High level conclusions

Fuzzer fuzz_readelf_elf32_bigarm is blocked:

The runtime code coverage of fuzz_readelf_elf32_bigarm covers 3.039% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_readelf_elf64_mmix is blocked:

The runtime code coverage of fuzz_readelf_elf64_mmix covers 3.039% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_readelf_pef is blocked:

The runtime code coverage of fuzz_readelf_pef covers 3.039% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_nm is blocked:

The runtime code coverage of fuzz_nm covers 29.45% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_strings is blocked:

The runtime code coverage of fuzz_strings covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 17.47% of cyclomatic complexity.

Fuzzers reach 15.86% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1731 / 10913

Cyclomatic complexity statically reachable by fuzzers

20521 / 117445

Runtime code coverage of functions

1928 / 10913

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_ranlib_simulation

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	75	39.0%
gold	[1:9]	2	1.04%
yellow	[10:29]	5	2.60%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	110	57.2%
All colors	192	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
510	510	2 : View List ['try_load_plugin', 'build_plugin_list']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
266	1675	26 : View List ['image_write_l', 'alpha_vms_add_qw_reloc', 'dst_restore_location', '_bfd_abort', 'alpha_vms_add_fixup_qr', 'image_set_ptr', 'bfd_getl64', 'alpha_vms_sym_to_ctxt', 'image_write_w', 'bfd_getl32', 'image_write_q', 'alpha_vms_add_lw_reloc', 'alpha_vms_add_fixup_lp', 'alpha_vms_get_sym_value', '_bfd_vms_get_value', 'image_write', 'bfd_getl16', 'alpha_vms_add_fixup_ca', 'dst_retrieve_location', '_bfd_vms_push', 'alpha_vms_fix_sec_rel', 'image_write_b', '_bfd_vms_pop', 'dst_define_location', 'image_inc_ptr', 'alpha_vms_add_fixup_lr']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
228	261	2 : View List ['bfd_pef_scan', 'bfd_zalloc']	228	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:600
203	1241	3 : View List ['bfd_check_format', 'find_nested_archive', '_bfd_get_elt_at_filepos']	203	1248	_bfd_get_elt_at_filepos	call site: 00000	/src/binutils-gdb/bfd/archive.c:706
123	142	7 : View List ['bfd_get_error', '_bfd_real_fseek', 'bfd_open_file', '_bfd_error_handler', 'bfd_set_error', 'dgettext', 'bfd_errmsg']	123	142	bfd_cache_lookup_worker	call site: 00000	/src/binutils-gdb/bfd/cache.c:247
121	165	8 : View List ['bfd_alloc', 'normalize', 'adjust_relative_path', '_bfd_ar_spacepad', 'strlen', 'bfd_get_filename.42251', 'filename_cmp', 'bfd_is_thin_archive.42236']	121	165	_bfd_construct_extended_name_table	call site: 00000	/src/binutils-gdb/bfd/archive.c:1670
82	82	1 : View List ['bfd_open_file']	82	82	io_reinit	call site: 00116	/src/binutils-gdb/bfd/format.c:171
71	73	3 : View List ['dgettext', 'bfd_link_hash_lookup', '_bfd_error_handler']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['bfd_make_section_with_flags', 'ppcboot_set_arch_mach', 'ppcboot_mkobject']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
45	45	2 : View List ['bfd_perror', 'dgettext']	45	45	_bfd_archive_bsd_update_armap_timestamp	call site: 00000	/src/binutils-gdb/bfd/archive.c:2660

Runtime coverage analysis

Covered functions

727

Functions that are reachable but not covered

39

Reachable functions

101

Percentage of reachable functions covered

61.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_ranlib_simulation.c	1
bfd/opncls.c	8
bfd/bfd.c	8
bfd/libbfd.c	4
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	2
bfd/./targets.c	3
bfd/./bfd.h	4
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	2

Fuzzer: fuzz_dlltool

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	231	52.2%
gold	[1:9]	11	2.48%
yellow	[10:29]	1	0.22%
greenyellow	[30:49]	1	0.22%
lawngreen	50+	198	44.7%
All colors	442	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
636	869	16 : View List ['def_data', 'def_stacksize', 'def_version', 'yyerror', 'malloc', 'def_heapsize', 'def_exports', 'def_section', 'def_import', 'def_library', 'yylex', 'def_name', 'strlen', 'def_description', 'def_code', 'xmalloc']	636	877	yyparse	call site: 00162	/src/binutils-gdb/binutils/defparse.c:2111
510	510	2 : View List ['try_load_plugin', 'build_plugin_list']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
309	369	6 : View List ['som_object_setup', 'bfd_get_error', 'som_swap_exec_auxhdr_in', 'bfd_bread', 'bfd_zalloc', 'setup_sections']	309	391	som_object_p	call site: 00000	/src/binutils-gdb/bfd/som.c:2489
266	1675	26 : View List ['image_write_l', 'alpha_vms_add_qw_reloc', 'dst_restore_location', '_bfd_abort', 'alpha_vms_add_fixup_qr', 'image_set_ptr', 'bfd_getl64', 'alpha_vms_sym_to_ctxt', 'image_write_w', 'bfd_getl32', 'image_write_q', 'alpha_vms_add_lw_reloc', 'alpha_vms_add_fixup_lp', 'alpha_vms_get_sym_value', '_bfd_vms_get_value', 'image_write', 'bfd_getl16', 'alpha_vms_add_fixup_ca', 'dst_retrieve_location', '_bfd_vms_push', 'alpha_vms_fix_sec_rel', 'image_write_b', '_bfd_vms_pop', 'dst_define_location', 'image_inc_ptr', 'alpha_vms_add_fixup_lr']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
221	223	10 : View List ['_bfd_elf_obj_attrs_arg_type', 'strnlen', '_bfd_safe_read_leb128', '_bfd_abort', 'strcmp', 'elf_add_obj_attr_string', '_bfd_error_handler', 'dgettext', 'elf_add_obj_attr_int_string', 'bfd_elf_add_obj_attr_int']	221	223	_bfd_elf_parse_attributes	call site: 00000	/src/binutils-gdb/bfd/elf-attrs.c:496
149	689	10 : View List ['bfd_close', 'bfd_zmalloc', 'bfd_create', 'bfd_bwrite', 'free', 'bfd_malloc', 'bfd_getl32', 'bfd_make_writable', 'bfd_bread', 'bfd_seek']	149	788	pdb_get_elt_at_index	call site: 00000	/src/binutils-gdb/bfd/pdb.c:124
101	170	5 : View List ['bfd_alloc', 'bfd_set_error', '_bfd_alloc_and_read.21597', 'bfd_seek', 'ecoff_slurp_symbolic_header']	101	170	_bfd_ecoff_slurp_symbolic_info	call site: 00000	/src/binutils-gdb/bfd/ecoff.c:532
71	73	3 : View List ['dgettext', 'bfd_link_hash_lookup', '_bfd_error_handler']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['bfd_make_section_with_flags', 'ppcboot_set_arch_mach', 'ppcboot_mkobject']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
52	52	1 : View List ['bfd_fatal']	52	54	scan_all_symbols	call site: 00354	/src/binutils-gdb/binutils/./fuzz_dlltool.h:1643

Runtime coverage analysis

Covered functions

808

Functions that are reachable but not covered

80

Reachable functions

191

Percentage of reachable functions covered

58.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_dlltool.c	3
binutils/./fuzz_dlltool.h	23
binutils/bucomm.c	5
libiberty/./xexit.c	1
binutils/defparse.c	2
binutils/deflex.c	13
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	2
libiberty/./xmemdup.c	1
libiberty/./lbasename.c	2
libiberty/./concat.c	3
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	10
libiberty/./objalloc.c	4
bfd/hash.c	9
bfd/section.c	4
bfd/./targets.c	3
bfd/./bfd.h	6
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
bfd/archive.c	1
binutils/../bfd/bfd.h	8
libiberty/./xstrerror.c	1

Fuzzer: fuzz_bfd_ext

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	95	53.6%
gold	[1:9]	1	0.56%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	15	8.47%
lawngreen	50+	66	37.2%
All colors	177	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
29	29	1 : View List ['close_one']	31	147	bfd_open_file	call site: 00157	/src/binutils-gdb/bfd/cache.c:586
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00118	/src/binutils-gdb/bfd/cache.c:499
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00062	/src/binutils-gdb/bfd/bfd.c:776
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00145	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00097	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00092	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00084	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['__errno_location']	4	4	bufferToFile	call site: 00053	/src/binutils-gdb/fuzz/fuzz_bfd_ext.c:35
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00119	/src/binutils-gdb/bfd/cache.c:98
0	33	2 : View List ['bfd_set_error', '_objalloc_alloc']	0	63	bfd_hash_lookup	call site: 00000	/src/binutils-gdb/bfd/hash.c:571
0	23	2 : View List ['bfd_set_error', '_bfd_delete_bfd']	0	23	bfd_openw	call site: 00156	/src/binutils-gdb/bfd/opncls.c:785
0	16	2 : View List ['bfd_set_error', 'bfd_hash_table_free']	0	16	bfd_hash_table_init_n	call site: 00071	/src/binutils-gdb/bfd/hash.c:449

