High level conclusions

Fuzzers reach 70.04% of cyclomatic complexity.

Fuzzers reach 66.73% of all functions.

Fuzzer dns_message_checksig_fuzzer is blocked:

The runtime code coverage of dns_message_checksig_fuzzer covers 11.45% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

3787 / 5675

Cyclomatic complexity statically reachable by fuzzers

27828 / 39730

Runtime code coverage of functions

1343 / 5675

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: isc_lex_getmastertoken_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	82	43.1%
gold	[1:9]	3	1.57%
yellow	[10:29]	26	13.6%
greenyellow	[30:49]	1	0.52%
lawngreen	50+	78	41.0%
All colors	190	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00099	/src/bind9/lib/isc/./include/isc/buffer.h:1121
50	729	12 : View List ['isc_assertion_failed', 'pushback', 'isc_error_fatal', 'pushandgrow', '__ctype_b_loc', 'ferror', 'isc___errno2result', 'isc_buffer_getuint8', 'isc_parse_uint32', 'getc_unlocked', '__errno_location', 'grow_data']	52	731	isc_lex_gettoken	call site: 00158	/src/bind9/lib/isc/lex.c:641
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00000	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
2	2	1 : View List ['flockfile']	54	733	isc_lex_gettoken	call site: 00081	/src/bind9/lib/isc/lex.c:413
2	2	1 : View List ['funlockfile']	2	2	isc_lex_gettoken	call site: 00180	/src/bind9/lib/isc/lex.c:924
0	0	None	52	731	isc_lex_gettoken	call site: 00083	/src/bind9/lib/isc/lex.c:420
0	0	None	52	731	isc_lex_gettoken	call site: 00149	/src/bind9/lib/isc/lex.c:553
0	0	None	52	731	isc_lex_gettoken	call site: 00153	/src/bind9/lib/isc/lex.c:595
0	0	None	52	731	isc_lex_gettoken	call site: 00156	/src/bind9/lib/isc/lex.c:623
0	0	None	52	731	isc_lex_gettoken	call site: 00156	/src/bind9/lib/isc/lex.c:625
0	0	None	52	731	isc_lex_gettoken	call site: 00166	/src/bind9/lib/isc/lex.c:687

Runtime coverage analysis

Covered functions

60

Functions that are reachable but not covered

36

Reachable functions

74

Percentage of reachable functions covered

51.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/isc_lex_getmastertoken.c	1
fuzz/../lib/isc/include/isc/buffer.h	3
lib/isc/assertions.c	1
lib/isc/lex.c	8
lib/isc/mem.c	12
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	2
lib/isc/error.c	2
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/isc/./include/isc/buffer.h	14
lib/isc/errno2result.c	1
lib/isc/parseint.c	1

Fuzzer: dns_name_fromwire_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	4.28%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	67	95.7%
All colors	70	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00000	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
0	0	None	4	20	old_name_fromwire	call site: 00042	/src/bind9/fuzz/./old.c:117
0	0	None	4	20	old_name_fromwire	call site: 00043	/src/bind9/fuzz/./old.c:158
0	0	None	4	20	old_name_fromwire	call site: 00043	/src/bind9/fuzz/./old.c:168
0	0	None	0	0	old_name_fromwire	call site: 00047	/src/bind9/fuzz/./old.c:210
0	0	None	0	0	dns_name_equal	call site: 00052	/src/bind9/lib/dns/name.c:494
0	0	None	0	0	dns_name_equal	call site: 00052	/src/bind9/lib/dns/name.c:499
0	0	None	0	0	dns_name_fromwire	call site: 00031	/src/bind9/lib/dns/name.c:1528
0	0	None	0	0	isc_ascii_lowerequal	call site: 00055	/src/bind9/lib/isc/./include/isc/ascii.h:139
0	0	None	0	0	isc__os_initialize	call site: 00000	/src/bind9/lib/isc/os.c:104

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

5

Reachable functions

23

Percentage of reachable functions covered

78.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_name_fromwire.c	1
lib/dns/fixedname.c	3
lib/dns/./include/dns/name.h	2
lib/dns/../../lib/isc/include/isc/buffer.h	4
lib/isc/assertions.c	1
fuzz/../lib/isc/include/isc/buffer.h	5
lib/dns/name.c	2
lib/dns/./include/dns/compress.h	1
fuzz/./old.c	1
fuzz/../lib/dns/include/dns/compress.h	1
lib/isc/error.c	1
lib/dns/../../lib/isc/include/isc/ascii.h	2

Fuzzer: isc_lex_gettoken_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	97	53.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	27	14.9%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	57	31.4%
All colors	181	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00098	/src/bind9/lib/isc/./include/isc/buffer.h:1121
63	729	12 : View List ['isc_assertion_failed', 'pushback', 'isc_error_fatal', 'pushandgrow', '__ctype_b_loc', 'ferror', 'isc___errno2result', 'isc_buffer_getuint8', 'isc_parse_uint32', 'getc_unlocked', '__errno_location', 'grow_data']	65	731	isc_lex_gettoken	call site: 00148	/src/bind9/lib/isc/lex.c:522
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00000	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
2	2	1 : View List ['flockfile']	67	733	isc_lex_gettoken	call site: 00080	/src/bind9/lib/isc/lex.c:413
2	2	1 : View List ['funlockfile']	2	2	isc_lex_gettoken	call site: 00179	/src/bind9/lib/isc/lex.c:924
0	0	None	67	733	isc_lex_gettoken	call site: 00080	/src/bind9/lib/isc/lex.c:402
0	0	None	65	731	isc_lex_gettoken	call site: 00082	/src/bind9/lib/isc/lex.c:420
0	0	None	65	731	isc_lex_gettoken	call site: 00148	/src/bind9/lib/isc/lex.c:538
0	0	None	65	731	isc_lex_gettoken	call site: 00148	/src/bind9/lib/isc/lex.c:544
0	0	None	65	731	isc_lex_gettoken	call site: 00148	/src/bind9/lib/isc/lex.c:553
0	0	None	65	731	isc_lex_gettoken	call site: 00165	/src/bind9/lib/isc/lex.c:684

Runtime coverage analysis

Covered functions

56

Functions that are reachable but not covered

37

Reachable functions

71

Percentage of reachable functions covered

47.89%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/isc_lex_gettoken.c	1
fuzz/../lib/isc/include/isc/buffer.h	3
lib/isc/assertions.c	1
lib/isc/lex.c	6
lib/isc/mem.c	12
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	2
lib/isc/error.c	2
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/isc/./include/isc/buffer.h	13
lib/isc/errno2result.c	1
lib/isc/parseint.c	1

Fuzzer: dns_name_fromtext_target_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	14.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	35	85.3%
All colors	41	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00000	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
0	0	None	36	36	dns_name_fromtext	call site: 00023	/src/bind9/lib/dns/name.c:823
0	0	None	36	36	dns_name_fromtext	call site: 00024	/src/bind9/lib/dns/name.c:897
0	0	None	36	36	dns_name_fromtext	call site: 00025	/src/bind9/lib/dns/name.c:922
0	0	None	36	36	dns_name_fromtext	call site: 00026	/src/bind9/lib/dns/name.c:949
0	0	None	0	0	dns_name_fromtext	call site: 00032	/src/bind9/lib/dns/name.c:981
0	0	None	0	0	isc__os_initialize	call site: 00000	/src/bind9/lib/isc/os.c:104

Runtime coverage analysis

Covered functions

34

Functions that are reachable but not covered

6

Reachable functions

17

Percentage of reachable functions covered

64.71%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_name_fromtext_target.c	1
lib/dns/fixedname.c	2
lib/dns/./include/dns/name.h	2
lib/dns/../../lib/isc/include/isc/buffer.h	4
lib/isc/assertions.c	1
fuzz/../lib/isc/include/isc/buffer.h	3
lib/dns/name.c	1
lib/isc/error.c	1
lib/isc/result.c	1

Fuzzer: dns_qpkey_name_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	91	52.2%
gold	[1:9]	2	1.14%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	81	46.5%
All colors	174	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
17	36	2 : View List ['dns_name_clone', 'dns_fixedname_initname']	21	40	dns_qpkey_fromname	call site: 00032	/src/bind9/lib/dns/qp.c:225
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00000	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
0	0	None	0	0	dns_name_fullcompare	call site: 00162	/src/bind9/lib/dns/name.c:383
0	0	None	0	0	dns_name_equal	call site: 00149	/src/bind9/lib/dns/name.c:494
0	0	None	0	0	dns_name_equal	call site: 00149	/src/bind9/lib/dns/name.c:499
0	0	None	0	0	dns_qpkey_fromname	call site: 00032	/src/bind9/lib/dns/qp.c:220
0	0	None	0	0	dns_qpkey_toname	call site: 00050	/src/bind9/lib/dns/qp.c:264
0	0	None	0	0	isc_ascii_lowerequal	call site: 00152	/src/bind9/lib/isc/./include/isc/ascii.h:139
0	0	None	0	0	isc__os_initialize	call site: 00000	/src/bind9/lib/isc/os.c:104

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

39

Reachable functions

66

Percentage of reachable functions covered

40.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_qpkey_name.c	1
lib/dns/fixedname.c	3
lib/dns/./include/dns/name.h	3
lib/dns/../../lib/isc/include/isc/buffer.h	6
lib/isc/assertions.c	1
fuzz/../lib/isc/include/isc/buffer.h	3
lib/dns/name.c	6
lib/dns/./include/dns/compress.h	1
lib/dns/qp.c	2
lib/dns/./qp_p.h	2
lib/isc/mem.c	10
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	1
lib/isc/error.c	1
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/dns/../../lib/isc/include/isc/ascii.h	3
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1

