High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 15.48% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 16.28% of cyclomatic complexity.

Fuzzers reach 18.96% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

943 / 4973

Cyclomatic complexity statically reachable by fuzzers

4643 / 28507

Runtime code coverage of functions

1830 / 4973

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	222	61.3%
gold	[1:9]	2	0.55%
yellow	[10:29]	1	0.27%
greenyellow	[30:49]	7	1.93%
lawngreen	50+	130	35.9%
All colors	362	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	293	curl_url_cleanup	call site: 00293	hostname_check
30	132	formatf	call site: 00132	curl_url_get
29	262	Curl_urldecode	call site: 00262	checkurl
13	236	curlx_dyn_addn	call site: 00236	urlget_format
11	17	free_urlhandle	call site: 00017	Curl_safefree
11	92	dollarstring	call site: 00092	dollarstring
10	340	ipv6_parse	call site: 00340	inet_pton6
8	121	out_number	call site: 00121	OUTCHAR
8	164	urlget_url	call site: 00164	Curl_get_scheme_handler
7	225	curlx_dyn_addf	call site: 00225	curl_easy_escape
6	63	Curl_get_scheme_handler	call site: 00063	set_url_port
6	81	curl_url_set	call site: 00081	curl_url_set

Runtime coverage analysis

Covered functions

61

Functions that are reachable but not covered

90

Reachable functions

141

Percentage of reachable functions covered

36.17%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/tests/libtest/lib1560.c	9
curl/lib/mprintf.c	27
curl/lib/curlx/dynbuf.c	14
curltool_strdup.c	3
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	8

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6179	92.1%
gold	[1:9]	29	0.43%
yellow	[10:29]	4	0.05%
greenyellow	[30:49]	3	0.04%
lawngreen	50+	489	7.29%
All colors	6704	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3119	3558	async_thrdd_destroy	call site: 03558	curl_multi_perform
864	2693	curlx_str_until	call site: 02693	state_connect
313	1101	curl_mvaprintf	call site: 01101	Curl_cshutdn_add
228	1636	curlx_dyn_reset	call site: 01636	Curl_req_done
215	1418	Curl_llist_append	call site: 01418	Curl_close
208	277	curl_formadd	call site: 00277	fuzz_free
133	781	Curl_llist_insert_next	call site: 00781	Curl_cshutdn_terminate
129	487	LLVMFuzzerTestOneInput	call site: 00487	fuzz_handle_transfer
94	2261	Curl_close	call site: 02261	curl_multi_perform
75	1875	Curl_netrc_cleanup	call site: 01875	Curl_conn_terminate
69	708	Curl_node_next	call site: 00708	cshutdn_run_once
63	1951	Curl_close	call site: 01951	curl_multi_cleanup