Runtime coverage analysis

Covered functions

85

Functions that are reachable but not covered

39

Reachable functions

82

Percentage of reachable functions covered

52.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/fuzz_bfd_ext.c	2
bfd/bfd.c	10
bfd/./bfd.h	4
bfd/opncls.c	9
bfd/libbfd.c	3
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/bfdio.c	4
bfd/cache.c	7
libiberty/./unlink-if-ordinary.c	1

Fuzzer: fuzz_bfd

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	106	46.9%
gold	[1:9]	1	0.44%
yellow	[10:29]	5	2.21%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	114	50.4%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
510	510	2 : View List ['try_load_plugin', 'build_plugin_list']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
268	1675	26 : View List ['image_write_l', 'alpha_vms_add_qw_reloc', 'dst_restore_location', '_bfd_abort', 'alpha_vms_add_fixup_qr', 'image_set_ptr', 'bfd_getl64', 'alpha_vms_sym_to_ctxt', 'image_write_w', 'bfd_getl32', 'image_write_q', 'alpha_vms_add_lw_reloc', 'alpha_vms_add_fixup_lp', 'alpha_vms_get_sym_value', '_bfd_vms_get_value', 'image_write', 'bfd_getl16', 'alpha_vms_add_fixup_ca', 'dst_retrieve_location', '_bfd_vms_push', 'alpha_vms_fix_sec_rel', 'image_write_b', '_bfd_vms_pop', 'dst_define_location', 'image_inc_ptr', 'alpha_vms_add_fixup_lr']	294	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
228	261	2 : View List ['bfd_pef_scan', 'bfd_zalloc']	228	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:600
123	142	7 : View List ['bfd_get_error', '_bfd_real_fseek', 'bfd_open_file', '_bfd_error_handler', 'bfd_set_error', 'dgettext', 'bfd_errmsg']	123	142	bfd_cache_lookup_worker	call site: 00000	/src/binutils-gdb/bfd/cache.c:247
82	82	1 : View List ['bfd_open_file']	82	82	io_reinit	call site: 00154	/src/binutils-gdb/bfd/format.c:171
71	73	3 : View List ['dgettext', 'bfd_link_hash_lookup', '_bfd_error_handler']	71	73	_bfd_vms_get_value	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1786
61	138	3 : View List ['bfd_make_section_with_flags', 'ppcboot_set_arch_mach', 'ppcboot_mkobject']	61	149	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:181
44	44	1 : View List ['s3_elf32_score_new_section_hook']	44	44	elf32_score_new_section_hook	call site: 00000	/src/binutils-gdb/bfd/elf32-score.c:4392
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00118	/src/binutils-gdb/bfd/cache.c:499
22	22	1 : View List ['find_target']	22	22	bfd_find_target	call site: 00086	/src/binutils-gdb/bfd/./targets.c:1619

Runtime coverage analysis

Covered functions

706

Functions that are reachable but not covered

41

Reachable functions

106

Percentage of reachable functions covered

61.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz/fuzz_bfd.c	2
bfd/bfd.c	13
bfd/./bfd.h	5
bfd/opncls.c	8
bfd/libbfd.c	4
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	2
bfd/./targets.c	3
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1

Fuzzer: fuzz_strings

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	360	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	360	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	0	EP	call site: 00000	strings_object_file

Runtime coverage analysis

Covered functions

0

Functions that are reachable but not covered

167

Reachable functions

167

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_strings.c	1
binutils/./fuzz_strings.h	12
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	10
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	5
bfd/./targets.c	3
bfd/./bfd.h	8
bfd/bfdio.c	5
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	1
bfd/compress.c	3
zlib/inflate.c	10
zlib/zutil.c	2
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/bucomm.c	3
libiberty/./xmalloc.c	2
libiberty/./xexit.c	1
libiberty/./xstrerror.c	1

Fuzzer: fuzz_windres

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	498	80.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	7	1.13%
lawngreen	50+	113	18.2%
All colors	618	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1973	2373	17 : View List ['bfd_alloc', 'bfd_set_start_address', '_bfd_error_handler', '_bfd_elf_setup_sections', 'bfd_header_little_endian', 'bfd_header_big_endian', 'dgettext', 'bfd_elf64_swap_phdr_in', 'bfd_zalloc', 'bfd_default_set_arch_mach', 'bfd_section_from_elf_index', 'bfd_get_file_size', 'elf_swap_shdr_in', 'bfd_section_from_shdr', 'elf_swap_ehdr_in', 'bfd_bread', 'bfd_seek']	1973	2384	bfd_elf64_object_p	call site: 00000	/src/binutils-gdb/bfd/./elfcode.h:533
1870	2270	17 : View List ['bfd_alloc', 'bfd_elf32_swap_phdr_in', 'bfd_set_start_address', '_bfd_error_handler', '_bfd_elf_setup_sections', 'dgettext', 'bfd_zalloc', 'bfd_header_little_endian.3331', 'bfd_default_set_arch_mach', 'bfd_section_from_elf_index', 'elf_swap_ehdr_in.3332', 'elf_swap_shdr_in.3337', 'bfd_get_file_size', 'bfd_section_from_shdr', 'bfd_bread', 'bfd_seek', 'bfd_header_big_endian.3330']	1870	2281	bfd_elf32_object_p	call site: 00000	/src/binutils-gdb/bfd/./elfcode.h:533
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
718	748	7 : View List ['_bfd_vms_slurp_eisd', '_bfd_malloc_and_read.17517', '_bfd_vms_slurp_eihd', '_bfd_vms_slurp_eihs', 'free', 'bfd_getl32', 'bfd_seek']	718	803	alpha_vms_object_p	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:2834
510	510	2 : View List ['try_load_plugin', 'build_plugin_list']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
246	266	3 : View List ['srec_mkobject', 'srec_scan', 'bfd_release']	246	266	symbolsrec_object_p	call site: 00000	/src/binutils-gdb/bfd/srec.c:689
228	261	2 : View List ['bfd_pef_scan', 'bfd_zalloc']	228	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:600
213	243	2 : View List ['bfd_alloc', 'bfd_sym_scan']	213	254	bfd_sym_object_p	call site: 00000	/src/binutils-gdb/bfd/xsym.c:2240
213	233	3 : View List ['ihex_scan', 'bfd_release', 'ihex_mkobject']	213	255	ihex_object_p	call site: 00000	/src/binutils-gdb/bfd/ihex.c:505
61	184	6 : View List ['bfd_make_section_with_flags', 'bfd_get_error', 'bfd_stat', 'ppcboot_mkobject', 'ppcboot_set_arch_mach', 'bfd_bread']	61	250	ppcboot_object_p	call site: 00000	/src/binutils-gdb/bfd/ppcboot.c:145
33	33	1 : View List ['bfd_pef_xlib_scan']	33	44	bfd_pef_xlib_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:1134
32	52	8 : View List ['close', 'bfd_release', 'getenv', 'read', 'open', 'startswith.20033', 'lseek', 'stat']	32	112	go32exe_create_stub	call site: 00000	/src/binutils-gdb/bfd/coff-stgo32.c:121

Runtime coverage analysis

Covered functions

286

Functions that are reachable but not covered

94

Reachable functions

169

Percentage of reachable functions covered

44.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_windres.c	3
bfd/opncls.c	8
bfd/libbfd.c	8
bfd/bfd.c	10
libiberty/./objalloc.c	4
bfd/hash.c	9
bfd/section.c	4
bfd/./targets.c	3
bfd/./bfd.h	5
bfd/bfdio.c	4
bfd/cache.c	8
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/./fuzz_windres.h	9
binutils/../bfd/bfd.h	3
binutils/bucomm.c	7
binutils/./rescoff.c	4
libiberty/./xexit.c	1
libiberty/./xstrerror.c	1
libiberty/./obstack.c	3
binutils/resbin.c	20

