High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 15.20% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 16.28% of cyclomatic complexity.

Fuzzers reach 19.17% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

958 / 4995

Cyclomatic complexity statically reachable by fuzzers

4697 / 28838

Runtime code coverage of functions

1838 / 4995

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	224	61.5%
gold	[1:9]	2	0.54%
yellow	[10:29]	1	0.27%
greenyellow	[30:49]	3	0.82%
lawngreen	50+	134	36.8%
All colors	364	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	295	curl_url_cleanup	call site: 00295	hostname_check
29	264	Curl_urldecode	call site: 00264	checkurl
25	130	formatf	call site: 00130	out_double
13	238	curlx_dyn_addn	call site: 00238	curl_maprintf
12	89	dollarstring	call site: 00089	dollarstring
12	173	curl_url_set	call site: 00173	curl_url_set
11	17	free_urlhandle	call site: 00017	Curl_safefree
11	223	dyn_nappend	call site: 00223	curl_easy_escape
10	342	ipv6_parse	call site: 00342	inet_pton6
9	187	urlget_url	call site: 00187	curlx_dyn_addf
8	119	out_number	call site: 00119	OUTCHAR
6	62	Curl_get_scheme_handler	call site: 00062	set_url_port

Runtime coverage analysis

Covered functions

60

Functions that are reachable but not covered

88

Reachable functions

140

Percentage of reachable functions covered

37.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curltool_strdup.c	3
curl/tests/libtest/lib1560.c	9
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	8

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6309	92.4%
gold	[1:9]	28	0.41%
yellow	[10:29]	5	0.07%
greenyellow	[30:49]	2	0.02%
lawngreen	50+	477	6.99%
All colors	6821	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3151	3643	async_thrdd_destroy	call site: 03643	curl_multi_perform
708	2934	Curl_setstropt	call site: 02934	state_connect
367	1022	dyn_nappend	call site: 01022	Curl_cshutdn_add
303	1393	Curl_llist_append	call site: 01393	Curl_close
229	1699	curlx_dyn_reset	call site: 01699	Curl_req_done
212	295	FormAdd	call site: 00295	free_chain
165	2766	curlx_str_until	call site: 02766	dnscache_add_addr
136	818	Curl_llist_insert_next	call site: 00818	Curl_cshutdn_terminate
118	509	LLVMFuzzerTestOneInput	call site: 00509	fuzz_handle_transfer
92	2337	Curl_close	call site: 02337	curl_multi_perform
72	1929	Curl_netrc_cleanup	call site: 01929	Curl_conn_terminate
67	2002	Curl_close	call site: 02002	curl_multi_cleanup

