High level conclusions

Fuzzer fuzz_sofa is blocked:

The runtime code coverage of fuzz_sofa covers 27.50% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_hulu is blocked:

The runtime code coverage of fuzz_hulu covers 27.10% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_esp is blocked:

The runtime code coverage of fuzz_esp covers 24.03% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_shead is blocked:

The runtime code coverage of fuzz_shead covers 24.88% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_redis is blocked:

The runtime code coverage of fuzz_redis covers 28.30% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_butil is blocked:

The runtime code coverage of fuzz_butil covers 20.95% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 7.094% of cyclomatic complexity.

Fuzzers reach 8.021% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

2355 / 29360

Cyclomatic complexity statically reachable by fuzzers

9540 / 134474

Runtime code coverage of functions

7427 / 29360

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_json

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	519	50.2%
gold	[1:9]	8	0.77%
yellow	[10:29]	14	1.35%
greenyellow	[30:49]	20	1.93%
lawngreen	50+	472	45.6%
All colors	1033	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
51	290	butil::rapidjson::GenericReader , butil::rapidjson::UTF8 , butil::rapidjson::CrtAllocator>::NumberStream >, false>::Tell()	call site: 00290	__assert_fail
47	242	butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator >::SetObjectRaw(butil::rapidjson::GenericMember , butil::rapidjson::MemoryPoolAllocator >*, unsigned int, butil::rapidjson::MemoryPoolAllocator &)	call site: 00242	__assert_fail
36	199	butil::rapidjson::GenericDocument , butil::rapidjson::MemoryPoolAllocator , butil::rapidjson::CrtAllocator>::Bool(bool)	call site: 00199	__assert_fail
34	945	json2pb::JsonValueToProtoMessage(butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string , std::allocator >*, int)	call site: 00945	__assert_fail
32	376	butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator >::SetArrayRaw(butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator >*, unsigned int, butil::rapidjson::MemoryPoolAllocator &)	call site: 00376	__assert_fail
21	34	LLVMFuzzerTestOneInput	call site: 00034	__clang_call_terminate
20	700	json2pb::JsonValueToProtoField(butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::FieldDescriptor const*, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string , std::allocator >*, int)	call site: 00700
19	994	JsonContextBody::~JsonContextBody()	call site: 00994	__clang_call_terminate
18	524	json2pb::JsonValueToProtoMessage(butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string , std::allocator >*, int)	call site: 00524
15	182	butil::rapidjson::GenericDocument , butil::rapidjson::MemoryPoolAllocator , butil::rapidjson::CrtAllocator>::Null()	call site: 00182	__assert_fail
11	788	butil::Base64Decode(butil::BasicStringPiece , std::allocator > > const&, std::__cxx11::basic_string , std::allocator >*)	call site: 00788	__clang_call_terminate
10	545	json2pb::JsonValueToProtoMessage(butil::rapidjson::GenericValue , butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string , std::allocator >*, int)	call site: 00545

Runtime coverage analysis

Covered functions

431

Functions that are reachable but not covered

376

Reachable functions

828

Percentage of reachable functions covered

54.59%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_json.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	28
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	3
/src/brpc/build/test/addressbook1.pb.h	1
/src/brpc/build/test/addressbook1.pb.cc	4
/usr/include/google/protobuf/message.h	3
/usr/include/google/protobuf/message_lite.h	3
/usr/include/google/protobuf/metadata_lite.h	11
/usr/include/google/protobuf/has_bits.h	1
/usr/include/google/protobuf/generated_message_util.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	1
/usr/include/google/protobuf/repeated_ptr_field.h	6
/usr/include/google/protobuf/repeated_field.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/src/brpc/src/json2pb/json_to_pb.cpp	15
/src/brpc/src/butil/third_party/rapidjson/document.h	95
/src/brpc/src/butil/third_party/rapidjson/internal/stack.h	19
/src/brpc/src/butil/third_party/rapidjson/error/error.h	7
/src/brpc/src/butil/third_party/rapidjson/error/../allocators.h	8
/src/brpc/src/butil/third_party/rapidjson/error/../rapidjson.h	4
/src/brpc/src/butil/third_party/rapidjson/reader.h	40
/src/brpc/src/butil/third_party/rapidjson/error/../encodings.h	1
/src/brpc/src/butil/third_party/rapidjson/internal/strtod.h	2
/src/brpc/src/butil/third_party/rapidjson/internal/pow10.h	1
/src/brpc/src/butil/third_party/rapidjson/error/en.h	1
/src/brpc/src/butil/string_printf.cpp	3
/usr/include/google/protobuf/descriptor.h	13
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	21
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	9
/usr/include/google/protobuf/stubs/once.h	1
/src/brpc/src/butil/strings/string_piece.h	6
/src/brpc/src/butil/strings/string_number_conversions.cc	22
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	7
/src/brpc/src/butil/base64.cc	1
/src/brpc/src/butil/third_party/modp_b64/modp_b64.cc	1
/src/brpc/src/json2pb/encode_decode.cpp	2
/src/brpc/src/butil/third_party/rapidjson/internal/strfunc.h	1
/src/brpc/src/json2pb/protobuf_map.cpp	1
/usr/include/google/protobuf/unknown_field_set.h	2
/usr/include/google/protobuf/arena.h	1

Fuzzer: fuzz_butil

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1702	85.5%
gold	[1:9]	155	7.78%
yellow	[10:29]	10	0.50%
greenyellow	[30:49]	1	0.05%
lawngreen	50+	122	6.13%
All colors	1990	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
391	123	butil::internal::GetRangeConstraint(int)	call site: 00123	pthread_mutex_init
339	1626	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01626	pthread_mutex_lock
241	1079	bvar::detail::AgentCombiner ::get_or_create_tls_agent()	call site: 01079	bthread_key_create2
55	1551	bvar::Variable::expose(butil::BasicStringPiece , std::allocator > > const&, bvar::DisplayFilter)	call site: 01551	__clang_call_terminate
53	712	bvar::VarEntry* butil::FlatMap , std::allocator >, bvar::VarEntry, butil::DefaultHasher , std::allocator > >, butil::DefaultEqualTo , std::allocator > >, false, butil::PtAllocator, false>::seek , std::allocator > >(std::__cxx11::basic_string , std::allocator > const&) const	call site: 00712	bthread_key_create
39	72	butil::Hash(char const*, unsigned long)	call site: 00072	__errno_location
37	1346	butil::PlatformThread::SetNameSimple(char const*)	call site: 01346	strlen
32	896	butil::thread_atexit(void (*)(void*), void*)	call site: 00896	pthread_mutex_lock
26	799	pthread_mutex_lock	call site: 00799	pthread_mutex_unlock
25	1	LLVMFuzzerTestOneInput	call site: 00001	__clang_call_terminate
25	997	butil::Lock::Release()	call site: 00997	pthread_mutex_unlock
21	953	bvar::detail::AgentCombiner ::get_or_create_tls_agent()	call site: 00953	__errno_location

Runtime coverage analysis

Covered functions

233

Functions that are reachable but not covered

1547

Reachable functions

1957

Percentage of reachable functions covered

20.95%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_butil.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	24
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	36
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	3
/src/brpc/src/butil/strings/string_piece.h	13
/src/brpc/src/butil/base64.cc	2
/src/brpc/src/butil/third_party/modp_b64/modp_b64.cc	2
/src/brpc/src/butil/crc32c.h	1
/src/brpc/src/butil/crc32c.cc	3
/src/brpc/src/butil/hash.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	4
/src/brpc/src/butil/logging.h	44
/src/brpc/src/butil/logging.cc	26
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	15
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	36
/src/brpc/src/butil/memory/singleton.h	4
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	4
/src/brpc/src/butil/atomicops.h	19
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	5
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	133
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	17
/src/brpc/src/bthread/mutex.cpp	12
/src/brpc/src/butil/scoped_lock.h	2
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	5
/src/brpc/src/butil/time.h	7
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/bvar/reducer.h	8
/src/brpc/src/bvar/variable.h	2
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	19
/src/brpc/src/butil/containers/flat_map.h	23
/src/brpc/src/butil/single_threaded_pool.h	8
/src/brpc/src/butil/containers/optional.h	7
/src/brpc/src/butil/memory/scope_guard.h	8
/src/brpc/src/butil/memory/manual_constructor.h	7
/src/brpc/src/butil/memory/aligned_memory.h	5
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	34
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	21
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	3
/src/brpc/src/butil/object_pool_inl.h	15
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	27
/src/brpc/src/bvar/detail/combiner.h	26
/src/brpc/src/bvar/detail/agent_group.h	12
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	2
/src/brpc/src/bthread/task_group.cpp	1
/src/brpc/src/bthread/task_group.h	1
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	7
/src/brpc/src/bvar/window.h	6
/src/brpc/src/bvar/detail/sampler.h	4
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	20
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	1
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	4
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/sha1_portable.cc	13

Fuzzer: fuzz_redis

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2313	75.7%
gold	[1:9]	264	8.65%
yellow	[10:29]	64	2.09%
greenyellow	[30:49]	68	2.22%
lawngreen	50+	343	11.2%
All colors	3052	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	99	logging::LogMessage::~LogMessage()	call site: 00099	abort
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
127	1073	bthread_getspecific	call site: 01073	pthread_rwlock_rdlock
84	1601	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01601	pthread_mutex_lock
57	1947	butil::InitGlobalIOBufProfilerInfo()	call site: 01947	getenv
55	1526	bvar::Variable::expose(butil::BasicStringPiece , std::allocator > > const&, bvar::DisplayFilter)	call site: 01526	__clang_call_terminate
53	2059	DefaultSingletonTraits ::New()	call site: 02059	__clang_call_terminate
44	687	bvar::VarEntry* butil::FlatMap , std::allocator >, bvar::VarEntry, butil::DefaultHasher , std::allocator > >, butil::DefaultEqualTo , std::allocator > >, false, butil::PtAllocator, false>::seek , std::allocator > >(std::__cxx11::basic_string , std::allocator > const&) const	call site: 00687
41	2005	butil::static_atomic *>::load(std::memory_order)	call site: 02005
37	1321	butil::PlatformThread::SetNameSimple(char const*)	call site: 01321	strlen
32	871	butil::thread_atexit(void (*)(void*), void*)	call site: 00871	pthread_mutex_lock
31	43	logging::CreateLogStream(char const*, int, char const*, int)	call site: 00043	__clang_call_terminate

Runtime coverage analysis

Covered functions

364

Functions that are reachable but not covered

2021

Reachable functions

2819

Percentage of reachable functions covered

28.31%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_redis.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	22
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	48
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	3
/src/brpc/src/butil/iobuf_inl.h	27
/src/brpc/src/butil/iobuf.cpp	27
/src/brpc/src/butil/logging.cc	26
/src/brpc/src/butil/logging.h	68
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	6
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	18
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	42
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	28
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	13
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	168
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	21
/src/brpc/src/bthread/mutex.cpp	12
/src/brpc/src/butil/scoped_lock.h	2
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	7
/src/brpc/src/butil/time.h	7
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/bvar/reducer.h	8
/src/brpc/src/bvar/variable.h	2
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	69
/src/brpc/src/butil/containers/flat_map.h	86
/src/brpc/src/butil/single_threaded_pool.h	20
/src/brpc/src/butil/containers/optional.h	28
/src/brpc/src/butil/memory/scope_guard.h	20
/src/brpc/src/butil/memory/manual_constructor.h	33
/src/brpc/src/butil/memory/aligned_memory.h	17
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	40
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	21
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	5
/src/brpc/src/butil/object_pool_inl.h	28
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	27
/src/brpc/src/bvar/detail/combiner.h	26
/src/brpc/src/bvar/detail/agent_group.h	12
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	2
/src/brpc/src/bthread/task_group.cpp	1
/src/brpc/src/bthread/task_group.h	1
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	7
/src/brpc/src/butil/strings/string_piece.h	13
/src/brpc/src/bvar/window.h	6
/src/brpc/src/bvar/detail/sampler.h	4
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	4
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	4
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2
/src/brpc/src/butil/arena.cpp	5
/src/brpc/src/brpc/redis_command.cpp	4
/src/brpc/src/butil/arena.h	2
/src/brpc/src/brpc/redis_command.h	1
/src/brpc/src/brpc/redis_reply.h	2
/src/brpc/src/brpc/redis_reply.cpp	1

Fuzzer: fuzz_hpack

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2220	64.5%
gold	[1:9]	264	7.67%
yellow	[10:29]	87	2.52%
greenyellow	[30:49]	3	0.08%
lawngreen	50+	866	25.1%
All colors	3440	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
173	3007	butil::ManualConstructor ::get()	call site: 03007	sched_yield
127	1489	bthread_getspecific	call site: 01489	pthread_rwlock_rdlock
84	1392	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01392	pthread_mutex_lock
62	370	bvar::VarEntry* butil::FlatMap , std::allocator >, bvar::VarEntry, butil::DefaultHasher , std::allocator > >, butil::DefaultEqualTo , std::allocator > >, false, butil::PtAllocator, false>::seek , std::allocator > >(std::__cxx11::basic_string , std::allocator > const&) const	call site: 00370	__clang_call_terminate
53	2587	DefaultSingletonTraits ::New()	call site: 02587	__clang_call_terminate
47	2480	butil::InitGlobalIOBufProfilerInfo()	call site: 02480	getenv
43	2312	unsigned long* butil::FlatMap , std::allocator >, unsigned long, butil::CaseIgnoredHasher, butil::CaseIgnoredEqual, false, butil::PtAllocator, false>::seek , std::allocator > >(std::__cxx11::basic_string , std::allocator > const&) const	call site: 02312
41	2533	butil::static_atomic *>::load(std::memory_order)	call site: 02533
40	1957	logging::LogStream::FlushWithoutReset()	call site: 01957	open
39	1333	butil::BoundedQueue >::clear()	call site: 01333	pthread_cond_wait
37	1105	butil::PlatformThread::SetNameSimple(char const*)	call site: 01105	strlen
36	2274	butil::CaseIgnoredEqual::operator()(std::__cxx11::basic_string , std::allocator > const&, std::__cxx11::basic_string , std::allocator > const&) const	call site: 02274

