
roaring64_bitmap_and	croaring	c	heuristic 3	coverage link
roaring64_bitmap_xor	croaring	c	heuristic 3	coverage link
roaring64_bitmap_or	croaring	c	heuristic 3	coverage link
roaring64_bitmap_remove_range	croaring	c	heuristic 3	coverage link
decode_all	dav1d	c++	heuristic 3	coverage link
cmd_starttls_next	dovecot	c	heuristic 3	coverage link
ssl_client_settings_get	dovecot	c	heuristic 3	coverage link
settings_mmap_apply	dovecot	c	heuristic 3	coverage link
smtp_server_cmd_auth_send_challenge	dovecot	c	heuristic 3	coverage link
settings_mmap_apply_defaults	dovecot	c	heuristic 3	coverage link
tpm_server_main	ibmswtpm2	c++	heuristic 3	coverage link
StartTcpServer	ibmswtpm2	c++	heuristic 3	coverage link
CheckAuthSession	ibmswtpm2	c++	heuristic 3	coverage link
CheckSessionHMAC	ibmswtpm2	c++	heuristic 3	coverage link
TPM2_PolicySecret	ibmswtpm2	c++	heuristic 3	coverage link
bpf_object_load	libbpf	c	heuristic 3	coverage link
bpf_object_prepare	libbpf	c	heuristic 3	coverage link
bpf_object__open_skeleton	libbpf	c	heuristic 3	coverage link
bpf_object__open_file	libbpf	c	heuristic 3	coverage link
attach_usdt	libbpf	c	heuristic 3	coverage link
tsk_fs_open_vol	sleuthkit	c++	heuristic 3	coverage link
APFSFSCompat::APFSFSCompat(TSK_IMG_INFO,_TSK_POOL_INFOconst,unsignedlong,charconst)::$_11::operator()(TSK_FS_FILE)const	sleuthkit	c++	heuristic 3	coverage link
APFSFSCompat::load_attrs(TSK_FS_FILE*)const	sleuthkit	c++	heuristic 3	coverage link
APFSFSCompat::APFSFSCompat(TSK_IMG_INFO,_TSK_POOL_INFOconst,unsignedlong,charconst)::$_3::__invoke(TSK_FS_INFO,TSK_FS_FILE*,unsignedlong)	sleuthkit	c++	heuristic 3	coverage link
exfatfs_fsstat	sleuthkit	c++	heuristic 3	coverage link
test_oneliner_with_config	cyclonedds	c	heuristic 3	coverage link
do_test_key_write_xcdrv	cyclonedds	c	heuristic 3	coverage link
make_entity	cyclonedds	c	heuristic 3	coverage link
ddsc_peek_setup	cyclonedds	c	heuristic 3	coverage link
prepare_dds	cyclonedds	c	heuristic 3	coverage link
op_open_file	opusfile	c	heuristic 3	coverage link
op_raw_seek	opusfile	c	heuristic 3	coverage link
op_test_memory	opusfile	c	heuristic 3	coverage link
op_test_close_on_failure	opusfile	c	heuristic 3	coverage link
op_test_file	opusfile	c	heuristic 3	coverage link
Codec::encodeFrames(unsignedcharconst*,unsignedlong)	libavc	c++	heuristic 3	coverage link
api_check_struct_sanity	libavc	c++	heuristic 3	coverage link
Codec::setArchitecture(IVD_ARCH_T)	libavc	c++	heuristic 3	coverage link
Codec::decodeHeader(unsignedcharconst*,unsignedlong)	libavc	c++	heuristic 3	coverage link
Codec::setParams(IVD_VIDEO_DECODE_MODE_T)	libavc	c++	heuristic 3	coverage link
blake2b_compress_avx2	libsodium	c++	heuristic 3	coverage link
allocate_idx_list	net-snmp	c++	heuristic 3	coverage link
release_idx_list	net-snmp	c++	heuristic 3	coverage link
register_string_index	net-snmp	c++	heuristic 3	coverage link
unregister_string_index	net-snmp	c++	heuristic 3	coverage link
remove_index	net-snmp	c++	heuristic 3	coverage link
ucl_parser_add_fd	libucl	c	heuristic 3	coverage link
ucl_parser_add_fd_priority	libucl	c	heuristic 3	coverage link
ucl_parser_add_file	libucl	c	heuristic 3	coverage link
ucl_parser_add_file_priority	libucl	c	heuristic 3	coverage link
ucl_parse_after_value	libucl	c	heuristic 3	coverage link
_lou_compileDisplayRule	liblouis	c	heuristic 3	coverage link
_lou_compileTranslationRule	liblouis	c	heuristic 3	coverage link
lou_getTypeformForEmphClass	liblouis	c	heuristic 3	coverage link
analyzeTable	liblouis	c	heuristic 3	coverage link
lou_getTableInfo	liblouis	c	heuristic 3	coverage link
addChunk_iCCP(ucvector,LodePNGInfoconst,LodePNGCompressSettings*)	lodepng	c++	heuristic 3	coverage link
lodepng::compress(std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>&,std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>const&,LodePNGCompressSettingsconst&)	lodepng	c++	heuristic 3	coverage link