Fuzzer: dns_qp_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	329	49.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	341	50.8%
All colors	670	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
420	563	29 : View List ['isc_assertion_failed', 'strlcpy', 'isc_time_set', 'isc_time_formatISO8601ms', 'urcu_memb_read_lock', 'fclose', 'isc__mem_put', 'strcmp', 'isc_time_subtract', 'isc__mem_get', 'fileno', 'isc_time_formattimestamp', 'isc_log_wouldlog', 'isc_time_compare', 'isc_string_strerror_r', 'syslog', 'pthread_mutex_lock', 'isc_error_fatal', 'strlen', 'fstat', 'isc_log_open', 'isc_result_totext', 'isc_time_now', 'urcu_memb_read_unlock', 'isc_time_formatISO8601Lms', 'stat', '__errno_location', 'pthread_mutex_unlock', 'fflush']	420	563	isc_log_doit	call site: 00266	/src/bind9/lib/isc/log.c:1493
18	18	1 : View List ['attach_twigs']	18	18	dns_qp_insert	call site: 00257	/src/bind9/lib/dns/qp.c:1674
11	11	3 : View List ['chunk_size_raw', 'isc_error_fatal', 'mmap']	11	11	chunk_get_raw	call site: 00085	/src/bind9/lib/dns/qp.c:385
11	11	3 : View List ['chunk_size_raw', 'munmap', 'isc_error_fatal']	11	11	chunk_free_raw	call site: 00506	/src/bind9/lib/dns/qp.c:398
10	10	1 : View List ['print_active']	58	64	destroy	call site: 00643	/src/bind9/lib/isc/mem.c:528
10	10	1 : View List ['print_active']	14	58	isc__mem_destroy	call site: 00664	/src/bind9/lib/isc/mem.c:674
8	19	2 : View List ['isc_assertion_failed', 'mallocx']	28	39	mem_create	call site: 00013	/src/bind9/lib/isc/mem.c:489
4	4	1 : View List ['isc_assertion_failed']	4	4	free_twigs	call site: 00220	/src/bind9/lib/dns/qp.c:577
4	4	1 : View List ['isc_error_fatal']	4	4	isc__tls_initialize	call site: 00000	/src/bind9/lib/isc/tls.c:202
0	69	1 : View List ['isc__mem_free']	0	69	isc__mem_reallocate	call site: 00103	/src/bind9/lib/isc/mem.c:844
0	0	None	21	210	chunk_free	call site: 00487	/src/bind9/lib/dns/qp.c:637
0	0	None	18	62	isc__mem_destroy	call site: 00662	/src/bind9/lib/isc/mem.c:669

Runtime coverage analysis

Covered functions

117

Functions that are reachable but not covered

102

Reachable functions

192

Percentage of reachable functions covered

46.88%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_qp.c	1
lib/isc/mem.c	24
lib/isc/assertions.c	1
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	2
lib/isc/error.c	2
lib/dns/qp.c	28
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/dns/./qp_p.h	33
lib/isc/log.c	11
lib/isc/time.c	10
lib/isc/file.c	4
lib/isc/errno2result.c	1
lib/isc/result.c	1
lib/isc/dir.c	5
lib/isc/errno.c	1
lib/isc/stdio.c	1
tests/libtest/qp.c	6
tests/libtest/../../lib/dns/qp_p.h	17

Fuzzer: dns_rdata_fromtext_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	236	14.7%
gold	[1:9]	343	21.4%
yellow	[10:29]	148	9.25%
greenyellow	[30:49]	74	4.62%
lawngreen	50+	798	49.9%
All colors	1599	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
202	202	2 : View List ['dns_name_ishostname', 'warn_badname']	202	713	fromtext_ch_a	call site: 00892	/src/bind9/lib/dns/./rdata/ch_3/a_1.c:46
174	174	1 : View List ['warn_badname']	174	966	generic_fromtext_in_svcb	call site: 01413	/src/bind9/lib/dns/./rdata/in_1/svcb_64.c:615
174	174	1 : View List ['warn_badname']	174	174	fromtext_afsdb	call site: 01077	/src/bind9/lib/dns/./rdata/generic/afsdb_18.c:62
174	174	1 : View List ['warn_badname']	174	174	fromtext_mx	call site: 01062	/src/bind9/lib/dns/./rdata/generic/mx_15.c:93
174	174	1 : View List ['warn_badname']	174	174	fromtext_ns	call site: 00939	/src/bind9/lib/dns/./rdata/generic/ns_2.c:48
174	174	1 : View List ['warn_badname']	174	174	fromtext_rt	call site: 01089	/src/bind9/lib/dns/./rdata/generic/rt_21.c:57
174	174	1 : View List ['warn_badname']	174	174	fromtext_in_a6	call site: 01279	/src/bind9/lib/dns/./rdata/in_1/a6_38.c:93
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00126	/src/bind9/lib/isc/./include/isc/buffer.h:1121
50	729	12 : View List ['isc_assertion_failed', 'pushback', 'isc_error_fatal', 'pushandgrow', '__ctype_b_loc', 'ferror', 'isc___errno2result', 'isc_buffer_getuint8', 'isc_parse_uint32', 'getc_unlocked', '__errno_location', 'grow_data']	52	731	isc_lex_gettoken	call site: 00185	/src/bind9/lib/isc/lex.c:641
28	28	1 : View List ['dns_name_ishostname']	202	213	fromtext_afsdb	call site: 01076	/src/bind9/lib/dns/./rdata/generic/afsdb_18.c:56
28	28	1 : View List ['dns_name_ishostname']	202	213	fromtext_mx	call site: 01060	/src/bind9/lib/dns/./rdata/generic/mx_15.c:87
28	28	1 : View List ['dns_name_ishostname']	202	213	fromtext_ns	call site: 00937	/src/bind9/lib/dns/./rdata/generic/ns_2.c:42

Runtime coverage analysis

Covered functions

360

Functions that are reachable but not covered

72

Reachable functions

410

Percentage of reachable functions covered

82.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_rdata_fromtext.c	1
lib/isc/mem.c	19
lib/isc/assertions.c	1
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	3
lib/isc/error.c	2
fuzz/../lib/isc/include/isc/buffer.h	3
lib/isc/lex.c	15
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/isc/./include/isc/buffer.h	16
lib/isc/errno2result.c	1
lib/isc/parseint.c	2
lib/dns/rcode.c	10
lib/dns/rdata.c	28
lib/dns/name.c	7
lib/isc/result.c	1
lib/dns/../../lib/isc/include/isc/buffer.h	19
lib/isc/hex.c	6
lib/dns/./rdata/in_1/a_1.c	2
lib/dns/./rdata/ch_3/a_1.c	2
lib/dns/./include/dns/compress.h	2
lib/dns/./include/dns/name.h	2
lib/dns/./rdata/hs_4/a_1.c	2
lib/dns/./rdata/generic/ns_2.c	2
lib/dns/./rdata/generic/md_3.c	2
lib/dns/./rdata/generic/mf_4.c	2
lib/dns/./rdata/generic/cname_5.c	2
lib/dns/./rdata/generic/soa_6.c	2
lib/dns/./rdata/generic/mb_7.c	2
lib/dns/./rdata/generic/mg_8.c	2
lib/dns/./rdata/generic/mr_9.c	2
lib/dns/./rdata/generic/null_10.c	2
lib/dns/./rdata/in_1/wks_11.c	5
lib/dns/./rdata/generic/ptr_12.c	2
lib/dns/./rdata/generic/hinfo_13.c	2
lib/dns/./rdata/generic/minfo_14.c	2
lib/dns/./rdata/generic/mx_15.c	3
lib/dns/./rdata/generic/txt_16.c	4
lib/dns/./rdata/generic/rp_17.c	2
lib/dns/./rdata/generic/afsdb_18.c	2
lib/dns/./rdata/generic/x25_19.c	2
lib/dns/./rdata/generic/isdn_20.c	2
lib/dns/./rdata/generic/rt_21.c	2
lib/dns/./rdata/in_1/nsap_22.c	2
lib/dns/./rdata/in_1/nsap-ptr_23.c	2
lib/dns/./rdata/generic/sig_24.c	2
lib/dns/fixedname.c	3
lib/dns/./rdata/generic/key_25.c	5
lib/dns/./rdata/in_1/px_26.c	2
lib/dns/./rdata/generic/gpos_27.c	2
lib/dns/./rdata/in_1/aaaa_28.c	2
lib/dns/./rdata/generic/loc_29.c	17
lib/dns/./rdata/generic/nxt_30.c	2
lib/dns/./rdata/in_1/eid_31.c	2
lib/dns/./rdata/in_1/nimloc_32.c	2
lib/dns/./rdata/in_1/srv_33.c	2
lib/dns/./rdata/in_1/atma_34.c	2
lib/dns/./rdata/generic/naptr_35.c	3
lib/isc/regex.c	1
lib/dns/./rdata/in_1/kx_36.c	2
lib/dns/./rdata/generic/cert_37.c	2
lib/dns/./rdata/in_1/a6_38.c	2
lib/dns/./rdata/generic/dname_39.c	2
lib/dns/./rdata/generic/sink_40.c	2
lib/dns/./rdata/generic/opt_41.c	2
lib/isc/utf8.c	2
lib/dns/./rdata/in_1/apl_42.c	2
lib/dns/./rdata/generic/ds_43.c	4
lib/isc/md.c	1
lib/dns/./rdata/generic/sshfp_44.c	2
lib/dns/./rdata/generic/ipseckey_45.c	2
lib/dns/./rdata/generic/rrsig_46.c	2
lib/dns/./rdata/generic/nsec_47.c	2
lib/dns/./rdata/generic/dnskey_48.c	2
lib/dns/./rdata/in_1/dhcid_49.c	2
lib/dns/./rdata/generic/nsec3_50.c	2
lib/dns/./rdata/generic/nsec3param_51.c	2
lib/dns/./rdata/generic/tlsa_52.c	4
lib/dns/./rdata/generic/smimea_53.c	2
lib/dns/./rdata/generic/hip_55.c	2
lib/dns/./rdata/generic/ninfo_56.c	2
lib/dns/./rdata/generic/rkey_57.c	2
lib/dns/./rdata/generic/talink_58.c	2
lib/dns/./rdata/generic/cds_59.c	2
lib/dns/./rdata/generic/cdnskey_60.c	2
lib/dns/./rdata/generic/openpgpkey_61.c	2
lib/dns/./rdata/generic/csync_62.c	2
lib/dns/./rdata/generic/zonemd_63.c	2
lib/dns/./rdata/in_1/svcb_64.c	11
lib/dns/./rdata/in_1/https_65.c	2
lib/dns/./rdata/generic/spf_99.c	2
lib/dns/./rdata/generic/nid_104.c	2
lib/dns/./rdata/generic/l32_105.c	2
lib/dns/./rdata/generic/l64_106.c	2
lib/dns/./rdata/generic/lp_107.c	2
lib/dns/./rdata/generic/eui48_108.c	2
lib/dns/./rdata/generic/eui64_109.c	2
lib/dns/./rdata/generic/tkey_249.c	2
lib/dns/./rdata/any_255/tsig_250.c	2
lib/dns/./rdata/generic/uri_256.c	2
lib/dns/./rdata/generic/caa_257.c	2
lib/dns/./rdata/generic/avc_258.c	2
lib/dns/./rdata/generic/doa_259.c	2
lib/dns/./rdata/generic/amtrelay_260.c	2
lib/dns/./rdata/generic/resinfo_261.c	2
lib/dns/./rdata/generic/ta_32768.c	2
lib/dns/./rdata/generic/dlv_32769.c	2
lib/dns/./rdata/generic/keydata_65533.c	2
lib/dns/ttl.c	2
lib/dns/../../lib/isc/include/isc/ascii.h	3
lib/dns/time.c	2
lib/isc/base64.c	6
lib/isc/base32.c	5