Runtime coverage analysis

Covered functions

575

Functions that are reachable but not covered

1900

Reachable functions

3173

Percentage of reachable functions covered

40.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_hpack.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	48
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	3
/src/brpc/src/butil/iobuf_inl.h	27
/src/brpc/src/brpc/details/hpack.cpp	34
/src/brpc/src/brpc/describable.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	162
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	40
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	19
/src/brpc/src/butil/containers/bounded_queue.h	20
/src/brpc/src/butil/containers/flat_map_inl.h	103
/src/brpc/src/butil/containers/flat_map.h	130
/src/brpc/src/butil/single_threaded_pool.h	32
/src/brpc/src/butil/containers/case_ignored_flat_map.h	4
/src/brpc/src/butil/memory/manual_constructor.h	47
/src/brpc/src/butil/memory/aligned_memory.h	23
/src/brpc/src/brpc/details/hpack.h	5
/src/brpc/src/butil/bit_array.h	2
/src/brpc/src/butil/logging.h	82
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/logging.cc	26
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/src/brpc/src/bthread/key.cpp	21
/src/brpc/src/butil/scoped_lock.h	2
/src/brpc/src/bthread/mutex.cpp	12
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	7
/src/brpc/src/butil/time.h	7
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/atomicops.h	28
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/bvar/reducer.h	8
/src/brpc/src/bvar/variable.h	2
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/optional.h	42
/src/brpc/src/butil/memory/scope_guard.h	28
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	5
/src/brpc/src/butil/object_pool_inl.h	28
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	13
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	5
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/linked_list.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	4
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/bvar/detail/combiner.h	26
/src/brpc/src/bvar/detail/agent_group.h	12
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	42
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	18
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	7
/src/brpc/src/butil/strings/string_piece.h	12
/src/brpc/src/bvar/window.h	6
/src/brpc/src/bvar/detail/sampler.h	4
/src/brpc/src/bvar/detail/sampler.cpp	11
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/src/brpc/src/bthread/task_group.cpp	1
/src/brpc/src/bthread/task_group.h	1
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/src/brpc/src/butil/memory/singleton.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	4
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	4
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf.cpp	18
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2

Fuzzer: fuzz_uri

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	143	49.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	10	3.48%
greenyellow	[30:49]	2	0.69%
lawngreen	50+	132	45.9%
All colors	287	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
83	77	brpc::is_valid_char(char)	call site: 00077	__clang_call_terminate
25	1	LLVMFuzzerTestOneInput	call site: 00001	__clang_call_terminate
9	28	LLVMFuzzerTestOneInput	call site: 00028	__clang_call_terminate
5	69	butil::ManualConstructor , std::allocator >, std::__cxx11::basic_string , std::allocator > > >::Destroy()	call site: 00069
3	44	brpc::URI::URI()	call site: 00044	__clang_call_terminate
3	62	brpc::URI::Clear()	call site: 00062
2	54	brpc::URI::Clear()	call site: 00054	__clang_call_terminate
2	172	butil::Status::set_errorv(int, char const*, __va_list_tag*)	call site: 00172	vsnprintf
2	176	brpc::URI::SetHttpURL(char const*)	call site: 00176
2	195	butil::FlatMap , std::allocator >, std::__cxx11::basic_string , std::allocator >, butil::DefaultHasher , std::allocator > >, butil::DefaultEqualTo , std::allocator > >, false, butil::PtAllocator, false>::get_allocator()	call site: 00195
1	42	butil::SingleThreadedPool<72ul, 1024ul, 16ul, butil::PtAllocator>::~SingleThreadedPool()	call site: 00042
1	67	butil::ManualConstructor , std::allocator >, std::__cxx11::basic_string , std::allocator > > >::get()	call site: 00067

Runtime coverage analysis

Covered functions

326

Functions that are reachable but not covered

211

Reachable functions

343

Percentage of reachable functions covered

38.48%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_uri.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	18
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	3
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	3
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	4
/src/brpc/src/brpc/uri.cpp	7
/src/brpc/src/butil/status.h	4
/src/brpc/src/butil/containers/flat_map_inl.h	3
/src/brpc/src/butil/containers/flat_map.h	8
/src/brpc/src/butil/single_threaded_pool.h	6
/src/brpc/src/brpc/uri.h	1
/src/brpc/src/butil/memory/manual_constructor.h	2
/src/brpc/src/butil/memory/aligned_memory.h	2
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unordered_set.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable.h	22
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable_policy.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/enable_special_members.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	2
/src/brpc/src/butil/status.cpp	2
/src/brpc/src/butil/strings/string_piece.h	19
/src/brpc/src/brpc/rtmp.cpp	4
/src/brpc/src/butil/strings/string_piece.cc	6
/src/brpc/src/butil/string_splitter_inl.h	7

Fuzzer: fuzz_shead

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4802	85.8%
gold	[1:9]	384	6.86%
yellow	[10:29]	61	1.09%
greenyellow	[30:49]	2	0.03%
lawngreen	50+	343	6.13%
All colors	5592	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
376	98	butil::internal::GetRangeConstraint(int)	call site: 00098	__clang_call_terminate
339	1600	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01600	pthread_mutex_lock
281	2926	butil::LinkedList ::Agent>::head() const	call site: 02926	_ZNSt5tupleIJPN4bvar6detail17PercentileSamplesILm1022EEESt14default_deleteIS3_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES4_S6_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
233	4815	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 04815	bthread_errno_location
222	3325	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 03325	bthread_errno_location
214	3945	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 03945	pthread_mutex_lock
181	1053	bvar::detail::AgentCombiner ::get_or_create_tls_agent()	call site: 01053	bthread_key_create2
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
161	5103	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 05103	bthread_id_error_verbose
122	4579	butil::LinkedList , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)	call site: 04579	__cxa_begin_catch
116	3208	logging::LogStream& logging::LogStream::operator<< , std::allocator > > >(butil::BasicStringPiece , std::allocator > > const&)	call site: 03208	bthread_join
107	4217	butil::LinkedList >::Agent>::Append(butil::LinkNode >::Agent>*)	call site: 04217	_ZNSt5tupleIJPN4bvar9PerSecondINS0_13PassiveStatusIdEEEESt14default_deleteIS4_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES5_S7_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv

Runtime coverage analysis

Covered functions

357

Functions that are reachable but not covered

2155

Reachable functions

2869

Percentage of reachable functions covered

24.89%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_shead.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	29
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	99
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	4
/src/brpc/src/butil/iobuf_inl.h	25
/src/brpc/src/butil/iobuf.cpp	23
/src/brpc/src/butil/logging.cc	35
/src/brpc/src/butil/logging.h	100
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	6
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	39
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	71
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	98
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	46
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	368
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	41
/src/brpc/src/bthread/mutex.cpp	23
/src/brpc/src/butil/scoped_lock.h	4
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	9
/src/brpc/src/butil/time.h	12
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/bvar/reducer.h	17
/src/brpc/src/bvar/variable.h	4
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	85
/src/brpc/src/butil/containers/flat_map.h	106
/src/brpc/src/butil/single_threaded_pool.h	26
/src/brpc/src/butil/containers/optional.h	35
/src/brpc/src/butil/memory/scope_guard.h	28
/src/brpc/src/butil/memory/manual_constructor.h	40
/src/brpc/src/butil/memory/aligned_memory.h	23
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	81
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	24
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	17
/src/brpc/src/butil/object_pool_inl.h	109
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	61
/src/brpc/src/bvar/detail/combiner.h	69
/src/brpc/src/bvar/detail/agent_group.h	36
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	6
/src/brpc/src/bthread/task_group.cpp	28
/src/brpc/src/bthread/task_group.h	27
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	11
/src/brpc/src/butil/strings/string_piece.h	21
/src/brpc/src/bvar/window.h	19
/src/brpc/src/bvar/detail/sampler.h	14
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	33
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	53
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	6
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	9
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	5
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2
/src/brpc/src/brpc/policy/nshead_protocol.cpp	1
/src/brpc/src/brpc/parse_result.h	4
/src/brpc/src/brpc/policy/most_common_message.h	2
/src/brpc/src/brpc/input_message_base.h	1
/src/brpc/src/brpc/destroyable.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	34
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	20
/src/brpc/src/brpc/socket.h	2
/src/brpc/src/brpc/input_messenger.cpp	1
/src/brpc/src/brpc/socket_id.h	1
/src/brpc/src/brpc/socket.cpp	4
/src/brpc/src/brpc/versioned_ref_with_id.h	17
/src/brpc/src/butil/shared_object.h	1
/src/brpc/src/brpc/socket_inl.h	2
/src/brpc/src/brpc/event_dispatcher.h	2
/src/brpc/src/brpc/event_dispatcher.cpp	4
/src/brpc/src/bvar/latency_recorder.h	5
/src/brpc/src/bvar/latency_recorder.cpp	17
/src/brpc/src/bvar/recorder.h	17
/src/brpc/src/bvar/detail/percentile.cpp	8
/src/brpc/src/bvar/detail/percentile.h	34
/src/brpc/src/bvar/vector.h	2
/src/brpc/src/brpc/event_dispatcher_epoll.cpp	5
/src/brpc/src/butil/fd_utility.cpp	1
/src/brpc/src/bthread/bthread.cpp	1
/src/brpc/src/bthread/task_group_inl.h	7
/src/brpc/src/butil/resource_pool.h	15
/src/brpc/src/butil/resource_pool_inl.h	57
/src/brpc/src/bthread/butex.cpp	18
/src/brpc/src/bthread/errno.cpp	1
/src/brpc/src/bthread/sys_futex.h	2
/src/brpc/src/bthread/task_control.cpp	14
/src/brpc/src/bthread/task_control.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/array	2
/src/brpc/src/bthread/work_stealing_queue.h	7
/src/brpc/src/butil/compat.h	1
/src/brpc/src/bthread/parking_lot.h	6
/src/brpc/src/bthread/mutex.h	1
/src/brpc/src/bthread/prime_offset.h	1
/src/brpc/src/bthread/remote_task_queue.h	6
/src/brpc/src/bthread/stack_inl.h	20
/src/brpc/src/bthread/stack.h	3
/src/brpc/src/bthread/stack.cpp	1
/src/brpc/src/butil/third_party/dynamic_annotations/dynamic_annotations.c	2
/src/brpc/src/bthread/task_meta.h	5
/src/brpc/src/bthread/butex.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_lock.h	4
/src/brpc/src/butil/string_printf.cpp	3
/src/brpc/src/butil/macros.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/hash_fun.h	1
/src/brpc/src/bthread/timer_thread.cpp	8
/src/brpc/src/bthread/id.cpp	11
/src/brpc/src/bthread/list_of_abafree_id.h	1
/src/brpc/src/brpc/authenticator.h	1

Fuzzer: fuzz_esp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4843	86.7%
gold	[1:9]	350	6.27%
yellow	[10:29]	61	1.09%
greenyellow	[30:49]	1	0.01%
lawngreen	50+	325	5.82%
All colors	5580	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
376	98	butil::internal::GetRangeConstraint(int)	call site: 00098	__clang_call_terminate
339	1601	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01601	pthread_mutex_lock
281	2855	butil::LinkedList ::Agent>::head() const	call site: 02855	_ZNSt5tupleIJPN4bvar6detail17PercentileSamplesILm1022EEESt14default_deleteIS3_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES4_S6_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
272	3875	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 03875	pthread_mutex_lock
233	4803	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 04803	bthread_errno_location
222	3255	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 03255	bthread_errno_location
181	1054	bvar::detail::AgentCombiner ::get_or_create_tls_agent()	call site: 01054	bthread_key_create2
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
161	5091	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 05091	bthread_id_error_verbose
122	4567	butil::LinkedList , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)	call site: 04567	__cxa_begin_catch
117	3137	logging::LogStream& logging::LogStream::operator<< , std::allocator > > >(butil::BasicStringPiece , std::allocator > > const&)	call site: 03137	bthread_join
107	4205	butil::LinkedList >::Agent>::Append(butil::LinkNode >::Agent>*)	call site: 04205	_ZNSt5tupleIJPN4bvar9PerSecondINS0_13PassiveStatusIdEEEESt14default_deleteIS4_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES5_S7_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv

Runtime coverage analysis

Covered functions

341

Functions that are reachable but not covered

2140

Reachable functions

2817

Percentage of reachable functions covered

24.03%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_esp.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	29
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	99
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	4
/src/brpc/src/butil/iobuf_inl.h	25
/src/brpc/src/butil/iobuf.cpp	23
/src/brpc/src/butil/logging.cc	35
/src/brpc/src/butil/logging.h	100
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	6
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	39
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	71
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	98
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	46
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	368
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	41
/src/brpc/src/bthread/mutex.cpp	23
/src/brpc/src/butil/scoped_lock.h	4
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	9
/src/brpc/src/butil/time.h	12
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/bvar/reducer.h	17
/src/brpc/src/bvar/variable.h	4
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	85
/src/brpc/src/butil/containers/flat_map.h	106
/src/brpc/src/butil/single_threaded_pool.h	26
/src/brpc/src/butil/containers/optional.h	35
/src/brpc/src/butil/memory/scope_guard.h	28
/src/brpc/src/butil/memory/manual_constructor.h	40
/src/brpc/src/butil/memory/aligned_memory.h	23
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	81
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	24
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	17
/src/brpc/src/butil/object_pool_inl.h	109
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	61
/src/brpc/src/bvar/detail/combiner.h	69
/src/brpc/src/bvar/detail/agent_group.h	36
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	6
/src/brpc/src/bthread/task_group.cpp	28
/src/brpc/src/bthread/task_group.h	27
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	11
/src/brpc/src/butil/strings/string_piece.h	21
/src/brpc/src/bvar/window.h	19
/src/brpc/src/bvar/detail/sampler.h	14
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	33
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	53
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	6
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	9
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	5
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2
/src/brpc/src/brpc/policy/esp_protocol.cpp	1
/src/brpc/src/brpc/parse_result.h	4
/src/brpc/src/brpc/policy/most_common_message.h	2
/src/brpc/src/brpc/input_message_base.h	1
/src/brpc/src/brpc/destroyable.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	34
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	20
/src/brpc/src/brpc/socket.h	2
/src/brpc/src/brpc/input_messenger.cpp	1
/src/brpc/src/brpc/socket_id.h	1
/src/brpc/src/brpc/socket.cpp	4
/src/brpc/src/brpc/versioned_ref_with_id.h	17
/src/brpc/src/butil/shared_object.h	1
/src/brpc/src/brpc/socket_inl.h	2
/src/brpc/src/brpc/event_dispatcher.h	2
/src/brpc/src/brpc/event_dispatcher.cpp	4
/src/brpc/src/bvar/latency_recorder.h	5
/src/brpc/src/bvar/latency_recorder.cpp	17
/src/brpc/src/bvar/recorder.h	17
/src/brpc/src/bvar/detail/percentile.cpp	8
/src/brpc/src/bvar/detail/percentile.h	34
/src/brpc/src/bvar/vector.h	2
/src/brpc/src/brpc/event_dispatcher_epoll.cpp	5
/src/brpc/src/butil/fd_utility.cpp	1
/src/brpc/src/bthread/bthread.cpp	1
/src/brpc/src/bthread/task_group_inl.h	7
/src/brpc/src/butil/resource_pool.h	15
/src/brpc/src/butil/resource_pool_inl.h	57
/src/brpc/src/bthread/butex.cpp	18
/src/brpc/src/bthread/errno.cpp	1
/src/brpc/src/bthread/sys_futex.h	2
/src/brpc/src/bthread/task_control.cpp	14
/src/brpc/src/bthread/task_control.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/array	2
/src/brpc/src/bthread/work_stealing_queue.h	7
/src/brpc/src/butil/compat.h	1
/src/brpc/src/bthread/parking_lot.h	6
/src/brpc/src/bthread/mutex.h	1
/src/brpc/src/bthread/prime_offset.h	1
/src/brpc/src/bthread/remote_task_queue.h	6
/src/brpc/src/bthread/stack_inl.h	20
/src/brpc/src/bthread/stack.h	3
/src/brpc/src/bthread/stack.cpp	1
/src/brpc/src/butil/third_party/dynamic_annotations/dynamic_annotations.c	2
/src/brpc/src/bthread/task_meta.h	5
/src/brpc/src/bthread/butex.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_lock.h	4
/src/brpc/src/butil/string_printf.cpp	3
/src/brpc/src/butil/macros.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/hash_fun.h	1
/src/brpc/src/bthread/timer_thread.cpp	8
/src/brpc/src/bthread/id.cpp	11
/src/brpc/src/bthread/list_of_abafree_id.h	1
/src/brpc/src/brpc/authenticator.h	1

Fuzzer: fuzz_hulu

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4922	84.7%
gold	[1:9]	428	7.36%
yellow	[10:29]	54	0.92%
greenyellow	[30:49]	32	0.55%
lawngreen	50+	373	6.42%
All colors	5809	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	99	logging::LogMessage::~LogMessage()	call site: 00099	abort
281	3104	butil::LinkedList ::Agent>::head() const	call site: 03104	_ZNSt5tupleIJPN4bvar6detail17PercentileSamplesILm1022EEESt14default_deleteIS3_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES4_S6_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
270	4116	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 04116	pthread_numeric_id
233	5036	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 05036	bthread_errno_location
222	3503	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 03503	bthread_errno_location
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
161	5324	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 05324	bthread_id_error_verbose
156	1072	bthread_getspecific	call site: 01072	pthread_rwlock_rdlock
122	4800	butil::LinkedList , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)	call site: 04800	__cxa_begin_catch
114	3388	butil::operator<<(std::ostream&, butil::BasicStringPiece , std::allocator > > const&)	call site: 03388	bthread_join
107	4444	butil::LinkedList >::Agent>::Append(butil::LinkNode >::Agent>*)	call site: 04444	_ZNSt5tupleIJPN4bvar9PerSecondINS0_13PassiveStatusIdEEEESt14default_deleteIS4_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES5_S7_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
100	5677	butil::static_atomic *>::load(std::memory_order)	call site: 05677	__clang_call_terminate

Runtime coverage analysis

Covered functions

419

Functions that are reachable but not covered

2238

Reachable functions

3070

Percentage of reachable functions covered

27.1%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_hulu.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	29
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	4
/src/brpc/src/butil/iobuf_inl.h	25
/src/brpc/src/butil/iobuf.cpp	25
/src/brpc/src/butil/logging.cc	35
/src/brpc/src/butil/logging.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	6
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	39
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	71
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	47
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	382
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	43
/src/brpc/src/bthread/mutex.cpp	23
/src/brpc/src/butil/scoped_lock.h	4
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	9
/src/brpc/src/butil/time.h	12
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	9
/src/brpc/src/bvar/reducer.h	17
/src/brpc/src/bvar/variable.h	4
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	85
/src/brpc/src/butil/containers/flat_map.h	106
/src/brpc/src/butil/single_threaded_pool.h	26
/src/brpc/src/butil/containers/optional.h	35
/src/brpc/src/butil/memory/scope_guard.h	28
/src/brpc/src/butil/memory/manual_constructor.h	40
/src/brpc/src/butil/memory/aligned_memory.h	23
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	84
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	24
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	17
/src/brpc/src/butil/object_pool_inl.h	109
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	61
/src/brpc/src/bvar/detail/combiner.h	69
/src/brpc/src/bvar/detail/agent_group.h	36
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	6
/src/brpc/src/bthread/task_group.cpp	28
/src/brpc/src/bthread/task_group.h	27
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	11
/src/brpc/src/butil/strings/string_piece.h	21
/src/brpc/src/bvar/window.h	19
/src/brpc/src/bvar/detail/sampler.h	14
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	33
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	53
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	6
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	9
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	4
/src/brpc/src/brpc/policy/hulu_pbrpc_protocol.cpp	3
/src/brpc/src/brpc/parse_result.h	4
/src/brpc/src/brpc/socket.h	3
/src/brpc/src/butil/endpoint.cpp	6
/src/brpc/src/butil/details/extended_endpoint.hpp	9
/src/brpc/src/butil/resource_pool.h	18
/src/brpc/src/butil/resource_pool_inl.h	68
/src/brpc/src/butil/endpoint.h	2
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unordered_set.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable.h	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable_policy.h	20
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_lock.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/x86_64-linux-gnu/c++/13/bits/gthr-default.h	2
/src/brpc/src/brpc/policy/most_common_message.h	2
/src/brpc/src/brpc/input_message_base.h	1
/src/brpc/src/brpc/destroyable.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	34
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	20
/src/brpc/src/brpc/input_messenger.cpp	1
/src/brpc/src/brpc/socket_id.h	1
/src/brpc/src/brpc/socket.cpp	4
/src/brpc/src/brpc/versioned_ref_with_id.h	17
/src/brpc/src/butil/shared_object.h	1
/src/brpc/src/brpc/socket_inl.h	2
/src/brpc/src/brpc/event_dispatcher.h	2
/src/brpc/src/brpc/event_dispatcher.cpp	4
/src/brpc/src/bvar/latency_recorder.h	5
/src/brpc/src/bvar/latency_recorder.cpp	17
/src/brpc/src/bvar/recorder.h	17
/src/brpc/src/bvar/detail/percentile.cpp	8
/src/brpc/src/bvar/detail/percentile.h	34
/src/brpc/src/bvar/vector.h	2
/src/brpc/src/brpc/event_dispatcher_epoll.cpp	5
/src/brpc/src/butil/fd_utility.cpp	1
/src/brpc/src/bthread/bthread.cpp	1
/src/brpc/src/bthread/task_group_inl.h	7
/src/brpc/src/bthread/butex.cpp	18
/src/brpc/src/bthread/errno.cpp	1
/src/brpc/src/bthread/sys_futex.h	2
/src/brpc/src/bthread/task_control.cpp	14
/src/brpc/src/bthread/task_control.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/array	2
/src/brpc/src/bthread/work_stealing_queue.h	7
/src/brpc/src/butil/compat.h	1
/src/brpc/src/bthread/parking_lot.h	6
/src/brpc/src/bthread/mutex.h	1
/src/brpc/src/bthread/prime_offset.h	1
/src/brpc/src/bthread/remote_task_queue.h	6
/src/brpc/src/bthread/stack_inl.h	20
/src/brpc/src/bthread/stack.h	3
/src/brpc/src/bthread/stack.cpp	1
/src/brpc/src/butil/third_party/dynamic_annotations/dynamic_annotations.c	2
/src/brpc/src/bthread/task_meta.h	5
/src/brpc/src/bthread/butex.h	1
/src/brpc/src/butil/string_printf.cpp	3
/src/brpc/src/butil/macros.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/hash_fun.h	1
/src/brpc/src/bthread/timer_thread.cpp	8
/src/brpc/src/bthread/id.cpp	11
/src/brpc/src/bthread/list_of_abafree_id.h	1
/src/brpc/src/brpc/authenticator.h	1

Fuzzer: fuzz_sofa

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4904	84.5%
gold	[1:9]	419	7.22%
yellow	[10:29]	60	1.03%
greenyellow	[30:49]	2	0.03%
lawngreen	50+	414	7.13%
All colors	5799	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	99	logging::LogMessage::~LogMessage()	call site: 00099	abort
276	3099	butil::LinkedList ::Agent>::head() const	call site: 03099	_ZNSt5tupleIJPN4bvar6detail17PercentileSamplesILm1022EEESt14default_deleteIS3_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES4_S6_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
270	4106	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 04106	pthread_numeric_id
233	5026	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 05026	bthread_errno_location
222	3493	butil::static_atomic ::BlockGroup*>::load(std::memory_order)	call site: 03493	bthread_errno_location
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
161	5314	butil::static_atomic ::BlockGroup*>::store(butil::ResourcePool ::BlockGroup*, std::memory_order)	call site: 05314	bthread_id_error_verbose
127	1072	bthread_getspecific	call site: 01072	pthread_rwlock_rdlock
122	4790	butil::LinkedList , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode , bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)	call site: 04790	__cxa_begin_catch
114	3378	butil::operator<<(std::ostream&, butil::BasicStringPiece , std::allocator > > const&)	call site: 03378	bthread_join
107	4434	butil::LinkedList >::Agent>::Append(butil::LinkNode >::Agent>*)	call site: 04434	_ZNSt5tupleIJPN4bvar9PerSecondINS0_13PassiveStatusIdEEEESt14default_deleteIS4_EEEC2ILb1ETnNSt9enable_ifIXclsr17_TupleConstraintsIXT_ES5_S7_EE37__is_implicitly_default_constructibleEEbE4typeELb1EEEv
100	5667	butil::static_atomic *>::load(std::memory_order)	call site: 05667	__clang_call_terminate