Runtime coverage analysis

Covered functions

1605

Functions that are reachable but not covered

987

Reachable functions

1164

Percentage of reachable functions covered

15.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	23
curl/lib/mprintf.c	28
curl/lib/curlx/strparse.c	16
curl/lib/url.c	157
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/request.c	41
curl/lib/getinfo.c	3
curl/lib/netrc.c	2
curl/lib/mime.c	18
curl/lib/setopt.c	5
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/slist.c	7
curltool_strdup.c	3
curl/lib/rand.c	17
curl/lib/curlx/timeval.c	3
curl/lib/strdup.c	3
curl/lib/formdata.c	21
curl/lib/strequal.c	3
curl/lib/multi.c	209
curl/lib/hostip.c	82
curl/lib/multi_ntfy.c	12
curl/lib/uint-bset.c	8
curl/lib/multi_ev.c	47
curl/lib/uint-table.c	10
curl/lib/curl_addrinfo.c	9
curl/lib/httpsrr.c	1
curl/lib/cshutdn.c	54
curl/lib/conncache.c	62
curl/lib/vtls/vtls_scache.c	8
curl/lib/sigpipe.h	4
curl/lib/llist.c	7
curl/lib/uint-spbset.c	8
curl/lib/connect.c	16
curl/lib/progress.c	16
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/cfilters.c	54
curl/lib/splay.c	3
curl/lib/content_encoding.c	15
curl/lib/select.c	26
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	36
curl/lib/asyn-base.c	9
curltool_getparam.c	23
curltool_msgs.c	12
curlterminal.c	6
curl/lib/getenv.c	6
curl/lib/escape.c	13
curltool_paramhlp.c	13
curl/lib/bufq.c	22
curl/lib/transfer.c	73
curl/lib/sendf.c	29
curl/lib/cw-out.c	29
curl/lib/idn.c	27
curl/lib/vtls/vtls.c	12
curl/lib/curlx/wait.c	5
curl/lib/cw-pause.c	14
curl/lib/ws.c	45
curltool_progress.c	11
curl/lib/curl_trc.c	8
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	5
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	9
curl/lib/urlapi.c	57
curl/lib/cookie.c	81
curl/lib/curl_fopen.c	20
curl/lib/rename.c	7
curl/lib/altsvc.c	38
curl/lib/parsedate.c	18
curl/lib/curlx/inet_pton.c	8
curl/lib/hsts.c	54
curl/lib/http_digest.c	6
curl/lib/vauth/digest_sspi.c	28
curl/lib/http.c	134
curl/lib/curl_get_line.c	8
curl/lib/strcase.c	2
curl/tests/libtest/lib1560.c	9
curl/lib/curlx/multibyte.c	2
curl/lib/noproxy.c	14
curl/lib/file.c	2
curl/lib/speedcheck.c	5
curl/lib/curl_threads.c	5
curl/lib/hostip4.c	2
curl/lib/amigaos.c	9
curl/lib/curlx/warnless.c	1
curl/lib/cf-https-connect.c	18
curl/lib/vquic/vquic.c	1
curl/lib/cf-socket.c	6
curl/lib/gopher.c	2
curl/lib/vssh/libssh.c	158
curl/lib/vssh/libssh2.c	164
curl/lib/curlx/base64.c	6
curl/lib/vssh/curl_path.c	15
curl/lib/smtp.c	59
curl/lib/pingpong.c	30
curl/lib/curl_sasl.c	52
curl/lib/bufref.c	6
curl/lib/vauth/cleartext.c	5
curl/lib/vauth/krb5_sspi.c	26
curl/lib/vauth/vauth.c	7
curl/lib/curl_sspi.c	11
curl/lib/vauth/gsasl.c	9
curl/lib/vauth/ntlm_sspi.c	26
curl/lib/vauth/oauth2.c	3
curl/lib/vauth/cram.c	9
curl/lib/hmac.c	2
curl/lib/strerror.c	8
curl/lib/curlx/winapi.c	4
curl/lib/vauth/spnego_sspi.c	24
curl/lib/http_negotiate.c	11
curl/lib/http_ntlm.c	11

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	933	49.1%
gold	[1:9]	12	0.63%
yellow	[10:29]	12	0.63%
greenyellow	[30:49]	5	0.26%
lawngreen	50+	935	49.2%
All colors	1897	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
49	1085	Curl_uint_spbset_clear	call site: 01085	mev_forget_socket
32	0	EP	call site: 00000	init
32	627	curl_mvaprintf	call site: 00627	file2memory
26	117	Curl_conn_cf_cntrl	call site: 00117	ws_enc_add_pending
24	1218	cshutdn_run_conn_handler	call site: 01218	loghex
24	1655	randit	call site: 01655	curl_maprintf
22	217	Curl_poll	call site: 00217	Curl_senddata
22	463	curl_mvsnprintf	call site: 00463	time2str
20	1475	Curl_pollfds_init	call site: 01475	Curl_cshutdn_add_pollfds
19	555	xfer_send	call site: 00555	trc_print_ids
19	1454	cshutdn_perform	call site: 01454	Curl_cshutdn_terminate
16	588	Curl_conn_cf_needs_flush	call site: 00588	data_urlencode