Fuzzer: dns_rdata_fromwire_text_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	286	18.3%
gold	[1:9]	30	1.92%
yellow	[10:29]	133	8.54%
greenyellow	[30:49]	142	9.12%
lawngreen	50+	965	62.0%
All colors	1556	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
202	202	2 : View List ['dns_name_ishostname', 'warn_badname']	202	713	fromtext_ch_a	call site: 00000	/src/bind9/lib/dns/./rdata/ch_3/a_1.c:46
174	174	1 : View List ['warn_badname']	174	966	generic_fromtext_in_svcb	call site: 00000	/src/bind9/lib/dns/./rdata/in_1/svcb_64.c:615
174	174	1 : View List ['warn_badname']	174	174	fromtext_afsdb	call site: 00000	/src/bind9/lib/dns/./rdata/generic/afsdb_18.c:62
174	174	1 : View List ['warn_badname']	174	174	fromtext_mx	call site: 00000	/src/bind9/lib/dns/./rdata/generic/mx_15.c:93
174	174	1 : View List ['warn_badname']	174	174	fromtext_ns	call site: 00000	/src/bind9/lib/dns/./rdata/generic/ns_2.c:48
174	174	1 : View List ['warn_badname']	174	174	fromtext_rt	call site: 00000	/src/bind9/lib/dns/./rdata/generic/rt_21.c:57
174	174	1 : View List ['warn_badname']	174	174	fromtext_in_a6	call site: 00000	/src/bind9/lib/dns/./rdata/in_1/a6_38.c:93
174	174	1 : View List ['warn_badname']	174	174	fromtext_in_srv	call site: 00000	/src/bind9/lib/dns/./rdata/in_1/srv_33.c:83
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00022	/src/bind9/lib/isc/./include/isc/buffer.h:1121
116	116	4 : View List ['dns_name_getlabelsequence', 'dns_name_caseequal', 'dns_name_issubdomain', 'dns_name_countlabels']	116	116	name_prefix	call site: 00773	/src/bind9/lib/dns/rdata.c:1864
77	77	5 : View List ['slot_index', 'insert', 'probe_distance', 'match_suffix', 'hash_label']	77	77	dns_compress_name	call site: 00000	/src/bind9/lib/dns/compress.c:286
28	28	1 : View List ['dns_name_ishostname']	202	213	fromtext_afsdb	call site: 00000	/src/bind9/lib/dns/./rdata/generic/afsdb_18.c:56

Runtime coverage analysis

Covered functions

559

Functions that are reachable but not covered

443

Reachable functions

976

Percentage of reachable functions covered

54.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_rdata_fromwire_text.c	1
lib/dns/rdata.c	28
lib/dns/../../lib/isc/include/isc/buffer.h	12
lib/isc/assertions.c	1
lib/isc/mem.c	13
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	3
lib/isc/error.c	1
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/dns/callbacks.c	2
fuzz/../lib/isc/include/isc/buffer.h	3
lib/dns/./rdata/in_1/a_1.c	2
lib/dns/./rdata/ch_3/a_1.c	2
lib/dns/./include/dns/compress.h	2
lib/dns/./include/dns/name.h	3
lib/dns/name.c	11
lib/dns/./rdata/hs_4/a_1.c	2
lib/dns/./rdata/generic/ns_2.c	2
lib/dns/./rdata/generic/md_3.c	2
lib/dns/./rdata/generic/mf_4.c	2
lib/dns/./rdata/generic/cname_5.c	2
lib/dns/./rdata/generic/soa_6.c	2
lib/dns/./rdata/generic/mb_7.c	2
lib/dns/./rdata/generic/mg_8.c	2
lib/dns/./rdata/generic/mr_9.c	2
lib/dns/./rdata/generic/null_10.c	2
lib/dns/./rdata/in_1/wks_11.c	2
lib/dns/./rdata/generic/ptr_12.c	2
lib/dns/./rdata/generic/hinfo_13.c	2
lib/dns/./rdata/generic/minfo_14.c	2
lib/dns/./rdata/generic/mx_15.c	2
lib/dns/./rdata/generic/txt_16.c	4
lib/dns/./rdata/generic/rp_17.c	2
lib/dns/./rdata/generic/afsdb_18.c	2
lib/dns/./rdata/generic/x25_19.c	2
lib/dns/./rdata/generic/isdn_20.c	2
lib/dns/./rdata/generic/rt_21.c	2
lib/dns/./rdata/in_1/nsap_22.c	2
lib/dns/./rdata/in_1/nsap-ptr_23.c	2
lib/dns/./rdata/generic/sig_24.c	2
lib/dns/fixedname.c	3
lib/dns/./rdata/generic/key_25.c	5
lib/dns/./rdata/in_1/px_26.c	2
lib/dns/./rdata/generic/gpos_27.c	2
lib/dns/./rdata/in_1/aaaa_28.c	2
lib/dns/./rdata/generic/loc_29.c	2
lib/dns/./rdata/generic/nxt_30.c	2
lib/dns/./rdata/in_1/eid_31.c	2
lib/dns/./rdata/in_1/nimloc_32.c	2
lib/dns/./rdata/in_1/srv_33.c	2
lib/dns/./rdata/in_1/atma_34.c	2
lib/dns/./rdata/generic/naptr_35.c	3
lib/isc/regex.c	1
lib/dns/./rdata/in_1/kx_36.c	2
lib/dns/./rdata/generic/cert_37.c	2
lib/dns/./rdata/in_1/a6_38.c	2
lib/dns/./rdata/generic/dname_39.c	2
lib/dns/./rdata/generic/sink_40.c	2
lib/dns/./rdata/generic/opt_41.c	2
lib/isc/utf8.c	2
lib/dns/./rdata/in_1/apl_42.c	2
lib/dns/./rdata/generic/ds_43.c	4
lib/isc/md.c	1
lib/dns/./rdata/generic/sshfp_44.c	2
lib/dns/./rdata/generic/ipseckey_45.c	2
lib/dns/./rdata/generic/rrsig_46.c	2
lib/dns/./rdata/generic/nsec_47.c	2
lib/dns/./rdata/generic/dnskey_48.c	2
lib/dns/./rdata/in_1/dhcid_49.c	2
lib/dns/./rdata/generic/nsec3_50.c	2
lib/dns/./rdata/generic/nsec3param_51.c	2
lib/dns/./rdata/generic/tlsa_52.c	4
lib/dns/./rdata/generic/smimea_53.c	2
lib/dns/./rdata/generic/hip_55.c	2
lib/dns/./rdata/generic/ninfo_56.c	2
lib/dns/./rdata/generic/rkey_57.c	2
lib/dns/./rdata/generic/talink_58.c	2
lib/dns/./rdata/generic/cds_59.c	2
lib/dns/./rdata/generic/cdnskey_60.c	2
lib/dns/./rdata/generic/openpgpkey_61.c	2
lib/dns/./rdata/generic/csync_62.c	2
lib/dns/./rdata/generic/zonemd_63.c	2
lib/dns/./rdata/in_1/svcb_64.c	6
lib/dns/./rdata/in_1/https_65.c	2
lib/dns/./rdata/generic/spf_99.c	2
lib/dns/./rdata/generic/nid_104.c	2
lib/dns/./rdata/generic/l32_105.c	2
lib/dns/./rdata/generic/l64_106.c	2
lib/dns/./rdata/generic/lp_107.c	2
lib/dns/./rdata/generic/eui48_108.c	2
lib/dns/./rdata/generic/eui64_109.c	2
lib/dns/./rdata/generic/tkey_249.c	2
lib/dns/./rdata/any_255/tsig_250.c	2
lib/dns/./rdata/generic/uri_256.c	2
lib/dns/./rdata/generic/caa_257.c	2
lib/dns/./rdata/generic/avc_258.c	2
lib/dns/./rdata/generic/doa_259.c	2
lib/dns/./rdata/generic/amtrelay_260.c	2
lib/dns/./rdata/generic/resinfo_261.c	2
lib/dns/./rdata/generic/ta_32768.c	2
lib/dns/./rdata/generic/dlv_32769.c	2
lib/dns/./rdata/generic/keydata_65533.c	2
lib/isc/hex.c	2
lib/isc/./include/isc/buffer.h	5
lib/dns/../../lib/isc/include/isc/ascii.h	2
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
lib/dns/ttl.c	2
lib/dns/time.c	2
lib/isc/stdtime.c	1
lib/isc/serial.c	1
lib/isc/base64.c	2
lib/dns/rcode.c	6
lib/dns/key.c	1
lib/isc/base32.c	3
lib/isc/time.c	2
lib/isc/lex.c	2
lib/dns/masterdump.c	1
lib/dns/compress.c	2