Fuzzer: fuzz_as

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1735	48.1%
gold	[1:9]	107	2.96%
yellow	[10:29]	60	1.66%
greenyellow	[30:49]	26	0.72%
lawngreen	50+	1677	46.5%
All colors	3605	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1952	1952	2 : View List ['free', 'stabs_generate_asm_endfunc']	1954	2128	do_s_func	call site: 00000	/src/binutils-gdb/gas/read.c:6041
1847	1847	1 : View List ['stabs_generate_asm_func']	1847	1937	do_s_func	call site: 00000	/src/binutils-gdb/gas/read.c:6103
1591	2069	6 : View List ['subseg_new', 'out_debug_rnglists', 'out_debug_ranges', 'ffs', 'record_alignment', 'bfd_set_section_flags']	1591	4515	dwarf2_finish	call site: 03093	/src/binutils-gdb/gas/dwarf2dbg.c:3241
949	949	2 : View List ['output_sframe', 'x86_support_sframe_p']	957	4373	cfi_finish	call site: 03448	/src/binutils-gdb/gas/dw2gencfi.c:2509
703	703	1 : View List ['i386_intel_simplify']	711	711	x86_cons	call site: 01192	/src/binutils-gdb/gas/config/tc-i386.c:10581
527	527	1 : View List ['output_interseg_jump']	527	615	output_insn	call site: 02681	/src/binutils-gdb/gas/config/tc-i386.c:9645
410	410	1 : View List ['check_VecOperations']	416	723	i386_att_operand	call site: 02088	/src/binutils-gdb/gas/config/tc-i386.c:12355
326	2551	15 : View List ['demand_copy_C_string', 'ignore_rest_of_line', 'strtoul', '__errno_location', 'xmemdup0', 'as_warn', 'obj_elf_section_name', 'strlen', 'get_symbol_name', 'strchr', 'startswith.635', 'obj_elf_section_type', 'get_absolute_expression', 'obj_elf_parse_section_letters', 'restore_line_pointer']	342	3606	obj_elf_section	call site: 00000	/src/binutils-gdb/gas/config/obj-elf.c:1178
233	233	1 : View List ['optimize_encoding']	495	3668	md_assemble	call site: 02428	/src/binutils-gdb/gas/config/tc-i386.c:5265
211	286	10 : View List ['as_where_physical', 'bfd_section_name.1716', 'strcmp', 'new_frag', 'file_info', 'gettext', 'startswith.1679', 'filename_cmp', 'as_where', 'xmalloc']	211	286	listing_newline	call site: 00658	/src/binutils-gdb/gas/listing.c:303
186	1606	12 : View List ['intel_float_operand', 'check_VecOperands', 'operand_type_check', 'operand_type_all_zero', 'operand_type_register_match', 'operand_size_match', 'progress', 'cpu_flags_match', 'VEX_check_encoding', 'operand_type_and', 'as_abort', 'operand_type_match']	190	1785	match_template	call site: 02242	/src/binutils-gdb/gas/config/tc-i386.c:6847
186	1606	12 : View List ['intel_float_operand', 'check_VecOperands', 'operand_type_check', 'operand_type_all_zero', 'operand_type_register_match', 'operand_size_match', 'progress', 'cpu_flags_match', 'VEX_check_encoding', 'operand_type_and', 'as_abort', 'operand_type_match']	190	1785	match_template	call site: 02288	/src/binutils-gdb/gas/config/tc-i386.c:7178

Runtime coverage analysis

Covered functions

715

Functions that are reachable but not covered

224

Reachable functions

775

Percentage of reachable functions covered

71.1%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz_as.c	2
gas/./fuzz_as.h	5
libiberty/./getruntime.c	1
gas/messages.c	16
gas/input-scrub.c	15
libiberty/./xexit.c	1
libiberty/./hex.c	1
bfd/bfd.c	15
bfd/./bfd.h	4
libiberty/./unlink-if-ordinary.c	1
libiberty/./obstack.c	6
libiberty/./xmalloc.c	5
libiberty/./argv.c	5
libiberty/./xstrdup.c	1
gas/read.c	56
gas/symbols.c	83
libiberty/./hashtab.c	18
gas/frags.c	17
gas/subsegs.c	12
gas/./hash.h	5
gas/hash.c	3
gas/config/obj-elf.c	9
gas/stabs.c	8
gas/input-file.c	9
gas/app.c	7
gas/expr.c	20
gas/ehopt.c	3
gas/macro.c	14
gas/sb.c	14
gas/dwarf2dbg.c	47
gas/output-file.c	3
gas/../bfd/bfd.h	14
bfd/opncls.c	7
bfd/hash.c	8
libiberty/./objalloc.c	3
gas/config/tc-i386.c	131
gas/listing.c	9
libiberty/./concat.c	3
bfd/libbfd.c	3
bfd/section.c	7
bfd/./targets.c	2
bfd/cache.c	7
bfd/bfdio.c	3
libiberty/./xstrerror.c	1
bfd/format.c	1
gas/write.c	6
libiberty/./filename_cmp.c	2
gas/depend.c	1
libiberty/./getpwd.c	1
gas/remap.c	1
gas/atof-generic.c	1
gas/flonum-mult.c	1
gas/flonum-copy.c	1
gas/./config/tc-i386-intel.c	9
bfd/reloc.c	1
gas/cond.c	3
gas/./as.h	1
libiberty/./xmemdup.c	1
gas/ecoff.c	1
gas/codeview.c	2
bfd/syms.c	1
bfd/./archures.c	1
libiberty/./lbasename.c	2
gas/dw2gencfi.c	19
gas/gen-sframe.c	44

Fuzzer: fuzz_nm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1495	87.3%
gold	[1:9]	4	0.23%
yellow	[10:29]	4	0.23%
greenyellow	[30:49]	1	0.05%
lawngreen	50+	207	12.0%
All colors	1711	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1863	1863	1 : View List ['print_symdef_entry']	1863	2787	display_archive	call site: 00207	/src/binutils-gdb/binutils/./fuzz_nm.h:1570
1783	1783	1 : View List ['bfd_demangle']	1857	1859	print_symname	call site: 00215	/src/binutils-gdb/binutils/./fuzz_nm.h:693
1066	1110	5 : View List ['free', 'bfd_set_error', 'som_set_reloc_info', 'bfd_get_symcount.39325', 'bfd_zalloc']	1066	1110	som_slurp_reloc_table	call site: 00000	/src/binutils-gdb/bfd/som.c:5315
988	988	1 : View List ['bfd_init_section_compress_status']	990	1016	_bfd_elf_make_section_from_shdr	call site: 00000	/src/binutils-gdb/bfd/elf.c:1209
988	988	1 : View List ['bfd_init_section_compress_status']	990	992	make_a_section_from_file	call site: 00000	/src/binutils-gdb/bfd/coffgen.c:249
906	974	3 : View List ['bfd_close', 'bfd_mach_o_fat_extract', 'bfd_mach_o_dsym_for_uuid_p']	906	974	bfd_mach_o_find_dsym	call site: 00000	/src/binutils-gdb/bfd/mach-o.c:6087
739	739	1 : View List ['read_rnglists']	739	739	read_rangelist	call site: 00000	/src/binutils-gdb/bfd/./dwarf2.c:3788
662	662	2 : View List ['get_opd_info', 'opd_entry_value']	662	662	ppc64_elf_maybe_function_sym	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:5730
658	658	1 : View List ['opd_entry_value']	658	658	ppc64_elf_branch_reloc	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:1474
510	510	2 : View List ['try_load_plugin', 'build_plugin_list']	510	510	load_plugin	call site: 00000	/src/binutils-gdb/bfd/plugin.c:571
266	1675	26 : View List ['image_write_l', 'alpha_vms_add_qw_reloc', 'dst_restore_location', '_bfd_abort', 'alpha_vms_add_fixup_qr', 'image_set_ptr', 'bfd_getl64', 'alpha_vms_sym_to_ctxt', 'image_write_w', 'bfd_getl32', 'image_write_q', 'alpha_vms_add_lw_reloc', 'alpha_vms_add_fixup_lp', 'alpha_vms_get_sym_value', '_bfd_vms_get_value', 'image_write', 'bfd_getl16', 'alpha_vms_add_fixup_ca', 'dst_retrieve_location', '_bfd_vms_push', 'alpha_vms_fix_sec_rel', 'image_write_b', '_bfd_vms_pop', 'dst_define_location', 'image_inc_ptr', 'alpha_vms_add_fixup_lr']	292	2251	_bfd_vms_slurp_etir	call site: 00000	/src/binutils-gdb/bfd/vms-alpha.c:1987
221	221	4 : View List ['elf_hash_table.13419', 'elf_hash_table_id.13421', 'is_elf_hash_table.13420', '_bfd_generic_link_add_one_symbol']	221	221	ppc64_elf_set_toc	call site: 00000	/src/binutils-gdb/bfd/elf64-ppc.c:14556

