High level conclusions

Fuzzer fuzz_readelf_elf32_csky is blocked:

The runtime code coverage of fuzz_readelf_elf32_csky covers 1.522% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_readelf_elf64_mmix is blocked:

The runtime code coverage of fuzz_readelf_elf64_mmix covers 3.045% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_addr2line is blocked:

The runtime code coverage of fuzz_addr2line covers 26.23% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_strings is blocked:

The runtime code coverage of fuzz_strings covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_nm is blocked:

The runtime code coverage of fuzz_nm covers 29.26% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 17.52% of cyclomatic complexity.

Fuzzers reach 15.86% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1698 / 10703

Cyclomatic complexity statically reachable by fuzzers

20348 / 116136

Runtime code coverage of functions

2246 / 10703

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_ranlib_simulation

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	75	39.0%
gold	[1:9]	2	1.04%
yellow	[10:29]	5	2.60%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	110	57.2%
All colors	192	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
510	510	2 : View List ['build_plugin_list', 'try_load_plugin']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
266	1675	26 : View List ['image_write_q', 'bfd_getl16', 'alpha_vms_add_fixup_qr', 'alpha_vms_add_fixup_lr', 'dst_define_location', 'alpha_vms_add_fixup_ca', 'image_inc_ptr', 'image_write_w', '_bfd_vms_get_value', 'image_write_b', '_bfd_vms_pop', '_bfd_vms_push', '_bfd_abort', 'bfd_getl64', 'image_write_l', 'alpha_vms_add_fixup_lp', 'dst_restore_location', 'alpha_vms_add_qw_reloc', 'alpha_vms_fix_sec_rel', 'alpha_vms_add_lw_reloc', 'image_set_ptr', 'image_write', 'alpha_vms_sym_to_ctxt', 'dst_retrieve_location', 'bfd_getl32', 'alpha_vms_get_sym_value']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
228	261	2 : View List ['bfd_zalloc', 'bfd_pef_scan']	228	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:600
117	165	8 : View List ['filename_cmp', 'bfd_get_filename.42239', 'adjust_relative_path', 'normalize', '_bfd_ar_spacepad', 'bfd_alloc', 'bfd_is_thin_archive.42224', 'strlen']	117	165	_bfd_construct_extended_name_table	call site: 00000	/src/binutils-gdb/bfd/archive.c:1670
111	130	7 : View List ['_bfd_error_handler', 'dgettext', 'bfd_errmsg', 'bfd_open_file', 'bfd_get_error', 'bfd_set_error', '_bfd_real_fseek']	111	130	bfd_cache_lookup_worker	call site: 00000	/src/binutils-gdb/bfd/cache.c:247
82	82	1 : View List ['bfd_open_file']	82	82	io_reinit	call site: 00116	/src/binutils-gdb/bfd/format.c:171
71	73	3 : View List ['_bfd_error_handler', 'dgettext', 'bfd_link_hash_lookup']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['ppcboot_mkobject', 'bfd_make_section_with_flags', 'ppcboot_set_arch_mach']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
44	44	1 : View List ['s3_elf32_score_new_section_hook']	44	44	elf32_score_new_section_hook	call site: 00000	/src/binutils-gdb/bfd/elf32-score.c:4392
33	33	1 : View List ['bfd_pef_xlib_scan']	33	44	bfd_pef_xlib_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:1134

Runtime coverage analysis

Covered functions

729

Functions that are reachable but not covered

39

Reachable functions

101

Percentage of reachable functions covered

61.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_ranlib_simulation.c	1
bfd/opncls.c	8
bfd/bfd.c	8
bfd/libbfd.c	4
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	2
bfd/./targets.c	3
bfd/./bfd.h	4
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	2

Fuzzer: fuzz_dlltool

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	228	51.9%
gold	[1:9]	8	1.82%
yellow	[10:29]	3	0.68%
greenyellow	[30:49]	2	0.45%
lawngreen	50+	198	45.1%
All colors	439	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
636	869	16 : View List ['yyerror', 'xmalloc', 'def_name', 'def_description', 'def_library', 'def_section', 'def_version', 'yylex', 'def_data', 'malloc', 'strlen', 'def_stacksize', 'def_exports', 'def_heapsize', 'def_import', 'def_code']	636	877	yyparse	call site: 00162	/src/binutils-gdb/binutils/defparse.c:2111
510	510	2 : View List ['build_plugin_list', 'try_load_plugin']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
309	369	6 : View List ['bfd_bread', 'bfd_get_error', 'bfd_zalloc', 'setup_sections', 'som_swap_exec_auxhdr_in', 'som_object_setup']	309	391	som_object_p	call site: 00000	/src/binutils-gdb/bfd/som.c:2489
266	1675	26 : View List ['image_write_q', 'bfd_getl16', 'alpha_vms_add_fixup_qr', 'alpha_vms_add_fixup_lr', 'dst_define_location', 'alpha_vms_add_fixup_ca', 'image_inc_ptr', 'image_write_w', '_bfd_vms_get_value', 'image_write_b', '_bfd_vms_pop', '_bfd_vms_push', '_bfd_abort', 'bfd_getl64', 'image_write_l', 'alpha_vms_add_fixup_lp', 'dst_restore_location', 'alpha_vms_add_qw_reloc', 'alpha_vms_fix_sec_rel', 'alpha_vms_add_lw_reloc', 'image_set_ptr', 'image_write', 'alpha_vms_sym_to_ctxt', 'dst_retrieve_location', 'bfd_getl32', 'alpha_vms_get_sym_value']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
221	223	10 : View List ['_bfd_error_handler', '_bfd_elf_obj_attrs_arg_type', 'elf_add_obj_attr_string', 'bfd_elf_add_obj_attr_int', '_bfd_abort', '_bfd_safe_read_leb128', 'dgettext', 'strcmp', 'elf_add_obj_attr_int_string', 'strnlen']	221	223	_bfd_elf_parse_attributes	call site: 00000	/src/binutils-gdb/bfd/elf-attrs.c:496
149	689	10 : View List ['free', 'bfd_seek', 'bfd_create', 'bfd_bread', 'bfd_make_writable', 'bfd_zmalloc', 'bfd_close', 'bfd_getl32', 'bfd_bwrite', 'bfd_malloc']	149	788	pdb_get_elt_at_index	call site: 00000	/src/binutils-gdb/bfd/pdb.c:124
101	170	5 : View List ['_bfd_alloc_and_read.21591', 'bfd_set_error', 'bfd_seek', 'bfd_alloc', 'ecoff_slurp_symbolic_header']	101	170	_bfd_ecoff_slurp_symbolic_info	call site: 00000	/src/binutils-gdb/bfd/ecoff.c:529
71	73	3 : View List ['_bfd_error_handler', 'dgettext', 'bfd_link_hash_lookup']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['ppcboot_mkobject', 'bfd_make_section_with_flags', 'ppcboot_set_arch_mach']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
40	40	1 : View List ['bfd_fatal']	40	42	scan_all_symbols	call site: 00354	/src/binutils-gdb/binutils/./fuzz_dlltool.h:1643

Runtime coverage analysis

Covered functions

806

Functions that are reachable but not covered

79

Reachable functions

190

Percentage of reachable functions covered

58.42%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_dlltool.c	3
binutils/./fuzz_dlltool.h	23
binutils/bucomm.c	5
libiberty/./xexit.c	1
binutils/defparse.c	2
binutils/deflex.c	13
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	2
libiberty/./xmemdup.c	1
libiberty/./lbasename.c	2
libiberty/./concat.c	3
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	9
libiberty/./objalloc.c	4
bfd/hash.c	9
bfd/section.c	4
bfd/./targets.c	3
bfd/./bfd.h	6
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
bfd/archive.c	1
binutils/../bfd/bfd.h	8
libiberty/./xstrerror.c	1