Fuzzer: dns_message_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2072	47.3%
gold	[1:9]	5	0.11%
yellow	[10:29]	2	0.04%
greenyellow	[30:49]	8	0.18%
lawngreen	50+	2287	52.2%
All colors	4374	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2431	2431	1 : View List ['dns_ncache_towire']	2431	2431	towiresorted	call site: 03628	/src/bind9/lib/dns/rdataset.c:278
2371	2371	1 : View List ['dns_message_pseudosectiontoyaml']	2371	2371	dns_message_pseudosectiontotext	call site: 02073	/src/bind9/lib/dns/message.c:4019
1501	1501	1 : View List ['dns_tsig_sign']	2570	7776	dns_message_renderend	call site: 03954	/src/bind9/lib/dns/message.c:2407
1069	3606	3 : View List ['dns_message_renderrelease', 'renderset', 'dns_dnssec_signmessage']	1069	3738	dns_message_renderend	call site: 04101	/src/bind9/lib/dns/message.c:2426
420	563	29 : View List ['isc_assertion_failed', 'strlcpy', 'isc_time_set', 'isc_time_formatISO8601ms', 'urcu_memb_read_lock', 'fclose', 'isc__mem_put', 'strcmp', 'isc_time_subtract', 'isc__mem_get', 'fileno', 'isc_time_formattimestamp', 'isc_log_wouldlog', 'isc_time_compare', 'isc_string_strerror_r', 'syslog', 'pthread_mutex_lock', 'isc_error_fatal', 'strlen', 'fstat', 'isc_log_open', 'isc_result_totext', 'isc_time_now', 'urcu_memb_read_unlock', 'isc_time_formatISO8601Lms', 'stat', '__errno_location', 'pthread_mutex_unlock', 'fflush']	420	563	isc_log_doit	call site: 01733	/src/bind9/lib/isc/log.c:1493
182	182	1 : View List ['dns_aclenv_detach']	354	362	msgreset	call site: 00000	/src/bind9/lib/dns/message.c:662
172	172	1 : View List ['dns_acl_detach']	172	180	msgreset	call site: 00000	/src/bind9/lib/dns/message.c:665
161	193	3 : View List ['dns_name_format', 'dns_name_fromregion', 'dns_name_init']	177	275	generic_totext_key	call site: 03046	/src/bind9/lib/dns/./rdata/generic/key_25.c:157
161	161	1 : View List ['dns_tsigkey_detach']	690	828	msgreset	call site: 00000	/src/bind9/lib/dns/message.c:624
156	156	5 : View List ['dns_name_compare', 'dns_name_issubdomain', 'dns_name_caseequal', 'dns_name_getlabelsequence', 'dns_name_countlabels']	156	156	name_prefix	call site: 02930	/src/bind9/lib/dns/rdata.c:1860
155	155	1 : View List ['dst_context_destroy']	529	667	msgreset	call site: 00000	/src/bind9/lib/dns/message.c:629
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00930	/src/bind9/lib/isc/./include/isc/buffer.h:1121

Runtime coverage analysis

Covered functions

570

Functions that are reachable but not covered

614

Reachable functions

1152

Percentage of reachable functions covered

46.7%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_message_parse.c	4
fuzz/../lib/isc/include/isc/buffer.h	3
lib/isc/assertions.c	1
lib/dns/message.c	62
lib/isc/mem.c	25
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	3
lib/isc/error.c	2
lib/isc/./include/isc/hash.h	2
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/dns/../../lib/isc/include/isc/buffer.h	29
lib/isc/hashmap.c	16
lib/dns/fixedname.c	3
lib/dns/./include/dns/name.h	6
lib/dns/name.c	22
lib/dns/./include/dns/compress.h	2
lib/dns/../../lib/isc/include/isc/hash.h	2
lib/dns/../../lib/isc/include/isc/ascii.h	4
lib/dns/rdatalist.c	3
lib/dns/rdataset.c	15
lib/dns/rdata.c	43
lib/dns/./rdata/in_1/a_1.c	7
lib/dns/./rdata/ch_3/a_1.c	7
lib/dns/./rdata/hs_4/a_1.c	7
lib/dns/./rdata/generic/ns_2.c	7
lib/dns/./rdata/generic/md_3.c	7
lib/dns/./rdata/generic/mf_4.c	7
lib/dns/./rdata/generic/cname_5.c	7
lib/dns/./rdata/generic/soa_6.c	7
lib/dns/./rdata/generic/mb_7.c	7
lib/dns/./rdata/generic/mg_8.c	7
lib/dns/./rdata/generic/mr_9.c	7
lib/dns/./rdata/generic/null_10.c	7
lib/dns/./rdata/in_1/wks_11.c	7
lib/dns/./rdata/generic/ptr_12.c	7
lib/dns/./rdata/generic/hinfo_13.c	7
lib/dns/./rdata/generic/minfo_14.c	7
lib/dns/./rdata/generic/mx_15.c	7
lib/dns/./rdata/generic/txt_16.c	11
lib/dns/./rdata/generic/rp_17.c	7
lib/dns/./rdata/generic/afsdb_18.c	7
lib/dns/./rdata/generic/x25_19.c	7
lib/dns/./rdata/generic/isdn_20.c	7
lib/dns/./rdata/generic/rt_21.c	7
lib/dns/./rdata/in_1/nsap_22.c	7
lib/dns/./rdata/in_1/nsap-ptr_23.c	7
lib/dns/./rdata/generic/sig_24.c	8
lib/dns/./rdata/generic/key_25.c	12
lib/dns/./rdata/in_1/px_26.c	7
lib/dns/./rdata/generic/gpos_27.c	7
lib/dns/./rdata/in_1/aaaa_28.c	7
lib/dns/./rdata/generic/loc_29.c	7
lib/dns/./rdata/generic/nxt_30.c	7
lib/dns/./rdata/in_1/eid_31.c	7
lib/dns/./rdata/in_1/nimloc_32.c	7
lib/dns/./rdata/in_1/srv_33.c	7
lib/dns/./rdata/in_1/atma_34.c	7
lib/dns/./rdata/generic/naptr_35.c	8
lib/isc/regex.c	1
lib/dns/./rdata/in_1/kx_36.c	7
lib/dns/./rdata/generic/cert_37.c	7
lib/dns/./rdata/in_1/a6_38.c	7
lib/dns/./rdata/generic/dname_39.c	7
lib/dns/./rdata/generic/sink_40.c	7
lib/dns/./rdata/generic/opt_41.c	7
lib/isc/utf8.c	2
lib/dns/./rdata/in_1/apl_42.c	7
lib/dns/./rdata/generic/ds_43.c	11
lib/isc/md.c	1
lib/dns/./rdata/generic/sshfp_44.c	7
lib/dns/./rdata/generic/ipseckey_45.c	7
lib/dns/./rdata/generic/rrsig_46.c	8
lib/dns/./rdata/generic/nsec_47.c	7
lib/dns/./rdata/generic/dnskey_48.c	7
lib/dns/./rdata/in_1/dhcid_49.c	7
lib/dns/./rdata/generic/nsec3_50.c	7
lib/dns/./rdata/generic/nsec3param_51.c	7
lib/dns/./rdata/generic/tlsa_52.c	11
lib/dns/./rdata/generic/smimea_53.c	7
lib/dns/./rdata/generic/hip_55.c	9
lib/dns/./rdata/generic/ninfo_56.c	7
lib/dns/./rdata/generic/rkey_57.c	7
lib/dns/./rdata/generic/talink_58.c	7
lib/dns/./rdata/generic/cds_59.c	7
lib/dns/./rdata/generic/cdnskey_60.c	7
lib/dns/./rdata/generic/openpgpkey_61.c	7
lib/dns/./rdata/generic/csync_62.c	7
lib/dns/./rdata/generic/zonemd_63.c	7
lib/dns/./rdata/in_1/svcb_64.c	14
lib/dns/./rdata/in_1/https_65.c	7
lib/dns/./rdata/generic/spf_99.c	7
lib/dns/./rdata/generic/nid_104.c	7
lib/dns/./rdata/generic/l32_105.c	7
lib/dns/./rdata/generic/l64_106.c	7
lib/dns/./rdata/generic/lp_107.c	7
lib/dns/./rdata/generic/eui48_108.c	7
lib/dns/./rdata/generic/eui64_109.c	7
lib/dns/./rdata/generic/tkey_249.c	7
lib/dns/./rdata/any_255/tsig_250.c	7
lib/dns/./rdata/generic/uri_256.c	7
lib/dns/./rdata/generic/caa_257.c	7
lib/dns/./rdata/generic/avc_258.c	7
lib/dns/./rdata/generic/doa_259.c	7
lib/dns/./rdata/generic/amtrelay_260.c	7
lib/dns/./rdata/generic/resinfo_261.c	7
lib/dns/./rdata/generic/ta_32768.c	7
lib/dns/./rdata/generic/dlv_32769.c	7
lib/dns/./rdata/generic/keydata_65533.c	7
lib/isc/base32.c	8
lib/isc/./include/isc/buffer.h	2
lib/isc/region.c	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
lib/isc/log.c	11
lib/isc/time.c	10
lib/isc/file.c	4
lib/isc/errno2result.c	1
lib/isc/result.c	1
lib/isc/dir.c	5
lib/isc/errno.c	1
lib/isc/stdio.c	1
lib/dns/masterdump.c	9
lib/dns/rcode.c	9
lib/dns/ttl.c	2
lib/dns/ncache.c	3
lib/isc/hex.c	2
lib/dns/time.c	2
lib/isc/stdtime.c	1
lib/isc/serial.c	1
lib/isc/base64.c	2
lib/dns/key.c	5
lib/dns/compress.c	13
lib/isc/random.c	4
lib/isc/entropy.c	1
lib/dns/tsig.c	1
lib/dns/dst_api.c	9
lib/isc/safe.c	1
lib/dns/dnssec.c	1