Runtime coverage analysis

Covered functions

5903

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	17
curl/lib/sigpipe.h	4
curl/lib/url.c	46
curl/lib/multi.c	118
curl/lib/cw-out.c	29
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/bufq.c	18
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	17
curl/lib/cfilters.c	25
curl/lib/ws.c	28
curl/lib/curlx/strparse.c	4
curl/lib/connect.c	7
curl/lib/curlx/timeval.c	3
curl/lib/select.c	26
curl/lib/curlx/wait.c	5
curl/lib/conncache.c	40
curl/lib/hash.c	17
curl/lib/llist.c	7
curl/lib/uint-spbset.c	8
curl/lib/progress.c	12
curltool_progress.c	11
curl/lib/mprintf.c	28
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/hostip.c	12
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/request.c	31
curl/lib/curl_trc.c	8
curltool_getparam.c	23
curltool_strdup.c	3
curltool_msgs.c	12
curlterminal.c	6
curl/lib/getenv.c	6
curl/lib/escape.c	8
curltool_paramhlp.c	13
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/lib/multi_ev.c	46
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/cshutdn.c	51
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	6
curl/lib/multi_ntfy.c	3
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	20
curl/lib/rand.c	17
curl/lib/rename.c	7
curl/lib/altsvc.c	15
curl/lib/parsedate.c	2
curl/lib/curlx/inet_pton.c	8
curl/lib/hsts.c	19
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/mime.c	8
curl/lib/curlx/warnless.c	1

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	234	45.6%
gold	[1:9]	9	1.75%
yellow	[10:29]	6	1.16%
greenyellow	[30:49]	5	0.97%
lawngreen	50+	259	50.4%
All colors	513	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
14	2	LLVMFuzzerTestOneInput	call site: 00002	allocate_template_buffer
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
12	390	urlget_format	call site: 00390	checkurl
12	435	curl_url_set	call site: 00435	hostname_check
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	247	out_string	call site: 00247	out_double
10	454	ipv6_parse	call site: 00454	inet_pton6
10	486	Curl_bufq_skip	call site: 00486	Curl_bufq_write
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
8	426	curlx_dyn_add	call site: 00426	curlx_dyn_ptr
8	473	curl_url_set	call site: 00473	curl_url_set
7	49	chunk_peek	call site: 00049	Curl_bufq_peek_at

Runtime coverage analysis

Covered functions

5903

Functions that are reachable but not covered

23

Reachable functions

58

Percentage of reachable functions covered

60.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curltool_strdup.c	3
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	8

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	32	0	79	23	31	1568	0	7684	3157
cf_osslq_connect	/src/curl/lib/vquic/curl_osslq.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	87	21	28	670	0	2125	1515
myssh_done	/src/curl/lib/vssh/libssh.c	3	['struct Curl_easy*', 'struct ssh_conn*', 'CURLcode']	22	0	9	3	3	411	0	1452	897
rtsp_rtp_write_resp	/src/curl/lib/rtsp.c	4	['struct Curl_easy*', 'char*', 'size_t', 'bool']	18	0	54	16	24	395	1	1626	878
test_sws	/src/curl/tests/server/sws.c	2	['int', 'char*[]']	9	0	333	78	117	160	0	792	719
ftp_pp_statemachine	/src/curl/lib/ftp.c	2	['struct Curl_easy*', 'struct connectdata*']	42	0	198	68	66	943	0	3483	656
schannel_shutdown	/src/curl/lib/vtls/schannel.c	4	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool', 'bool*']	19	0	79	15	27	281	0	1239	545