Fuzzer: fuzz_bfd

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	106	46.9%
gold	[1:9]	1	0.44%
yellow	[10:29]	5	2.21%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	114	50.4%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
510	510	2 : View List ['build_plugin_list', 'try_load_plugin']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
268	1675	26 : View List ['image_write_q', 'bfd_getl16', 'alpha_vms_add_fixup_qr', 'alpha_vms_add_fixup_lr', 'dst_define_location', 'alpha_vms_add_fixup_ca', 'image_inc_ptr', 'image_write_w', '_bfd_vms_get_value', 'image_write_b', '_bfd_vms_pop', '_bfd_vms_push', '_bfd_abort', 'bfd_getl64', 'image_write_l', 'alpha_vms_add_fixup_lp', 'dst_restore_location', 'alpha_vms_add_qw_reloc', 'alpha_vms_fix_sec_rel', 'alpha_vms_add_lw_reloc', 'image_set_ptr', 'image_write', 'alpha_vms_sym_to_ctxt', 'dst_retrieve_location', 'bfd_getl32', 'alpha_vms_get_sym_value']	294	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
228	261	2 : View List ['bfd_zalloc', 'bfd_pef_scan']	228	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:600
111	130	7 : View List ['_bfd_error_handler', 'dgettext', 'bfd_errmsg', 'bfd_open_file', 'bfd_get_error', 'bfd_set_error', '_bfd_real_fseek']	111	130	bfd_cache_lookup_worker	call site: 00000	/src/binutils-gdb/bfd/cache.c:247
82	82	1 : View List ['bfd_open_file']	82	82	io_reinit	call site: 00154	/src/binutils-gdb/bfd/format.c:171
71	73	3 : View List ['_bfd_error_handler', 'dgettext', 'bfd_link_hash_lookup']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['ppcboot_mkobject', 'bfd_make_section_with_flags', 'ppcboot_set_arch_mach']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
44	44	1 : View List ['s3_elf32_score_new_section_hook']	44	44	elf32_score_new_section_hook	call site: 00000	/src/binutils-gdb/bfd/elf32-score.c:4392
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00118	/src/binutils-gdb/bfd/cache.c:499
22	22	1 : View List ['find_target']	22	22	bfd_find_target	call site: 00086	/src/binutils-gdb/bfd/./targets.c:1619

Runtime coverage analysis

Covered functions

700

Functions that are reachable but not covered

41

Reachable functions

106

Percentage of reachable functions covered

61.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/fuzz_bfd.c	2
bfd/bfd.c	13
bfd/./bfd.h	5
bfd/opncls.c	8
bfd/libbfd.c	4
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	2
bfd/./targets.c	3
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1

Fuzzer: fuzz_nm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1499	87.3%
gold	[1:9]	7	0.40%
yellow	[10:29]	4	0.23%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	207	12.0%
All colors	1717	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1866	1866	1 : View List ['print_symdef_entry']	1866	2763	display_archive	call site: 00204	/src/binutils-gdb/binutils/./fuzz_nm.h:1570
1786	1786	1 : View List ['bfd_demangle']	1860	1862	print_symname	call site: 00212	/src/binutils-gdb/binutils/./fuzz_nm.h:693
1066	1110	5 : View List ['som_set_reloc_info', 'free', 'bfd_get_symcount.39313', 'bfd_set_error', 'bfd_zalloc']	1066	1110	som_slurp_reloc_table	call site: 00000	/src/binutils-gdb/bfd/som.c:5315
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
906	974	3 : View List ['bfd_close', 'bfd_mach_o_dsym_for_uuid_p', 'bfd_mach_o_fat_extract']	906	974	bfd_mach_o_find_dsym	call site: 00000	/src/binutils-gdb/bfd/mach-o.c:6085
739	739	1 : View List ['read_rnglists']	739	739	read_rangelist	call site: 00000	/src/binutils-gdb/bfd/./dwarf2.c:3788
662	662	2 : View List ['get_opd_info', 'opd_entry_value']	662	662	ppc64_elf_maybe_function_sym	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:5736
658	658	1 : View List ['opd_entry_value']	658	658	ppc64_elf_branch_reloc	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:1474
510	510	2 : View List ['build_plugin_list', 'try_load_plugin']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
297	327	3 : View List ['bfd_alloc', 'bfd_pef_scan_section', 'bfd_pef_scan_start_address']	297	327	bfd_pef_scan	call site: 00000	/src/binutils-gdb/bfd/pef.c:529
266	1675	26 : View List ['image_write_q', 'bfd_getl16', 'alpha_vms_add_fixup_qr', 'alpha_vms_add_fixup_lr', 'dst_define_location', 'alpha_vms_add_fixup_ca', 'image_inc_ptr', 'image_write_w', '_bfd_vms_get_value', 'image_write_b', '_bfd_vms_pop', '_bfd_vms_push', '_bfd_abort', 'bfd_getl64', 'image_write_l', 'alpha_vms_add_fixup_lp', 'dst_restore_location', 'alpha_vms_add_qw_reloc', 'alpha_vms_fix_sec_rel', 'alpha_vms_add_lw_reloc', 'image_set_ptr', 'image_write', 'alpha_vms_sym_to_ctxt', 'dst_retrieve_location', 'bfd_getl32', 'alpha_vms_get_sym_value']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987

Runtime coverage analysis

Covered functions

1229

Functions that are reachable but not covered

261

Reachable functions

369

Percentage of reachable functions covered

29.27%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_nm.c	1
binutils/./fuzz_nm.h	19
binutils/bucomm.c	6
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	13
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	3
bfd/./targets.c	3
bfd/./bfd.h	6
bfd/bfdio.c	4
bfd/cache.c	8
libiberty/./xstrerror.c	1
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	15
bfd/archive.c	2
libiberty/./cplus-dem.c	2
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
libiberty/./concat.c	4
bfd/./archures.c	1

Fuzzer: fuzz_strings

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	357	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	357	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
356	0	EP	call site: 00000	strings_object_file

Runtime coverage analysis

Covered functions

0

Functions that are reachable but not covered

166

Reachable functions

166

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_strings.c	1
binutils/./fuzz_strings.h	12
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	9
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	5
bfd/./targets.c	3
bfd/./bfd.h	8
bfd/bfdio.c	5
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	1
bfd/compress.c	3
zlib/inflate.c	10
zlib/zutil.c	2
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/bucomm.c	3
libiberty/./xmalloc.c	2
libiberty/./xexit.c	1
libiberty/./xstrerror.c	1

Fuzzer: fuzz_bfd_ext

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	95	53.6%
gold	[1:9]	1	0.56%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	15	8.47%
lawngreen	50+	66	37.2%
All colors	177	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['close_one']	31	147	bfd_open_file	call site: 00157	/src/binutils-gdb/bfd/cache.c:586
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00118	/src/binutils-gdb/bfd/cache.c:499
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00062	/src/binutils-gdb/bfd/bfd.c:772
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00145	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00097	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00092	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00084	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00119	/src/binutils-gdb/bfd/cache.c:98
0	33	2 : View List ['_objalloc_alloc', 'bfd_set_error']	0	63	bfd_hash_lookup	call site: 00000	/src/binutils-gdb/bfd/hash.c:571
0	23	2 : View List ['_bfd_delete_bfd', 'bfd_set_error']	0	23	bfd_openw	call site: 00156	/src/binutils-gdb/bfd/opncls.c:785
0	16	2 : View List ['bfd_hash_table_free', 'bfd_set_error']	0	16	bfd_hash_table_init_n	call site: 00071	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	14	bfd_cache_delete	call site: 00125	/src/binutils-gdb/bfd/cache.c:168

Runtime coverage analysis

Covered functions

85

Functions that are reachable but not covered

39

Reachable functions

82

Percentage of reachable functions covered

52.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/fuzz_bfd_ext.c	2
bfd/bfd.c	10
bfd/./bfd.h	4
bfd/opncls.c	9
bfd/libbfd.c	3
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/bfdio.c	4
bfd/cache.c	7
libiberty/./unlink-if-ordinary.c	1