Runtime coverage analysis

Covered functions

1236

Functions that are reachable but not covered

261

Reachable functions

370

Percentage of reachable functions covered

29.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_nm.c	1
binutils/./fuzz_nm.h	19
binutils/bucomm.c	6
bfd/opncls.c	8
bfd/libbfd.c	4
bfd/bfd.c	14
libiberty/./objalloc.c	4
bfd/hash.c	5
bfd/section.c	3
bfd/./targets.c	3
bfd/./bfd.h	6
bfd/bfdio.c	4
bfd/cache.c	8
libiberty/./xstrerror.c	1
bfd/format.c	10
libiberty/./unlink-if-ordinary.c	1
binutils/../bfd/bfd.h	15
bfd/archive.c	2
libiberty/./cplus-dem.c	2
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
libiberty/./concat.c	4
bfd/./archures.c	1

Fuzzer: fuzz_readelf_pef

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6586	99.3%
gold	[1:9]	43	0.64%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	2	0.03%
All colors	6631	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
261	261	2 : View List ['bfd_pef_scan', 'bfd_zalloc']	261	272	bfd_pef_object_p	call site: 00000	/src/binutils-gdb/bfd/pef.c:597
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00072	/src/binutils-gdb/bfd/cache.c:499
22	22	1 : View List ['bfd_getb32']	22	22	bfd_pef_read_header	call site: 00000	/src/binutils-gdb/bfd/pef.c:573
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00009	/src/binutils-gdb/bfd/bfd.c:776
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00099	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00051	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00046	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00038	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00073	/src/binutils-gdb/bfd/cache.c:98
2	2	1 : View List ['remove']	2	2	check_architecture	call site: 00004	/src/binutils-gdb/binutils/fuzz_readelf.c:29
0	16	2 : View List ['bfd_set_error', 'bfd_hash_table_free']	0	16	bfd_hash_table_init_n	call site: 00025	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	14	bfd_cache_delete	call site: 00079	/src/binutils-gdb/bfd/cache.c:168

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

957

Reachable functions

987

Percentage of reachable functions covered

3.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	2
bfd/opncls.c	8
bfd/libbfd.c	3
bfd/bfd.c	4
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/./bfd.h	3
bfd/bfdio.c	4
bfd/cache.c	6
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	239
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	39
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Fuzzer: fuzz_readelf_elf64_mmix

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6586	99.3%
gold	[1:9]	43	0.64%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	2	0.03%
All colors	6631	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2075	2377	18 : View List ['bfd_alloc', 'bfd_set_start_address', '_bfd_error_handler', '_bfd_elf_setup_sections', 'bfd_header_little_endian', 'elf_file_p', 'bfd_header_big_endian', 'dgettext', 'bfd_elf64_swap_phdr_in', 'bfd_zalloc', 'bfd_default_set_arch_mach', 'bfd_section_from_elf_index', 'bfd_get_file_size', 'elf_swap_shdr_in', 'bfd_section_from_shdr', 'elf_swap_ehdr_in', 'bfd_bread', 'bfd_seek']	2075	2388	bfd_elf64_object_p	call site: 00000	/src/binutils-gdb/bfd/./elfcode.h:519
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00072	/src/binutils-gdb/bfd/cache.c:499
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00009	/src/binutils-gdb/bfd/bfd.c:776
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00099	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00051	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00046	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00038	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00073	/src/binutils-gdb/bfd/cache.c:98
2	2	1 : View List ['remove']	2	2	check_architecture	call site: 00004	/src/binutils-gdb/binutils/fuzz_readelf.c:29
0	16	2 : View List ['bfd_set_error', 'bfd_hash_table_free']	0	16	bfd_hash_table_init_n	call site: 00025	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	14	bfd_cache_delete	call site: 00079	/src/binutils-gdb/bfd/cache.c:168
0	11	1 : View List ['bfd_set_error']	0	11	bfd_bread	call site: 00000	/src/binutils-gdb/bfd/bfdio.c:276

Runtime coverage analysis

Covered functions

44

Functions that are reachable but not covered

957

Reachable functions

987

Percentage of reachable functions covered

3.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	2
bfd/opncls.c	8
bfd/libbfd.c	3
bfd/bfd.c	4
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/./bfd.h	3
bfd/bfdio.c	4
bfd/cache.c	6
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	239
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	39
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Fuzzer: fuzz_readelf_elf32_bigarm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6586	99.3%
gold	[1:9]	43	0.64%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	0.01%
lawngreen	50+	1	0.01%
All colors	6631	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1968	2270	18 : View List ['bfd_alloc', 'bfd_elf32_swap_phdr_in', 'elf_file_p.3329', 'bfd_set_start_address', '_bfd_error_handler', '_bfd_elf_setup_sections', 'dgettext', 'bfd_zalloc', 'bfd_default_set_arch_mach', 'bfd_header_little_endian.3331', 'bfd_section_from_elf_index', 'bfd_header_big_endian.3330', 'elf_swap_ehdr_in.3332', 'elf_swap_shdr_in.3337', 'bfd_get_file_size', 'bfd_section_from_shdr', 'bfd_bread', 'bfd_seek']	1968	2281	bfd_elf32_object_p	call site: 00000	/src/binutils-gdb/bfd/./elfcode.h:519
29	29	1 : View List ['close_one']	29	31	bfd_cache_init	call site: 00072	/src/binutils-gdb/bfd/cache.c:499
9	9	1 : View List ['_bfd_abort']	9	9	bfd_set_error	call site: 00009	/src/binutils-gdb/bfd/bfd.c:776
2	24	2 : View List ['__errno_location', 'bfd_set_error']	2	24	bfd_seek	call site: 00099	/src/binutils-gdb/bfd/bfdio.c:460
2	13	2 : View List ['close', 'bfd_set_error']	2	25	bfd_fopen	call site: 00051	/src/binutils-gdb/bfd/opncls.c:288
2	2	1 : View List ['fdopen']	8	144	bfd_fopen	call site: 00046	/src/binutils-gdb/bfd/opncls.c:283
2	2	1 : View List ['getenv']	4	26	bfd_find_target	call site: 00038	/src/binutils-gdb/bfd/./targets.c:1613
2	2	1 : View List ['sysconf']	2	2	bfd_cache_max_open	call site: 00073	/src/binutils-gdb/bfd/cache.c:98
2	2	1 : View List ['remove']	2	2	check_architecture	call site: 00004	/src/binutils-gdb/binutils/fuzz_readelf.c:29
0	16	2 : View List ['bfd_set_error', 'bfd_hash_table_free']	0	16	bfd_hash_table_init_n	call site: 00025	/src/binutils-gdb/bfd/hash.c:449
0	11	1 : View List ['bfd_set_error']	0	14	bfd_cache_delete	call site: 00079	/src/binutils-gdb/bfd/cache.c:168
0	11	1 : View List ['bfd_set_error']	0	11	bfd_bread	call site: 00000	/src/binutils-gdb/bfd/bfdio.c:276