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1914 / 4995

Cyclomatic complexity statically reachable by fuzzers

13064 / 28838

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'Curl_urldecode', 'formatf', 'curlx_dyn_addn', 'dollarstring', 'curl_url_set', 'free_urlhandle', 'dyn_nappend', 'ipv6_parse', 'urlget_url']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['async_thrdd_destroy', 'Curl_setstropt', 'dyn_nappend', 'Curl_llist_append', 'curlx_dyn_reset', 'FormAdd', 'curlx_str_until', 'Curl_llist_insert_next', 'LLVMFuzzerTestOneInput', 'Curl_close']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['Curl_uint_spbset_clear', 'curl_mvaprintf', 'Curl_conn_cf_cntrl', 'cshutdn_run_conn_handler', 'randit', 'Curl_poll', 'curl_mvsnprintf', 'Curl_pollfds_init', 'xfer_send']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['LLVMFuzzerTestOneInput', 'bufq_slurpn', 'urlget_format', 'curl_url_set', 'Curl_bufq_read', 'out_string', 'ipv6_parse', 'Curl_bufq_skip', 'chunk_peek_at', 'curlx_dyn_add']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
curl_url_set	172	58	33.72%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_fnmatch.cc']
replace_existing	65	10	15.38%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_fopen	50	16	32.0%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_get_line	33	17	51.51%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
global_init	52	23	44.23%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
FormAdd	275	66	24.0%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
FormAddCheck	67	34	50.74%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts_save	48	26	54.16%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_RTSP_REQUEST	42	18	42.85%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_slist	52	16	30.76%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_pointers	97	37	38.14%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_func	115	25	21.73%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
_dopr	322	125	38.81%
doapr_outch	36	12	33.33%
fmtstr	53	29	54.71%
OPENSSL_cpuid_setup	52	15	28.84%
OpenSSL_version	35	7	20.0%
DSO_load	43	18	41.86%
ENGINE_ctrl_cmd_string	58	27	46.55%
int_ctrl_helper	51	24	47.05%
dynamic_ctrl	72	34	47.22%
dynamic_load	74	19	25.67%
engine_add_dynamic_id	40	6	15.0%
ossl_engine_table_select	76	13	17.10%
EVP_EncryptUpdate	39	21	53.84%
evp_cipher_init_internal	263	62	23.57%
EVP_RAND_CTX_new	39	20	51.28%
CRYPTO_aligned_alloc	37	14	37.83%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	25	34.24%
ossl_method_store_cache_set	53	29	54.71%
ossl_provider_new	73	32	43.83%
ossl_provider_query_operation	36	10	27.77%
ossl_cipher_generic_get_params	52	21	40.38%
ossl_cipher_generic_block_update	111	25	22.52%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_common_get_ctx_params	34	10	29.41%
cipher_generic_get_ctx_params_decoder	88	30	34.09%
ossl_prov_drbg_instantiate	100	48	48.0%
ossl_prov_drbg_generate	73	40	54.79%
ossl_drbg_get_ctx_params	36	15	41.66%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
drbg_ctr_get_ctx_params_decoder	260	77	29.61%
seed_src_get_ctx_params_decoder	50	23	46.0%
ossl_pool_acquire_entropy	62	23	37.09%
time_to_start_next	37	6	16.21%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_socket_send	54	23	42.59%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_socket_query	52	27	51.92%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_conn_connect	83	44	53.01%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_cpool_check_limits	76	14	18.42%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cshutdn_terminate_all	39	15	38.46%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cshutdn_perform	34	10	29.41%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_pause_flush	36	7	19.44%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_doh_is_resolved	61	31	50.81%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
show_resolve_info	49	9	18.36%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts	36	15	41.66%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
hsts_pull	35	4	11.42%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_multi_pollset	130	50	38.46%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_update_timer	42	7	16.66%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
multi_xfers_add	35	14	40.0%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
state_do	101	38	37.62%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
mev_assess	35	5	14.28%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_parsenetrc	39	8	20.51%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parsenetrc	222	42	18.91%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
pgrsupdate	37	9	24.32%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
req_flush	46	9	19.56%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_pollset_change	64	30	46.87%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_url_strerror	72	21	29.16%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
tftp_translate_code	41	7	17.07%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
uint_spbset_get_chunk	32	10	31.25%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parse_connect_to_slist	105	26	24.76%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parse_connect_to_string	48	22	45.83%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parse_connect_to_host_port	62	29	46.77%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_match_conn	36	6	16.66%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_match_connect_config	31	12	38.70%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_init_method	42	21	50.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
client_cert	134	34	25.37%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_init_session_and_alpns	69	25	36.23%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_connect	63	33	52.38%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_ssl_find_peer_by_key	50	18	36.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	67	11.47%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ossl_i2c_ASN1_BIT_STRING	54	24	44.44%
ASN1_mbstring_ncopy	145	61	42.06%
a2d_ASN1_OBJECT	125	67	53.6%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	52	27	51.92%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	33	8	24.24%