Runtime coverage analysis

Covered functions

1579

Functions that are reachable but not covered

966

Reachable functions

1143

Percentage of reachable functions covered

15.49%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	22
curl/lib/url.c	160
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/request.c	41
curl/lib/getinfo.c	3
curl/lib/netrc.c	2
curl/lib/mime.c	18
curl/lib/vtls/vtls.c	10
curl/lib/getenv.c	6
curltool_strdup.c	3
curl/lib/strequal.c	3
curl/lib/setopt.c	5
curl/lib/slist.c	7
curl/lib/bufq.c	22
curl/lib/sendf.c	29
curl/lib/content_encoding.c	15
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/rand.c	7
curl/lib/strdup.c	3
curl/lib/formdata.c	21
curl/lib/multi.c	198
curl/lib/hostip.c	85
curl/lib/multi_ev.c	47
curl/lib/uint-table.c	10
curl/lib/uint-bset.c	8
curl/lib/curl_addrinfo.c	9
curl/lib/httpsrr.c	1
curl/lib/cshutdn.c	54
curl/lib/conncache.c	62
curl/lib/vtls/vtls_scache.c	8
curl/lib/sigpipe.h	4
curl/lib/llist.c	7
curl/lib/uint-spbset.c	8
curl/lib/connect.c	20
curl/lib/progress.c	16
curl/lib/curlx/timeval.c	3
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/cfilters.c	54
curl/lib/splay.c	3
curl/lib/select.c	26
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	36
curl/lib/asyn-base.c	9
curltool_getparam.c	23
curltool_msgs.c	12
curlterminal.c	6
curl/lib/curlx/strparse.c	16
curl/lib/escape.c	13
curltool_paramhlp.c	13
curl/lib/mprintf.c	27
curl/lib/transfer.c	70
curl/lib/cw-out.c	28
curl/lib/idn.c	26
curl/lib/curlx/wait.c	5
curl/lib/cw-pause.c	14
curl/lib/cf-socket.c	14
curltool_progress.c	9
curl/lib/curl_trc.c	8
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	5
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	9
curl/lib/urlapi.c	57
curl/lib/cookie.c	81
curl/lib/fopen.c	20
curl/lib/rename.c	7
curl/lib/altsvc.c	38
curl/lib/parsedate.c	18
curl/lib/curlx/inet_pton.c	8
curl/lib/hsts.c	54
curl/lib/http_digest.c	6
curl/lib/vauth/digest_sspi.c	28
curl/lib/http.c	120
curl/lib/curl_get_line.c	8
curl/lib/strcase.c	2
curl/tests/libtest/lib1560.c	9
curl/lib/curlx/multibyte.c	2
curl/lib/noproxy.c	14
curl/lib/file.c	2
curl/lib/speedcheck.c	5
curl/lib/curl_threads.c	5
curl/lib/hostip4.c	2
curl/lib/amigaos.c	9
curl/lib/curlx/warnless.c	1
curl/lib/cf-https-connect.c	18
curl/lib/vquic/vquic.c	1
curl/lib/gopher.c	2
curl/lib/vssh/libssh.c	159
curl/lib/vssh/libssh2.c	168
curl/lib/sha256.c	10
curl/lib/curlx/base64.c	6
curl/lib/vssh/curl_path.c	15
curl/lib/smtp.c	59
curl/lib/pingpong.c	32
curl/lib/curl_sasl.c	52
curl/lib/bufref.c	6
curl/lib/vauth/cleartext.c	5
curl/lib/vauth/krb5_sspi.c	25
curl/lib/vauth/vauth.c	7
curl/lib/curl_sspi.c	11
curl/lib/vauth/gsasl.c	9
curl/lib/vauth/ntlm_sspi.c	26
curl/lib/vauth/oauth2.c	3
curl/lib/vauth/cram.c	9
curl/lib/hmac.c	2
curl/lib/strerror.c	8
curl/lib/curlx/winapi.c	4
curl/lib/ws.c	25
curl/lib/vauth/spnego_sspi.c	24
curl/lib/http_negotiate.c	11
curl/lib/http_ntlm.c	11

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	268	52.4%
gold	[1:9]	85	16.6%
yellow	[10:29]	12	2.34%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	146	28.5%
All colors	511	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
29	450	ipv6_parse	call site: 00450	curl_url_set
21	424	curlx_dyn_add	call site: 00424	hostname_check
16	0	EP	call site: 00000	fuzz_handle_bufq
13	405	curl_url_cleanup	call site: 00405	curlx_dyn_addn
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
12	388	urlget_format	call site: 00388	checkurl
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	249	out_string	call site: 00249	out_double
10	484	Curl_bufq_skip	call site: 00484	Curl_bufq_write
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
8	351	curl_easy_escape	call site: 00351	urlget_format
7	49	chunk_peek	call site: 00049	Curl_bufq_peek_at

Runtime coverage analysis

Covered functions

5846

Functions that are reachable but not covered

23

Reachable functions

58

Percentage of reachable functions covered

60.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	27
curl/lib/curlx/dynbuf.c	14
curltool_strdup.c	3
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	8

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	921	50.9%
gold	[1:9]	447	24.7%
yellow	[10:29]	22	1.21%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	416	23.0%
All colors	1806	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
39	405	curl_free	call site: 00405	file2memory
34	227	pgrsupdate	call site: 00227	curl_multi_get_offt
31	978	Curl_uint_spbset_add	call site: 00978	mev_forget_socket
28	1115	cshutdn_run_once	call site: 01115	Curl_pgrsTime
20	1381	Curl_pollfds_init	call site: 01381	Curl_cshutdn_add_pollfds
19	346	xfer_send	call site: 00346	trc_print_ids
19	1360	cshutdn_perform	call site: 01360	Curl_cshutdn_terminate
18	957	Curl_uint_spbset_clear	call site: 00957	mev_sh_entry_xfer_add
18	1413	Curl_poll	call site: 01413	our_select
17	1569	randit	call site: 01569	dirslash
16	379	Curl_conn_cf_needs_flush	call site: 00379	data_urlencode
15	1293	curl_multi_remove_handle	call site: 01293	Curl_update_timer