Runtime coverage analysis

Covered functions

44

Functions that are reachable but not covered

957

Reachable functions

987

Percentage of reachable functions covered

3.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
binutils/fuzz_readelf.c	2
bfd/opncls.c	8
bfd/libbfd.c	3
bfd/bfd.c	4
libiberty/./objalloc.c	3
bfd/hash.c	4
bfd/section.c	1
bfd/./targets.c	2
bfd/./bfd.h	3
bfd/bfdio.c	4
bfd/cache.c	6
binutils/./dwarf.c	76
binutils/elfcomm.c	15
binutils/./readelf.h	239
binutils/../bfd/bfd.h	1
libiberty/./xstrdup.c	1
libiberty/./xmalloc.c	4
libiberty/./xexit.c	1
libiberty/./lbasename.c	2
binutils/./../include/elf/aarch64.h	1
binutils/./../include/elf/m32r.h	1
binutils/./../include/elf/i386.h	1
binutils/./../include/elf/m68hc11.h	1
binutils/./../include/elf/s12z.h	1
binutils/./../include/elf/m68k.h	1
binutils/./../include/elf/i960.h	1
binutils/./../include/elf/avr.h	1
binutils/./../include/elf/sparc.h	1
binutils/./../include/elf/spu.h	1
binutils/./../include/elf/v850.h	2
binutils/./../include/elf/d10v.h	1
binutils/./../include/elf/d30v.h	1
binutils/./../include/elf/dlx.h	1
binutils/./../include/elf/sh.h	1
binutils/./../include/elf/mn10300.h	1
binutils/./../include/elf/mn10200.h	1
binutils/./../include/elf/fr30.h	1
binutils/./../include/elf/frv.h	1
binutils/./../include/elf/csky.h	1
binutils/./../include/elf/ft32.h	1
binutils/./../include/elf/mcore.h	1
binutils/./../include/elf/mmix.h	1
binutils/./../include/elf/moxie.h	1
binutils/./../include/elf/msp430.h	2
binutils/./../include/elf/nds32.h	1
binutils/./../include/elf/ppc.h	1
binutils/./../include/elf/ppc64.h	2
binutils/./../include/elf/mips.h	1
binutils/./../include/elf/riscv.h	1
binutils/./../include/elf/alpha.h	1
binutils/./../include/elf/arm.h	1
binutils/./../include/elf/arc.h	1
binutils/./../include/elf/hppa.h	1
binutils/./../include/elf/h8.h	1
binutils/./../include/elf/or1k.h	1
binutils/./../include/elf/pj.h	1
binutils/./../include/elf/ia64.h	1
binutils/./../include/elf/cris.h	1
binutils/./../include/elf/i860.h	1
binutils/./../include/elf/x86-64.h	1
binutils/./../include/elf/i370.h	1
binutils/./../include/elf/s390.h	1
binutils/./../include/elf/score.h	1
binutils/./../include/elf/xstormy16.h	1
binutils/./../include/elf/crx.h	1
binutils/./../include/elf/vax.h	1
binutils/./../include/elf/visium.h	1
binutils/./../include/elf/bpf.h	1
binutils/./../include/elf/epiphany.h	1
binutils/./../include/elf/ip2k.h	1
binutils/./../include/elf/iq2000.h	1
binutils/./../include/elf/xtensa.h	1
binutils/./../include/elf/lm32.h	1
binutils/./../include/elf/m32c.h	1
binutils/./../include/elf/mt.h	1
binutils/./../include/elf/bfin.h	1
binutils/./../include/elf/mep.h	1
binutils/./../include/elf/cr16.h	1
binutils/./../include/elf/microblaze.h	1
binutils/./../include/elf/rl78.h	1
binutils/./../include/elf/rx.h	1
binutils/./../include/elf/metag.h	1
binutils/./../include/elf/tic6x.h	1
binutils/./../include/elf/tilegx.h	1
binutils/./../include/elf/tilepro.h	1
binutils/./../include/elf/wasm32.h	1
binutils/./../include/elf/xgate.h	1
binutils/./../include/elf/nios2.h	1
binutils/./../include/elf/pru.h	1
binutils/./../include/elf/nfp.h	2
binutils/./../include/elf/z80.h	1
binutils/./../include/elf/loongarch.h	1
binutils/./../include/elf/amdgpu.h	1
libiberty/./cplus-dem.c	2
libiberty/./rust-demangle.c	32
libiberty/./cp-demangle.c	110
libiberty/./d-demangle.c	41
zlib/inflate.c	10
zlib/zutil.c	3
zlib/crc32.c	5
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
binutils/./dwarf.h	1
libiberty/./../include/dwarf2.def	4
libiberty/./concat.c	3
libiberty/./lrealpath.c	1
libctf/ctf-archive.c	15
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
libctf/ctf-open.c	30
libctf/ctf-subr.c	7
libctf/ctf-util.c	13
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
libctf/ctf-error.c	2
zlib/uncompr.c	2
libctf/ctf-string.c	10
libctf/ctf-hash.c	20
libiberty/./hashtab.c	15
libctf/./ctf-inlines.h	2
libctf/ctf-create.c	5
libctf/ctf-serialize.c	1
libctf/ctf-dedup.c	1
libiberty/./bsearch_r.c	1
libctf/ctf-dump.c	14
libctf/ctf-labels.c	2
libctf/ctf-types.c	23
libctf/ctf-decl.c	5
libctf/ctf-lookup.c	3
libsframe/sframe.c	39
libsframe/sframe-error.c	1
libsframe/sframe-dump.c	5

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
spu_elf_final_link	/src/binutils-gdb/bfd/elf32-spu.c	2	['struct.bfd *', 'struct.bfd_link_info *']	8	0	161	25	10	394	0	4531	3657
_bfd_mips_elf_find_nearest_line	/src/binutils-gdb/bfd/elfxx-mips.c	8	['struct.bfd.478 *', 'struct.bfd_symbol.480 **', 'struct.bfd_section.484 *', 'size_t ', 'char **', 'char **', 'int *', 'int *']	7	0	347	35	14	343	0	2857	1706
elf_xtensa_relax_section	/src/binutils-gdb/bfd/elf32-xtensa.c	4	['struct.bfd *', 'struct.bfd_section *', 'struct.bfd_link_info *', 'char *']	6	0	166	32	10	305	0	2306	1501
nds32_elf_relax_section	/src/binutils-gdb/bfd/elf32-nds32.c	4	['struct.bfd *', 'struct.bfd_section *', 'struct.bfd_link_info *', 'char *']	5	0	1241	189	59	170	0	2008	1235
ctf_link	/src/binutils-gdb/libctf/ctf-link.c	2	['struct.ctf_dict *', 'int ']	10	0	186	28	12	435	0	3122	1128

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

2531 / 10913

Cyclomatic complexity statically reachable by fuzzers

29736 / 117445

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
cris_aout_32_machine_type	111	15	13.51%	[]
_bfd_construct_extended_name_table	131	14	10.68%	[]
_bfd_write_archive_contents	124	33	26.61%	[]
bfd_scan_vma	55	7	12.72%	[]
coff_aarch64_reloc_type_lookup	41	9	21.95%	[]
xcoff_write_archive_contents_old	185	78	42.16%	[]
xcoff_write_archive_contents_big	196	76	38.77%	[]
coff_amd64_reloc_type_lookup	35	9	25.71%	[]
bfd_get_full_section_contents	103	42	40.77%	['fuzz_strings']
elf_parse_notes	82	41	50.0%	[]
arc_elf_object_p	43	21	48.83%	[]
bfd_arm_get_mach_from_attributes	69	9	13.04%	[]
_bfd_elf_ppc_set_arch	66	22	33.33%	[]
rx_get_section_contents	50	9	18.0%	[]
pdb_write_directory	139	26	18.70%	[]
_bfd_pepi_slurp_codeview_record	42	20	47.61%	[]
_bfd_vms_get_value	40	11	27.50%	[]
_bfd_vms_etir_name	57	29	50.87%	[]
_bfd_vms_lib_write_archive_contents	215	93	43.25%	[]
vms_write_index	225	20	8.888%	[]
_bfd_vms_lib_build_map	72	15	20.83%	[]
elf32_ia64_object_p	69	13	18.84%	[]
bfd_mach_o_read_symtab_strtab	32	17	53.12%	[]
yy_get_next_buffer	89	47	52.80%	['fuzz_dlltool']
yyparse	622	100	16.07%	['fuzz_dlltool']
scan_drectve_symbols	66	9	13.63%	['fuzz_dlltool']
go32exe_create_stub	93	23	24.73%	[]
s_elseif	62	33	53.22%	[]
gen_to_words	266	138	51.87%	[]
obj_elf_change_section	179	86	48.04%	[]
obj_elf_section_name	51	24	47.05%	[]
obj_elf_section	285	53	18.59%	[]
i386_operator	81	4	4.938%	['fuzz_as']
md_assemble	418	224	53.58%	['fuzz_as']
md_operand	34	16	47.05%	['fuzz_as']
i386_target_format	86	33	38.37%	['fuzz_as']
set_cpu_arch	200	87	43.5%	[]
build_vex_prefix	125	59	47.19%	['fuzz_as']
insert_lfence_before	91	12	13.18%	['fuzz_as']
i386_addressing_mode	51	20	39.21%	['fuzz_as']
operand_type_register_match	31	6	19.35%	['fuzz_as']
check_VecOperands	321	33	10.28%	['fuzz_as']
process_suffix	361	160	44.32%	['fuzz_as']
process_operands	217	36	16.58%	['fuzz_as']
build_modrm_byte	328	81	24.69%	['fuzz_as']
output_insn	393	209	53.18%	['fuzz_as']
add_branch_padding_frag_p	70	7	10.0%	['fuzz_as']
output_disp	126	56	44.44%	['fuzz_as']
s_insn	618	84	13.59%	[]
parse_real_register	52	23	44.23%	['fuzz_as']
update_code_flag	33	17	51.51%	['fuzz_as']
cfi_finish	157	59	37.57%	['fuzz_as']
get_cfi_seg	31	11	35.48%	['fuzz_as']
initial_cie_insn	47	18	38.29%	['fuzz_as']
output_cfi_insn	202	27	13.36%	['fuzz_as']
dwarf2_gen_line_info	37	15	40.54%	['fuzz_as']
dwarf2_directive_loc	178	55	30.89%	[]
out_debug_abbrev	90	35	38.88%	['fuzz_as']
out_debug_info	129	47	36.43%	['fuzz_as']
check_eh_frame	145	38	26.20%	['fuzz_as']
get_cie_info	98	21	21.42%	['fuzz_as']
input_file_open	68	36	52.94%	['fuzz_as']
listing_newline	102	8	7.843%	['fuzz_as']
listing_title	44	21	47.72%	[]
float_length	49	15	30.61%	[]
do_s_func	63	33	52.38%	[]
expandargv	79	20	25.31%	['fuzz_as']
libiberty_vprintf_buffer_size	68	34	50.0%	[]
ns32kaout_32_get_reloc_upper_bound	32	16	50.0%	[]
aout_32_get_reloc_upper_bound	32	16	50.0%	[]
coff_slurp_reloc_table	83	8	9.638%	[]
dwarf1_unit_find_nearest_line	46	17	36.95%	[]
parse_line_table	52	9	17.30%	[]
read_indexed_string	35	16	45.71%	[]
lookup_line	331	13	3.927%	[]
mk_fdrtab	71	33	46.47%	[]
_bfd_elf_get_property	35	14	40.0%	[]
_bfd_elf_get_symbol_version_string	49	13	26.53%	[]
mips_elf_assign_gp	33	17	51.51%	[]
mips_elf64_assign_gp	33	17	51.51%	[]
ppc64_elf_set_toc	84	37	44.04%	[]
ppc64_elf_ha_reloc	40	16	40.0%	[]
ppc64_elf_branch_reloc	40	17	42.5%	[]
ppc64_elf_maybe_function_sym	39	21	53.84%	[]
_bfd_mips_elf_find_nearest_line	78	18	23.07%	[]
get_build_id_name	33	11	33.33%	[]
get_build_id	61	16	26.22%	[]
aout_16_get_reloc_upper_bound	32	16	50.0%	[]
som_slurp_reloc_table	45	17	37.77%	[]
_bfd_stab_section_find_nearest_line	392	46	11.73%	[]
print_symname	44	22	50.0%	['fuzz_nm']
display_rel_file	96	43	44.79%	['fuzz_nm']
lrealpath	36	8	22.22%	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
splay_tree_splay	49	15	30.61%	[]