buffer_write	58	26	44.82%
buffer_ctrl	169	56	33.13%
BIO_gets	40	21	52.5%
file_ctrl	102	39	38.23%
mem_ctrl	94	48	51.06%
int_bn_mod_inverse	177	83	46.89%
bn_mul_fixed_top	92	49	53.26%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	36	18	50.0%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	48	20	41.66%
ossl_ec_group_new_ex	39	20	51.28%
EC_GROUP_copy	87	45	51.72%
EC_GROUP_set_generator	41	20	48.78%
ossl_ec_GFp_simple_oct2point	80	43	53.75%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	36	15	41.66%
OSSL_DECODER_from_bio	57	19	33.33%
collect_decoder_keymgmt	47	24	51.06%
ossl_decoder_ctx_for_pkey_dup	74	40	54.05%
EVP_DigestUpdate	31	11	35.48%
EVP_DigestFinal_ex	43	20	46.51%
EVP_DigestFinalXOF	39	15	38.46%
evp_md_init_internal	152	57	37.5%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	77	29	37.66%
gen_init	54	21	38.88%
evp_pkey_ctx_free_old_ops	31	10	32.25%
EVP_PKEY_CTX_set_params	43	15	34.88%
OBJ_create	38	18	47.36%
OBJ_add_sigid	46	18	39.13%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	50	22	44.0%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	74	50.0%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	54	8	14.81%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	16	41.02%
rsa_new_intern	53	25	47.16%
X509_load_crl_file	55	29	52.72%
ossl_x509v3_cache_extensions	193	100	51.81%
X509_STORE_new	36	13	36.11%
x509_sig_info_init	61	33	54.09%
X509_VERIFY_PARAM_inherit	48	26	54.16%
ec_get_ecm_params	42	8	19.04%
ecx_get_params_decoder	132	67	50.75%
ecx_gen_set_params	43	19	44.18%
ecx_gen_set_params_decoder	40	16	40.0%
ecx_gen	57	25	43.85%
ml_kem_get_params	63	23	36.50%
ml_kem_get_params_decoder	160	69	43.12%
ml_kem_export	71	36	50.70%
export_sub_cb	34	14	41.17%
ml_kem_import_export_decoder	35	17	48.57%
rsa_get_params	37	20	54.05%
tls_get_more_records	283	115	40.63%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	100	45	45.0%
tls_post_encryption_processing_default	47	17	36.17%
tls_retry_write_records	61	30	49.18%
tls_new_record_layer	37	19	51.35%
ssl3_read_bytes	297	129	43.43%
ssl3_ctrl	353	32	9.065%
ssl3_ctx_ctrl	219	35	15.98%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	107	39	36.44%
ossl_ctrl_internal	98	12	12.24%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	164	86	52.43%
ossl_ssl_get_error	74	37	50.0%
ssl_do_config	65	21	32.30%
use_certificate_chain_file	95	31	32.63%
final_server_name	68	19	27.94%
tls_construct_ctos_session_ticket	32	4	12.5%
tls_construct_ctos_status_request	49	16	32.65%
tls_construct_ctos_early_data	122	23	18.85%
tls_construct_ctos_padding	37	19	51.35%
tls_construct_ctos_psk	115	14	12.17%
tls_parse_stoc_renegotiate	39	21	53.84%
tls_parse_stoc_sct	39	13	33.33%
tls_parse_stoc_alpn	64	19	29.68%
custom_ext_parse	32	10	31.25%
custom_ext_add	64	9	14.06%
ossl_statem_client_read_transition	151	19	12.58%
ossl_statem_client_write_transition	107	13	12.14%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	13	15.66%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	125	63	50.4%
tls_process_server_certificate	77	21	27.27%
set_client_ciphersuite	49	26	53.06%
ssl3_do_write	50	20	40.0%
tls_setup_handshake	78	23	29.48%
tls1_alert_code	74	20	27.02%
tls12_sigalg_allowed	46	20	43.47%
ssl_srp_ctx_init_intern	58	27	46.55%
on_resp_header	61	23	37.70%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_debug	44	3	6.818%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_out_do_write	35	16	45.71%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_out_cb_write	33	17	51.51%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_pause_write	51	21	41.17%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_getformdata	91	44	48.35%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
http_target	83	43	51.80%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
on_header	135	65	48.14%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
add_last_chunk	41	10	24.39%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_multi_xfer_buf_borrow	37	20	54.05%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
state_performing	91	44	48.35%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_download_write	81	44	54.32%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cr_in_rewind	47	16	34.04%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_sendrecv	69	34	49.27%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_retry_request	40	14	35.0%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
xfer_recv_resp	37	17	45.94%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
urlset_clear	45	15	33.33%	['/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_auth_decode_digest_http_message	113	43	38.05%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
auth_create_digest_http_message	189	94	49.73%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	12	13.04%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	57	26	45.61%
nghttp2_session_on_request_headers_received	60	16	26.66%
nghttp2_session_update_local_settings	72	38	52.77%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	213	111	52.11%
session_prep_frame	254	129	50.78%
rtsp_filter_rtp	139	70	50.35%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	22	36.66%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	81	19	23.45%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	63	48.83%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	65	36.93%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
ftp_state_ul_setup	58	27	46.55%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
bnrand	61	25	40.98%
generate_key	95	46	48.42%
dh_new_intern	49	22	44.89%
EC_GROUP_new_from_params	180	26	14.44%
ossl_ec_wNAF_mul	258	25	9.689%
ossl_ec_GFp_nistp384_points_mul	148	69	46.62%
ossl_ec_GFp_nistp521_points_mul	153	69	45.09%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	82	34	41.46%
ec_gen	45	24	53.33%
ec_gen_set_group_from_params	65	27	41.53%
Curl_auth_create_digest_md5_message	112	27	24.10%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
engineload	49	11	22.44%
imap_state_capability_resp	53	19	35.84%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
file_set_ctx_params	50	9	18.0%
file_set_ctx_params_decoder	50	16	32.0%
file_upload	82	44	53.65%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_multi_xfer_ulbuf_borrow	37	19	51.35%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