Runtime coverage analysis

Covered functions

5846

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	16
curl/lib/sigpipe.h	4
curl/lib/url.c	47
curl/lib/multi.c	113
curl/lib/cw-out.c	28
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/bufq.c	11
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	14
curl/lib/cfilters.c	25
curl/lib/cf-socket.c	8
curl/lib/connect.c	11
curl/lib/progress.c	12
curl/lib/curlx/timeval.c	3
curltool_progress.c	9
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/hostip.c	12
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/request.c	31
curl/lib/curlx/strparse.c	4
curl/lib/curl_trc.c	8
curltool_getparam.c	23
curltool_strdup.c	3
curltool_msgs.c	12
curlterminal.c	6
curl/lib/getenv.c	6
curl/lib/escape.c	8
curltool_paramhlp.c	13
curl/lib/mprintf.c	27
curl/lib/llist.c	7
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/lib/doh.c	6
curl/lib/conncache.c	40
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/lib/uint-spbset.c	8
curl/lib/multi_ev.c	46
curl/lib/select.c	25
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/hash.c	17
curl/lib/cshutdn.c	51
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/docs/examples/hiperfifo.c	3
curl/lib/curlx/wait.c	5
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	6
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/fopen.c	20
curl/lib/rand.c	7
curl/lib/rename.c	7
curl/lib/altsvc.c	15
curl/lib/parsedate.c	2
curl/lib/curlx/inet_pton.c	8
curl/lib/hsts.c	19
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/mime.c	8
curl/lib/curlx/warnless.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	32	0	80	23	31	1544	0	7598	3125
cf_osslq_connect	/src/curl/lib/vquic/curl_osslq.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	87	20	27	658	0	2066	1455
myssh_done	/src/curl/lib/vssh/libssh.c	3	['struct Curl_easy*', 'struct ssh_conn*', 'CURLcode']	20	0	9	3	3	426	0	1471	888
rtsp_rtp_write_resp	/src/curl/lib/rtsp.c	4	['struct Curl_easy*', 'char*', 'size_t', 'bool']	13	0	54	16	24	343	1	1244	753
test_sws	/src/curl/tests/server/sws.c	2	['int', 'char*[]']	9	0	333	78	119	161	0	798	721
ftp_pp_statemachine	/src/curl/lib/ftp.c	2	['struct Curl_easy*', 'struct connectdata*']	42	0	288	91	96	951	0	3544	718
schannel_shutdown	/src/curl/lib/vtls/schannel.c	4	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool', 'bool*']	18	0	79	15	27	252	0	1082	499