Fuzzer: fuzz_addr2line

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1434	88.9%
gold	[1:9]	1	0.06%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	178	11.0%
All colors	1613	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3954	3954	3 : View List ['stash_maybe_enable_info_hash_tables', 'stash_maybe_update_info_hash_tables', 'stash_find_line_fast']	7818	11483	_bfd_dwarf2_find_nearest_line_with_alt	call site: 00000	/src/binutils-gdb/bfd/./dwarf2.c:5872
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
906	974	3 : View List ['bfd_close', 'bfd_mach_o_dsym_for_uuid_p', 'bfd_mach_o_fat_extract']	906	974	bfd_mach_o_find_dsym	call site: 00000	/src/binutils-gdb/bfd/mach-o.c:6085
739	739	1 : View List ['read_rnglists']	739	739	read_rangelist	call site: 00000	/src/binutils-gdb/bfd/./dwarf2.c:3788
662	662	2 : View List ['get_opd_info', 'opd_entry_value']	662	662	ppc64_elf_maybe_function_sym	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:5736
658	658	1 : View List ['opd_entry_value']	658	658	ppc64_elf_branch_reloc	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:1474
510	510	2 : View List ['build_plugin_list', 'try_load_plugin']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
266	2155	27 : View List ['image_write_q', 'bfd_getl16', 'alpha_vms_add_fixup_qr', 'alpha_vms_add_fixup_lr', 'alpha_vms_add_fixup_ca', 'image_inc_ptr', 'image_write_w', '_bfd_vms_get_value', 'image_write_b', 'bfd_getl32', '_bfd_vms_pop', '_bfd_vms_etir_name', '_bfd_vms_push', '_bfd_abort', 'bfd_getl64', 'image_write_l', 'alpha_vms_add_fixup_lp', 'dst_restore_location', 'alpha_vms_add_qw_reloc', 'alpha_vms_fix_sec_rel', 'alpha_vms_add_lw_reloc', 'image_set_ptr', 'image_write', 'alpha_vms_sym_to_ctxt', 'dst_retrieve_location', 'dst_define_location', 'alpha_vms_get_sym_value']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1984
221	221	4 : View List ['elf_hash_table_id.13418', '_bfd_generic_link_add_one_symbol', 'elf_hash_table.13416', 'is_elf_hash_table.13417']	221	221	ppc64_elf_set_toc	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:14562
203	1241	3 : View List ['find_nested_archive', '_bfd_get_elt_at_filepos', 'bfd_check_format']	203	1248	_bfd_get_elt_at_filepos	call site: 00000	/src/binutils-gdb/bfd/archive.c:706
87	89	4 : View List ['_bfd_error_handler', 'bfd_get_symcount.21532', 'dgettext', 'ecoff_set_symbol_info']	87	111	_bfd_ecoff_slurp_symbol_table	call site: 00000	/src/binutils-gdb/bfd/ecoff.c:985

Runtime coverage analysis

Covered functions

1126

Functions that are reachable but not covered

253

Reachable functions

343

Percentage of reachable functions covered

26.24%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_addr2line.c	1
libiberty/./xmalloc.c	3
libiberty/./xexit.c	1
libiberty/./xstrdup.c	1
binutils/./fuzz_addr2line.h	7
binutils/bucomm.c	6
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	13
libiberty/./objalloc.c	4
bfd/hash.c	9
bfd/section.c	4
bfd/./targets.c	3
bfd/./bfd.h	6
bfd/bfdio.c	4
bfd/cache.c	8
libiberty/./xstrerror.c	1
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	7
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
bfd/./archures.c	1

Fuzzer: fuzz_as

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2111	58.6%
gold	[1:9]	279	7.74%
yellow	[10:29]	98	2.72%
greenyellow	[30:49]	25	0.69%
lawngreen	50+	1089	30.2%
All colors	3602	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
7374	7848	13 : View List ['symbol_temp_new_now', 'x86_support_sframe_p', 'free', 'bfd_get_arch_size', 'output_sframe', 'htab_delete', 'x86_dwarf2_addr_size', 'get_cfi_seg', 'ffs', 'gettext', 'as_bad', 'output_fde', 'select_cie_for_fde']	7374	7848	cfi_finish	call site: 03285	/src/binutils-gdb/gas/dw2gencfi.c:2315
1567	2045	6 : View List ['record_alignment', 'bfd_set_section_flags', 'subseg_new', 'ffs', 'out_debug_rnglists', 'out_debug_ranges']	1567	4443	dwarf2_finish	call site: 03090	/src/binutils-gdb/gas/dwarf2dbg.c:3241
1247	1247	1 : View List ['s_mri_common']	1247	1247	obj_elf_common	call site: 00000	/src/binutils-gdb/gas/config/obj-elf.c:355
1240	2412	6 : View List ['as_abort', 'i386_scale', 'strchr', 'parse_register', 'gettext', 'as_bad']	1240	3970	i386_att_operand	call site: 02126	/src/binutils-gdb/gas/config/tc-i386.c:12503
809	1605	12 : View List ['operand_type_all_zero', 'as_abort', 'intel_float_operand', 'cpu_flags_match', 'check_VecOperands', 'operand_type_check', 'operand_type_and', 'VEX_check_encoding', 'progress', 'operand_type_register_match', 'operand_size_match', 'operand_type_match']	813	1784	match_template	call site: 02243	/src/binutils-gdb/gas/config/tc-i386.c:6858
809	1605	12 : View List ['operand_type_all_zero', 'as_abort', 'intel_float_operand', 'cpu_flags_match', 'check_VecOperands', 'operand_type_check', 'operand_type_and', 'VEX_check_encoding', 'progress', 'operand_type_register_match', 'operand_size_match', 'operand_type_match']	813	1784	match_template	call site: 02289	/src/binutils-gdb/gas/config/tc-i386.c:7189
691	691	1 : View List ['i386_intel_simplify']	699	699	x86_cons	call site: 01187	/src/binutils-gdb/gas/config/tc-i386.c:10592
539	539	1 : View List ['output_jump']	539	627	output_insn	call site: 02671	/src/binutils-gdb/gas/config/tc-i386.c:9653
515	515	1 : View List ['output_interseg_jump']	515	603	output_insn	call site: 02683	/src/binutils-gdb/gas/config/tc-i386.c:9656
448	2040	15 : View List ['as_abort', 'S_SET_SEGMENT', 'symbol_set_frag', 'S_SET_WEAKREFD', 'S_SET_WEAKREFR', 'symbol_find_noref', 'concat', 'md_undefined_symbol', 'symbol_get_value_expression', 'read_symbol_name', 'S_IS_WEAKREFR', 'symbol_set_value_expression', 'S_GET_NAME', 'demand_empty_rest_of_line', 'symbol_find_or_make']	450	2126	s_weakref	call site: 00000	/src/binutils-gdb/gas/read.c:3794
398	398	1 : View List ['check_VecOperations']	1640	4451	i386_att_operand	call site: 02123	/src/binutils-gdb/gas/config/tc-i386.c:12466
386	386	4 : View List ['check_long_reg', 'check_qword_reg', 'check_byte_reg', 'check_word_reg']	568	1310	process_suffix	call site: 02445	/src/binutils-gdb/gas/config/tc-i386.c:7313