Fuzzer: dns_master_load_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	268	52.1%
gold	[1:9]	7	1.36%
yellow	[10:29]	1	0.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	238	46.3%
All colors	514	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1437	26165	51 : View List ['isc_lex_ungettoken', 'dns_rdata_tostruct', 'limit_ttl', 'isc_stdtime_now', 'dns_fixedname_initname', 'isc_serial_lt', 'dns_soa_getminimum', 'grow_rdatalist', 'dns_time64_fromtext', 'dns_rdata_checkowner', 'dns_name_format', 'dns_rdata_checksvcb', 'isc_lex_isfile', 'isc_lex_getsourcename', 'gettoken', 'strncasecmp', 'dns_master_isprimary', 'dns_rdata_init', 'dns_rdata_covers', 'dns_rdata_fromtext', 'dns_name_isdnssd', 'check_wildcard', 'find_free_name', 'dns_rdatalist_init', 'incctx_destroy', 'grow_rdata', 'pushfile', 'isc_lex_getsourceline', 'dns_rdatatype_fromtext', 'isc_error_unexpected', 'is_glue', 'dns_rdatatype_ismeta', 'isc_buffer_init.3500', 'isc__mem_strdup', 'dns_rdatatype_format', 'isc_buffer_add.3492', 'dns_rdataclass_format', 'isc_lex_close', 'dns_name_issubdomain', 'dns_name_caseequal', 'dns_rdatatype_atparent', 'dns_name_equal', 'generate', 'dns_ttl_fromtext', 'isc_error_fatal', 'isc_result_totext', 'strcasecmp', 'check_ns', 'dns_rdataclass_fromtext', 'isc_buffer_setactive.3546', 'dns_name_fromtext']	1493	60426	load_text	call site: 00000	/src/bind9/lib/dns/master.c:1124
418	563	29 : View List ['isc_assertion_failed', 'strlcpy', 'isc_time_set', 'isc_time_formatISO8601ms', 'urcu_memb_read_lock', 'fclose', 'isc__mem_put', 'strcmp', 'isc_time_subtract', 'isc__mem_get', 'fileno', 'isc_time_formattimestamp', 'isc_log_wouldlog', 'isc_time_compare', 'isc_string_strerror_r', 'syslog', 'pthread_mutex_lock', 'isc_error_fatal', 'strlen', 'fstat', 'isc_log_open', 'isc_result_totext', 'isc_time_now', 'urcu_memb_read_unlock', 'isc_time_formatISO8601Lms', 'stat', '__errno_location', 'pthread_mutex_unlock', 'fflush']	418	563	isc_log_doit	call site: 00068	/src/bind9/lib/isc/log.c:1493
174	174	1 : View List ['warn_badname']	174	966	generic_fromtext_in_svcb	call site: 00000	/src/bind9/lib/dns/./rdata/in_1/svcb_64.c:615
174	174	1 : View List ['warn_badname']	174	174	fromtext_afsdb	call site: 00000	/src/bind9/lib/dns/./rdata/generic/afsdb_18.c:62
174	174	1 : View List ['warn_badname']	174	174	fromtext_mx	call site: 00000	/src/bind9/lib/dns/./rdata/generic/mx_15.c:93
174	174	1 : View List ['warn_badname']	174	174	fromtext_ns	call site: 00000	/src/bind9/lib/dns/./rdata/generic/ns_2.c:48
174	174	1 : View List ['warn_badname']	174	174	fromtext_rt	call site: 00000	/src/bind9/lib/dns/./rdata/generic/rt_21.c:57
174	174	1 : View List ['warn_badname']	174	174	fromtext_in_a6	call site: 00000	/src/bind9/lib/dns/./rdata/in_1/a6_38.c:93
118	188	3 : View List ['isc_assertion_failed', 'isc__mem_get', 'isc__mem_reget']	118	188	isc_buffer_reserve	call site: 00000	/src/bind9/lib/isc/./include/isc/buffer.h:1121
114	655	2 : View List ['compact', 'chunk_shrink_raw']	128	1839	dns_qpmulti_commit	call site: 00000	/src/bind9/lib/dns/qp.c:1221
114	114	1 : View List ['isc_stats_detach']	146	328	free_db_rcu	call site: 00000	/src/bind9/lib/dns/qpzone.c:444
82	82	1 : View List ['dns_name_dup']	82	82	name_duporclone	call site: 00000	/src/bind9/lib/dns/rdata.c:409

Runtime coverage analysis

Covered functions

703

Functions that are reachable but not covered

88

Reachable functions

176

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_master_load.c	1
fuzz/../lib/isc/include/isc/buffer.h	3
lib/isc/assertions.c	1
lib/dns/callbacks.c	2
lib/isc/mem.c	21
lib/isc/./jemalloc_shim.h	3
lib/isc/string.c	2
lib/isc/error.c	2
lib/dns/db.c	8
lib/isc/rwlock.c	8
lib/dns/name.c	3
lib/isc/log.c	11
lib/isc/time.c	9
lib/isc/./include/isc/hash.h	1
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	2
lib/isc/file.c	4
lib/isc/errno2result.c	1
lib/isc/result.c	1
lib/isc/dir.c	5
lib/isc/errno.c	1
lib/isc/stdio.c	2
lib/dns/master.c	7
lib/dns/fixedname.c	3
lib/dns/./include/dns/name.h	3
lib/dns/../../lib/isc/include/isc/buffer.h	4
lib/isc/lex.c	7
lib/isc/stdtime.c	1
lib/isc/./include/isc/buffer.h	6
/usr/include/x86_64-linux-gnu/urcu/rculfhash.h	1

Fuzzer: dns_message_checksig_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7921	86.0%
gold	[1:9]	126	1.36%
yellow	[10:29]	86	0.93%
greenyellow	[30:49]	51	0.55%
lawngreen	50+	1017	11.0%
All colors	9201	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
58864	58864	5 : View List ['dns_zone_catz_disable_db', 'zone_saveunique', 'dns_remote_addresses', 'zone_replacedb', 'dns_zone_rpz_disable_db']	285923	288003	zone_postload	call site: 00000	/src/bind9/lib/dns/zone.c:5108
57602	57677	11 : View List ['dnssec_log', 'set_resigntime', 'isc_stdtime_now', 'dns_fixedname_initname', 'dns_zone_isdynamic', 'resume_signingwithkey', 'dns_rdatatype_format', 'resume_addnsec3chain', 'dns_name_format', 'dns_db_getsigningtime', 'dns_zone_getsigresigninginterval']	113838	115341	zone_postload	call site: 00000	/src/bind9/lib/dns/zone.c:5153
56204	56204	1 : View List ['zone_needdump']	170042	171545	zone_postload	call site: 00000	/src/bind9/lib/dns/zone.c:5145
29779	29779	2 : View List ['dns_zone_catz_disable_db', 'dns_zone_rpz_disable_db']	29779	29900	zone_startload	call site: 00000	/src/bind9/lib/dns/zone.c:2635
28598	29109	11 : View List ['isc_assertion_failed', 'isc__mem_putanddetach', 'dns_badcache_destroy', 'dns_zt_detach', 'isc__mem_free', 'isc_error_fatal', 'dns_tsigkeyring_detach', 'dns_fwdtable_destroy', 'pthread_mutex_destroy', 'dns_order_detach', 'isc_string_strerror_r']	28598	29109	dns_view_create	call site: 00000	/src/bind9/lib/dns/view.c:156
28320	28320	2 : View List ['dns_db_origin', 'dns_master_loadfileasync']	58099	58220	zone_startload	call site: 00000	/src/bind9/lib/dns/zone.c:2609
28101	28136	6 : View List ['isc_assertion_failed', 'isc_rwlock_wrlock', 'isc_rwlock_wrunlock', 'strcmp', 'zone_detachdb', 'zone_attachdb']	28123	29018	zone_load	call site: 00000	/src/bind9/lib/dns/zone.c:2205
28098	28098	1 : View List ['process_zone_setnsec3param']	378267	393649	zone_postload	call site: 00000	/src/bind9/lib/dns/zone.c:4842
8118	26165	51 : View List ['isc_lex_ungettoken', 'dns_rdata_tostruct', 'limit_ttl', 'isc_stdtime_now', 'dns_fixedname_initname', 'isc_serial_lt', 'dns_soa_getminimum', 'grow_rdatalist', 'dns_time64_fromtext', 'dns_rdata_checkowner', 'dns_name_format', 'dns_rdata_checksvcb', 'isc_lex_isfile', 'isc_lex_getsourcename', 'gettoken', 'strncasecmp', 'dns_master_isprimary', 'dns_rdata_init', 'dns_rdata_covers', 'dns_rdata_fromtext', 'dns_name_isdnssd', 'check_wildcard', 'find_free_name', 'dns_rdatalist_init', 'incctx_destroy', 'grow_rdata', 'pushfile', 'isc_lex_getsourceline', 'dns_rdatatype_fromtext', 'isc_error_unexpected', 'is_glue', 'dns_rdatatype_ismeta', 'isc_buffer_init.3500', 'isc__mem_strdup', 'dns_rdatatype_format', 'isc_buffer_add.3492', 'dns_rdataclass_format', 'isc_lex_close', 'dns_name_issubdomain', 'dns_name_caseequal', 'dns_rdatatype_atparent', 'dns_name_equal', 'generate', 'dns_ttl_fromtext', 'isc_error_fatal', 'isc_result_totext', 'strcasecmp', 'check_ns', 'dns_rdataclass_fromtext', 'isc_buffer_setactive.3546', 'dns_name_fromtext']	8174	60426	load_text	call site: 00000	/src/bind9/lib/dns/master.c:1124
5973	6009	8 : View List ['dnssec_log', 'isc_result_totext', 'dns__db_closeversion', 'dns_db_origin', 'dns_db_currentversion', 'dns_view_getsecroots', 'dns_zoneverify_dnssec', 'dns_keytable_detach']	5973	6009	dns_zone_verifydb	call site: 00000	/src/bind9/lib/dns/zone.c:24063
3265	4351	6 : View List ['isc_error_fatal', 'isc_serial_ge', 'strcmp', 'isc_serial_gt', 'zone_unchanged', 'zone_get_from_db']	346751	353074	zone_postload	call site: 00000	/src/bind9/lib/dns/zone.c:4960
2779	2785	3 : View List ['isc_result_totext', 'dns_message_totext', 'isc_buffer_init']	2779	2785	create_message	call site: 01930	/src/bind9/fuzz/dns_message_checksig.c:331