Runtime coverage analysis

Covered functions

426

Functions that are reachable but not covered

2227

Reachable functions

3072

Percentage of reachable functions covered

27.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_sofa.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	29
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	4
/src/brpc/src/butil/iobuf_inl.h	25
/src/brpc/src/butil/iobuf.cpp	25
/src/brpc/src/butil/logging.cc	35
/src/brpc/src/butil/logging.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	6
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	39
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	71
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	103
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	47
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	382
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	43
/src/brpc/src/bthread/mutex.cpp	23
/src/brpc/src/butil/scoped_lock.h	4
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	9
/src/brpc/src/butil/time.h	12
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	9
/src/brpc/src/bvar/reducer.h	17
/src/brpc/src/bvar/variable.h	4
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	85
/src/brpc/src/butil/containers/flat_map.h	106
/src/brpc/src/butil/single_threaded_pool.h	26
/src/brpc/src/butil/containers/optional.h	35
/src/brpc/src/butil/memory/scope_guard.h	28
/src/brpc/src/butil/memory/manual_constructor.h	40
/src/brpc/src/butil/memory/aligned_memory.h	23
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	84
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	24
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	17
/src/brpc/src/butil/object_pool_inl.h	109
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	1
/src/brpc/src/butil/containers/linked_list.h	61
/src/brpc/src/bvar/detail/combiner.h	69
/src/brpc/src/bvar/detail/agent_group.h	36
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	6
/src/brpc/src/bthread/task_group.cpp	28
/src/brpc/src/bthread/task_group.h	27
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	11
/src/brpc/src/butil/strings/string_piece.h	21
/src/brpc/src/bvar/window.h	19
/src/brpc/src/bvar/detail/sampler.h	14
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	33
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	53
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	6
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	9
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	4
/src/brpc/src/brpc/policy/sofa_pbrpc_protocol.cpp	4
/src/brpc/src/brpc/parse_result.h	4
/src/brpc/src/brpc/socket.h	3
/src/brpc/src/butil/endpoint.cpp	6
/src/brpc/src/butil/details/extended_endpoint.hpp	9
/src/brpc/src/butil/resource_pool.h	18
/src/brpc/src/butil/resource_pool_inl.h	68
/src/brpc/src/butil/endpoint.h	2
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unordered_set.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable.h	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable_policy.h	20
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_lock.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/x86_64-linux-gnu/c++/13/bits/gthr-default.h	2
/src/brpc/src/brpc/policy/most_common_message.h	2
/src/brpc/src/brpc/input_message_base.h	1
/src/brpc/src/brpc/destroyable.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	34
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	20
/src/brpc/src/brpc/input_messenger.cpp	1
/src/brpc/src/brpc/socket_id.h	1
/src/brpc/src/brpc/socket.cpp	4
/src/brpc/src/brpc/versioned_ref_with_id.h	17
/src/brpc/src/butil/shared_object.h	1
/src/brpc/src/brpc/socket_inl.h	2
/src/brpc/src/brpc/event_dispatcher.h	2
/src/brpc/src/brpc/event_dispatcher.cpp	4
/src/brpc/src/bvar/latency_recorder.h	5
/src/brpc/src/bvar/latency_recorder.cpp	17
/src/brpc/src/bvar/recorder.h	17
/src/brpc/src/bvar/detail/percentile.cpp	8
/src/brpc/src/bvar/detail/percentile.h	34
/src/brpc/src/bvar/vector.h	2
/src/brpc/src/brpc/event_dispatcher_epoll.cpp	5
/src/brpc/src/butil/fd_utility.cpp	1
/src/brpc/src/bthread/bthread.cpp	1
/src/brpc/src/bthread/task_group_inl.h	7
/src/brpc/src/bthread/butex.cpp	18
/src/brpc/src/bthread/errno.cpp	1
/src/brpc/src/bthread/sys_futex.h	2
/src/brpc/src/bthread/task_control.cpp	14
/src/brpc/src/bthread/task_control.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/array	2
/src/brpc/src/bthread/work_stealing_queue.h	7
/src/brpc/src/butil/compat.h	1
/src/brpc/src/bthread/parking_lot.h	6
/src/brpc/src/bthread/mutex.h	1
/src/brpc/src/bthread/prime_offset.h	1
/src/brpc/src/bthread/remote_task_queue.h	6
/src/brpc/src/bthread/stack_inl.h	20
/src/brpc/src/bthread/stack.h	3
/src/brpc/src/bthread/stack.cpp	1
/src/brpc/src/butil/third_party/dynamic_annotations/dynamic_annotations.c	2
/src/brpc/src/bthread/task_meta.h	5
/src/brpc/src/bthread/butex.h	1
/src/brpc/src/butil/string_printf.cpp	3
/src/brpc/src/butil/macros.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/hash_fun.h	1
/src/brpc/src/bthread/timer_thread.cpp	8
/src/brpc/src/bthread/id.cpp	11
/src/brpc/src/bthread/list_of_abafree_id.h	1
/src/brpc/src/brpc/authenticator.h	1

Fuzzer: fuzz_http

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2285	74.5%
gold	[1:9]	240	7.82%
yellow	[10:29]	46	1.49%
greenyellow	[30:49]	25	0.81%
lawngreen	50+	471	15.3%
All colors	3067	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	99	logging::LogMessage::~LogMessage()	call site: 00099	abort
173	2480	butil::ManualConstructor ::get()	call site: 02480	sched_yield
127	1073	bthread_getspecific	call site: 01073	pthread_rwlock_rdlock
84	1601	bvar::detail::AgentCombiner ::reset_all_agents()	call site: 01601	pthread_mutex_lock
76	2938	brpc::HttpMessage::ParseFromIOBuf(butil::IOBuf const&)	call site: 02938	__assert_fail
57	1947	butil::InitGlobalIOBufProfilerInfo()	call site: 01947	getenv
55	1526	bvar::Variable::expose(butil::BasicStringPiece , std::allocator > > const&, bvar::DisplayFilter)	call site: 01526	__clang_call_terminate
53	2059	DefaultSingletonTraits ::New()	call site: 02059	__clang_call_terminate
44	687	bvar::VarEntry* butil::FlatMap , std::allocator >, bvar::VarEntry, butil::DefaultHasher , std::allocator > >, butil::DefaultEqualTo , std::allocator > >, false, butil::PtAllocator, false>::seek , std::allocator > >(std::__cxx11::basic_string , std::allocator > const&) const	call site: 00687
41	2005	butil::static_atomic *>::load(std::memory_order)	call site: 02005
40	1888	logging::LogStream::FlushWithoutReset()	call site: 01888	open
37	1321	butil::PlatformThread::SetNameSimple(char const*)	call site: 01321	strlen

Runtime coverage analysis

Covered functions

534

Functions that are reachable but not covered

2029

Reachable functions

2936

Percentage of reachable functions covered

30.89%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/brpc/test/fuzzing/fuzz_http.cpp	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	45
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	3
/src/brpc/src/butil/iobuf_inl.h	22
/src/brpc/src/butil/iobuf.cpp	16
/src/brpc/src/butil/logging.cc	35
/src/brpc/src/butil/logging.h	72
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	1
/src/brpc/src/butil/debug/stack_trace_posix.cc	9
/src/brpc/src/butil/numerics/safe_conversions.h	1
/src/brpc/src/butil/numerics/safe_conversions_impl.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	5
/src/brpc/src/butil/debug/stack_trace.cc	3
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	25
/src/brpc/src/butil/third_party/symbolize/demangle.cc	63
/src/brpc/src/butil/containers/doubly_buffered_data.h	16
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	18
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	42
/src/brpc/src/butil/memory/singleton.h	6
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	8
/src/brpc/src/butil/atomicops.h	28
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	13
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	147
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	18
/src/brpc/src/bthread/mutex.cpp	12
/src/brpc/src/butil/scoped_lock.h	2
/src/brpc/src/bvar/collector.h	3
/src/brpc/src/butil/fast_rand.cpp	7
/src/brpc/src/butil/time.h	7
/src/brpc/src/bvar/collector.cpp	14
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	6
/src/brpc/src/bvar/reducer.h	8
/src/brpc/src/bvar/variable.h	2
/src/brpc/src/bvar/variable.cpp	8
/src/brpc/src/butil/containers/flat_map_inl.h	75
/src/brpc/src/butil/containers/flat_map.h	101
/src/brpc/src/butil/single_threaded_pool.h	25
/src/brpc/src/butil/containers/optional.h	28
/src/brpc/src/butil/memory/scope_guard.h	24
/src/brpc/src/butil/memory/manual_constructor.h	35
/src/brpc/src/butil/memory/aligned_memory.h	19
/src/brpc/src/butil/bit_array.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	38
/src/brpc/src/butil/errno.cpp	2
/src/brpc/src/bthread/key.cpp	21
/src/brpc/src/butil/debug/stack_trace.h	1
/src/brpc/src/butil/object_pool.h	5
/src/brpc/src/butil/object_pool_inl.h	28
/src/brpc/src/butil/thread_local.cpp	10
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	2
/src/brpc/src/butil/containers/linked_list.h	27
/src/brpc/src/bvar/detail/combiner.h	26
/src/brpc/src/bvar/detail/agent_group.h	12
/src/brpc/src/butil/synchronization/lock.h	10
/src/brpc/src/bvar/detail/call_op_returning_void.h	2
/src/brpc/src/bthread/task_group.cpp	1
/src/brpc/src/bthread/task_group.h	1
/src/brpc/src/butil/thread_key.h	2
/src/brpc/src/butil/thread_key.cpp	4
/src/brpc/src/bthread/types.h	1
/src/brpc/src/butil/threading/platform_thread_linux.cc	1
/src/brpc/src/butil/threading/platform_thread_posix.cc	2
/src/brpc/src/bvar/passive_status.h	7
/src/brpc/src/butil/strings/string_piece.h	18
/src/brpc/src/bvar/window.h	6
/src/brpc/src/bvar/detail/sampler.h	4
/src/brpc/src/bvar/detail/sampler.cpp	11
/src/brpc/src/butil/containers/bounded_queue.h	8
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	2
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	27
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	4
/src/brpc/src/butil/memory/singleton.cc	1
/src/brpc/src/butil/strings/string_piece.cc	9
/src/brpc/src/butil/debug/alias.cc	1
/src/brpc/src/butil/debug/debugger_posix.cc	3
/src/brpc/src/butil/iobuf_profiler.cpp	8
/src/brpc/src/butil/strings/string_number_conversions.cc	15
/src/brpc/src/butil/iobuf_profiler.h	8
/src/brpc/src/butil/threading/simple_thread.cc	3
/src/brpc/src/butil/threading/platform_thread.h	3
/src/brpc/src/butil/threading/simple_thread.h	3
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	5
/src/brpc/src/butil/memory/ref_counted.h	8
/src/brpc/src/butil/memory/ref_counted.cc	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	9
/src/brpc/src/butil/atomic_ref_count.h	5
/src/brpc/src/butil/containers/mpsc_queue.h	8
/src/brpc/src/butil/hash.cc	1
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	1
/src/brpc/src/butil/containers/hash_tables.h	1
/src/brpc/src/butil/iobuf.h	6
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	1
/src/brpc/src/butil/threading/thread_restrictions.h	2
/src/brpc/src/butil/threading/thread_restrictions.cc	1
/src/brpc/src/butil/lazy_instance.h	5
/src/brpc/src/butil/lazy_instance.cc	2
/src/brpc/src/butil/threading/thread_local.h	6
/src/brpc/src/butil/threading/thread_local_posix.cc	3
/src/brpc/src/butil/at_exit.cc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	1
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	2
/src/brpc/src/brpc/details/http_message.cpp	7
/src/brpc/src/brpc/http_header.cpp	1
/src/brpc/src/butil/containers/case_ignored_flat_map.h	1
/src/brpc/src/brpc/uri.cpp	2
/src/brpc/src/butil/status.h	4
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	7
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	5
/src/brpc/src/brpc/details/http_parser.cpp	9
/src/brpc/src/brpc/http_header.h	1
/src/brpc/src/brpc/details/http_message.h	1
/src/brpc/src/brpc/http_method.cpp	2
/src/brpc/src/butil/string_printf.cpp	3
/src/brpc/src/butil/binary_printer.h	2
/src/brpc/src/butil/binary_printer.cpp	9
/src/brpc/src/butil/status.cpp	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
brpc::GlobalUpdate(void*)	/src/brpc/src/brpc/global.cpp	1	['N/A']	174	0	488	111	98	12852	0	27124	21419

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

7141 / 29360

Cyclomatic complexity statically reachable by fuzzers

30667 / 134474

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/brpc/test/fuzzing/fuzz_json.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['butil::rapidjson::GenericReader, butil::rapidjson::UTF8, butil::rapidjson::CrtAllocator>::NumberStream >, false>::Tell()', 'butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator >::SetObjectRaw(butil::rapidjson::GenericMember, butil::rapidjson::MemoryPoolAllocator >*, unsigned int, butil::rapidjson::MemoryPoolAllocator&)', 'butil::rapidjson::GenericDocument, butil::rapidjson::MemoryPoolAllocator, butil::rapidjson::CrtAllocator>::Bool(bool)', 'json2pb::JsonValueToProtoMessage(butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string, std::allocator >*, int)', 'butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator >::SetArrayRaw(butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator >*, unsigned int, butil::rapidjson::MemoryPoolAllocator&)', 'LLVMFuzzerTestOneInput', 'json2pb::JsonValueToProtoField(butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::FieldDescriptor const*, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string, std::allocator >*, int)', 'JsonContextBody::~JsonContextBody()', 'json2pb::JsonValueToProtoMessage(butil::rapidjson::GenericValue, butil::rapidjson::MemoryPoolAllocator > const&, google::protobuf::Message*, json2pb::Json2PbOptions const&, std::__cxx11::basic_string, std::allocator >*, int)', 'butil::rapidjson::GenericDocument, butil::rapidjson::MemoryPoolAllocator, butil::rapidjson::CrtAllocator>::Null()']

/src/brpc/test/fuzzing/fuzz_butil.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['butil::internal::GetRangeConstraint(int)', 'bvar::detail::AgentCombiner::reset_all_agents()', 'bvar::detail::AgentCombiner::get_or_create_tls_agent()', 'bvar::Variable::expose(butil::BasicStringPiece, std::allocator > > const&, bvar::DisplayFilter)', 'bvar::VarEntry* butil::FlatMap, std::allocator >, bvar::VarEntry, butil::DefaultHasher, std::allocator > >, butil::DefaultEqualTo, std::allocator > >, false, butil::PtAllocator, false>::seek, std::allocator > >(std::__cxx11::basic_string, std::allocator > const&) const', 'butil::Hash(char const*, unsigned long)', 'butil::PlatformThread::SetNameSimple(char const*)', 'butil::thread_atexit(void (*)(void*), void*)', 'pthread_mutex_lock', 'LLVMFuzzerTestOneInput']