Runtime coverage analysis

Covered functions

615

Functions that are reachable but not covered

272

Reachable functions

774

Percentage of reachable functions covered

64.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz_as.c	2
gas/./fuzz_as.h	5
libiberty/./getruntime.c	1
gas/messages.c	16
gas/input-scrub.c	15
libiberty/./xexit.c	1
libiberty/./hex.c	1
bfd/bfd.c	14
bfd/./bfd.h	4
libiberty/./unlink-if-ordinary.c	1
libiberty/./obstack.c	6
libiberty/./xmalloc.c	5
libiberty/./argv.c	5
libiberty/./xstrdup.c	1
gas/read.c	56
gas/symbols.c	83
libiberty/./hashtab.c	18
gas/frags.c	17
gas/subsegs.c	12
gas/./hash.h	5
gas/hash.c	3
gas/config/obj-elf.c	9
gas/stabs.c	8
gas/input-file.c	9
gas/app.c	7
gas/expr.c	20
gas/ehopt.c	3
gas/macro.c	14
gas/sb.c	14
gas/dwarf2dbg.c	47
gas/output-file.c	3
gas/../bfd/bfd.h	14
bfd/opncls.c	7
bfd/hash.c	8
libiberty/./objalloc.c	3
gas/config/tc-i386.c	131
gas/listing.c	9
libiberty/./concat.c	3
bfd/libbfd.c	3
bfd/section.c	7
bfd/./targets.c	2
bfd/cache.c	7
bfd/bfdio.c	3
libiberty/./xstrerror.c	1
bfd/format.c	1
gas/write.c	6
libiberty/./filename_cmp.c	2
gas/depend.c	1
libiberty/./getpwd.c	1
gas/remap.c	1
gas/atof-generic.c	1
gas/flonum-mult.c	1
gas/flonum-copy.c	1
gas/./config/tc-i386-intel.c	9
bfd/reloc.c	1
gas/cond.c	3
gas/./as.h	1
libiberty/./xmemdup.c	1
gas/ecoff.c	1
gas/codeview.c	2
bfd/syms.c	1
bfd/./archures.c	1
libiberty/./lbasename.c	2
gas/dw2gencfi.c	19
gas/gen-sframe.c	44

Fuzzer: fuzz_readelf_elf64_mmix

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6589	99.3%
gold	[1:9]	43	0.64%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	2	0.03%
All colors	6634	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2075	2377	18 : View List ['_bfd_error_handler', 'elf_swap_ehdr_in', 'bfd_section_from_shdr', 'bfd_seek', 'bfd_default_set_arch_mach', 'bfd_alloc', 'bfd_set_start_address', 'bfd_section_from_elf_index', 'bfd_header_little_endian', '_bfd_elf_setup_sections', 'bfd_elf64_swap_phdr_in', 'dgettext', 'bfd_bread', 'elf_swap_shdr_in', 'bfd_get_file_size', 'bfd_header_big_endian', 'elf_file_p', 'bfd_zalloc']	2075	2388	bfd_elf64_object_p	call site: 00000	/src/binutils-gdb/bfd/./elfcode.h:519
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00072	/src/binutils-gdb/bfd/cache.c:499
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00009	/src/binutils-gdb/bfd/bfd.c:772
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00099	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00051	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00046	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00038	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00073	/src/binutils-gdb/bfd/cache.c:98
2	2	1 : View List ['remove']	2	2	check_architecture	call site: 00004	/src/binutils-gdb/binutils/fuzz_readelf.c:29
0	16	2 : View List ['bfd_hash_table_free', 'bfd_set_error']	0	16	bfd_hash_table_init_n	call site: 00025	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	14	bfd_cache_delete	call site: 00079	/src/binutils-gdb/bfd/cache.c:168
0	11	1 : View List ['bfd_set_error']	0	11	bfd_bread	call site: 00000	/src/binutils-gdb/bfd/bfdio.c:276

Runtime coverage analysis

Covered functions

44

Functions that are reachable but not covered

955

Reachable functions

985

Percentage of reachable functions covered

3.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	2
bfd/opncls.c	8
bfd/libbfd.c	3
bfd/bfd.c	4
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/./bfd.h	3
bfd/bfdio.c	4
bfd/cache.c	6
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	240
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	37
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Fuzzer: fuzz_readelf_elf32_csky

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6608	99.6%
gold	[1:9]	23	0.34%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	3	0.04%
All colors	6634	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
107	118	7 : View List ['fclose', 'bfd_cache_init', 'fdopen', 'bfd_set_error', '_bfd_real_fopen', 'bfd_set_cacheable', 'bfd_set_filename']	109	156	bfd_fopen	call site: 00038	/src/binutils-gdb/bfd/opncls.c:274
96	96	2 : View List ['bfd_seek', 'bfd_close']	96	96	check_architecture	call site: 00004	/src/binutils-gdb/binutils/fuzz_readelf.c:29
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00009	/src/binutils-gdb/bfd/bfd.c:772
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00038	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['close']	2	14	bfd_fopen	call site: 00038	/src/binutils-gdb/bfd/opncls.c:276
2	2	1 : View List ['bfd_get_filename']	2	2	_bfd_delete_bfd	call site: 00046	/src/binutils-gdb/bfd/opncls.c:164
0	16	2 : View List ['bfd_hash_table_free', 'bfd_set_error']	0	16	bfd_hash_table_init_n	call site: 00025	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	11	bfd_malloc	call site: 00009	/src/binutils-gdb/bfd/libbfd.c:291
0	11	1 : View List ['bfd_set_error']	0	11	_bfd_new_bfd	call site: 00019	/src/binutils-gdb/bfd/opncls.c:93
0	0	None	2	2	bfd_fopen	call site: 00006	/src/binutils-gdb/bfd/opncls.c:266
0	0	None	0	57	_bfd_new_bfd	call site: 00007	/src/binutils-gdb/bfd/opncls.c:84
0	0	None	0	11	bfd_hash_table_init_n	call site: 00021	/src/binutils-gdb/bfd/hash.c:435

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

970

Reachable functions

985

Percentage of reachable functions covered

1.52%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	2
bfd/opncls.c	8
bfd/libbfd.c	3
bfd/bfd.c	4
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/./bfd.h	3
bfd/bfdio.c	4
bfd/cache.c	6
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	240
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	37
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Fuzzer: fuzz_readelf

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3855	58.9%
gold	[1:9]	284	4.34%
yellow	[10:29]	299	4.57%
greenyellow	[30:49]	122	1.86%
lawngreen	50+	1979	30.2%
All colors	6539	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2279	5870	8 : View List ['display_data', 'warn', 'load_dwo_file', 'load_debug_section', 'error', 'process_debug_info', 'gettext', 'free_dwo_info']	2279	6990	load_separate_debug_files	call site: 03361	/src/binutils-gdb/binutils/./dwarf.c:12024
167	257	3 : View List ['is_ia64_vms', 'offset_from_vma', 'process_ia64_vms_dynamic_relocs']	175	6171	process_relocs	call site: 01489	/src/binutils-gdb/binutils/./readelf.h:8416
125	125	1 : View List ['guess_is_rela']	167	4861	dump_relocations	call site: 01495	/src/binutils-gdb/binutils/./readelf.h:1485
16	38839	12 : View List ['strlen', 'memcmp', 'get_archive_member_name', 'fseek64', 'rewind', 'adjust_relative_path', 'fread', 'strtoul', 'process_object', 'close_file', 'open_file', 'make_qualified_name']	34	38893	process_archive	call site: 00203	/src/binutils-gdb/binutils/./readelf.h:22942
14	26	2 : View List ['gettext', 'warn']	14	26	get_elf_section_flags	call site: 00987	/src/binutils-gdb/binutils/./readelf.h:7063
8	244	6 : View List ['get_archive_member_name_at', 'ngettext', 'print_vma', 'ftell', 'putchar', 'strnlen']	52	39190	process_archive	call site: 00033	/src/binutils-gdb/binutils/./readelf.h:22774
7	7	2 : View List ['gettext', 'xexit']	7	7	xcmalloc	call site: 03148	/src/binutils-gdb/binutils/./dwarf.c:11221
4	8	3 : View List ['error', 'abort', 'gettext']	4	8	byte_put_little_endian	call site: 00213	/src/binutils-gdb/binutils/elfcomm.c:71
4	8	3 : View List ['error', 'abort', 'gettext']	4	8	byte_put_big_endian	call site: 00218	/src/binutils-gdb/binutils/elfcomm.c:86
4	4	1 : View List ['free_debug_information']	18	21	free_debug_memory	call site: 06513	/src/binutils-gdb/binutils/./dwarf.c:12151
2	251	2 : View List ['get_archive_member_name', 'memcmp']	4	257	get_archive_member_name_at	call site: 00103	/src/binutils-gdb/binutils/elfcomm.c:736
2	6	2 : View List ['error', 'gettext']	2	6	make_qualified_name	call site: 00151	/src/binutils-gdb/binutils/elfcomm.c:778