Runtime coverage analysis

Covered functions

649

Functions that are reachable but not covered

3533

Reachable functions

3990

Percentage of reachable functions covered

11.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/dns_message_checksig.c	2
fuzz/../lib/isc/include/isc/buffer.h	6
lib/isc/assertions.c	1
lib/isc/mem.c	28
lib/isc/./jemalloc_shim.h	4
lib/isc/string.c	4
lib/isc/error.c	2
lib/isc/./include/isc/hash.h	2
lib/isc/hash.c	3
lib/isc/./include/isc/siphash.h	4
lib/isc/./include/isc/ascii.h	4
lib/dns/message.c	84
lib/dns/../../lib/isc/include/isc/buffer.h	29
lib/isc/hashmap.c	21
lib/dns/fixedname.c	3
lib/dns/./include/dns/name.h	7
lib/dns/name.c	25
lib/dns/./include/dns/compress.h	2
lib/dns/../../lib/isc/include/isc/hash.h	2
lib/dns/../../lib/isc/include/isc/ascii.h	5
lib/dns/rdatalist.c	3
lib/dns/rdataset.c	17
lib/dns/rdata.c	46
lib/dns/./rdata/in_1/a_1.c	8
lib/dns/./rdata/ch_3/a_1.c	8
lib/dns/./rdata/hs_4/a_1.c	8
lib/dns/./rdata/generic/ns_2.c	8
lib/dns/./rdata/generic/md_3.c	8
lib/dns/./rdata/generic/mf_4.c	8
lib/dns/./rdata/generic/cname_5.c	8
lib/dns/./rdata/generic/soa_6.c	8
lib/dns/./rdata/generic/mb_7.c	8
lib/dns/./rdata/generic/mg_8.c	8
lib/dns/./rdata/generic/mr_9.c	8
lib/dns/./rdata/generic/null_10.c	8
lib/dns/./rdata/in_1/wks_11.c	8
lib/dns/./rdata/generic/ptr_12.c	8
lib/dns/./rdata/generic/hinfo_13.c	8
lib/dns/./rdata/generic/minfo_14.c	8
lib/dns/./rdata/generic/mx_15.c	8
lib/dns/./rdata/generic/txt_16.c	13
lib/dns/./rdata/generic/rp_17.c	8
lib/dns/./rdata/generic/afsdb_18.c	8
lib/dns/./rdata/generic/x25_19.c	8
lib/dns/./rdata/generic/isdn_20.c	8
lib/dns/./rdata/generic/rt_21.c	8
lib/dns/./rdata/in_1/nsap_22.c	8
lib/dns/./rdata/in_1/nsap-ptr_23.c	8
lib/dns/./rdata/generic/sig_24.c	9
lib/dns/./rdata/generic/key_25.c	14
lib/dns/./rdata/in_1/px_26.c	8
lib/dns/./rdata/generic/gpos_27.c	8
lib/dns/./rdata/in_1/aaaa_28.c	8
lib/dns/./rdata/generic/loc_29.c	8
lib/dns/./rdata/generic/nxt_30.c	8
lib/dns/./rdata/in_1/eid_31.c	8
lib/dns/./rdata/in_1/nimloc_32.c	8
lib/dns/./rdata/in_1/srv_33.c	8
lib/dns/./rdata/in_1/atma_34.c	8
lib/dns/./rdata/generic/naptr_35.c	9
lib/isc/regex.c	1
lib/dns/./rdata/in_1/kx_36.c	8
lib/dns/./rdata/generic/cert_37.c	8
lib/dns/./rdata/in_1/a6_38.c	8
lib/dns/./rdata/generic/dname_39.c	8
lib/dns/./rdata/generic/sink_40.c	8
lib/dns/./rdata/generic/opt_41.c	8
lib/isc/utf8.c	2
lib/dns/./rdata/in_1/apl_42.c	8
lib/dns/./rdata/generic/ds_43.c	12
lib/isc/md.c	1
lib/dns/./rdata/generic/sshfp_44.c	8
lib/dns/./rdata/generic/ipseckey_45.c	8
lib/dns/./rdata/generic/rrsig_46.c	9
lib/dns/./rdata/generic/nsec_47.c	8
lib/dns/./rdata/generic/dnskey_48.c	8
lib/dns/./rdata/in_1/dhcid_49.c	8
lib/dns/./rdata/generic/nsec3_50.c	8
lib/dns/./rdata/generic/nsec3param_51.c	8
lib/dns/./rdata/generic/tlsa_52.c	13
lib/dns/./rdata/generic/smimea_53.c	8
lib/dns/./rdata/generic/hip_55.c	10
lib/dns/./rdata/generic/ninfo_56.c	8
lib/dns/./rdata/generic/rkey_57.c	8
lib/dns/./rdata/generic/talink_58.c	8
lib/dns/./rdata/generic/cds_59.c	8
lib/dns/./rdata/generic/cdnskey_60.c	8
lib/dns/./rdata/generic/openpgpkey_61.c	8
lib/dns/./rdata/generic/csync_62.c	8
lib/dns/./rdata/generic/zonemd_63.c	8
lib/dns/./rdata/in_1/svcb_64.c	16
lib/dns/./rdata/in_1/https_65.c	8
lib/dns/./rdata/generic/spf_99.c	8
lib/dns/./rdata/generic/nid_104.c	8
lib/dns/./rdata/generic/l32_105.c	8
lib/dns/./rdata/generic/l64_106.c	8
lib/dns/./rdata/generic/lp_107.c	8
lib/dns/./rdata/generic/eui48_108.c	8
lib/dns/./rdata/generic/eui64_109.c	8
lib/dns/./rdata/generic/tkey_249.c	8
lib/dns/./rdata/any_255/tsig_250.c	8
lib/dns/./rdata/generic/uri_256.c	8
lib/dns/./rdata/generic/caa_257.c	8
lib/dns/./rdata/generic/avc_258.c	8
lib/dns/./rdata/generic/doa_259.c	8
lib/dns/./rdata/generic/amtrelay_260.c	8
lib/dns/./rdata/generic/resinfo_261.c	8
lib/dns/./rdata/generic/ta_32768.c	8
lib/dns/./rdata/generic/dlv_32769.c	8
lib/dns/./rdata/generic/keydata_65533.c	8
lib/isc/base32.c	8
lib/isc/./include/isc/buffer.h	23
lib/isc/region.c	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
lib/isc/log.c	12
lib/isc/time.c	17
lib/isc/file.c	4
lib/isc/errno2result.c	1
lib/isc/result.c	1
lib/isc/dir.c	5
lib/isc/errno.c	1
lib/isc/stdio.c	1
lib/dns/masterdump.c	9
lib/dns/rcode.c	10
lib/dns/ttl.c	2
lib/dns/ncache.c	3
lib/isc/hex.c	2
lib/dns/time.c	2
lib/isc/stdtime.c	1
lib/isc/serial.c	2
lib/isc/base64.c	2
lib/dns/key.c	8
lib/dns/tsig.c	22
lib/dns/dst_api.c	17
lib/dns/view.c	9
lib/isc/safe.c	1
lib/isc/rwlock.c	15
lib/dns/zt.c	1
lib/dns/qp.c	55
lib/dns/../../lib/isc/include/isc/tid.h	1
lib/dns/./qp_p.h	35
lib/dns/zone.c	7
lib/dns/db.c	8
lib/dns/resolver.c	72
lib/dns/../../lib/isc/include/isc/loop.h	1
lib/isc/loop.c	5
lib/isc/counter.c	6
lib/isc/sockaddr.c	19
lib/isc/netaddr.c	11
lib/dns/forward.c	4
lib/isc/stats.c	2
lib/dns/adb.c	70
lib/isc/timer.c	7
lib/isc/./include/isc/loop.h	1
lib/isc/random.c	6
lib/isc/entropy.c	1
lib/dns/dispatch.c	49
lib/dns/transport.c	17
lib/isc/netmgr/netmgr.c	74
lib/isc/async.c	1
lib/isc/./include/isc/tid.h	1
lib/isc/netmgr/udp.c	10
lib/isc/netmgr/tlsstream.c	40
lib/isc/netmgr/streamdns.c	33
lib/isc/netmgr/proxystream.c	37
lib/isc/netmgr/proxyudp.c	18
lib/isc/netmgr/http.c	38
lib/isc/netmgr/tcp.c	19
lib/isc/quota.c	1
lib/isc/job.c	2
lib/isc/uv.c	1
lib/isc/tls.c	33
lib/isc/ht.c	19
lib/isc/./include/isc/dnsstream.h	14
lib/isc/proxy2.c	20
lib/isc/netmgr/timer.c	6
lib/isc/url.c	4
lib/dns/validator.c	4
lib/dns/peer.c	11
lib/dns/acl.c	7
lib/isc/radix.c	2
lib/dns/dns64.c	1
lib/dns/keytable.c	1
lib/dns/nta.c	10
lib/dns/compress.c	13
lib/dns/../../lib/isc/include/isc/siphash.h	5
lib/dns/dnssec.c	2
lib/dns/stats.c	2
lib/isc/netmgr/socket.c	9
/usr/include/x86_64-linux-gnu/urcu/rculfhash.h	1
lib/dns/badcache.c	6