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1880 / 4973

Cyclomatic complexity statically reachable by fuzzers

12802 / 28507

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'formatf', 'Curl_urldecode', 'curlx_dyn_addn', 'free_urlhandle', 'dollarstring', 'ipv6_parse', 'out_number', 'urlget_url', 'curlx_dyn_addf']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['async_thrdd_destroy', 'curlx_str_until', 'curl_mvaprintf', 'curlx_dyn_reset', 'Curl_llist_append', 'curl_formadd', 'Curl_llist_insert_next', 'LLVMFuzzerTestOneInput', 'Curl_close', 'Curl_netrc_cleanup']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['ipv6_parse', 'curlx_dyn_add', 'curl_url_cleanup', 'bufq_slurpn', 'urlget_format', 'Curl_bufq_read', 'out_string', 'Curl_bufq_skip', 'chunk_peek_at']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_free', 'pgrsupdate', 'Curl_uint_spbset_add', 'cshutdn_run_once', 'Curl_pollfds_init', 'xfer_send', 'cshutdn_perform', 'Curl_uint_spbset_clear', 'Curl_poll', 'randit']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
curl_url_get	84	12	14.28%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_url_set	172	17	9.883%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
urlget_url	104	17	16.34%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
OPENSSL_cpuid_setup	52	16	30.76%
replace_existing	65	10	15.38%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_get_line	33	17	51.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
global_init	52	23	44.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_fopen	49	16	32.65%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
FormAdd	275	66	24.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts_save	48	26	54.16%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_llist_insert_next	33	17	51.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_slist	52	10	19.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_pointers	97	37	38.14%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_func	101	22	21.78%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
_dopr	265	111	41.88%
doapr_outch	34	10	29.41%
OpenSSL_version	35	7	20.0%
DSO_load	44	19	43.18%
ENGINE_ctrl_cmd_string	58	27	46.55%
int_ctrl_helper	51	24	47.05%
dynamic_ctrl	72	34	47.22%
dynamic_load	74	19	25.67%
engine_add_dynamic_id	40	6	15.0%
ossl_engine_table_select	76	13	17.10%
EVP_EncryptUpdate	39	21	53.84%
evp_cipher_init_internal	263	63	23.95%
EVP_RAND_CTX_new	39	20	51.28%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	14	19.17%
ossl_method_store_cache_set	53	29	54.71%
ossl_provider_new	71	32	45.07%
ossl_provider_query_operation	36	10	27.77%
ossl_cipher_generic_get_params	54	27	50.0%
ossl_cipher_generic_block_update	111	26	23.42%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_generic_get_ctx_params	45	24	53.33%
ossl_cipher_generic_set_ctx_params	48	5	10.41%
ossl_prov_drbg_instantiate	99	47	47.47%
ossl_prov_drbg_generate	70	37	52.85%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
ossl_pool_acquire_entropy	62	23	37.09%
time_to_start_next	37	6	16.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_send	54	23	42.59%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_query	52	27	51.92%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_conn_connect	83	44	53.01%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_cpool_check_limits	76	14	18.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cshutdn_terminate_all	39	15	38.46%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cshutdn_perform	34	10	29.41%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_out_do_write	35	15	42.85%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_pause_write	51	21	41.17%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_pause_flush	36	7	19.44%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_doh_is_resolved	61	32	52.45%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
show_resolve_info	49	10	20.40%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts	36	15	41.66%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
hsts_pull	35	4	11.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_http_neg_init	36	11	30.55%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_pollset	124	67	54.03%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_update_timer	37	7	18.91%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
multi_xfers_add	35	14	40.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
multi_runsingle	276	75	27.17%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
state_connect	36	12	33.33%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
state_do	101	39	38.61%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
mev_assess	35	5	14.28%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_parsenetrc	39	8	20.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parsenetrc	222	42	18.91%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_pgrsTimeWas	59	15	25.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
pgrsupdate	37	9	24.32%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
req_flush	46	9	19.56%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_pollset_change	64	30	46.87%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_download_write	81	44	54.32%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_splay	47	18	38.29%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_splayinsert	32	11	34.37%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_splayremove	40	18	45.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_url_strerror	72	7	9.722%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
tftp_parse_option_ack	53	17	32.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
uint_spbset_get_chunk	32	10	31.25%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_connect	39	16	41.02%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
create_conn	237	22	9.282%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parseurlandfillconn	177	26	14.68%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_slist	105	27	25.71%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_string	48	22	45.83%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_host_port	62	29	46.77%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
url_match_conn	37	6	16.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