Runtime coverage analysis

Covered functions

387

Functions that are reachable but not covered

605

Reachable functions

940

Percentage of reachable functions covered

35.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	1
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	240
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	37
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
spu_elf_final_link	/src/binutils-gdb/bfd/elf32-spu.c	2	['struct.bfd *', 'struct.bfd_link_info *']	6	0	161	25	10	394	0	4531	3661
_bfd_mips_elf_find_nearest_line	/src/binutils-gdb/bfd/elfxx-mips.c	8	['struct.bfd.478 *', 'struct.bfd_symbol.480 **', 'struct.bfd_section.484 *', 'size_t ', 'char **', 'char **', 'int *', 'int *']	8	0	347	35	14	343	0	2856	1705
elf_xtensa_relax_section	/src/binutils-gdb/bfd/elf32-xtensa.c	4	['struct.bfd *', 'struct.bfd_section *', 'struct.bfd_link_info *', 'char *']	5	0	166	32	10	305	0	2306	1501
nds32_elf_relax_section	/src/binutils-gdb/bfd/elf32-nds32.c	4	['struct.bfd *', 'struct.bfd_section *', 'struct.bfd_link_info *', 'char *']	5	0	1241	189	59	170	0	2008	1239
ctf_link	/src/binutils-gdb/libctf/ctf-link.c	2	['struct.ctf_dict *', 'int ']	9	0	186	28	12	434	0	3119	1128