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
load_text	/src/bind9/lib/dns/master.c	1	['N/A']	18	0	16165	2869	906	648	0	5541	1137
dns__rbtdb_addrdataset	/src/bind9/lib/dns/rbtdb.c	7	['N/A', 'N/A', 'N/A', 'int', 'N/A', 'int', 'N/A']	21	0	1119	170	33	445	0	2290	786
addglue	/src/bind9/lib/dns/rbt-zonedb.c	4	['N/A', 'N/A', 'N/A', 'N/A']	18	0	360	46	8	517	0	2588	507

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

3932 / 5675

Cyclomatic complexity statically reachable by fuzzers

30246 / 39730

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

fuzz/isc_lex_getmastertoken.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_get', 'mem_put', 'isc__mem_put', 'isc_buffer_compact', 'isc_buffer_reserve', 'isc_lex_gettoken', 'isc_buffer_init', 'mallocx', 'isc_buffer_clearmctx']

fuzz/dns_name_fromwire.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['old_name_fromwire', 'isc_buffer_init']

fuzz/isc_lex_gettoken.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_get', 'mem_put', 'isc__mem_put', 'isc_lex_gettoken', 'pushback', 'isc_buffer_compact', 'isc_buffer_reserve', 'grow_data', 'isc_buffer_init', 'mallocx']

fuzz/dns_name_fromtext_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['dns_name_fromtext', 'isc_buffer_init']

fuzz/dns_qpkey_name.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['mallocx', 'dns_qpkey_fromname', 'isc_buffer_putuint8', 'isc_buffer_init']

fuzz/dns_qp.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_put', 'isc_log_doit', 'isc__mem_get', 'isc__mem_free', 'LLVMFuzzerTestOneInput', 'destroy', 'reader_valid', 'leaf_ival', 'ref_ptr', 'isc__mem_detach']

fuzz/dns_rdata_fromtext.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_get', 'dns_rdata_fromwire', 'fromtext_ch_a', 'mem_put', 'isc__mem_put', 'uint8_fromregion', 'isc_buffer_compact', 'isc_buffer_reserve', 'uint16_fromregion']

fuzz/dns_rdata_fromwire_text.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_get', 'rdata_totext', 'dns_name_fullcompare', 'dns_rdata_fromwire', 'mem_put', 'isc__mem_put', 'uint8_fromregion']

fuzz/dns_message_parse.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['dns_message_renderheader', 'dns_rdata_reset', 'isc_log_doit', 'uint8_consume_fromregion', 'render_ecs', 'dns_mnemonic_totext', 'dns_message_getopt', 'dns_rdataset_towire', 'isc__mem_detach', 'rdataset_totext']

fuzz/dns_master_load.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc__mem_get', 'isc_log_doit', 'isc_stdio_open', 'destroy', 'isc_halfsiphash24_finalize', 'incctx_destroy', 'isc__mem_put', 'isc_hash32_hash', 'mem_create', 'isc_rwlock_rdlock']