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/binutils-gdb/bfd/elf32-s12z.c	[]	[]
/src/binutils-gdb/bfd/cpu-i386.c	[]	[]
/src/binutils-gdb/gas/ecoff.c	['fuzz_as']	[]
/src/binutils-gdb/binutils/./../include/elf/aarch64.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/frv.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/./fuzz_as.h	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf32-m32c.c	[]	[]
/src/binutils-gdb/bfd/cpu-m68k.c	[]	[]
/src/binutils-gdb/gas/subsegs.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elfxx-x86.c	[]	[]
/src/binutils-gdb/bfd/elf32-iq2000.c	[]	[]
/src/binutils-gdb/binutils/./fuzz_dlltool.h	['fuzz_dlltool']	[]
/src/binutils-gdb/bfd/./coff-mcore.c	[]	[]
/src/binutils-gdb/bfd/cpu-cris.c	[]	[]
/src/binutils-gdb/bfd/elf64-ia64-vms.c	[]	[]
/src/binutils-gdb/bfd/elf32-metag.c	[]	[]
/src/binutils-gdb/libctf/ctf-open.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/dw2gencfi.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-score7.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/visium.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elfnn-riscv.c	[]	[]
/src/binutils-gdb/libiberty/./pex-common.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/h8.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/coff-mips.c	[]	[]
/src/binutils-gdb/bfd/coffgen.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/dlx.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/wasm32.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-arm.c	[]	[]
/src/binutils-gdb/bfd/elf32-s390.c	[]	[]
/src/binutils-gdb/libiberty/./objalloc.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./../include/opcode/tilegx.h	[]	[]
/src/binutils-gdb/binutils/deflex.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/binutils/./../include/elf/i370.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-m32c.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/s390.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/mach-o-arm.c	[]	[]
/src/binutils-gdb/libsframe/sframe-dump.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/filemode.c	[]	[]
/src/binutils-gdb/libiberty/./obstack.c	['fuzz_windres', 'fuzz_as']	[]
/src/binutils-gdb/bfd/elf-sframe.c	[]	[]
/src/binutils-gdb/bfd/cpu-spu.c	[]	[]
/src/binutils-gdb/bfd/elf32-pj.c	[]	[]
/src/binutils-gdb/bfd/coff-go32.c	[]	[]
/src/binutils-gdb/gas/flonum-mult.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/coff64-rs6000.c	[]	[]
/src/binutils-gdb/binutils/./dwarf.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-ppc.c	[]	[]
/src/binutils-gdb/bfd/./elf-bfd.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/xgate.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./arc-got.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/d10v.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-string.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/stabs.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/mt.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./xstrndup.c	[]	[]
/src/binutils-gdb/libiberty/./xstrdup.c	['fuzz_dlltool', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-bfin.c	[]	[]
/src/binutils-gdb/bfd/elf32-msp430.c	[]	[]
/src/binutils-gdb/libsframe/sframe.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/../bfd/bfd.h	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf32-rl78.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/iq2000.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/flonum-copy.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libctf/ctf-decl.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-visium.c	[]	[]
/src/binutils-gdb/bfd/elfxx-mips.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nios2.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/peXXigen.c	[]	[]
/src/binutils-gdb/libiberty/./unlink-if-ordinary.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm']	[]
/src/binutils-gdb/bfd/opncls.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/bfd/./coff-x86_64.c	[]	[]
/src/binutils-gdb/libiberty/./lbasename.c	['fuzz_dlltool', 'fuzz_as', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/xsym.c	[]	[]
/src/binutils-gdb/bfd/cpu-aarch64.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/ft32.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-dump.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/fuzz_nm.c	['fuzz_nm']	['fuzz_nm']
/src/binutils-gdb/bfd/./coff-sh.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nds32.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/./ctf-decls.h	[]	[]
/src/binutils-gdb/bfd/elf64-s390.c	[]	[]
/src/binutils-gdb/bfd/coff-tic30.c	[]	[]
/src/binutils-gdb/bfd/simple.c	[]	[]
/src/binutils-gdb/bfd/elflink.c	[]	[]
/src/binutils-gdb/bfd/elf32-lm32.c	[]	[]
/src/binutils-gdb/bfd/i386aout.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/riscv.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf-m10200.c	[]	[]
/src/binutils-gdb/bfd/elf32-tic6x.c	[]	[]
/src/binutils-gdb/bfd/elf32-frv.c	[]	[]
/src/binutils-gdb/bfd/elf64-mips.c	[]	[]
/src/binutils-gdb/bfd/elf32-wasm32.c	[]	[]
/src/binutils-gdb/bfd/elfxx-sparc.c	[]	[]
/src/binutils-gdb/gas/ehopt.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/xtensa.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/./config/tc-i386-intel.c	['fuzz_as']	[]
/src/binutils-gdb/binutils/./rclex.c	[]	[]
/src/binutils-gdb/binutils/unwind-ia64.c	[]	[]
/src/binutils-gdb/bfd/tekhex.c	[]	[]
/src/binutils-gdb/bfd/reloc.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/coff-stgo32.c	[]	[]
/src/binutils-gdb/bfd/elf32-spu.c	[]	[]
/src/binutils-gdb/bfd/elf64-amdgcn.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/mmix.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/compress.c	['fuzz_strings']	[]
/src/binutils-gdb/libctf/ctf-hash.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/som.c	[]	[]
/src/binutils-gdb/libctf/ctf-link.c	[]	[]
/src/binutils-gdb/bfd/elf64-sparc.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/ip2k.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/listing.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-avr.c	[]	[]
/src/binutils-gdb/gas/dwarf2dbg.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/zlib/inftrees.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-powerpc.c	[]	[]
/src/binutils-gdb/libiberty/./xexit.c	['fuzz_dlltool', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/zlib/gzlib.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/xstormy16.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./d-demangle.c	['fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-xtensa.c	[]	[]
/src/binutils-gdb/bfd/./../include/elf/ppc64.h	[]	[]
/src/binutils-gdb/binutils/defparse.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/binutils/./../include/elf/hppa.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./coff-i386.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/d30v.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-am33lin.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/ia64.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/rl78.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./../include/opcode/arc-func.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/sh.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-rs6000.c	[]	[]
/src/binutils-gdb/zlib/crc32.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-moxie.c	[]	[]
/src/binutils-gdb/bfd/./elf-hppa.h	[]	[]
/src/binutils-gdb/bfd/elf32-pru.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/s12z.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/elfcomm.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/resrc.c	[]	[]
/src/binutils-gdb/binutils/rcparse.y	[]	[]
/src/binutils-gdb/bfd/./aout-target.h	[]	[]
/src/binutils-gdb/binutils/bucomm.c	['fuzz_dlltool', 'fuzz_strings', 'fuzz_windres', 'fuzz_nm']	['fuzz_dlltool', 'fuzz_windres', 'fuzz_nm']
/src/binutils-gdb/bfd/srec.c	[]	[]
/src/binutils-gdb/bfd/elfxx-tilegx.c	[]	[]
/src/binutils-gdb/bfd/coff-alpha.c	[]	[]
/src/binutils-gdb/bfd/aout-ns32k.c	[]	[]
/src/binutils-gdb/bfd/merge.c	[]	[]
/src/binutils-gdb/binutils/fuzz_readelf.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/gas/expr.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/vms-alpha.c	[]	[]
/src/binutils-gdb/gas/cond.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/gas/sb.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/verilog.c	[]	[]
/src/binutils-gdb/gas/remap.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/ecofflink.c	[]	[]