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

2502 / 10703

Cyclomatic complexity statically reachable by fuzzers

29570 / 116136

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
cris_aout_32_machine_type	111	15	13.51%	[]
_bfd_construct_extended_name_table	131	14	10.68%	[]
_bfd_write_archive_contents	124	33	26.61%	[]
bfd_scan_vma	55	7	12.72%	['fuzz_addr2line']
coff_aarch64_reloc_type_lookup	41	9	21.95%	[]
xcoff_write_archive_contents_old	185	78	42.16%	[]
xcoff_write_archive_contents_big	196	76	38.77%	[]
coff_amd64_reloc_type_lookup	35	9	25.71%	[]
bfd_get_full_section_contents	103	42	40.77%	['fuzz_strings']
elf_parse_notes	82	41	50.0%	[]
arc_elf_object_p	43	21	48.83%	[]
bfd_arm_get_mach_from_attributes	69	9	13.04%	[]
_bfd_elf_ppc_set_arch	66	22	33.33%	[]
rx_get_section_contents	50	9	18.0%	[]
pdb_write_directory	139	26	18.70%	[]
_bfd_peAArch64i_slurp_codeview_record	42	20	47.61%	[]
_bfd_peLoongArch64i_slurp_codeview_record	42	20	47.61%	[]
_bfd_pepi_slurp_codeview_record	42	20	47.61%	[]
_bfd_vms_get_value	40	11	27.50%	[]
_bfd_vms_etir_name	57	29	50.87%	[]
_bfd_vms_lib_write_archive_contents	214	92	42.99%	[]
vms_write_index	225	20	8.888%	[]
_bfd_vms_lib_build_map	71	14	19.71%	[]
elf32_ia64_object_p	69	13	18.84%	[]
bfd_mach_o_read_symtab_strtab	32	17	53.12%	[]
yy_get_next_buffer	89	47	52.80%	['fuzz_dlltool']
yyparse	622	100	16.07%	['fuzz_dlltool']
scan_drectve_symbols	66	9	13.63%	['fuzz_dlltool']
ns32kaout_32_get_reloc_upper_bound	32	16	50.0%	[]
aout_32_get_reloc_upper_bound	32	16	50.0%	[]
go32exe_create_stub	93	23	24.73%	[]
coff_slurp_reloc_table	63	24	38.09%	[]
dwarf1_unit_find_nearest_line	46	17	36.95%	[]
parse_line_table	52	9	17.30%	[]
read_indexed_string	35	16	45.71%	[]
lookup_line	331	172	51.96%	[]
_bfd_elf_get_symbol_version_string	49	13	26.53%	[]
mips_elf_assign_gp	33	17	51.51%	[]
ppc64_elf_set_toc	84	40	47.61%	[]
ppc64_elf_ha_reloc	40	16	40.0%	[]
ppc64_elf_branch_reloc	40	17	42.5%	[]
ppc64_elf_maybe_function_sym	39	21	53.84%	[]
aout_16_get_reloc_upper_bound	32	16	50.0%	[]
som_slurp_reloc_table	45	16	35.55%	[]
print_symname	44	22	50.0%	['fuzz_nm']
display_rel_file	96	48	50.0%	['fuzz_nm']
lrealpath	37	8	21.62%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
splay_tree_splay	49	15	30.61%	[]
_bfd_elf_get_property	35	14	40.0%	[]
som_find_nearest_line	37	14	37.83%	[]
alpha_vms_read_sections_content	64	22	34.37%	[]
translate_addresses	113	61	53.98%	['fuzz_addr2line']
s_elseif	62	29	46.77%	[]
atof_ieee	47	22	46.80%	[]
gen_to_words	266	67	25.18%	[]
ieee_md_atof	81	43	53.08%	[]
elf_common_parse	58	27	46.55%	[]
obj_elf_change_section	179	59	32.96%	[]
obj_elf_section_name	51	19	37.25%	[]
obj_elf_section	285	35	12.28%	[]
obj_elf_type	120	64	53.33%	[]
i386_operator	81	4	4.938%	['fuzz_as']
md_assemble	418	178	42.58%	['fuzz_as']
x86_cons	57	28	49.12%	['fuzz_as']
md_operand	34	16	47.05%	['fuzz_as']
i386_target_format	86	33	38.37%	['fuzz_as']
set_cpu_arch	200	42	21.0%	[]
add_prefix	60	31	51.66%	['fuzz_as']
build_vex_prefix	125	59	47.19%	['fuzz_as']
insert_lfence_before	91	9	9.890%	['fuzz_as']
check_register	61	29	47.54%	['fuzz_as']
i386_addressing_mode	51	20	39.21%	['fuzz_as']
i386_index_check	118	64	54.23%	['fuzz_as']
i386_att_operand	297	63	21.21%	['fuzz_as']
optimize_imm	122	64	52.45%	['fuzz_as']
smallest_imm_type	44	16	36.36%	['fuzz_as']
match_template	400	175	43.75%	['fuzz_as']
check_VecOperands	337	33	9.792%	['fuzz_as']
process_suffix	361	98	27.14%	['fuzz_as']
update_imm	76	14	18.42%	['fuzz_as']
process_operands	217	36	16.58%	['fuzz_as']
build_modrm_byte	328	66	20.12%	['fuzz_as']
output_insn	393	197	50.12%	['fuzz_as']
add_branch_padding_frag_p	70	7	10.0%	['fuzz_as']
output_branch	69	36	52.17%	['fuzz_as']
output_disp	126	50	39.68%	['fuzz_as']
output_imm	58	21	36.20%	['fuzz_as']
reloc	96	37	38.54%	['fuzz_as']
parse_real_register	52	22	42.30%	['fuzz_as']
update_code_flag	33	17	51.51%	['fuzz_as']
cfi_finish	157	8	5.095%	['fuzz_as']
dwarf2_gen_line_info	37	15	40.54%	['fuzz_as']
dwarf2_directive_loc	178	31	17.41%	[]
allocate_filename_to_slot	142	63	44.36%	[]
emit_inc_line_addr	60	25	41.66%	['fuzz_as']
out_dir_and_file_list	170	86	50.58%	['fuzz_as']
out_debug_abbrev	90	35	38.88%	['fuzz_as']
out_debug_info	129	47	36.43%	['fuzz_as']
check_eh_frame	145	37	25.51%	['fuzz_as']
get_cie_info	98	21	21.42%	['fuzz_as']
integer_constant	256	138	53.90%	['fuzz_as']
frag_offset_fixed_p	38	9	23.68%	['fuzz_as']
input_file_open	68	35	51.47%	['fuzz_as']
listing_newline	102	8	7.843%	['fuzz_as']
do_formals	102	40	39.21%	[]
macro_expand_body	195	58	29.74%	['fuzz_as']
get_any_string	97	47	48.45%	['fuzz_as']
parse_align	36	13	36.11%	[]
do_repeat	46	22	47.82%	[]
s_weakref	82	18	21.95%	[]
emit_expr_with_reloc	221	104	47.05%	['fuzz_as']
emit_leb128_expr	73	24	32.87%	['fuzz_as']
s_reloc	113	58	51.32%	[]
do_org	33	16	48.48%	['fuzz_as']
parse_one_float	31	16	51.61%	[]
resolve_symbol_value	371	143	38.54%	['fuzz_as']
expandargv	79	20	25.31%	['fuzz_as']
libiberty_vprintf_buffer_size	68	34	50.0%	[]
elf_nds32_reloc_type	138	75	54.34%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
elf_nfp3200_reloc_type	34	13	38.23%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
elf_rx_reloc_type	52	16	30.76%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
elf_sh_reloc_type	124	54	43.54%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
elf_tilegx_reloc_type	122	65	53.27%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
load_separate_debug_files	76	12	15.78%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
check_for_and_load_links	37	7	18.91%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
load_debug_sup_file	55	3	5.454%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
load_build_id_debug_file	57	3	5.263%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
byte_get_little_endian	52	28	53.84%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
byte_get_big_endian	52	24	46.15%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
process_archive_index_and_symbols	109	29	26.60%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
load_debug_section	38	6	15.78%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
get_mips_section_type_name	49	24	48.97%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
get_elf_section_flags	281	118	41.99%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
get_parisc_dynamic_type	31	14	45.16%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
process_section_contents	58	7	12.06%	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/binutils-gdb/binutils/./../include/elf/sparc.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/peXXigen.c	[]	[]
/src/binutils-gdb/bfd/elf32-xgate.c	[]	[]
/src/binutils-gdb/bfd/./peicode.h	[]	[]
/src/binutils-gdb/libiberty/./cp-demangle.c	['fuzz_nm', 'fuzz_addr2line', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-score7.c	[]	[]
/src/binutils-gdb/bfd/coff-mips.c	[]	[]
/src/binutils-gdb/zlib/crc32.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-xtensa.c	[]	[]
/src/binutils-gdb/libctf/ctf-sha1.c	[]	[]
/src/binutils-gdb/bfd/elf32-bfin.c	[]	[]
/src/binutils-gdb/bfd/elf32-sh.c	[]	[]
/src/binutils-gdb/bfd/elf32-avr.c	[]	[]
/src/binutils-gdb/bfd/elf32-ip2k.c	[]	[]
/src/binutils-gdb/bfd/./arc-got.h	[]	[]
/src/binutils-gdb/bfd/./coff-sh.c	[]	[]
/src/binutils-gdb/bfd/aout-cris.c	[]	[]
/src/binutils-gdb/bfd/mach-o-arm.c	[]	[]
/src/binutils-gdb/gas/app.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./elf-s390-common.c	[]	[]
/src/binutils-gdb/gas/config/obj-elf.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/zlib/uncompr.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-m68hc11.c	[]	[]
/src/binutils-gdb/gas/hash.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/tilepro.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/aarch64.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/macro.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libiberty/./xmalloc.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./xatexit.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/x86-64.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/dwarf1.c	[]	[]
/src/binutils-gdb/gas/depend.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/bucomm.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line']	['fuzz_dlltool', 'fuzz_nm', 'fuzz_addr2line']
/src/binutils-gdb/libiberty/./hex.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf32-cris.c	[]	[]
/src/binutils-gdb/libiberty/./xexit.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./xasprintf.c	[]	[]
/src/binutils-gdb/binutils/elfcomm.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	['fuzz_readelf']
/src/binutils-gdb/binutils/./../include/elf/ip2k.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/pc532-mach.c	[]	[]
/src/binutils-gdb/bfd/elf64-mips.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./pex-unix.c	[]	[]
/src/binutils-gdb/bfd/./coff-arm.c	[]	[]
/src/binutils-gdb/bfd/elf64-sparc.c	[]	[]
/src/binutils-gdb/bfd/elf-nacl.c	[]	[]
/src/binutils-gdb/gas/flonum-mult.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libctf/./ctf-decls.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/i960.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/cpu-sh.c	[]	[]
/src/binutils-gdb/bfd/elf32-i386.c	[]	[]
/src/binutils-gdb/bfd/elf64-x86-64.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/avr.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./cplus-dem.c	['fuzz_nm', 'fuzz_addr2line', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/zlib/zutil.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/bfd.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']
/src/binutils-gdb/binutils/fuzz_dlltool.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/bfd/elf32-m32c.c	[]	[]
/src/binutils-gdb/bfd/cpu-nios2.c	[]	[]
/src/binutils-gdb/bfd/elf32-z80.c	[]	[]
/src/binutils-gdb/libctf/ctf-string.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf64-mmix.c	[]	[]
/src/binutils-gdb/bfd/xtensa-dynconfig.c	[]	[]
/src/binutils-gdb/gas/read.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libctf/ctf-open-bfd.c	[]	[]