fuzz/dns_message_checksig.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['isc_buffer_getuint8', 'isc_stdtime_now', 'isc_ascii_lowerequal', 'dns_name_fromregion', 'dns_qpmulti_commit', 'isc_buffer_putuint16', 'msgreset', 'dns_view_find', 'isc_buffer_putuint8', 'str_totext']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
isc_buffer_reserve	32	7	21.87%	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
isc_log_doit	267	23	8.614%	['dns_qp_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
destroy	38	18	47.36%	['dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
totext_ctx_init	70	24	34.28%	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
dns_message_renderend	109	46	42.20%	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
dns_message_headertotext	168	80	47.61%	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
totext_keydata	129	12	9.302%	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
detachnode	42	19	45.23%	[]
isc___errno2result	95	12	12.63%	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
dst_key_sigsize	49	11	22.44%	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
journal_open	93	26	27.95%	['dns_message_checksig_fuzzer']
dns_name_downcase	39	17	43.58%	['dns_message_checksig_fuzzer']
dns_nametree_add	51	23	45.09%	['dns_message_checksig_fuzzer']
dst__openssl_init	31	6	19.35%	[]
opensslrsa_build_pkey	65	28	43.07%	[]
opensslrsa_createctx	52	23	44.23%	[]
fix_iterator	45	21	46.66%	['dns_message_checksig_fuzzer']
closeversion	140	18	12.85%	[]
findnodeintree	43	21	48.83%	[]
find	308	142	46.10%	[]
tsig_log	32	8	25.0%	['dns_message_checksig_fuzzer']
dns_view_find	162	63	38.88%	['dns_message_checksig_fuzzer']
dns_view_simplefind	33	17	51.51%	['dns_message_checksig_fuzzer']
dns_zone_cdscheck	166	32	19.27%	['dns_message_checksig_fuzzer']
dns_zone_verifydb	39	11	28.20%	['dns_message_checksig_fuzzer']
zone_load	204	66	32.35%	[]
get_primary_options	41	18	43.90%	[]
check_nsec3param	90	27	30.0%	['dns_message_checksig_fuzzer']
zone_postload	475	130	27.36%	['dns_message_checksig_fuzzer']
zone_journal_rollforward	68	17	25.0%	['dns_message_checksig_fuzzer']
zone_check_dnskeys	53	24	45.28%	['dns_message_checksig_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/bind9/lib/dns/./rdata/generic/sig_24.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/ch_3/a_1.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/rkey_57.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/hex.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/resinfo_261.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ncache.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rriterator.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/ds_43.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ds.c	[]	[]
/src/bind9/lib/dns/adb.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/base64.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/../../lib/isc/include/isc/hash.h	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/hs_4/a_1.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/mb_7.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/db.c	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/forward.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/update.c	[]	[]
/src/bind9/lib/dns/message.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/hip_55.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/nsec3.c	[]	[]
/src/bind9/lib/dns/order.c	[]	[]
/src/bind9/lib/isc/ratelimiter.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/l64_106.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/tests/libtest/qp.c	['dns_qp_fuzzer']	['dns_qp_fuzzer']
/src/bind9/lib/dns/./rdata/in_1/a_1.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/signal.c	[]	[]
/src/bind9/lib/dns/key.c	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/rdatasetiter.c	[]	[]
/src/bind9/lib/isc/regex.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/isc/md.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/isc/string.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/mr_9.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/entropy.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/rt_21.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/https_65.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/nsap_22.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/csync_62.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/keydata_65533.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/nimloc_32.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/random.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rdataslab.c	[]	[]
/src/bind9/fuzz/./old.c	['dns_name_fromwire_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/l32_105.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_name_fromtext_target.c	['dns_name_fromtext_target_fuzzer']	['dns_name_fromtext_target_fuzzer']
/src/bind9/lib/dns/./rdata/generic/sshfp_44.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/../../lib/isc/include/isc/tid.h	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/nid_104.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rbt-cachedb.c	[]	[]
/src/bind9/fuzz/dns_qpkey_name.c	['dns_qpkey_name_fuzzer']	['dns_qpkey_name_fuzzer']
/src/bind9/lib/dns/./rdata/generic/x25_19.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/rrsig_46.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/avc_258.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/./include/isc/dnsstream.h	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/md_3.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/portset.c	[]	[]
/src/bind9/lib/isc/netmgr/timer.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/job.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./db_p.h	[]	[]
/src/bind9/lib/isc/work.c	[]	[]
/src/bind9/lib/isc/netmgr/tlsstream.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/tkey_249.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/uri_256.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/wks_11.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/errno2result.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./qp_p.h	['dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ssu_external.c	[]	[]
/src/bind9/lib/isc/tm.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/afsdb_18.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/time.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/dns/./rdata/generic/doa_259.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/dlz.c	[]	[]
/src/bind9/lib/isc/./include/isc/buffer.h	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/netaddr.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/dir.c	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/any_255/tsig_250.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/request.c	[]	[]
/src/bind9/lib/isc/quota.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/errno.c	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/lex.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_master_load_fuzzer']	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_master_load_fuzzer']
/src/bind9/lib/dns/openssleddsa_link.c	[]	[]
/src/bind9/lib/isc/safe.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/./include/isc/loop.h	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rdata.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/kasp.c	[]	[]
/src/bind9/lib/dns/catz.c	[]	[]
/src/bind9/lib/dns/compress.c	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/isc/assertions.c	['isc_lex_getmastertoken_fuzzer', 'dns_name_fromwire_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/base32.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/isc/counter.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/px_26.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/os.c	[]	[]
/src/bind9/lib/isc/proxy2.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/keytable.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rcode.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/cds_59.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rbt-zonedb.c	[]	[]
/src/bind9/lib/dns/rootns.c	[]	[]
/src/bind9/lib/dns/private.c	[]	[]
/src/bind9/lib/isc/utf8.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/dns/./rdata/generic/dnskey_48.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/parseint.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_rdata_fromtext_fuzzer']	['isc_lex_getmastertoken_fuzzer', 'dns_rdata_fromtext_fuzzer']
/src/bind9/lib/dns/./rdata/generic/tlsa_52.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/usr/include/x86_64-linux-gnu/urcu/rculfhash.h	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/nonce.c	[]	[]
/src/bind9/lib/dns/stats.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/naptr_35.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/dst_api.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/log.c	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/cdnskey_60.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/ptr_12.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/ns_2.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_qp.c	['dns_qp_fuzzer']	['dns_qp_fuzzer']
/src/bind9/lib/dns/./rdata/generic/mg_8.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/openssl_shim.c	[]	[]
/src/bind9/lib/isc/serial.c	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/ipseckey_45.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/master.c	['dns_master_load_fuzzer']	['dns_master_load_fuzzer']
/src/bind9/lib/dns/nametree.c	[]	[]
/src/bind9/lib/dns/cache.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/hinfo_13.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/kx_36.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/view.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/async.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/keystore.c	[]	[]
/src/bind9/lib/isc/heap.c	[]	[]
/src/bind9/lib/dns/rrl.c	[]	[]
/src/bind9/lib/isc/stdtime.c	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/rbtdb.c	[]	[]
/src/bind9/lib/isc/hashmap.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/isc/netmgr/http.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/log.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/byteswap.h	['dns_qpkey_name_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/../../lib/isc/include/isc/queue.h	[]	[]
/src/bind9/lib/dns/zone.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/netmgr/streamdns.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/fixedname.c	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/cname_5.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/stats.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/url.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/lib.c	[]	[]
/src/bind9/lib/dns/zoneverify.c	[]	[]
/src/bind9/lib/isc/./jemalloc_shim.h	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ttl.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/isc/uv.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/journal.c	[]	[]
/src/bind9/lib/dns/nsec.c	[]	[]
/src/bind9/lib/isc/thread.c	[]	[]
/src/bind9/lib/isc/hash.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/../../lib/isc/include/isc/buffer.h	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/smimea_53.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ssu.c	[]	[]
/src/bind9/lib/isc/time.c	['dns_qp_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_qp_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/null_10.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_name_fromwire.c	['dns_name_fromwire_fuzzer']	['dns_name_fromwire_fuzzer']
/src/bind9/lib/dns/./rdata/in_1/svcb_64.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/mutex.c	[]	[]
/src/bind9/lib/dns/resolver.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rdataset.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/masterdump.c	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer']
/src/bind9/lib/dns/./rdata/generic/spf_99.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/keydata.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/txt_16.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/zonekey.c	[]	[]
/src/bind9/lib/dns/diff.c	[]	[]
/src/bind9/lib/dns/dispatch.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/nsap-ptr_23.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/dname_39.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_rdata_fromwire_text.c	['dns_rdata_fromwire_text_fuzzer']	['dns_rdata_fromwire_text_fuzzer']
/src/bind9/lib/isc/ht.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/soa.c	[]	[]
/src/bind9/lib/dns/./include/dns/compress.h	['dns_name_fromwire_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/srv_33.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/stdio.c	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/nsec_47.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/isc_lex_gettoken.c	['isc_lex_gettoken_fuzzer']	['isc_lex_gettoken_fuzzer']
/src/bind9/lib/dns/./rdata/generic/nsec3_50.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/opensslrsa_link.c	[]	[]
/src/bind9/lib/isc/file.c	['dns_qp_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/backtrace.c	[]	[]
/src/bind9/lib/isc/./include/isc/ascii.h	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/eid_31.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/qpcache.c	[]	[]
/src/bind9/lib/isc/xml.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/caa_257.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/hmac_link.c	[]	[]
/src/bind9/fuzz/dns_rdata_fromtext.c	['dns_rdata_fromtext_fuzzer']	['dns_rdata_fromtext_fuzzer']
/src/bind9/tests/libtest/../../lib/dns/qp_p.h	['dns_qp_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/ta_32768.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/zt.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/dlv_32769.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/atma_34.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/aaaa_28.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/zonemd_63.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/keymgr.c	[]	[]
/src/bind9/lib/dns/acl.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/commandline.c	[]	[]
/src/bind9/fuzz/isc_lex_getmastertoken.c	['isc_lex_getmastertoken_fuzzer']	['isc_lex_getmastertoken_fuzzer']
/src/bind9/lib/isc/net.c	[]	[]
/src/bind9/lib/isc/rwlock.c	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/cert_37.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/eui64_109.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/dst_parse.c	[]	[]
/usr/include/x86_64-linux-gnu/urcu/urcu-memb.h	[]	[]
/src/bind9/lib/isc/timer.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/netmgr/udp.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/./include/isc/hash.h	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_message_checksig.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/result.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/isdn_20.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/qpzone.c	[]	[]
/src/bind9/lib/dns/name.c	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/openssl_link.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/rp_17.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/nsec3param_51.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/region.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_parse_fuzzer']
/src/bind9/lib/dns/./rdata/generic/sink_40.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/./include/isc/tid.h	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/minfo_14.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/../lib/isc/include/isc/buffer.h	['isc_lex_getmastertoken_fuzzer', 'dns_name_fromwire_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/../../lib/isc/include/isc/ascii.h	['dns_name_fromwire_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/tsig.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/iptable.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/opt_41.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/netmgr/proxyudp.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/mem.c	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/key_25.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/validator.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/nta.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/netmgr/proxystream.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/ninfo_56.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/transport.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/remote.c	[]	[]
/src/bind9/lib/isc/hmac.c	[]	[]
/src/bind9/lib/dns/peer.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/qp.c	['dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_message_checksig_fuzzer']	['dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/gpos_27.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/dns64.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/loc_29.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/ipkeylist.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/talink_58.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/openpgpkey_61.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/netmgr/netmgr.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/tid.c	[]	[]
/src/bind9/lib/isc/netmgr/socket.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./include/dns/name.h	['dns_name_fromwire_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/loop.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/generic/nxt_30.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/result.c	['dns_name_fromtext_target_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_rdata_fromtext_fuzzer', 'dns_master_load_fuzzer']
/src/bind9/lib/dns/rpz.c	[]	[]
/src/bind9/lib/dns/../../lib/isc/include/isc/siphash.h	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/dnssec.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/opensslecdsa_link.c	[]	[]
/src/bind9/lib/isc/./include/isc/siphash.h	['isc_lex_getmastertoken_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/amtrelay_260.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/dhcid_49.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/eui48_108.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/error.c	['isc_lex_getmastertoken_fuzzer', 'dns_name_fromwire_fuzzer', 'isc_lex_gettoken_fuzzer', 'dns_name_fromtext_target_fuzzer', 'dns_qpkey_name_fuzzer', 'dns_qp_fuzzer', 'dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_master_load_fuzzer', 'dns_message_checksig_fuzzer']	['dns_master_load_fuzzer']
/src/bind9/fuzz/dns_message_parse.c	['dns_message_parse_fuzzer']	['dns_message_parse_fuzzer']
/src/bind9/lib/dns/./rdata/generic/lp_107.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/tls.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/rdatalist.c	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	['dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']
/src/bind9/lib/dns/xfrin.c	[]	[]
/src/bind9/lib/dns/badcache.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/dbiterator.c	[]	[]
/src/bind9/lib/dns/gssapictx.c	[]	[]
/src/bind9/lib/dns/callbacks.c	['dns_rdata_fromwire_text_fuzzer', 'dns_master_load_fuzzer']	['dns_rdata_fromwire_text_fuzzer', 'dns_master_load_fuzzer']
/src/bind9/lib/dns/./rdata/generic/mf_4.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/rbt.c	[]	[]
/src/bind9/lib/dns/./rdata/generic/mx_15.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/isc/radix.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/isc/iterated_hash.c	[]	[]
/src/bind9/lib/isc/sockaddr.c	['dns_message_checksig_fuzzer']	['dns_message_checksig_fuzzer']
/src/bind9/lib/dns/./rdata/in_1/apl_42.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/in_1/a6_38.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]
/src/bind9/fuzz/dns_master_load.c	['dns_master_load_fuzzer']	['dns_master_load_fuzzer']
/src/bind9/lib/isc/netmgr/tcp.c	['dns_message_checksig_fuzzer']	[]
/src/bind9/lib/dns/./rdata/generic/soa_6.c	['dns_rdata_fromtext_fuzzer', 'dns_rdata_fromwire_text_fuzzer', 'dns_message_parse_fuzzer', 'dns_message_checksig_fuzzer']	[]

Directories in report

Directory
/usr/include/x86_64-linux-gnu/bits/
/src/bind9/fuzz/../lib/isc/include/isc/
/src/bind9/lib/dns/./rdata/in_1/
/src/bind9/lib/isc/
/src/bind9/fuzz/./
/usr/include/x86_64-linux-gnu/urcu/
/src/bind9/lib/isc/netmgr/
/src/bind9/lib/isc/./
/src/bind9/tests/libtest/../../lib/dns/
/src/bind9/lib/dns/./include/dns/
/src/bind9/lib/dns/../../lib/isc/include/isc/
/src/bind9/fuzz/
/src/bind9/lib/dns/./rdata/hs_4/
/src/bind9/lib/dns/./rdata/any_255/
/src/bind9/lib/dns/
/src/bind9/lib/isc/./include/isc/
/src/bind9/lib/dns/./rdata/ch_3/
/src/bind9/tests/libtest/
/src/bind9/lib/dns/./rdata/generic/
/src/bind9/lib/dns/./