curl_osslq.c

Target file: /src/curl/lib/vquic/curl_osslq.c
Target functions: cf_osslq_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_osslq_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_osslq_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

libssh.c

Target file: /src/curl/lib/vssh/libssh.c
Target functions: myssh_done

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target myssh_done */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  structssh_conn* new_var6 = calloc(sizeof(structssh_conn), 1);
  UNKNOWN_TYPE unknown_7;
  myssh_done(new_var5, new_var6, unknown_7);

  af_safe_gb_cleanup();
}

rtsp.c

Target file: /src/curl/lib/rtsp.c
Target functions: rtsp_rtp_write_resp

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target rtsp_rtp_write_resp */
  structCurl_easy* new_var8 = calloc(sizeof(structCurl_easy), 1);
  char *new_var9 = ada_safe_get_char_p();
  UNKNOWN_TYPE unknown_10;
  UNKNOWN_TYPE unknown_11;
  rtsp_rtp_write_resp(new_var8, new_var9, unknown_10, unknown_11);

  af_safe_gb_cleanup();
}

sws.c

Target file: /src/curl/tests/server/sws.c
Target functions: test_sws

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target test_sws */
  int new_var12 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_13;
  test_sws(new_var12, unknown_13);

  af_safe_gb_cleanup();
}

ftp.c

Target file: /src/curl/lib/ftp.c
Target functions: ftp_pp_statemachine

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target ftp_pp_statemachine */
  structCurl_easy* new_var14 = calloc(sizeof(structCurl_easy), 1);
  structconnectdata* new_var15 = calloc(sizeof(structconnectdata), 1);
  ftp_pp_statemachine(new_var14, new_var15);