/src/binutils-gdb/bfd/elfnn-ia64.c	[]	[]
/src/binutils-gdb/bfd/syms.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf64-alpha.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/score.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/reloc16.c	[]	[]
/src/binutils-gdb/bfd/elf32-metag.c	[]	[]
/src/binutils-gdb/bfd/elf64-amdgcn.c	[]	[]
/src/binutils-gdb/gas/sb.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-moxie.c	[]	[]
/src/binutils-gdb/gas/./hash.h	['fuzz_as']	[]
/src/binutils-gdb/libctf/./ctf-inlines.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-arm.c	[]	[]
/src/binutils-gdb/bfd/pei-x86_64.c	[]	[]
/src/binutils-gdb/bfd/elf32-microblaze.c	[]	[]
/src/binutils-gdb/gas/config/tc-i386.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/pj.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/mips.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-util.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/m32c.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./dwarf.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-archive.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf-properties.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/iq2000.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/write.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/gas/dwarf2dbg.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/som.c	[]	[]
/src/binutils-gdb/gas/atof-generic.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elfxx-mips.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/s390.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/ecoff.c	[]	[]
/src/binutils-gdb/bfd/cpu-i386.c	[]	[]
/src/binutils-gdb/bfd/cpu-cris.c	[]	[]
/src/binutils-gdb/bfd/elf32-epiphany.c	[]	[]
/src/binutils-gdb/bfd/elf32-xstormy16.c	[]	[]
/src/binutils-gdb/libiberty/./vprintf-support.c	[]	[]
/src/binutils-gdb/bfd/srec.c	[]	[]
/src/binutils-gdb/gas/./fuzz_as.h	['fuzz_as']	[]
/src/binutils-gdb/bfd/elfxx-x86.c	[]	[]
/src/binutils-gdb/bfd/./elf-hppa.h	[]	[]
/src/binutils-gdb/binutils/fuzz_nm.c	['fuzz_nm']	['fuzz_nm']
/src/binutils-gdb/bfd/elf64-nfp.c	[]	[]
/src/binutils-gdb/gas/compress-debug.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/rl78.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/mcore.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./../include/opcode/arc-func.h	[]	[]
/src/binutils-gdb/bfd/elf32-d30v.c	[]	[]
/src/binutils-gdb/bfd/./archures.c	['fuzz_nm', 'fuzz_addr2line', 'fuzz_as']	[]
/src/binutils-gdb/binutils/./../include/elf/arm.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/csky.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./fuzz_dlltool.h	['fuzz_dlltool']	[]
/src/binutils-gdb/bfd/elf64-ppc.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/s12z.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-vax.c	[]	[]
/src/binutils-gdb/gas/ehopt.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-m68k.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/v850.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./filename_cmp.c	['fuzz_as']	[]
/src/binutils-gdb/libctf/ctf-decl.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/aix5ppc-core.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/tic6x.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-m68hc1x.c	[]	[]
/src/binutils-gdb/bfd/elf32-d10v.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/loongarch.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./getpwd.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/ppcboot.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/h8.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf64-bpf.c	[]	[]
/src/binutils-gdb/bfd/./cpu-ia64-opc.c	[]	[]
/src/binutils-gdb/bfd/./coff-x86_64.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/tilegx.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/microblaze.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/metag.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./elfcore.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/frv.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/fuzz_addr2line.c	['fuzz_addr2line']	['fuzz_addr2line']
/src/binutils-gdb/bfd/format.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line', 'fuzz_as']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_addr2line', 'fuzz_as']
/src/binutils-gdb/gas/symbols.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-sparc.c	[]	[]
/src/binutils-gdb/bfd/elf32-lm32.c	[]	[]
/src/binutils-gdb/fuzz/fuzz_bfd_ext.c	['fuzz_bfd_ext']	['fuzz_bfd_ext']
/src/binutils-gdb/libctf/ctf-lookup.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-z80.c	[]	[]
/src/binutils-gdb/libiberty/./xstrndup.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nds32.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/config/atof-ieee.c	[]	[]
/src/binutils-gdb/libctf/ctf-create.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./coff-ia64.c	[]	[]
/src/binutils-gdb/bfd/coff-rs6000.c	[]	[]
/src/binutils-gdb/bfd/./libbfd.h	[]	[]
/src/binutils-gdb/libsframe/sframe.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf-m10200.c	[]	[]
/src/fuzz_as.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/gas/frags.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/i386aout.c	[]	[]
/src/binutils-gdb/bfd/vms-lib.c	[]	[]
/src/binutils-gdb/binutils/filemode.c	[]	[]
/src/binutils-gdb/libiberty/./sha1.c	[]	[]
/src/binutils-gdb/bfd/./../include/opcode/tilepro.h	[]	[]
/src/binutils-gdb/zlib/inftrees.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-error.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-gen.c	[]	[]
/src/binutils-gdb/bfd/elf32-m32r.c	[]	[]
/src/binutils-gdb/bfd/cpu-ns32k.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/xstormy16.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./argv.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/./elf-bfd.h	[]	[]
/src/binutils-gdb/bfd/elfxx-aarch64.c	[]	[]
/src/binutils-gdb/binutils/./dwarf.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-alpha.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/hppa.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/./config/tc-i386-intel.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf-strtab.c	[]	[]
/src/binutils-gdb/bfd/elfxx-loongarch.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/z80.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/d30v.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/unwind-ia64.c	[]	[]
/src/binutils-gdb/libsframe/sframe-dump.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-mips.c	[]	[]
/src/binutils-gdb/bfd/elfxx-riscv.c	[]	[]
/src/binutils-gdb/libiberty/./xstrerror.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line', 'fuzz_as']	[]
/src/binutils-gdb/libiberty/./make-relative-prefix.c	[]	[]
/src/binutils-gdb/bfd/elf32-tilegx.c	[]	[]
/src/binutils-gdb/bfd/elflink.c	[]	[]
/src/binutils-gdb/bfd/cpu-powerpc.c	[]	[]
/src/binutils-gdb/binutils/defparse.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/bfd/./targets.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	[]
/src/binutils-gdb/bfd/corefile.c	[]	[]
/src/binutils-gdb/bfd/./aout-target.h	[]	[]
/src/binutils-gdb/libiberty/./pexecute.c	[]	[]
/src/binutils-gdb/bfd/hash.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']
/src/binutils-gdb/bfd/cache.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix']
/src/binutils-gdb/libctf/ctf-dedup.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/input-file.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/spu.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/wasm32.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/ppc.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/../bfd/bfd.h	['fuzz_as']	[]
/src/binutils-gdb/gas/listing.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/lm32.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./xstrdup.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/xgate.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./coff-aarch64.c	[]	[]
/src/binutils-gdb/bfd/elf32-or1k.c	[]	[]
/src/binutils-gdb/gas/subsegs.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/zlib/adler32.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/usr/include/x86_64-linux-gnu/bits/byteswap.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-iq2000.c	[]	[]
/src/binutils-gdb/zlib/trees.c	[]	[]
/src/binutils-gdb/bfd/elf32-am33lin.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/or1k.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./libhppa.h	[]	[]
/src/binutils-gdb/libiberty/./splay-tree.c	[]	[]
/src/binutils-gdb/gas/codeview.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./coffcode.h	[]	[]
/src/binutils-gdb/bfd/pef.c	[]	[]
/src/binutils-gdb/bfd/coff64-rs6000.c	[]	[]
/src/binutils-gdb/bfd/archive64.c	[]	[]
/src/binutils-gdb/bfd/elf32-rx.c	[]	[]
/src/binutils-gdb/bfd/cpu-spu.c	[]	[]
/src/binutils-gdb/bfd/elf32-mt.c	[]	[]
/src/binutils-gdb/bfd/elf32-fr30.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/pru.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/vax.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./pex-common.c	[]	[]
/src/binutils-gdb/bfd/stab-syms.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/moxie.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libsframe/sframe-error.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/ft32.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-tic4x.c	[]	[]
/src/binutils-gdb/libiberty/./xvasprintf.c	[]	[]
/src/binutils-gdb/bfd/./elfxx-mips.h	[]	[]
/src/binutils-gdb/binutils/./fuzz_addr2line.h	['fuzz_addr2line']	[]
/src/binutils-gdb/bfd/ecofflink.c	[]	[]
/src/binutils-gdb/bfd/elf32-ft32.c	[]	[]
/src/binutils-gdb/bfd/elf.c	[]	[]
/src/binutils-gdb/bfd/xtensa-modules.c	[]	[]
/src/binutils-gdb/binutils/deflex.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/bfd/archive.c	['fuzz_dlltool', 'fuzz_nm']	['fuzz_dlltool', 'fuzz_nm']
/src/binutils-gdb/binutils/fuzz_strings.c	['fuzz_strings']	[]
/src/binutils-gdb/bfd/./ecoffswap.h	[]	[]