/src/binutils-gdb/gas/read.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/./../include/elf/bpf.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./ecoffswap.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/cris.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/pj.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-dedup.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/csky.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-xgate.c	[]	[]
/src/binutils-gdb/bfd/ecoff.c	[]	[]
/src/binutils-gdb/bfd/elf32-v850.c	[]	[]
/src/binutils-gdb/bfd/binary.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/mn10300.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./bfd.h	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/arc.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./splay-tree.c	[]	[]
/src/binutils-gdb/libctf/ctf-create.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/score.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/coff-tic4x.c	[]	[]
/src/binutils-gdb/bfd/hash.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/zlib/trees.c	[]	[]
/src/binutils-gdb/gas/write.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/version.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/m68k.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/rcparse.c	[]	[]
/src/binutils-gdb/bfd/elf32-crx.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/sparc.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./libbfd.h	[]	[]
/src/binutils-gdb/binutils/fuzz_ranlib_simulation.c	['fuzz_ranlib_simulation']	['fuzz_ranlib_simulation']
/src/binutils-gdb/gas/atof-generic.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libctf/ctf-sha1.c	[]	[]
/src/binutils-gdb/bfd/elf32-mep.c	[]	[]
/src/binutils-gdb/bfd/./aoutx.h	[]	[]
/src/binutils-gdb/bfd/./targets.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-mips.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/cr16.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/fuzz_strings.c	['fuzz_strings']	[]
/src/binutils-gdb/zlib/inflate.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./coff-arm.c	[]	[]
/src/binutils-gdb/bfd/./coffswap.h	[]	[]
/src/binutils-gdb/bfd/dwarf1.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/msp430.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf-attrs.c	[]	[]
/src/binutils-gdb/libctf/ctf-subr.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/mep.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-cris.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/m32c.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-serialize.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-mips.c	[]	[]
/src/binutils-gdb/bfd/elf32-dlx.c	[]	[]
/src/binutils-gdb/bfd/elf64-gen.c	[]	[]
/src/binutils-gdb/libiberty/./xvasprintf.c	[]	[]
/src/binutils-gdb/gas/hash.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/resbin.c	['fuzz_windres']	[]
/src/binutils-gdb/bfd/elf-vxworks.c	[]	[]
/src/binutils-gdb/gas/input-file.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elfnn-aarch64.c	[]	[]
/src/binutils-gdb/bfd/elf32-csky.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/tic6x.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/fuzz_as.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./elfxx-mips.h	[]	[]
/src/binutils-gdb/bfd/elf64-ppc.c	[]	[]
/src/binutils-gdb/bfd/pef.c	[]	[]
/src/binutils-gdb/bfd/./coff-aarch64.c	[]	[]
/src/binutils-gdb/bfd/elfxx-aarch64.c	[]	[]
/src/binutils-gdb/libiberty/./argv.c	['fuzz_as']	[]
/src/binutils-gdb/libiberty/./pex-unix.c	[]	[]
/src/binutils-gdb/bfd/cpu-riscv.c	[]	[]
/src/binutils-gdb/bfd/archive.c	['fuzz_dlltool', 'fuzz_nm']	['fuzz_dlltool', 'fuzz_nm']
/src/binutils-gdb/binutils/./../include/elf/mcore.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/reloc16.c	[]	[]
/src/binutils-gdb/bfd/elf32-m68hc11.c	[]	[]
/src/binutils-gdb/bfd/elf32-sparc.c	[]	[]
/src/binutils-gdb/zlib/zutil.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/winduni.c	[]	[]
/src/binutils-gdb/libiberty/./cplus-dem.c	['fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-lookup.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/bfin.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/app.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./cpu-ia64-opc.c	[]	[]
/src/binutils-gdb/bfd/elf32-ip2k.c	[]	[]
/src/binutils-gdb/bfd/elf-strtab.c	[]	[]
/src/binutils-gdb/libiberty/./lrealpath.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-arc.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/lm32.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elfnn-ia64.c	[]	[]
/src/binutils-gdb/bfd/coff-z80.c	[]	[]
/src/binutils-gdb/bfd/i386msdos.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/mips.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-util.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-vax.c	[]	[]
/src/binutils-gdb/libiberty/./getpwd.c	['fuzz_as']	[]
/src/binutils-gdb/gas/stabs.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-nds32.c	[]	[]
/src/binutils-gdb/bfd/pei-x86_64.c	[]	[]
/src/binutils-gdb/bfd/vms-lib.c	[]	[]
/src/binutils-gdb/bfd/aout-cris.c	[]	[]
/src/binutils-gdb/bfd/bfdio.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/binutils/./../include/elf/m68hc11.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libsframe/sframe-error.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-nios2.c	[]	[]
/src/binutils-gdb/bfd/elfn32-mips.c	[]	[]
/src/binutils-gdb/bfd/mach-o-aarch64.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/microblaze.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/ppc.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/x86-64.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elfxx-ia64.c	[]	[]
/src/binutils-gdb/zlib/compress.c	[]	[]
/src/binutils-gdb/bfd/./archures.c	['fuzz_as', 'fuzz_nm']	[]
/src/binutils-gdb/binutils/./rescoff.c	['fuzz_windres']	[]
/src/binutils-gdb/bfd/./coffcode.h	[]	[]
/src/binutils-gdb/gas/./hash.h	['fuzz_as']	[]
/src/binutils-gdb/bfd/elf64-mmix.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/alpha.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-nfp.c	[]	[]
/src/binutils-gdb/gas/./as.h	['fuzz_as']	[]
/src/binutils-gdb/libctf/ctf-open-bfd.c	[]	[]
/src/binutils-gdb/binutils/fuzz_windres.c	['fuzz_windres']	['fuzz_windres']
/src/binutils-gdb/bfd/elf32-score.c	[]	[]
/src/binutils-gdb/bfd/syms.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/binutils/demanguse.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/arm.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/i960.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-xstormy16.c	[]	[]
/src/binutils-gdb/fuzz/fuzz_bfd.c	['fuzz_bfd']	['fuzz_bfd']
/src/binutils-gdb/bfd/cpu-ns32k.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/fr30.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./dwarf2.c	[]	[]
/src/binutils-gdb/bfd/plugin.c	[]	[]
/src/binutils-gdb/bfd/cpu-arc.c	[]	[]
/src/binutils-gdb/libiberty/./vprintf-support.c	[]	[]
/src/binutils-gdb/bfd/xtensa-isa.c	[]	[]
/src/binutils-gdb/bfd/elf-properties.c	[]	[]
/src/binutils-gdb/bfd/elf32-ft32.c	[]	[]
/src/binutils-gdb/libiberty/./rust-demangle.c	['fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./peicode.h	[]	[]
/src/binutils-gdb/libiberty/./hashtab.c	['fuzz_as', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-sh.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/epiphany.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/wasm-module.c	[]	[]
/src/binutils-gdb/binutils/./readelf.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-i386.c	[]	[]
/src/binutils-gdb/bfd/elf32-h8300.c	[]	[]
/src/binutils-gdb/bfd/elf-m10300.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/i860.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./../include/dwarf2.def	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/pdp11.c	[]	[]
/src/binutils-gdb/binutils/./fuzz_nm.h	['fuzz_nm']	[]
/src/binutils-gdb/gas/messages.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf-ifunc.c	[]	[]
/src/binutils-gdb/gas/gen-sframe.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/./coff-ia64.c	[]	[]
/src/binutils-gdb/bfd/./elf-linux-core.h	[]	[]
/src/binutils-gdb/binutils/./fuzz_strings.h	['fuzz_strings']	[]
/src/binutils-gdb/libiberty/./make-temp-file.c	[]	[]
/src/binutils-gdb/bfd/libbfd.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/libiberty/./xasprintf.c	[]	[]
/src/binutils-gdb/bfd/elf64-alpha.c	[]	[]