/src/brpc/test/fuzzing/fuzz_redis.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['logging::LogMessage::~LogMessage()', 'butil::ManualConstructor::get()', 'bthread_getspecific', 'bvar::detail::AgentCombiner::reset_all_agents()', 'butil::InitGlobalIOBufProfilerInfo()', 'bvar::Variable::expose(butil::BasicStringPiece, std::allocator > > const&, bvar::DisplayFilter)', 'DefaultSingletonTraits::New()', 'bvar::VarEntry* butil::FlatMap, std::allocator >, bvar::VarEntry, butil::DefaultHasher, std::allocator > >, butil::DefaultEqualTo, std::allocator > >, false, butil::PtAllocator, false>::seek, std::allocator > >(std::__cxx11::basic_string, std::allocator > const&) const', 'butil::static_atomic*>::load(std::memory_order)', 'butil::PlatformThread::SetNameSimple(char const*)']

/src/brpc/test/fuzzing/fuzz_hpack.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['butil::ManualConstructor::get()', 'bthread_getspecific', 'bvar::detail::AgentCombiner::reset_all_agents()', 'bvar::VarEntry* butil::FlatMap, std::allocator >, bvar::VarEntry, butil::DefaultHasher, std::allocator > >, butil::DefaultEqualTo, std::allocator > >, false, butil::PtAllocator, false>::seek, std::allocator > >(std::__cxx11::basic_string, std::allocator > const&) const', 'DefaultSingletonTraits::New()', 'butil::InitGlobalIOBufProfilerInfo()', 'unsigned long* butil::FlatMap, std::allocator >, unsigned long, butil::CaseIgnoredHasher, butil::CaseIgnoredEqual, false, butil::PtAllocator, false>::seek, std::allocator > >(std::__cxx11::basic_string, std::allocator > const&) const', 'butil::static_atomic*>::load(std::memory_order)', 'logging::LogStream::FlushWithoutReset()', 'butil::BoundedQueue >::clear()']

/src/brpc/test/fuzzing/fuzz_uri.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['brpc::is_valid_char(char)', 'LLVMFuzzerTestOneInput', 'butil::ManualConstructor, std::allocator >, std::__cxx11::basic_string, std::allocator > > >::Destroy()', 'brpc::URI::URI()', 'brpc::URI::Clear()', 'brpc::URI::Clear()', 'butil::Status::set_errorv(int, char const*, __va_list_tag*)', 'brpc::URI::SetHttpURL(char const*)', 'butil::FlatMap, std::allocator >, std::__cxx11::basic_string, std::allocator >, butil::DefaultHasher, std::allocator > >, butil::DefaultEqualTo, std::allocator > >, false, butil::PtAllocator, false>::get_allocator()']

/src/brpc/test/fuzzing/fuzz_shead.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['butil::internal::GetRangeConstraint(int)', 'bvar::detail::AgentCombiner::reset_all_agents()', 'butil::LinkedList::Agent>::head() const', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'bvar::detail::AgentCombiner::get_or_create_tls_agent()', 'butil::ManualConstructor::get()', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'butil::LinkedList, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)']

/src/brpc/test/fuzzing/fuzz_esp.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['butil::internal::GetRangeConstraint(int)', 'bvar::detail::AgentCombiner::reset_all_agents()', 'butil::LinkedList::Agent>::head() const', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'bvar::detail::AgentCombiner::get_or_create_tls_agent()', 'butil::ManualConstructor::get()', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'butil::LinkedList, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)']

/src/brpc/test/fuzzing/fuzz_hulu.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['logging::LogMessage::~LogMessage()', 'butil::LinkedList::Agent>::head() const', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::ManualConstructor::get()', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'bthread_getspecific', 'butil::LinkedList, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)', 'butil::operator<<(std::ostream&, butil::BasicStringPiece, std::allocator > > const&)']

/src/brpc/test/fuzzing/fuzz_sofa.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['logging::LogMessage::~LogMessage()', 'butil::LinkedList::Agent>::head() const', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::static_atomic::BlockGroup*>::load(std::memory_order)', 'butil::ManualConstructor::get()', 'butil::static_atomic::BlockGroup*>::store(butil::ResourcePool::BlockGroup*, std::memory_order)', 'bthread_getspecific', 'butil::LinkedList, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>::Append(butil::LinkNode, bvar::detail::PercentileSamples<30ul>, bvar::detail::detail::AddPercentileSamples>::Agent>*)', 'butil::operator<<(std::ostream&, butil::BasicStringPiece, std::allocator > > const&)']