/src/binutils-gdb/bfd/./coffswap.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/mt.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-crx.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/m68hc11.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/vms-misc.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/i386.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-spu.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/ia64.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-hppa.c	[]	[]
/src/binutils-gdb/bfd/./netbsd.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/sh.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/d10v.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/messages.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf-ifunc.c	[]	[]
/src/binutils-gdb/bfd/elfnn-riscv.c	[]	[]
/src/binutils-gdb/zlib/deflate.c	[]	[]
/src/binutils-gdb/bfd/compress.c	['fuzz_strings']	[]
/src/binutils-gdb/bfd/mach-o-x86-64.c	[]	[]
/src/binutils-gdb/libctf/ctf-dump.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./getruntime.c	['fuzz_as']	[]
/src/binutils-gdb/libiberty/./../include/dwarf2.def	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-cr16.c	[]	[]
/src/binutils-gdb/bfd/./elf-m10300.c	[]	[]
/src/binutils-gdb/bfd/./../include/opcode/tilegx.h	[]	[]
/src/binutils-gdb/bfd/elf32-pru.c	[]	[]
/src/binutils-gdb/libiberty/./objalloc.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	[]
/src/binutils-gdb/bfd/cpu-h8300.c	[]	[]
/src/binutils-gdb/bfd/cpu-arc.c	[]	[]
/src/binutils-gdb/bfd/cpu-arm.c	[]	[]
/src/binutils-gdb/gas/output-file.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/gas/dw2gencfi.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/binary.c	[]	[]
/src/binutils-gdb/bfd/cpu-rs6000.c	[]	[]
/src/binutils-gdb/bfd/mach-o-aarch64.c	[]	[]
/src/binutils-gdb/bfd/elfxx-ia64.c	[]	[]
/src/binutils-gdb/bfd/i386msdos.c	[]	[]
/src/binutils-gdb/binutils/./readelf.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-mcore.c	[]	[]
/src/binutils-gdb/bfd/elf-vxworks.c	[]	[]
/src/binutils-gdb/gas/stabs.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/gas/expr.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf-attrs.c	[]	[]
/src/binutils-gdb/bfd/pdb.c	[]	[]
/src/binutils-gdb/bfd/wasm-module.c	[]	[]
/src/binutils-gdb/libiberty/./obstack.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/stabs.c	[]	[]
/src/binutils-gdb/bfd/elf32-arc.c	[]	[]
/src/binutils-gdb/libiberty/./lrealpath.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libiberty/./rust-demangle.c	['fuzz_nm', 'fuzz_addr2line', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-z8k.c	[]	[]
/src/binutils-gdb/binutils/../bfd/bfd.h	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_nm', 'fuzz_strings', 'fuzz_addr2line', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/zlib/compress.c	[]	[]
/src/binutils-gdb/libiberty/./unlink-if-ordinary.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as']	[]
/src/binutils-gdb/bfd/elfxx-tilegx.c	[]	[]
/src/binutils-gdb/bfd/ihex.c	[]	[]
/src/binutils-gdb/bfd/coff-stgo32.c	[]	[]
/src/binutils-gdb/bfd/i386lynx.c	[]	[]
/src/binutils-gdb/gas/flonum-copy.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/mn10300.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/alpha.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-open.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./../include/elf/ppc64.h	[]	[]
/src/binutils-gdb/bfd/elf32-rl78.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nios2.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/remap.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./bfd.h	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	[]
/src/binutils-gdb/libctf/./ctf-sha1.h	[]	[]
/src/binutils-gdb/bfd/linker.c	[]	[]
/src/binutils-gdb/libiberty/./bsearch_r.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/gas/cond.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libiberty/./xmemdup.c	['fuzz_dlltool', 'fuzz_as']	[]
/src/binutils-gdb/bfd/mach-o.c	[]	[]
/src/binutils-gdb/bfd/xcofflink.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/dlx.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-tic30.c	[]	[]
/src/binutils-gdb/libctf/ctf-subr.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf-eh-frame.c	[]	[]
/src/binutils-gdb/gas/input-scrub.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/mn10200.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./../include/opcode/ft32.h	[]	[]
/src/binutils-gdb/libiberty/./lbasename.c	['fuzz_dlltool', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./elf-linux-core.h	[]	[]
/src/binutils-gdb/bfd/elf32-nios2.c	[]	[]
/src/binutils-gdb/gas/gen-sframe.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/cpu-m32c.c	[]	[]
/src/binutils-gdb/bfd/plugin.c	[]	[]
/src/binutils-gdb/bfd/cpu-nfp.c	[]	[]
/src/binutils-gdb/bfd/./elfxx-x86.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/i860.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-csky.c	[]	[]
/src/binutils-gdb/bfd/elf64-s390.c	[]	[]
/src/binutils-gdb/bfd/elf32-tilepro.c	[]	[]
/src/binutils-gdb/bfd/cpu-z8k.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/fr30.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-sh.c	[]	[]
/src/binutils-gdb/bfd/simple.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/msp430.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/i370.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/cpu-m68k.c	[]	[]
/src/binutils-gdb/libctf/ctf-serialize.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-tic6x.c	[]	[]
/src/binutils-gdb/bfd/elf32-nds32.c	[]	[]
/src/binutils-gdb/bfd/elfnn-aarch64.c	[]	[]
/src/binutils-gdb/bfd/elf32-pj.c	[]	[]
/src/binutils-gdb/libiberty/./hashtab.c	['fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/amdgpu.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/arc.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/zlib/gzlib.c	[]	[]
/src/binutils-gdb/bfd/verilog.c	[]	[]
/src/binutils-gdb/bfd/elf32-dlx.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/m32r.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-link.c	[]	[]
/src/binutils-gdb/bfd/pe-x86_64.c	[]	[]
/src/binutils-gdb/libiberty/./concat.c	['fuzz_dlltool', 'fuzz_nm', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-go32.c	[]	[]
/src/binutils-gdb/bfd/elfn32-mips.c	[]	[]
/src/binutils-gdb/bfd/elf32-visium.c	[]	[]
/src/binutils-gdb/bfd/reloc.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elfxx-sparc.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/epiphany.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/m68k.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-tic54x.c	[]	[]
/src/binutils-gdb/bfd/xsym.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/riscv.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/libctf/ctf-hash.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf32-wasm32.c	[]	[]
/src/binutils-gdb/bfd/elf32-score.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/ppc64.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/bfdio.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix']
/src/binutils-gdb/bfd/./elfcode.h	[]	[]
/src/binutils-gdb/bfd/section.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as']
/src/binutils-gdb/bfd/cpu-tic4x.c	[]	[]
/src/binutils-gdb/bfd/cofflink.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nfp.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/version.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/cris.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf64-gen.c	[]	[]
/src/binutils-gdb/bfd/./aoutx.h	[]	[]
/src/binutils-gdb/bfd/tekhex.c	[]	[]
/src/binutils-gdb/libctf/ctf-labels.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/zlib/inflate.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf64-ia64-vms.c	[]	[]
/src/binutils-gdb/bfd/elf32-h8300.c	[]	[]
/src/binutils-gdb/gas/ecoff.c	['fuzz_as']	[]
/src/binutils-gdb/binutils/./../include/elf/bpf.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/cr16.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/demanguse.c	[]	[]
/src/binutils-gdb/binutils/./fuzz_nm.h	['fuzz_nm']	[]
/src/binutils-gdb/binutils/./../include/elf/bfin.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/binutils/./../include/elf/crx.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/elf-sframe.c	[]	[]
/src/binutils-gdb/bfd/elf32-m68hc12.c	[]	[]
/src/binutils-gdb/bfd/cpu-mips.c	[]	[]
/src/binutils-gdb/binutils/./fuzz_strings.h	['fuzz_strings']	[]
/src/binutils-gdb/bfd/mmo.c	[]	[]
/src/binutils-gdb/libctf/ctf-types.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./dwarf2.c	[]	[]
/src/binutils-gdb/binutils/fuzz_ranlib_simulation.c	['fuzz_ranlib_simulation']	['fuzz_ranlib_simulation']
/src/binutils-gdb/binutils/./../include/elf/mmix.h	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/./coff-i386.c	[]	[]
/src/binutils-gdb/bfd/libbfd.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_strings', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_nm', 'fuzz_bfd_ext', 'fuzz_addr2line', 'fuzz_as', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky']
/src/binutils-gdb/gas/./as.h	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf32-ppc.c	[]	[]
/src/binutils-gdb/libiberty/./make-temp-file.c	[]	[]
/src/binutils-gdb/bfd/elf32-msp430.c	[]	[]
/src/binutils-gdb/bfd/elf32-v850.c	[]	[]
/src/binutils-gdb/zlib/inffast.c	['fuzz_strings', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	[]
/src/binutils-gdb/bfd/coff-x86_64.c	[]	[]
/src/binutils-gdb/bfd/elf-m10300.c	[]	[]
/src/binutils-gdb/bfd/elf32-s12z.c	[]	[]
/src/binutils-gdb/bfd/pdp11.c	[]	[]
/src/binutils-gdb/bfd/elf32-mep.c	[]	[]
/src/binutils-gdb/binutils/fuzz_readelf.c	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']	['fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_csky', 'fuzz_readelf']
/src/binutils-gdb/bfd/merge.c	[]	[]
/src/binutils-gdb/bfd/./coff-mcore.c	[]	[]
/src/binutils-gdb/fuzz/fuzz_bfd.c	['fuzz_bfd']	['fuzz_bfd']
/src/binutils-gdb/bfd/aout-ns32k.c	[]	[]