/src/binutils-gdb/zlib/deflate.c	[]	[]
/src/binutils-gdb/libiberty/./xstrerror.c	['fuzz_dlltool', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm']	[]
/src/binutils-gdb/bfd/elfxx-riscv.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/m32r.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/metag.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./pexecute.c	[]	[]
/src/binutils-gdb/libiberty/./concat.c	['fuzz_dlltool', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./xatexit.c	[]	[]
/src/binutils-gdb/bfd/xtensa-dynconfig.c	[]	[]
/src/binutils-gdb/bfd/./elfcode.h	[]	[]
/src/binutils-gdb/libiberty/./getruntime.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/coff-tic54x.c	[]	[]
/src/binutils-gdb/bfd/./elf-m10300.c	[]	[]
/src/binutils-gdb/bfd/./../include/opcode/ft32.h	[]	[]
/src/binutils-gdb/bfd/ihex.c	[]	[]
/src/binutils-gdb/libiberty/./filename_cmp.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/mach-o-x86-64.c	[]	[]
/src/binutils-gdb/bfd/mach-o-i386.c	[]	[]
/src/binutils-gdb/gas/sframe-opt.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/tilepro.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/moxie.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/stab-syms.c	[]	[]
/src/binutils-gdb/libctf/./ctf-inlines.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/spu.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-tilepro.c	[]	[]
/src/binutils-gdb/bfd/cofflink.c	[]	[]
/src/binutils-gdb/bfd/elf64-hppa.c	[]	[]
/src/binutils-gdb/bfd/elf32-d30v.c	[]	[]
/src/binutils-gdb/bfd/i386lynx.c	[]	[]
/src/binutils-gdb/bfd/elfxx-loongarch.c	[]	[]
/src/binutils-gdb/bfd/cpu-tic4x.c	[]	[]
/src/binutils-gdb/bfd/bfd.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/binutils/./../include/elf/avr.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-labels.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/cpu-nios2.c	[]	[]
/src/binutils-gdb/bfd/coff-z8k.c	[]	[]
/src/binutils-gdb/bfd/elf32-rx.c	[]	[]
/src/binutils-gdb/bfd/mach-o.c	[]	[]
/src/binutils-gdb/binutils/resres.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/nfp.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/config/tc-i386.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/cpu-arm.c	[]	[]
/src/binutils-gdb/binutils/../bfd/bfd.h	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_strings', 'fuzz_windres', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/coff-x86_64.c	[]	[]
/src/binutils-gdb/bfd/coff-rs6000.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/i386.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/ppc64.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./xmalloc.c	['fuzz_dlltool', 'fuzz_strings', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/rx.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-archive.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-or1k.c	[]	[]
/src/binutils-gdb/libiberty/./hex.c	['fuzz_as']	[]
/src/binutils-gdb/bfd/./libhppa.h	[]	[]
/src/binutils-gdb/libiberty/./bsearch_r.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/config/atof-ieee.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/byteswap.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/ctf-types.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./elfxx-x86.h	[]	[]
/src/binutils-gdb/bfd/./elf-s390-common.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/z80.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/mn10200.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-m68hc1x.c	[]	[]
/src/binutils-gdb/gas/config/obj-elf.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-epiphany.c	[]	[]
/src/binutils-gdb/bfd/linker.c	[]	[]
/src/binutils-gdb/libiberty/./cp-demangle.c	['fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf32-tilegx.c	[]	[]
/src/binutils-gdb/libiberty/./make-relative-prefix.c	[]	[]
/src/binutils-gdb/bfd/elf32-microblaze.c	[]	[]
/src/binutils-gdb/bfd/xcofflink.c	[]	[]
/src/binutils-gdb/bfd/elf32-mcore.c	[]	[]
/src/binutils-gdb/gas/macro.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf64-nfp.c	[]	[]
/src/binutils-gdb/gas/frags.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/section.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm']
/src/binutils-gdb/bfd/elf32-gen.c	[]	[]
/src/binutils-gdb/bfd/elf32-z80.c	[]	[]
/src/binutils-gdb/bfd/aix5ppc-core.c	[]	[]
/src/binutils-gdb/bfd/corefile.c	[]	[]
/src/binutils-gdb/gas/depend.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/libctf/ctf-error.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/./elfcore.h	[]	[]
/src/binutils-gdb/bfd/elf32-cr16.c	[]	[]
/src/binutils-gdb/bfd/./../include/opcode/tilepro.h	[]	[]
/src/binutils-gdb/bfd/vms-misc.c	[]	[]
/src/binutils-gdb/bfd/pe-x86_64.c	[]	[]
/src/binutils-gdb/bfd/pc532-mach.c	[]	[]
/src/binutils-gdb/binutils/fuzz_dlltool.c	['fuzz_dlltool']	['fuzz_dlltool']
/src/binutils-gdb/bfd/elfnn-loongarch.c	[]	[]
/src/binutils-gdb/binutils/./dwarf.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/ppcboot.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/tilegx.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/compress-debug.c	[]	[]
/src/binutils-gdb/bfd/mmo.c	[]	[]
/src/binutils-gdb/fuzz/fuzz_bfd_ext.c	['fuzz_bfd_ext']	['fuzz_bfd_ext']
/src/binutils-gdb/bfd/cpu-h8300.c	[]	[]
/src/binutils-gdb/bfd/elf32-m68k.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/or1k.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/gas/output-file.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/cache.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd_ext', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']
/src/binutils-gdb/zlib/uncompr.c	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/crx.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/format.c	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_strings', 'fuzz_windres', 'fuzz_as', 'fuzz_nm']	['fuzz_ranlib_simulation', 'fuzz_dlltool', 'fuzz_bfd', 'fuzz_windres', 'fuzz_as', 'fuzz_nm']
/src/binutils-gdb/gas/symbols.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/zlib/inffast.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf64-bpf.c	[]	[]
/src/binutils-gdb/bfd/elf32-fr30.c	[]	[]
/src/binutils-gdb/bfd/elf64-x86-64.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/v850.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libctf/./ctf-sha1.h	[]	[]
/src/binutils-gdb/bfd/elf32-hppa.c	[]	[]
/src/binutils-gdb/bfd/cpu-sh.c	[]	[]
/src/binutils-gdb/bfd/elf32-d10v.c	[]	[]
/src/binutils-gdb/bfd/elf32-mt.c	[]	[]
/src/binutils-gdb/bfd/elf-eh-frame.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/vax.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/bfd/elf.c	[]	[]
/src/binutils-gdb/bfd/xtensa-modules.c	[]	[]
/src/binutils-gdb/bfd/pdb.c	[]	[]
/src/binutils-gdb/binutils/./../include/elf/loongarch.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./fuzz_windres.h	['fuzz_windres']	[]
/src/binutils-gdb/bfd/elf-nacl.c	[]	[]
/src/binutils-gdb/zlib/gzwrite.c	[]	[]
/src/binutils-gdb/bfd/cpu-z8k.c	[]	[]
/src/binutils-gdb/bfd/elf32-m32r.c	[]	[]
/src/binutils-gdb/zlib/adler32.c	['fuzz_strings', 'fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/libiberty/./xmemdup.c	['fuzz_dlltool', 'fuzz_as']	[]
/src/binutils-gdb/gas/input-scrub.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/elf32-m68hc12.c	[]	[]
/src/binutils-gdb/libiberty/./sha1.c	[]	[]
/src/binutils-gdb/gas/codeview.c	['fuzz_as']	['fuzz_as']
/src/binutils-gdb/bfd/coff-sh.c	[]	[]
/src/binutils-gdb/bfd/archive64.c	[]	[]
/src/binutils-gdb/bfd/./netbsd.h	[]	[]
/src/binutils-gdb/binutils/./../include/elf/pru.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]
/src/binutils-gdb/binutils/./../include/elf/amdgpu.h	['fuzz_readelf_pef', 'fuzz_readelf_elf64_mmix', 'fuzz_readelf_elf32_bigarm']	[]

Directories in report

Directory
/src/binutils-gdb/bfd/
/src/binutils-gdb/gas/
/src/binutils-gdb/gas/../bfd/
/src/binutils-gdb/zlib/
/src/binutils-gdb/binutils/./../include/elf/
/src/binutils-gdb/libiberty/./../include/
/src/binutils-gdb/libctf/
/src/binutils-gdb/bfd/./../include/elf/
/src/binutils-gdb/fuzz/
/src/binutils-gdb/libiberty/./
/src/binutils-gdb/bfd/./
/src/binutils-gdb/bfd/./../include/opcode/
/src/binutils-gdb/binutils/./
/src/binutils-gdb/binutils/../bfd/
/src/binutils-gdb/gas/./
/src/binutils-gdb/binutils/
/usr/include/x86_64-linux-gnu/bits/
/src/binutils-gdb/libctf/./
/src/binutils-gdb/libsframe/
/src/
/src/binutils-gdb/gas/config/
/src/binutils-gdb/gas/./config/