  af_safe_gb_cleanup();
}

schannel.c

Target file: /src/curl/lib/vtls/schannel.c
Target functions: schannel_shutdown

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target schannel_shutdown */
  structCurl_cfilter* new_var16 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var17 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_18;
  UNKNOWN_TYPE unknown_19;
  schannel_shutdown(new_var16, new_var17, unknown_18, unknown_19);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/lib/cf-socket.h	[]	[]
/src/curl/lib/socketpair.c	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/lib/vauth/oauth2.c	['curl_fuzzer']	[]
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/lib/vssh/libssh2.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/cram.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/docs/examples/sepheaders.c	[]	[]
/src/curl/lib/curl_setup_once.h	[]	[]
/src/curl/lib/select.h	[]	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/lib/curl_threads.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/lib/amigaos.h	[]	[]
/src/curl/lib/curlx/fopen.c	[]	[]
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/docs/examples/getinmemory.c	[]	[]
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/src/tool_bname.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/websocket-updown.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/lib/http2.c	[]	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/lib/version.c	[]	[]
/src/curl/lib/hostip4.c	['curl_fuzzer']	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/lib/vssh/libssh.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/lib/curlx/fopen.h	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/lib/curlx/strerr.c	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_sasl.c	['curl_fuzzer']	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/md4.c	[]	[]
/src/curl/lib/hostip6.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/lib/hmac.c	['curl_fuzzer']	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curlx/inet_pton.h	[]	[]
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/lib/setopt.h	[]	[]
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/lib/vauth/gsasl.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/lib/curl_rtmp.c	[]	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer']	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/lib/rename.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/lib/vquic/vquic.c	['curl_fuzzer']	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/docs/examples/chkspeed.c	[]	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/lib/asyn-ares.c	[]	[]
/src/curl/lib/amigaos.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/lib/system_win32.c	[]	[]
/src/curl/lib/strcase.h	[]	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/lib/curl_fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/packages/OS400/curlcl.c	[]	[]
/src/curl/lib/cf-https-connect.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/docs/examples/htmltitle.cpp	['curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/lib/curlx/base64.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/packages/OS400/ccsidcurl.c	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/vauth.c	['curl_fuzzer']	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1900.c	[]	[]
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/lib/multi_ntfy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/src/tool_strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/lib/uint-hash.c	[]	[]
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/lib/vtls/mbedtls_threadlock.h	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/lib/file.c	['curl_fuzzer']	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/lib/curlx/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/lib/http_negotiate.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/lib/strcase.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/docs/examples/smtp-tls.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/lib/pingpong.c	['curl_fuzzer']	[]
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/lib/socks.h	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/lib/socketpair.h	[]	[]
/src/curl/lib/vssh/curl_path.c	['curl_fuzzer']	[]
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/docs/examples/ftpupload.c	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/lib/curl_des.c	[]	[]
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/lib/psl.h	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/src/tool_operate.c	[]	[]
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/tests/libtest/lib751.c	[]	[]
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/lib/curlx/nonblock.c	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/lib/noproxy.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/lib/http_ntlm.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/smtp.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/lib/http_proxy.h	[]	[]
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/lib/strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curl_get_line.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/lib/parsedate.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/lib/curlx/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_help.c	[]	[]
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/lib/sha256.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/lib/curlx/inet_ntop.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/lib/multi_ntfy.h	[]	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/lib/share.h	[]	[]
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/lib/cookie.h	[]	[]
/src/curl/lib/speedcheck.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/tests/libtest/lib1582.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/connect.h	[]	[]
/src/curl/lib/strerror.c	['curl_fuzzer']	[]
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/lib/mime.h	[]	[]
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/packages/OS400/os400sys.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/lib/if2ip.h	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/lib/curlx/multibyte.c	['curl_fuzzer']	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/lib/rand.h	[]	[]
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/docs/examples/log_failed_transfers.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/lib/vauth/cleartext.c	['curl_fuzzer']	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/docs/examples/certinfo.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl/lib/url.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/packages/vms/curl_crtl_init.c	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer']	[]
/src/curl/lib/gopher.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/lib/share.c	[]	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/lib/strequal.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/src/tool_cfgable.h	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vquic/curl_osslq.c	[]	[]
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/docs/examples/ftpsget.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/curl_sspi.c	['curl_fuzzer']	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer']	[]
/src/curl/lib/curlx/binmode.h	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/lib/url.h	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/tests/libtest/lib766.c	[]	[]
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/lib/hostip.h	[]	[]
/src/curl/lib/curl_memory.h	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/lib/idn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/tests/libtest/lib1902.c	[]	[]
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]

Directories in report

Directory
/src/curl/tests/tunit/
/src/curl/lib/curlx/
/src/curl/include/curl/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/tests/server/
/src/curl/tests/unit/
/src/curl/tests/libtest/
/src/curl/lib/vauth/
/src/curl/src/
/src/curl/packages/vms/
/src/curl/lib/vssh/
/src/curl/CMake/
/src/curl/packages/OS400/
/src/curl/lib/vtls/
/src/curl/docs/examples/
/src/curl/scripts/
/src/curl/lib/vquic/
/src/curl/lib/
/src/curl_fuzzer/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A
malloc	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A
calloc	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A
realloc	['curl_fuzzer', 'fuzz_url']	N/A	N/A
strdup	['curl_fuzzer', 'fuzz_url']	N/A	N/A

Sink functions/methods found for CWE416

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
free	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_bufq.cc']	N/A	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:28 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:138 ['int', 'void*', 'size_t'] ssize_t [] exit_signal_handler in /src/curl/tests/server/util.c:367 ['int'] void [] do_tftp in /src/curl/tests/server/tftpd.c:884 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:702 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:316 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/curl_ngtcp2.c:426 ['void*', 'uint32_t', 'void*', 'size_t'] void []