/src/brpc/test/fuzzing/fuzz_http.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['logging::LogMessage::~LogMessage()', 'butil::ManualConstructor::get()', 'bthread_getspecific', 'bvar::detail::AgentCombiner::reset_all_agents()', 'brpc::HttpMessage::ParseFromIOBuf(butil::IOBuf const&)', 'butil::InitGlobalIOBufProfilerInfo()', 'bvar::Variable::expose(butil::BasicStringPiece, std::allocator > > const&, bvar::DisplayFilter)', 'DefaultSingletonTraits::New()', 'bvar::VarEntry* butil::FlatMap, std::allocator >, bvar::VarEntry, butil::DefaultHasher, std::allocator > >, butil::DefaultEqualTo, std::allocator > >, false, butil::PtAllocator, false>::seek, std::allocator > >(std::__cxx11::basic_string, std::allocator > const&) const', 'butil::static_atomic*>::load(std::memory_order)']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
intbthread::internal::pthread_mutex_lock_impl (pthread_mutex_t*,timespecconst*)	44	5	11.36%
intbthread::internal::pthread_mutex_unlock_impl (pthread_mutex_t*)	34	5	14.70%
butil::FlatMap ,std::allocator >,bvar::VarEntry,butil::DefaultHasher ,std::allocator >>,butil::DefaultEqualTo ,std::allocator >>,false,butil::PtAllocator,false>::resize(unsignedlong)	38	13	34.21%	['fuzz_sofa', 'fuzz_hulu', 'fuzz_redis', 'fuzz_json', 'fuzz_http', 'fuzz_uri', 'fuzz_esp', 'fuzz_shead', 'fuzz_hpack', 'fuzz_butil']
voidbutil::rapidjson::GenericReader ,butil::rapidjson::UTF8 ,butil::rapidjson::CrtAllocator>::ParseString<4u,butil::rapidjson::GenericStringStream >,butil::rapidjson::GenericDocument ,butil::rapidjson::MemoryPoolAllocator ,butil::rapidjson::CrtAllocator>>(butil::rapidjson::GenericStringStream >&,butil::rapidjson::GenericDocument ,butil::rapidjson::MemoryPoolAllocator ,butil::rapidjson::CrtAllocator>&,bool)	31	16	51.61%	['fuzz_json']
bvar::Variable::expose_impl(butil::BasicStringPiece ,std::allocator >>const&,butil::BasicStringPiece ,std::allocator >>const&,bvar::DisplayFilter)	36	18	50.0%	['fuzz_sofa', 'fuzz_hulu', 'fuzz_redis', 'fuzz_json', 'fuzz_http', 'fuzz_uri', 'fuzz_esp', 'fuzz_shead', 'fuzz_hpack', 'fuzz_butil']
json2pb::JsonValueToProtoField(butil::rapidjson::GenericValue ,butil::rapidjson::MemoryPoolAllocator >const&,google::protobuf::FieldDescriptorconst*,google::protobuf::Message*,json2pb::Json2PbOptionsconst&,std::__cxx11::basic_string ,std::allocator >*,int)	167	90	53.89%	['fuzz_json']
voidbutil::IOBuf::_push_or_move_back_ref_to_smallview (butil::IOBuf::BlockRefconst&)	47	7	14.89%	['fuzz_sofa', 'fuzz_hulu', 'fuzz_redis', 'fuzz_esp', 'fuzz_shead']
logging::LogStream::FlushWithoutReset()	53	29	54.71%	['fuzz_sofa', 'fuzz_hpack', 'fuzz_hulu', 'fuzz_redis', 'fuzz_http', 'fuzz_esp', 'fuzz_shead', 'fuzz_butil']
logging::DefaultLogSink::OnLogMessage(int,charconst*,int,charconst*,butil::BasicStringPiece ,std::allocator >>const&)	34	11	32.35%	['fuzz_sofa', 'fuzz_hulu', 'fuzz_redis', 'fuzz_http', 'fuzz_hpack']
butil::FlatMap ::resize(unsignedlong)	38	13	34.21%	['fuzz_hpack']
butil::FlatMap ,std::allocator >,unsignedlong,butil::CaseIgnoredHasher,butil::CaseIgnoredEqual,false,butil::PtAllocator,false>::resize(unsignedlong)	38	13	34.21%	['fuzz_hpack']
google::ParseOperatorName(google::State*)	37	13	35.13%	['fuzz_sofa', 'fuzz_hpack', 'fuzz_hulu', 'fuzz_redis', 'fuzz_http', 'fuzz_esp', 'fuzz_shead', 'fuzz_butil']
butil::Status::set_errorv(int,charconst*,__va_list_tag*)	56	28	50.0%	['fuzz_uri', 'fuzz_http']
brpc::HttpMessage::on_header_value(brpc::http_parser*,charconst*,unsignedlong)	50	26	52.0%	['fuzz_http']
brpc::HttpMessage::OnBody(charconst*,unsignedlong)	56	14	25.0%	['fuzz_http']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/brpc/build/test/addressbook_map.pb.h	[]	[]
/src/brpc/build/brpc/policy/hulu_pbrpc_meta.pb.cc	[]	[]
/src/brpc/src/butil/containers/flat_map.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/cluster_recover_policy.h	[]	[]
/src/brpc/src/brpc/selective_channel.cpp	[]	[]
/src/brpc/src/butil/fd_utility.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/periodic_naming_service.cpp	[]	[]
/src/brpc/src/butil/atomicops.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/nshead_protocol.cpp	['fuzz_shead']	['fuzz_shead']
/usr/include/google/protobuf/stubs/port.h	[]	[]
/src/brpc/src/json2pb/zero_copy_stream_writer.h	[]	[]
/src/brpc/src/brpc/adaptive_protocol_type.h	[]	[]
/src/brpc/src/bthread/prime_offset.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/crc32c.cc	['fuzz_butil']	['fuzz_butil']
/src/brpc/src/brpc/builtin/flags_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ptr_traits.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/policy/rtmp_protocol.h	[]	[]
/src/brpc/test/fuzzing/fuzz_uri.cpp	['fuzz_uri']	['fuzz_uri']
/src/brpc/test/fuzzing/fuzz_sofa.cpp	['fuzz_sofa']	['fuzz_sofa']
/src/brpc/src/butil/logging.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/bvar/detail/call_op_returning_void.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_executor.tcc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex.tcc	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/stack.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/containers/mpsc_queue.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_hpack', 'fuzz_http']
/src/brpc/src/brpc/details/load_balancer_with_naming.h	[]	[]
/src/brpc/src/brpc/details/sparse_minute_counter.h	[]	[]
/src/brpc/src/bvar/latency_recorder.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/policy/domain_naming_service.cpp	[]	[]
/src/brpc/src/brpc/nshead_pb_service_adaptor.h	[]	[]
/src/brpc/src/brpc/policy/couchbase_protocol.cpp	[]	[]
/src/brpc/src/brpc/simple_data_pool.cpp	[]	[]
/src/brpc/build/test/snappy_message.pb.cc	[]	[]
/src/brpc/src/brpc/serialized_response.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/refwrap.h	[]	[]
/src/brpc/src/butil/fast_rand.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/limits	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/test/addressbook_encode_decode.pb.h	[]	[]
/src/brpc/src/brpc/policy/round_robin_load_balancer.h	[]	[]
/src/brpc/src/brpc/policy/redis_authenticator.h	[]	[]
/usr/include/google/protobuf/io/gzip_stream.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/strfunc.h	['fuzz_json']	['fuzz_json']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_mutex.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/bthread/stack_inl.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/builtin/threads_service.h	[]	[]
/src/brpc/src/brpc/stream.h	[]	[]
/src/brpc/src/brpc/parallel_channel.cpp	[]	[]
/src/brpc/src/brpc/extension_inl.h	[]	[]
/src/brpc/src/brpc/server.h	[]	[]
/src/brpc/src/brpc/load_balancer.h	[]	[]
/src/brpc/src/bvar/variable.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/hulu_pbrpc_protocol.cpp	['fuzz_hulu']	['fuzz_hulu']
/src/brpc/build/test/v3.pb.cc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/charconv.h	[]	[]
/src/brpc/build/brpc/policy/sofa_pbrpc_meta.pb.cc	[]	[]
/src/brpc/src/butil/strings/stringprintf.cc	[]	[]
/src/brpc/src/brpc/adaptive_max_concurrency.cpp	[]	[]
/src/brpc/src/brpc/policy/weighted_randomized_load_balancer.h	[]	[]
/src/brpc/src/butil/files/file_posix.cc	[]	[]
/src/brpc/src/brpc/rtmp.cpp	['fuzz_uri']	['fuzz_uri']
/src/brpc/src/bvar/mvariable.cpp	[]	[]
/src/brpc/src/brpc/builtin/sockets_service.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/optimized_writer.h	[]	[]
/src/brpc/src/brpc/socket_message.h	[]	[]
/src/brpc/src/brpc/policy/consistent_hashing_load_balancer.cpp	[]	[]
/src/brpc/src/brpc/policy/sofa_pbrpc_protocol.cpp	['fuzz_sofa']	['fuzz_sofa']
/src/brpc/src/butil/lazy_instance.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/file_util.cc	[]	[]
/src/brpc/src/brpc/builtin/flags_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/atomic_base.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/strings/string_util.cc	[]	[]
/src/brpc/src/brpc/policy/ubrpc2pb_protocol.cpp	[]	[]
/src/brpc/src/brpc/policy/file_naming_service.cpp	[]	[]
/src/brpc/src/butil/base64.cc	['fuzz_json', 'fuzz_butil']	['fuzz_json', 'fuzz_butil']
/src/brpc/src/butil/crc32c.h	['fuzz_butil']	['fuzz_butil']
/src/brpc/src/butil/third_party/rapidjson/error/error.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/ssl_options.cpp	[]	[]
/src/brpc/src/brpc/details/method_status.h	[]	[]
/src/brpc/src/butil/endpoint.h	['fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/compat.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/details/controller_private_accessor.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/rapidjson.h	[]	[]
/usr/include/google/protobuf/repeated_field.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/builtin/sockets_service.cpp	[]	[]
/src/brpc/src/butil/third_party/snappy/snappy-sinksource.h	[]	[]
/src/brpc/build/test/addressbook.pb.h	[]	[]
/src/brpc/src/bthread/bthread.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/memory/singleton.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/test/repeated.pb.cc	[]	[]
/src/brpc/src/butil/containers/bounded_queue.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/include/google/protobuf/stubs/casts.h	[]	[]
/src/brpc/src/bthread/task_control.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/third_party/murmurhash3/murmurhash3.cpp	[]	[]
/src/brpc/src/brpc/policy/discovery_naming_service.cpp	[]	[]
/src/brpc/src/brpc/builtin/prometheus_metrics_service.cpp	[]	[]
/src/brpc/src/butil/containers/linked_list.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/reloadable_flags.h	[]	[]
/src/brpc/src/butil/file_util_posix.cc	[]	[]
/src/brpc/src/brpc/policy/list_naming_service.h	[]	[]
/src/brpc/src/bthread/sys_futex.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/atomicops_internals_x86_gcc.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/iobuf_inl.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/baidu_rpc_protocol.cpp	[]	[]
/src/brpc/src/brpc/details/naming_service_thread.h	[]	[]
/src/brpc/src/butil/zero_copy_stream_as_streambuf.cpp	[]	[]
/src/brpc/src/bvar/detail/agent_group.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/float_util.h	[]	[]
/usr/include/google/protobuf/map_type_handler.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unordered_map.h	[]	[]
/src/brpc/src/butil/debug/stack_trace.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_hpack']
/src/brpc/src/butil/third_party/rapidjson/internal/dtoa.h	[]	[]
/src/brpc/build/brpc/span.pb.h	[]	[]
/src/brpc/src/brpc/policy/remote_file_naming_service.cpp	[]	[]
/src/brpc/src/butil/arena.cpp	['fuzz_redis']	['fuzz_redis']
/usr/include/leveldb/slice.h	[]	[]
/src/brpc/src/mcpack2pb/parser.cpp	[]	[]
/src/brpc/src/mcpack2pb/mcpack2pb.h	[]	[]
/src/brpc/src/brpc/esp_message.h	[]	[]
/src/brpc/build/brpc/builtin_service.pb.cc	[]	[]
/src/brpc/src/butil/iobuf.cpp	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/third_party/rapidjson/encodings.h	[]	[]
/src/brpc/src/brpc/channel.h	[]	[]
/src/brpc/src/brpc/nshead_service.cpp	[]	[]
/src/brpc/src/brpc/details/http_message.h	['fuzz_http']	['fuzz_http']
/src/brpc/src/brpc/policy/round_robin_load_balancer.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unordered_set.h	['fuzz_uri', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/details/ssl_helper.h	[]	[]
/src/brpc/src/brpc/health_check_option.h	[]	[]
/usr/include/google/protobuf/map.h	[]	[]
/src/brpc/src/butil/at_exit.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/policy/memcache_binary_protocol.cpp	[]	[]
/src/brpc/src/brpc/policy/crc32c_checksum.cpp	[]	[]
/src/brpc/src/brpc/trackme.cpp	[]	[]
/src/brpc/src/brpc/http2.cpp	[]	[]
/src/brpc/src/brpc/builtin/list_service.h	[]	[]
/src/brpc/src/butil/files/file_enumerator.h	[]	[]
/usr/include/openssl/err.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bitset	[]	[]
/src/brpc/src/bthread/stack.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/usr/include/google/protobuf/wire_format.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/condition_variable	[]	[]
/src/brpc/src/butil/memory/singleton.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/test/v3.pb.h	[]	[]
/usr/include/google/protobuf/port.h	[]	[]
/src/brpc/src/brpc/policy/timeout_concurrency_limiter.h	[]	[]
/src/brpc/src/brpc/reloadable_flags.cpp	[]	[]
/src/brpc/src/brpc/stream.cpp	[]	[]
/src/brpc/src/brpc/kvmap.h	[]	[]
/src/brpc/src/brpc/policy/http2_rpc_protocol.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_compiler.h	[]	[]
/usr/include/google/protobuf/stubs/status.h	[]	[]
/src/brpc/src/brpc/builtin/get_favicon_service.h	[]	[]
/src/brpc/src/brpc/amf.cpp	[]	[]
/src/brpc/src/brpc/memcache.cpp	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/diyfp.h	[]	[]
/src/brpc/src/brpc/builtin/ids_service.h	[]	[]
/src/brpc/src/brpc/policy/dh.cpp	[]	[]
/src/brpc/src/brpc/builtin/rpcz_service.cpp	[]	[]
/usr/include/google/protobuf/stubs/callback.h	[]	[]
/src/brpc/src/butil/files/scoped_file.h	[]	[]
/src/brpc/src/brpc/callback.h	[]	[]
/src/brpc/src/brpc/server.cpp	[]	[]
/src/brpc/src/butil/status.h	['fuzz_uri', 'fuzz_http']	['fuzz_uri', 'fuzz_http']
/src/brpc/src/bthread/interrupt_pthread.cpp	[]	[]
/src/brpc/build/test/echo.pb.cc	[]	[]
/src/brpc/build/brpc/trackme.pb.h	[]	[]
/src/brpc/src/brpc/authenticator.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/third_party/rapidjson/internal/ieee754.h	[]	[]
/src/brpc/src/brpc/rpc_pb_message_factory.h	[]	[]
/src/brpc/src/brpc/policy/esp_authenticator.cpp	[]	[]
/src/brpc/src/butil/third_party/rapidjson/document.h	['fuzz_json']	['fuzz_json']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/fstream	[]	[]
/src/brpc/src/butil/errno.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/third_party/symbolize/demangle.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_hpack']
/usr/include/google/protobuf/message.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/debug/proc_maps_linux.h	[]	[]
/src/brpc/src/brpc/policy/domain_naming_service.h	[]	[]
/src/brpc/src/brpc/policy/nova_pbrpc_protocol.cpp	[]	[]
/src/brpc/src/brpc/versioned_ref_with_id.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/bthread/work_stealing_queue.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/scoped_generic.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable_policy.h	['fuzz_uri', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/builtin/rpcz_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/exception.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/postypes.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/writer.h	[]	[]
/usr/include/google/protobuf/parse_context.h	[]	[]
/src/brpc/src/brpc/closure_guard.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/list.tcc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/http_header.h	['fuzz_http']	['fuzz_http']
/src/brpc/src/brpc/policy/auto_concurrency_limiter.cpp	[]	[]
/src/brpc/src/brpc/compress.cpp	[]	[]
/src/brpc/src/brpc/ssl_options.h	[]	[]
/src/brpc/src/butil/memory/aligned_memory.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/json2pb/pb_to_json.cpp	[]	[]
/src/brpc/src/bthread/task_group.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/builtin/threads_service.cpp	[]	[]
/src/brpc/src/brpc/adaptive_max_concurrency.h	[]	[]
/src/brpc/src/brpc/span.cpp	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/strtod.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/details/profiler_linker.h	[]	[]
/src/brpc/src/mcpack2pb/parser.h	[]	[]
/src/brpc/src/butil/memory/ref_counted.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/popen.cpp	[]	[]
/src/brpc/src/brpc/details/hpack.cpp	['fuzz_hpack']	['fuzz_hpack']
/src/brpc/src/bthread/task_meta.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/atomic_ref_count.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/policy/hulu_pbrpc_controller.h	[]	[]
/src/brpc/src/butil/files/file_watcher.h	[]	[]
/src/brpc/build/brpc/rtmp.pb.h	[]	[]
/src/brpc/build/idl_options.pb.cc	[]	[]
/src/brpc/src/butil/strings/utf_string_conversions.cc	[]	[]
/src/brpc/src/brpc/policy/mongo_protocol.cpp	[]	[]
/src/brpc/src/butil/ptr_container.h	[]	[]
/src/brpc/src/butil/files/file.h	[]	[]
/src/brpc/src/brpc/grpc.cpp	[]	[]
/src/brpc/src/brpc/serialized_request.cpp	[]	[]
/src/brpc/src/bthread/task_group_inl.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/mcpack2pb/mcpack2pb.cpp	[]	[]
/src/brpc/src/butil/fast_rand.h	[]	[]
/src/brpc/src/brpc/amf_inl.h	[]	[]
/src/brpc/src/butil/files/file_path.h	[]	[]
/src/brpc/src/butil/strings/sys_string_conversions_posix.cc	[]	[]
/src/brpc/src/brpc/policy/weighted_round_robin_load_balancer.cpp	[]	[]
/usr/include/google/protobuf/descriptor.h	['fuzz_json']	[]
/src/brpc/src/brpc/serialized_response.h	[]	[]
/src/brpc/src/brpc/builtin/grpc_health_check_service.cpp	[]	[]
/src/brpc/src/butil/memory/scope_guard.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tempbuf.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_ios.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/debug/debugger_posix.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/include/google/protobuf/stubs/mutex.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex.h	[]	[]
/src/brpc/src/brpc/redis.h	[]	[]
/src/brpc/src/bvar/passive_status.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/nacos_naming_service.cpp	[]	[]
/src/brpc/build/brpc/policy/sofa_pbrpc_meta.pb.h	[]	[]
/src/brpc/src/bthread/fd.cpp	[]	[]
/src/brpc/src/butil/synchronization/lock.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/parallel_channel.h	[]	[]
/src/brpc/src/brpc/details/rtmp_utils.h	[]	[]
/src/brpc/src/bvar/reducer.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/load_balancer.cpp	[]	[]
/src/brpc/src/butil/third_party/snappy/snappy-internal.h	[]	[]
/src/brpc/src/brpc/details/load_balancer_with_naming.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/deque.tcc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/memory/manual_constructor.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/brpc/policy/public_pbrpc_meta.pb.cc	[]	[]
/src/brpc/src/brpc/redis_reply.cpp	['fuzz_redis']	['fuzz_redis']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/array	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/redis_command.h	['fuzz_redis']	[]
/src/brpc/src/brpc/policy/consistent_hashing_load_balancer.h	[]	[]
/src/brpc/src/brpc/policy/redis_authenticator.cpp	[]	[]
/src/brpc/src/brpc/builtin/tabbed.h	[]	[]
/src/brpc/src/butil/resource_pool.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/builtin/prometheus_metrics_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/aligned_buffer.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/third_party/snappy/snappy-stubs-internal.h	[]	[]
/src/brpc/src/brpc/details/ssl_helper.cpp	[]	[]
/src/brpc/src/brpc/protocol.cpp	[]	[]
/src/brpc/src/brpc/policy/auto_concurrency_limiter.h	[]	[]
/src/brpc/src/brpc/nshead_message.cpp	[]	[]
/src/brpc/src/brpc/builtin/get_favicon_service.cpp	[]	[]
/src/brpc/build/test/addressbook1.pb.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/mcpack2pb/parser-inl.h	[]	[]
/src/brpc/build/test/message.pb.h	[]	[]
/usr/include/google/protobuf/arena_impl.h	[]	[]
/src/brpc/src/brpc/policy/esp_authenticator.h	[]	[]
/usr/include/google/protobuf/repeated_ptr_field.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/policy/dh.h	[]	[]
/src/brpc/src/brpc/builtin/bad_method_service.h	[]	[]
/src/brpc/src/bthread/task_group.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/json2pb/protobuf_type_resolver.cpp	[]	[]
/src/brpc/src/butil/find_cstr.h	[]	[]
/src/brpc/src/brpc/baidu_master_service.cpp	[]	[]
/src/brpc/src/brpc/protocol.h	[]	[]
/src/brpc/src/butil/files/scoped_file.cc	[]	[]
/src/brpc/src/butil/strings/string_util.h	[]	[]
/src/brpc/build/brpc/grpc_health_check.pb.cc	[]	[]
/src/brpc/src/bthread/errno.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/bthread/mutex.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/containers/flat_map_inl.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/bthread/list_of_abafree_id.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/usr/include/google/protobuf/map_field.h	[]	[]
/src/brpc/build/brpc/policy/hulu_pbrpc_meta.pb.h	[]	[]
/src/brpc/src/butil/containers/hash_tables.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/intrusive_ptr.hpp	[]	[]
/src/brpc/src/bthread/key.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/http2_rpc_protocol.h	[]	[]
/src/brpc/src/butil/iobuf.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/binary_printer.h	['fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/functional_hash.h	[]	[]
/src/brpc/src/butil/shared_object.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/builtin/list_service.cpp	[]	[]
/src/brpc/src/brpc/policy/public_pbrpc_protocol.cpp	[]	[]
/usr/include/google/protobuf/explicitly_constructed.h	[]	[]
/src/brpc/src/json2pb/zero_copy_stream_reader.h	[]	[]
/src/brpc/src/brpc/builtin/sorttable_js.cpp	[]	[]
/src/brpc/src/brpc/policy/randomized_load_balancer.h	[]	[]
/src/brpc/src/butil/files/file_watcher.cpp	[]	[]
/usr/include/google/protobuf/metadata_lite.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/threading/thread_restrictions.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/numerics/safe_conversions_impl.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/redis_reply.h	['fuzz_redis']	['fuzz_redis']
/src/brpc/src/brpc/policy/locality_aware_load_balancer.cpp	[]	[]
/src/brpc/build/test/addressbook_encode_decode.pb.cc	[]	[]
/src/brpc/src/butil/threading/thread_local.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/usr/include/google/protobuf/stubs/once.h	['fuzz_json']	[]
/src/brpc/src/brpc/concurrency_limiter.h	[]	[]
/src/brpc/src/butil/process_util.cc	[]	[]
/src/brpc/src/butil/strings/utf_string_conversion_utils.h	[]	[]
/usr/include/google/protobuf/arena.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/details/rtmp_utils.cpp	[]	[]
/src/brpc/src/brpc/details/hpack.h	['fuzz_hpack']	['fuzz_hpack']
/src/brpc/src/bvar/vector.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/rpc_pb_message_factory.cpp	[]	[]
/src/brpc/src/brpc/builtin/connections_service.h	[]	[]
/src/brpc/src/brpc/builtin/common.h	[]	[]
/src/brpc/src/brpc/parse_result.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/atomicops_internals_x86_gcc.cc	[]	[]
/src/brpc/src/brpc/policy/nova_pbrpc_protocol.h	[]	[]
/src/brpc/src/brpc/event_dispatcher_epoll.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/debug/stack_trace.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/brpc/trackme.pb.cc	[]	[]
/src/brpc/src/bthread/remote_task_queue.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/describable.h	['fuzz_hpack']	['fuzz_hpack']
/src/brpc/build/brpc/rpc_dump.pb.h	[]	[]
/src/brpc/src/butil/hash.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil']