url_match_connect_config	31	13	41.93%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_init_method	42	21	50.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
client_cert	134	34	25.37%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_init_session_and_alpns	68	24	35.29%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_connect	63	33	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_ssl_find_peer_by_key	50	21	42.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	67	11.47%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ossl_i2c_ASN1_BIT_STRING	54	24	44.44%
ASN1_mbstring_ncopy	137	61	44.52%
a2d_ASN1_OBJECT	119	64	53.78%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	53	27	50.94%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	34	8	23.52%
buffer_write	58	26	44.82%
buffer_ctrl	169	56	33.13%
BIO_gets	40	21	52.5%
file_ctrl	102	39	38.23%
mem_ctrl	92	47	51.08%
int_bn_mod_inverse	177	83	46.89%
bn_mul_fixed_top	92	49	53.26%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	37	18	48.64%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	49	20	40.81%
ossl_ec_group_new_ex	40	20	50.0%
EC_GROUP_copy	87	45	51.72%
EC_GROUP_set_generator	42	20	47.61%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	37	15	40.54%
OSSL_DECODER_from_bio	57	19	33.33%
ossl_decoder_instance_new	48	26	54.16%
collect_decoder_keymgmt	47	24	51.06%
ossl_decoder_ctx_for_pkey_dup	75	40	53.33%
EVP_DigestUpdate	31	13	41.93%
EVP_DigestFinal_ex	43	20	46.51%
EVP_DigestFinalXOF	39	15	38.46%
evp_md_init_internal	152	62	40.78%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	78	29	37.17%
gen_init	55	21	38.18%
evp_pkey_ctx_free_old_ops	31	10	32.25%
EVP_PKEY_CTX_set_params	43	21	48.83%
OBJ_create	46	20	43.47%
OBJ_add_sigid	46	18	39.13%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	50	23	46.0%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	75	50.67%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	54	8	14.81%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	16	41.02%
rsa_new_intern	51	23	45.09%
X509_load_crl_file	55	29	52.72%
ossl_x509v3_cache_extensions	193	99	51.29%
X509_STORE_new	37	13	35.13%
x509_sig_info_init	61	33	54.09%
X509_VERIFY_PARAM_inherit	48	26	54.16%
ec_get_ecm_params	42	8	19.04%
ecx_gen_set_params	46	22	47.82%
ecx_gen	58	25	43.10%
ml_kem_export	71	38	53.52%
export_sub_cb	36	16	44.44%
tls_get_more_records	283	127	44.87%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	100	47	47.0%
tls_post_encryption_processing_default	47	18	38.29%
tls_retry_write_records	61	30	49.18%
tls_new_record_layer	38	19	50.0%
ssl3_read_bytes	298	136	45.63%
ssl3_ctrl	307	28	9.120%
ssl3_ctx_ctrl	219	35	15.98%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	107	39	36.44%
ossl_ctrl_internal	98	12	12.24%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	165	87	52.72%
ossl_ssl_get_error	74	37	50.0%
ssl_do_config	65	21	32.30%
use_certificate_chain_file	95	31	32.63%
final_server_name	68	21	30.88%
tls_construct_ctos_session_ticket	32	4	12.5%
tls_construct_ctos_status_request	49	16	32.65%
tls_construct_ctos_early_data	122	25	20.49%
tls_construct_ctos_padding	37	20	54.05%
tls_construct_ctos_psk	115	14	12.17%
tls_parse_stoc_renegotiate	39	14	35.89%
tls_parse_stoc_sct	39	13	33.33%
tls_parse_stoc_alpn	64	19	29.68%
custom_ext_parse	32	10	31.25%
custom_ext_add	64	9	14.06%
ossl_statem_client_read_transition	151	19	12.58%
ossl_statem_client_write_transition	107	14	13.08%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	14	16.86%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	125	66	52.80%
tls_process_server_certificate	78	30	38.46%
ssl3_do_write	50	24	48.0%
tls_setup_handshake	78	23	29.48%
tls1_alert_code	74	20	27.02%
tls12_sigalg_allowed	46	20	43.47%
fuzz_handle_transfer(fuzz_data*)	79	32	40.50%
on_resp_header	61	25	40.98%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_debug	44	3	6.818%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_getformdata	84	44	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
http_target	82	42	51.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
on_header	134	65	48.50%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
add_last_chunk	41	10	24.39%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_xfer_buf_borrow	37	20	54.05%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_in_rewind	40	12	30.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_sendrecv	69	35	50.72%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_retry_request	40	19	47.5%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
xfer_recv_resp	37	17	45.94%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
urlset_clear	45	15	33.33%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_auth_decode_digest_http_message	113	43	38.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
auth_create_digest_http_message	188	94	50.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	16	17.39%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	57	26	45.61%
nghttp2_session_on_request_headers_received	60	15	25.0%
nghttp2_session_update_local_settings	72	36	50.0%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	213	111	52.11%
session_prep_frame	254	129	50.78%
rtsp_filter_rtp	139	71	51.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	22	36.66%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	82	19	23.17%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	64	49.61%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	66	37.5%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
ftp_state_ul_setup	58	27	46.55%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
bnrand	62	25	40.32%
generate_key	93	46	49.46%
dh_new_intern	50	22	44.0%
EC_GROUP_new_from_params	180	26	14.44%
ossl_ec_wNAF_mul	256	25	9.765%
ossl_ec_GFp_nistp384_points_mul	148	69	46.62%
ossl_ec_GFp_nistp521_points_mul	153	69	45.09%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	83	34	40.96%
ec_gen	46	24	52.17%
ec_gen_set_group_from_params	65	29	44.61%
Curl_auth_create_digest_md5_message	112	27	24.10%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
engineload	49	11	22.44%
imap_state_capability_resp	53	19	35.84%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
providerload	54	22	40.74%
file_open	56	27	48.21%
file_upload	82	44	53.65%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_xfer_ulbuf_borrow	37	20	54.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