lodepng::decompress(std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>&,std::__1::vector<unsignedchar,std::__1::allocator<unsignedchar>>const&,LodePNGDecompressSettingsconst&)	lodepng	c++	heuristic 3	coverage link
teken_state_5	libteken	c++	heuristic 3	coverage link
teken_state_numbers	libteken	c++	heuristic 3	coverage link
teken_state_init	libteken	c++	heuristic 3	coverage link
teken_state_1	libteken	c++	heuristic 3	coverage link
teken_state_8	libteken	c++	heuristic 3	coverage link
GetStructFromINCHIEx	inchi	c	heuristic 3	coverage link
CheckINCHI	inchi	c	heuristic 3	coverage link
GetINCHIfromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromINCHI	inchi	c	heuristic 3	coverage link
GetStructFromStdINCHI	inchi	c	heuristic 3	coverage link
google::grpc::transcoding::testing::JsonArrayTester::TestElement(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&)	grpc-httpjson-transcoding	c++	heuristic 3	coverage link
google::grpc::transcoding::testing::JsonArrayTester::TestClosed(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&)	grpc-httpjson-transcoding	c++	heuristic 3	coverage link
google::grpc::transcoding::testing::ExpectJsonArrayEq(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&)	grpc-httpjson-transcoding	c++	heuristic 3	coverage link
google::grpc::transcoding::testing::ExpectJsonObjectEq(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&,std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&)	grpc-httpjson-transcoding	c++	heuristic 3	coverage link
google::protobuf::json_internal::(anonymousnamespace)::ParseArray<google::protobuf::json_internal::ParseProto2Descriptor>(google::protobuf::json_internal::JsonLexer&,google::protobuf::json_internal::ParseProto2Descriptor::Field,google::protobuf::json_internal::ParseProto2Descriptor::Msg&)::{lambda()#1}::operator()()const	grpc-httpjson-transcoding	c++	heuristic 3	coverage link
str_cd_iconveh	libidn2	c++	heuristic 3	coverage link
cli_bytecode_prepare2	clamav	c++	heuristic 3	coverage link
rtf_object_process	clamav	c++	heuristic 3	coverage link
Pages_cb	clamav	c++	heuristic 3	coverage link
Subject_cb	clamav	c++	heuristic 3	coverage link
Keywords_cb	clamav	c++	heuristic 3	coverage link
voidrapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::ParseArray<4u,rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>>(rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>&,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>&)	valijson	c++	heuristic 3	coverage link
voidrapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::ParseObject<4u,rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>>(rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>&,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>&)	valijson	c++	heuristic 3	coverage link
rapidjson::ParseResultrapidjson::GenericReader<rapidjson::UTF8<char>,rapidjson::UTF8<char>,rapidjson::CrtAllocator>::Parse<4u,rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>>(rapidjson::EncodedInputStream<rapidjson::UTF8<char>,rapidjson::MemoryStream>&,rapidjson::GenericDocument<rapidjson::UTF8<char>,rapidjson::MemoryPoolAllocator<rapidjson::CrtAllocator>,rapidjson::CrtAllocator>&)	valijson	c++	heuristic 3	coverage link
valijson::ValidationVisitor<valijson::adapters::StdStringAdapter,valijson::DefaultRegexEngine>::visit(valijson::constraints::PropertiesConstraintconst&)	valijson	c++	heuristic 3	coverage link

Heuristics

Heuristic 1

This is the heuristic highlights functions that has all of the following attributes:

- Has "parse" in its function name.
- Has zero percentage code coverage.
- Has accumulated cyclomatic complexity larger than 200.
- Is in a project written in C or C++.

Heuristic 2

This is the heuristic highlights functions that has all of the following attributes:

- Has two arguments.
- First argument has type "char *".
- Second argument has type "int".
- Has accumulated cyclomatic complexity larger than 150