/src/brpc/src/brpc/policy/file_naming_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/std_function.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/details/server_private_accessor.h	[]	[]
/src/brpc/build/brpc/policy/mongo.pb.cc	[]	[]
/src/brpc/src/brpc/input_messenger.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/http_method.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/src/brpc/controller.cpp	[]	[]
/src/brpc/src/brpc/stream_impl.h	[]	[]
/src/brpc/src/butil/fd_guard.h	[]	[]
/usr/include/gflags/gflags.h	[]	[]
/src/brpc/src/butil/synchronization/condition_variable_posix.cc	[]	[]
/src/brpc/build/brpc/get_js.pb.h	[]	[]
/src/brpc/src/butil/details/extended_endpoint.hpp	['fuzz_hulu', 'fuzz_sofa']	['fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/bthread/butex.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/build/test/health_check.pb.cc	[]	[]
/src/brpc/src/brpc/details/jemalloc_profiler.cpp	[]	[]
/src/brpc/src/brpc/mongo_head.h	[]	[]
/src/brpc/src/butil/synchronization/waitable_event_posix.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/sstream.tcc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/builtin/memory_service.cpp	[]	[]
/src/brpc/src/butil/third_party/rapidjson/error/../rapidjson.h	['fuzz_json']	[]
/src/brpc/src/mcpack2pb/field_type.h	[]	[]
/src/brpc/src/brpc/builtin/protobufs_service.cpp	[]	[]
/src/brpc/src/brpc/policy/snappy_compress.cpp	[]	[]
/src/brpc/src/bvar/detail/sampler.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/brpc/options.pb.cc	[]	[]
/src/brpc/src/brpc/serialized_request.h	[]	[]
/src/brpc/src/brpc/policy/randomized_load_balancer.cpp	[]	[]
/src/brpc/src/brpc/retry_policy.cpp	[]	[]
/src/brpc/src/brpc/baidu_master_service.h	[]	[]
/src/brpc/src/bvar/detail/series.h	[]	[]
/src/brpc/src/brpc/server_node.h	[]	[]
/src/brpc/build/brpc/grpc_health_check.pb.h	[]	[]
/src/brpc/src/brpc/rpc_dump.cpp	[]	[]
/src/brpc/build/test/message.pb.cc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/char_traits.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/include/google/protobuf/service.h	[]	[]
/src/brpc/src/brpc/checksum.cpp	[]	[]
/src/brpc/build/test/grpc.pb.cc	[]	[]
/src/brpc/src/brpc/extension.h	[]	[]
/usr/include/leveldb/status.h	[]	[]
/src/brpc/src/brpc/rtmp.h	[]	[]
/src/brpc/src/mcpack2pb/serializer.cpp	[]	[]
/src/brpc/src/brpc/couchbase.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/enable_special_members.h	['fuzz_uri']	[]
/src/brpc/src/brpc/http_status_code.cpp	[]	[]
/src/brpc/src/brpc/builtin/protobufs_service.h	[]	[]
/src/brpc/src/bvar/detail/combiner.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/compress.h	[]	[]
/src/brpc/src/brpc/excluded_servers.h	[]	[]
/src/brpc/src/butil/debug/alias.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/socket.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/build/brpc/policy/baidu_rpc_meta.pb.cc	[]	[]
/src/brpc/src/butil/third_party/modp_b64/modp_b64.cc	['fuzz_json', 'fuzz_butil']	['fuzz_json', 'fuzz_butil']
/src/brpc/src/brpc/naming_service.h	[]	[]
/src/brpc/build/test/health_check.pb.h	[]	[]
/src/brpc/src/brpc/server_id.cpp	[]	[]
/src/brpc/src/brpc/builtin/index_service.cpp	[]	[]
/src/brpc/build/test/grpc.pb.h	[]	[]
/src/brpc/src/butil/third_party/icu/icu_utf.cc	[]	[]
/src/brpc/src/brpc/builtin/connections_service.cpp	[]	[]
/src/brpc/src/brpc/builtin/index_service.h	[]	[]
/src/brpc/build/test/addressbook_map.pb.cc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_automaton.h	[]	[]
/src/brpc/src/brpc/policy/most_common_message.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/arena.h	['fuzz_redis']	['fuzz_redis']
/src/brpc/src/butil/strings/string_piece.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/bit_array.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_hpack', 'fuzz_http']
/src/brpc/src/butil/threading/platform_thread.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_algobase.h	[]	[]
/src/brpc/src/brpc/builtin/vlog_service.h	[]	[]
/src/brpc/src/brpc/channel_base.h	[]	[]
/usr/include/google/protobuf/map_entry_lite.h	[]	[]
/src/brpc/src/brpc/builtin/get_js_service.h	[]	[]
/src/brpc/src/brpc/details/http_parser.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/build/brpc/options.pb.h	[]	[]
/usr/include/x86_64-linux-gnu/bits/byteswap.h	['fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/build/test/iobuf.pb.h	[]	[]
/src/brpc/src/brpc/policy/weighted_round_robin_load_balancer.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_uninitialized.h	[]	[]
/src/brpc/test/fuzzing/fuzz_hulu.cpp	['fuzz_hulu']	['fuzz_hulu']
/usr/include/google/protobuf/map_field_inl.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/memorybuffer.h	[]	[]
/src/brpc/src/butil/memory/ref_counted.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/test/fuzzing/fuzz_shead.cpp	['fuzz_shead']	['fuzz_shead']
/usr/include/google/protobuf/generated_message_util.h	['fuzz_json']	[]
/src/brpc/src/butil/third_party/snappy/snappy.cc	[]	[]
/src/brpc/src/butil/threading/thread_local_posix.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/class_name.cpp	[]	[]
/usr/include/google/protobuf/descriptor.pb.h	[]	[]
/src/brpc/src/butil/strings/string_piece.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/scoped_lock.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_error.h	[]	[]
/usr/include/google/protobuf/has_bits.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/macros.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/third_party/superfasthash/superfasthash.c	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil']
/src/brpc/src/butil/strings/utf_string_conversion_utils.cc	[]	[]
/src/brpc/src/butil/files/file_enumerator_posix.cc	[]	[]
/src/brpc/src/brpc/builtin/memory_service.h	[]	[]
/src/brpc/src/brpc/builtin/status_service.cpp	[]	[]
/usr/include/google/protobuf/arenastring.h	[]	[]
/src/brpc/build/brpc/policy/baidu_rpc_meta.pb.h	[]	[]
/src/brpc/src/brpc/span.h	[]	[]
/src/brpc/src/brpc/builtin/bad_method_service.cpp	[]	[]
/src/brpc/src/brpc/details/http_message.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/src/brpc/builtin/vars_service.cpp	[]	[]
/src/brpc/build/test/v2.pb.h	[]	[]
/src/brpc/test/fuzzing/fuzz_redis.cpp	['fuzz_redis']	['fuzz_redis']
/usr/include/google/protobuf/endian.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/mutex	[]	[]
/src/brpc/src/bthread/types.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/brpc/policy/mongo.pb.h	[]	[]
/src/brpc/src/brpc/circuit_breaker.h	[]	[]
/src/brpc/src/butil/containers/doubly_buffered_data.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/strings/string_split.cc	[]	[]
/usr/include/google/protobuf/util/json_util.h	[]	[]
/src/brpc/src/butil/iobuf_profiler.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/brpc/policy/public_pbrpc_meta.pb.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr_base.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/socket_map.h	[]	[]
/src/brpc/src/butil/string_printf.cpp	['fuzz_json', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_json']
/src/brpc/src/brpc/periodic_naming_service.h	[]	[]
/src/brpc/src/bthread/butex.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/progressive_reader.h	[]	[]
/src/brpc/src/brpc/policy/http_rpc_protocol.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/string_conversions.h	[]	[]
/src/brpc/src/brpc/policy/redis_protocol.cpp	[]	[]
/src/brpc/src/butil/object_pool_inl.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/adaptive_connection_type.h	[]	[]
/src/brpc/src/brpc/builtin/hotspots_service.h	[]	[]
/src/brpc/src/butil/status.cpp	['fuzz_uri', 'fuzz_http']	['fuzz_uri', 'fuzz_http']
/src/brpc/src/brpc/socket_map.cpp	[]	[]
/src/brpc/src/brpc/socket_inl.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/policy/constant_concurrency_limiter.cpp	[]	[]
/src/brpc/src/brpc/event_dispatcher.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/builtin/pprof_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_scanner.tcc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/ios_base.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_automaton.tcc	[]	[]
/src/brpc/src/mcpack2pb/serializer.h	[]	[]
/src/brpc/src/brpc/esp_message.cpp	[]	[]
/src/brpc/src/brpc/memcache.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/shared_ptr.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/socket_id.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/threading/thread_id_name_manager.cc	[]	[]
/src/brpc/src/json2pb/protobuf_type_resolver.h	[]	[]
/src/brpc/src/brpc/builtin/pprof_perl.cpp	[]	[]
/src/brpc/src/butil/third_party/dynamic_annotations/dynamic_annotations.c	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_compiler.tcc	[]	[]
/src/brpc/src/brpc/builtin/dir_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/hash_fun.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/third_party/rapidjson/error/en.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/third_party/dmg_fp/dtoa_wrapper.cc	[]	[]
/src/brpc/src/bthread/execution_queue_inl.h	[]	[]
/src/brpc/src/butil/strings/string16.cc	[]	[]
/src/brpc/build/brpc/proto_base.pb.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/predefined_ops.h	[]	[]
/src/brpc/src/butil/resource_pool_inl.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/builtin/vars_service.h	[]	[]
/usr/include/google/protobuf/map_field_lite.h	[]	[]
/src/brpc/src/butil/threading/platform_thread_posix.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/dynpart_load_balancer.h	[]	[]
/src/brpc/src/butil/iobuf_profiler.cpp	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/details/method_status.cpp	[]	[]
/src/brpc/src/brpc/mongo_service_adaptor.h	[]	[]
/src/brpc/src/butil/raw_pack.h	[]	[]
/src/brpc/src/butil/sys_byteorder.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_scanner.h	[]	[]
/src/brpc/src/brpc/periodic_task.h	[]	[]
/src/brpc/build/brpc/streaming_rpc_meta.pb.cc	[]	[]
/usr/include/google/protobuf/io/zero_copy_stream.h	[]	[]
/src/brpc/src/brpc/details/health_check.cpp	[]	[]
/src/brpc/build/brpc/get_favicon.pb.cc	[]	[]
/src/brpc/src/brpc/policy/remote_file_naming_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_iterator.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/builtin/viz_min_js.cpp	[]	[]
/src/brpc/src/butil/time/time.h	[]	[]
/src/brpc/src/brpc/adaptive_connection_type.cpp	[]	[]
/src/brpc/src/butil/binary_printer.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/src/brpc/policy/list_naming_service.cpp	[]	[]
/src/brpc/src/butil/object_pool.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/http_rpc_protocol.cpp	[]	[]
/src/brpc/src/butil/memory/singleton_on_pthread_once.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/stl_util.h	[]	[]
/src/brpc/src/butil/synchronization/waitable_event.h	[]	[]
/src/brpc/src/bvar/detail/percentile.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/bthread/task_control.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/redis_command.cpp	['fuzz_redis']	['fuzz_redis']
/src/brpc/src/bvar/collector.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/bvar/recorder.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/third_party/snappy/snappy-sinksource.cc	[]	[]
/src/brpc/src/butil/time/time.cc	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/sstream	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/bthread/timer_thread.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/third_party/dmg_fp/g_fmt.cc	[]	[]
/src/brpc/src/brpc/nshead_pb_service_adaptor.cpp	[]	[]
/src/brpc/src/butil/scoped_clear_errno.h	[]	[]
/usr/include/google/protobuf/io/coded_stream.h	[]	[]
/src/brpc/src/bvar/detail/sampler.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/brpc/get_js.pb.cc	[]	[]
/src/brpc/src/brpc/acceptor.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_queue.h	[]	[]
/src/brpc/src/brpc/socket.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/circuit_breaker.cpp	[]	[]
/src/brpc/src/butil/files/file.cc	[]	[]
/src/brpc/src/butil/thread_key.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/policy/nshead_mcpack_protocol.cpp	[]	[]
/src/brpc/src/brpc/progressive_attachment.cpp	[]	[]
/src/brpc/src/brpc/policy/discovery_naming_service.h	[]	[]
/src/brpc/src/brpc/builtin/ids_service.cpp	[]	[]
/src/brpc/src/butil/strings/string_util_posix.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/basic_string.tcc	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/include/google/protobuf/unknown_field_set.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/restful.cpp	[]	[]
/src/brpc/src/butil/threading/simple_thread.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/public_pbrpc_protocol.h	[]	[]
/src/brpc/src/butil/logging.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/json2pb/protobuf_map.cpp	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/builtin/grpc_health_check_service.h	[]	[]
/src/brpc/src/brpc/builtin/health_service.cpp	[]	[]
/src/brpc/src/brpc/builtin/hotspots_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/alloc_traits.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_executor.h	[]	[]
/src/brpc/src/brpc/http_header.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/src/butil/containers/case_ignored_flat_map.h	['fuzz_hpack', 'fuzz_http']	['fuzz_hpack', 'fuzz_http']
/src/brpc/src/bthread/execution_queue.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/error/../encodings.h	['fuzz_json']	[]
/src/brpc/src/brpc/nonreflectable_message.h	[]	[]
/src/brpc/src/brpc/builtin/pprof_service.h	[]	[]
/src/brpc/build/test/v1.pb.h	[]	[]
/src/brpc/src/butil/endpoint.cpp	['fuzz_hulu', 'fuzz_sofa']	['fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/debug/proc_maps_linux.cc	[]	[]
/src/brpc/src/bvar/detail/percentile.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/policy/locality_aware_load_balancer.h	[]	[]
/src/brpc/build/brpc/nshead_meta.pb.cc	[]	[]
/src/brpc/src/butil/hash.h	['fuzz_butil']	['fuzz_butil']
/src/brpc/src/brpc/policy/nacos_naming_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/istream	[]	[]
/src/brpc/src/brpc/policy/weighted_randomized_load_balancer.cpp	[]	[]
/src/brpc/src/mcpack2pb/field_type.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_tree.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/details/tcmalloc_extension.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/atomic	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/builtin/status_service.h	[]	[]
/src/brpc/src/brpc/nshead_message.h	[]	[]
/src/brpc/src/butil/class_name.h	[]	[]
/src/brpc/src/brpc/builtin/bthreads_service.h	[]	[]
/src/brpc/src/brpc/input_message_base.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/butil/string_splitter.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_deque.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/test/fuzzing/fuzz_hpack.cpp	['fuzz_hpack']	['fuzz_hpack']
/src/brpc/src/brpc/rpc_dump.h	[]	[]
/src/brpc/src/brpc/policy/gzip_compress.cpp	[]	[]
/src/brpc/src/brpc/builtin/flot_min_js.cpp	[]	[]
/src/brpc/src/butil/files/file_enumerator.cc	[]	[]
/src/brpc/test/fuzzing/fuzz_http.cpp	['fuzz_http']	['fuzz_http']
/src/brpc/build/brpc/proto_base.pb.cc	[]	[]
/src/brpc/src/butil/string_splitter_inl.h	['fuzz_uri']	['fuzz_uri']
/src/brpc/src/butil/strings/string_number_conversions.cc	['fuzz_json', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_json']
/src/brpc/src/brpc/input_messenger.h	[]	[]
/src/brpc/test/fuzzing/fuzz_json.cpp	['fuzz_json']	['fuzz_json']
/usr/include/leveldb/options.h	[]	[]
/src/brpc/src/brpc/policy/nshead_mcpack_protocol.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/pow10.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/uri.cpp	['fuzz_uri', 'fuzz_http']	['fuzz_uri', 'fuzz_http']
/src/brpc/src/bthread/mutex.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/details/usercode_backup_pool.h	[]	[]
/usr/include/google/protobuf/map_entry.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/streambuf	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/third_party/rapidjson/allocators.h	[]	[]
/src/brpc/src/brpc/policy/consul_naming_service.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/stringbuffer.h	[]	[]
/src/brpc/src/brpc/policy/timeout_concurrency_limiter.cpp	[]	[]
/src/brpc/src/bthread/stack.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/redis.cpp	[]	[]
/src/brpc/src/brpc/periodic_task.cpp	[]	[]
/src/brpc/src/butil/files/file_path.cc	[]	[]
/src/brpc/src/brpc/nshead_service.h	[]	[]
/src/brpc/src/butil/time/time_posix.cc	[]	[]
/src/brpc/src/brpc/builtin/version_service.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/x86_64-linux-gnu/c++/13/bits/gthr-default.h	['fuzz_hulu', 'fuzz_sofa']	[]
/usr/include/google/protobuf/generated_message_bases.h	[]	[]
/src/brpc/src/butil/memory/scoped_ptr.h	[]	[]
/src/brpc/src/butil/third_party/symbolize/symbolize.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_pair.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/hashtable.h	['fuzz_uri', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/couchbase.h	[]	[]
/src/brpc/src/butil/sha1_portable.cc	['fuzz_butil']	['fuzz_butil']
/src/brpc/build/brpc/span.pb.cc	[]	[]
/src/brpc/src/brpc/uri.h	['fuzz_uri']	['fuzz_uri']
/src/brpc/test/fuzzing/fuzz_esp.cpp	['fuzz_esp']	['fuzz_esp']
/src/brpc/src/bthread/parking_lot.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/bvar/collector.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/third_party/rapidjson/prettywriter.h	[]	[]
/src/brpc/src/json2pb/encode_decode.cpp	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/debug/stack_trace_posix.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/thread_local.cpp	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/details/naming_service_thread.cpp	[]	[]
/src/brpc/src/brpc/cluster_recover_policy.cpp	[]	[]
/src/brpc/src/brpc/builtin/dir_service.h	[]	[]
/src/brpc/src/json2pb/json_to_pb.cpp	['fuzz_json']	['fuzz_json']
/src/brpc/src/brpc/builtin/bthreads_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_construct.h	[]	[]
/src/brpc/src/bvar/window.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_vector.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_stack.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/builtin/vlog_service.cpp	[]	[]
/src/brpc/src/brpc/global.cpp	[]	[]
/src/brpc/src/butil/containers/optional.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/butil/time.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/channel.cpp	[]	[]
/src/brpc/build/brpc/streaming_rpc_meta.pb.h	[]	[]
/usr/include/google/protobuf/extension_set.h	[]	[]
/src/brpc/src/brpc/stream_creator.h	[]	[]
/src/brpc/src/brpc/policy/consul_naming_service.cpp	[]	[]
/src/brpc/src/brpc/destroyable.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/tuple	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/brpc/builtin/common.cpp	[]	[]
/src/brpc/src/brpc/server_id.h	[]	[]
/src/brpc/build/test/addressbook.pb.cc	[]	[]
/src/brpc/build/test/v1.pb.cc	[]	[]
/src/brpc/src/butil/third_party/rapidjson/error/../allocators.h	['fuzz_json']	[]
/src/brpc/src/brpc/policy/ubrpc2pb_protocol.h	[]	[]
/src/brpc/src/butil/third_party/rapidjson/internal/itoa.h	[]	[]
/src/brpc/build/brpc/builtin_service.pb.h	[]	[]
/src/brpc/src/butil/thread_key.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/hasher.cpp	[]	[]
/src/brpc/src/butil/numerics/safe_conversions.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/brpc/nshead_meta.pb.h	[]	[]
/src/brpc/src/brpc/builtin/version_service.cpp	[]	[]
/src/brpc/src/brpc/policy/streaming_rpc_protocol.cpp	[]	[]
/src/brpc/src/brpc/controller.h	[]	[]
/src/brpc/src/brpc/builtin/jquery_min_js.cpp	[]	[]
/src/brpc/src/brpc/builtin/get_js_service.cpp	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/allocated_ptr.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ostream	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/lazy_instance.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/brpc/get_favicon.pb.h	[]	[]
/src/brpc/src/mcpack2pb/serializer-inl.h	[]	[]
/src/brpc/test/fuzzing/fuzz_butil.cpp	['fuzz_butil']	['fuzz_butil']
/src/brpc/src/butil/threading/platform_thread_linux.cc	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/event_dispatcher.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/src/brpc/policy/constant_concurrency_limiter.h	[]	[]
/src/brpc/src/brpc/policy/esp_protocol.cpp	['fuzz_esp']	['fuzz_esp']
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/new_allocator.h	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/test/snappy_message.pb.h	[]	[]
/src/brpc/src/bthread/execution_queue.cpp	[]	[]
/src/brpc/src/brpc/details/usercode_backup_pool.cpp	[]	[]
/src/brpc/build/brpc/rpc_dump.pb.cc	[]	[]
/src/brpc/src/bthread/id.cpp	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/butil/threading/thread_restrictions.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/test/v2.pb.cc	[]	[]
/usr/include/google/protobuf/message_lite.h	['fuzz_json']	['fuzz_json']
/src/brpc/build/test/addressbook1.pb.cc	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/third_party/rapidjson/reader.h	['fuzz_json']	['fuzz_json']
/src/brpc/src/butil/strings/string16.h	[]	[]
/src/brpc/src/brpc/policy/rtmp_protocol.cpp	[]	[]
/src/brpc/src/brpc/acceptor.cpp	[]	[]
/src/brpc/src/brpc/retry_policy.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_lock.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	[]
/src/brpc/build/test/echo.pb.h	[]	[]
/src/brpc/src/butil/third_party/dmg_fp/dtoa.cc	[]	[]
/src/brpc/src/bthread/timer_thread.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/regex_constants.h	[]	[]
/src/brpc/build/brpc/rtmp.pb.cc	[]	[]
/src/brpc/src/butil/threading/simple_thread.cc	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/amf.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/vector.tcc	['fuzz_json', 'fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/bvar/latency_recorder.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa']
/src/brpc/src/brpc/builtin/health_service.h	[]	[]
/src/brpc/src/butil/single_threaded_pool.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_uri', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/build/test/iobuf.pb.cc	[]	[]
/usr/include/google/protobuf/stubs/stringpiece.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/unique_ptr.h	['fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/build/test/repeated.pb.h	[]	[]
/src/brpc/src/bvar/variable.h	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	['fuzz_butil', 'fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']
/src/brpc/src/brpc/policy/dynpart_load_balancer.cpp	[]	[]
/src/brpc/src/brpc/restful.h	[]	[]
/usr/include/google/protobuf/wire_format_lite.h	[]	[]
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/stl_list.h	['fuzz_redis', 'fuzz_hpack', 'fuzz_shead', 'fuzz_esp', 'fuzz_hulu', 'fuzz_sofa', 'fuzz_http']	[]
/src/brpc/src/butil/zero_copy_stream_as_streambuf.h	[]	[]