curl_osslq.c

Target file: /src/curl/lib/vquic/curl_osslq.c
Target functions: cf_osslq_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_osslq_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_osslq_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

libssh.c

Target file: /src/curl/lib/vssh/libssh.c
Target functions: myssh_done

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target myssh_done */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  structssh_conn* new_var6 = calloc(sizeof(structssh_conn), 1);
  UNKNOWN_TYPE unknown_7;
  myssh_done(new_var5, new_var6, unknown_7);

  af_safe_gb_cleanup();
}

rtsp.c

Target file: /src/curl/lib/rtsp.c
Target functions: rtsp_rtp_write_resp

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target rtsp_rtp_write_resp */
  structCurl_easy* new_var8 = calloc(sizeof(structCurl_easy), 1);
  char *new_var9 = ada_safe_get_char_p();
  UNKNOWN_TYPE unknown_10;
  UNKNOWN_TYPE unknown_11;
  rtsp_rtp_write_resp(new_var8, new_var9, unknown_10, unknown_11);

  af_safe_gb_cleanup();
}

sws.c

Target file: /src/curl/tests/server/sws.c
Target functions: test_sws

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target test_sws */
  int new_var12 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_13;
  test_sws(new_var12, unknown_13);

  af_safe_gb_cleanup();
}

ftp.c

Target file: /src/curl/lib/ftp.c
Target functions: ftp_pp_statemachine

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target ftp_pp_statemachine */
  structCurl_easy* new_var14 = calloc(sizeof(structCurl_easy), 1);
  structconnectdata* new_var15 = calloc(sizeof(structconnectdata), 1);
  ftp_pp_statemachine(new_var14, new_var15);

  af_safe_gb_cleanup();
}

schannel.c

Target file: /src/curl/lib/vtls/schannel.c
Target functions: schannel_shutdown

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target schannel_shutdown */
  structCurl_cfilter* new_var16 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var17 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_18;
  UNKNOWN_TYPE unknown_19;
  schannel_shutdown(new_var16, new_var17, unknown_18, unknown_19);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/lib/vtls/mbedtls_threadlock.h	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/lib/curl_sasl.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/htmltitle.cpp	['curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/libtest/lib1900.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/lib/vssh/libssh.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/strerror.c	['curl_fuzzer']	[]
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/memdebug.h	[]	[]
/src/curl/lib/curlx/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/lib/if2ip.h	[]	[]
/src/curl/lib/uint-hash.c	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_ntlm.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/lib/select.h	[]	[]
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/krb5.c	[]	[]
/src/curl/lib/ldap.c	[]	[]
/src/curl/lib/amigaos.h	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/lib/curl_des.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer']	[]
/src/curl/docs/examples/chkspeed.c	[]	[]
/src/curl/src/tool_cfgable.h	[]	[]
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/docs/examples/certinfo.c	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/lib/curlx/base64.c	['curl_fuzzer']	[]
/src/curl/lib/smtp.c	['curl_fuzzer']	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/speedcheck.c	['curl_fuzzer']	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/lib/file.c	['curl_fuzzer']	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/lib/curl_get_line.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/socketpair.h	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/lib/vquic/curl_osslq.c	[]	[]
/src/curl/docs/examples/ftpsget.c	[]	[]
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/lib/socketpair.c	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/lib/hmac.c	['curl_fuzzer']	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/lib/md4.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/lib/share.c	[]	[]
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/lib/socks.h	[]	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib751.c	[]	[]
/src/curl/lib/hostip.h	[]	[]
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl/lib/cookie.h	[]	[]
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/lib/vauth/cleartext.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/packages/vms/curl_crtl_init.c	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/docs/examples/getinmemory.c	[]	[]
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_proxy.h	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/lib/curl_memory.h	[]	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/lib/curl_rtmp.c	[]	[]
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/lib/url.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/amigaos.c	['curl_fuzzer']	[]
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/gopher.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/src/tool_bname.c	[]	[]
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/lib/vauth/vauth.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/packages/OS400/os400sys.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/lib/rename.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/lib/asyn-ares.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vssh/curl_path.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer']	[]
/src/curl/lib/rand.h	[]	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer']	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]
/src/curl/lib/curl_sspi.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/lib/vssh/libssh2.c	['curl_fuzzer']	[]
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-https-connect.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/lib/vssh/wolfssh.c	[]	[]
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_operate.c	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/packages/OS400/ccsidcurl.c	[]	[]
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/lib/pingpong.c	['curl_fuzzer']	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/lib/curl_setup_once.h	[]	[]
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/src/tool_strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/docs/examples/smtp-tls.c	[]	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/lib/parsedate.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/lib/strcase.h	[]	[]
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/docs/examples/websocket-updown.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/lib/strequal.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/lib/curlx/inet_ntop.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/lib/idn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/lib/hostip4.c	['curl_fuzzer']	[]
/src/curl/lib/http_negotiate.c	['curl_fuzzer']	[]
/src/curl/lib/sha256.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/cram.c	['curl_fuzzer']	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/lib/mime.h	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/lib/curlx/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/lib/version.c	[]	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/lib/strcase.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/lib/curl_mem_undef.h	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/docs/examples/sepheaders.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/lib/curlx/nonblock.c	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/lib/strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/lib/share.h	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/lib/hostip6.c	[]	[]
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/lib/curlx/inet_pton.h	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl/lib/curlx/binmode.h	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/lib/vquic/vquic.c	['curl_fuzzer']	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/src/tool_help.c	[]	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/lib/noproxy.c	['curl_fuzzer']	[]
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/lib/psl.h	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/packages/OS400/curlcl.c	[]	[]
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl/lib/http2.c	[]	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/connect.h	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/lib/vauth/oauth2.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/lib/curlx/multibyte.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/lib/system_win32.c	[]	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer']	[]
/src/curl/lib/setopt.h	[]	[]
/src/curl/lib/vauth/gsasl.c	['curl_fuzzer']	[]
/src/curl/lib/curl_threads.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/lib/cf-socket.h	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/lib/url.h	[]	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/docs/examples/ftpupload.c	[]	[]

Directories in report

Directory
/src/curl/scripts/
/src/curl/lib/vtls/
/src/curl/tests/server/
/src/curl/docs/examples/
/src/curl/lib/vquic/
/src/curl/CMake/
/src/curl/lib/vauth/
/src/curl/packages/OS400/
/src/curl_fuzzer/
/src/curl/tests/libtest/
/src/curl/lib/vssh/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/include/curl/
/src/curl/lib/
/src/curl/src/
/src/curl/tests/unit/
/src/curl/tests/tunit/
/src/curl/lib/curlx/
/src/curl/packages/vms/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
strdup	['fuzz_url', 'curl_fuzzer']	N/A	N/A
malloc	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A
calloc	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A
realloc	['fuzz_url', 'curl_fuzzer']	N/A	N/A
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE416

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
free	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
fopen	['curl_fuzzer']	N/A	N/A
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:28 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:138 ['int', 'void*', 'size_t'] ssize_t [] exit_signal_handler in /src/curl/tests/server/util.c:371 ['int'] void [] do_tftp in /src/curl/tests/server/tftpd.c:884 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:691 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:319 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/curl_ngtcp2.c:402 ['void*', 'uint32_t', 'void*', 'size_t'] void []