Directories in report

Directory
/src/brpc/src/butil/third_party/rapidjson/
/src/brpc/test/fuzzing/
/src/brpc/src/butil/memory/
/src/brpc/build/brpc/
/src/brpc/src/butil/third_party/rapidjson/error/
/usr/include/leveldb/
/src/brpc/src/butil/debug/
/src/brpc/src/butil/files/
/src/brpc/src/butil/third_party/snappy/
/src/brpc/src/butil/details/
/src/brpc/src/butil/strings/
/src/brpc/src/bvar/detail/
/src/brpc/src/butil/third_party/dynamic_annotations/
/src/brpc/src/butil/numerics/
/src/brpc/src/butil/third_party/rapidjson/error/../
/src/brpc/src/butil/time/
/usr/include/x86_64-linux-gnu/bits/
/src/brpc/src/brpc/details/
/src/brpc/src/bvar/
/src/brpc/src/butil/third_party/symbolize/
/src/brpc/src/json2pb/
/src/brpc/src/butil/third_party/rapidjson/internal/
/src/brpc/src/bthread/
/src/brpc/src/butil/third_party/superfasthash/
/src/brpc/src/butil/third_party/dmg_fp/
/src/brpc/src/brpc/builtin/
/src/brpc/src/butil/third_party/modp_b64/
/usr/include/google/protobuf/
/usr/include/google/protobuf/util/
/usr/include/gflags/
/src/brpc/src/butil/
/usr/include/openssl/
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/x86_64-linux-gnu/c++/13/bits/
/src/brpc/src/butil/synchronization/
/src/brpc/src/butil/third_party/murmurhash3/
/src/brpc/build/
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/ext/
/src/brpc/build/brpc/policy/
/src/brpc/src/brpc/
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/
/src/brpc/src/mcpack2pb/
/src/brpc/build/test/
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/backward/
/src/brpc/src/brpc/policy/
/usr/lib/gcc/x86_64-linux-gnu/13/../../../../include/c++/13/bits/
/usr/include/google/protobuf/io/
/usr/include/google/protobuf/stubs/
/src/brpc/src/butil/third_party/icu/
/src/brpc/src/butil/threading/
/src/brpc/src/butil/containers/