High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 15.73% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 16.39% of cyclomatic complexity.

Fuzzers reach 19.40% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

977 / 5035

Cyclomatic complexity statically reachable by fuzzers

4752 / 28982

Runtime code coverage of functions

1871 / 5035

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	220	61.1%
gold	[1:9]	2	0.55%
yellow	[10:29]	2	0.55%
greenyellow	[30:49]	10	2.77%
lawngreen	50+	126	35.0%
All colors	360	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	292	curl_url_cleanup	call site: 00292	hostname_check
29	261	Curl_urldecode	call site: 00261	checkurl
25	130	formatf	call site: 00130	out_double
13	235	curlx_dyn_addn	call site: 00235	curl_maprintf
12	89	dollarstring	call site: 00089	dollarstring
12	170	curl_url_set	call site: 00170	curl_url_set
11	17	free_urlhandle	call site: 00017	Curl_safefree
11	220	dyn_nappend	call site: 00220	curl_easy_escape
9	184	urlget_url	call site: 00184	curlx_dyn_addf
9	339	ipv6_parse	call site: 00339	inet_pton6
8	119	out_number	call site: 00119	OUTCHAR
6	62	Curl_get_scheme_handler	call site: 00062	set_url_port

Runtime coverage analysis

Covered functions

69

Functions that are reachable but not covered

87

Reachable functions

145

Percentage of reachable functions covered

40.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curl/tests/libtest/lib1560.c	9
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2210	86.6%
gold	[1:9]	53	2.07%
yellow	[10:29]	1	0.03%
greenyellow	[30:49]	6	0.23%
lawngreen	50+	280	10.9%
All colors	2550	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
350	1125	curlx_dyn_add	call site: 01125	Curl_cshutdn_add
312	1479	Curl_llist_append	call site: 01479	Curl_close
237	1794	curlx_dyn_reset	call site: 01794	Curl_req_done
212	351	FormAdd	call site: 00351	free_chain
137	901	Curl_llist_insert_next	call site: 00901	Curl_cshutdn_terminate
120	565	LLVMFuzzerTestOneInput	call site: 00565	fuzz_handle_transfer
102	2421	Curl_close	call site: 02421	curl_multi_perform
85	812	Curl_pgrs_now	call site: 00812	disconnect
71	2032	Curl_netrc_cleanup	call site: 02032	Curl_conn_terminate
68	2104	Curl_close	call site: 02104	curl_multi_cleanup
43	2240	Curl_fopen	call site: 02240	get_netscape_format
31	764	sigpipe_ignore	call site: 00764	cpool_discard_conn

Runtime coverage analysis

Covered functions

1615

Functions that are reachable but not covered

996

Reachable functions

1182

Percentage of reachable functions covered

15.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	23
curl/lib/mprintf.c	28
curl/lib/curlx/strparse.c	4
curl/lib/url.c	60
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/bufref.c	6
curl/lib/request.c	33
curl/lib/getinfo.c	3
curl/lib/netrc.c	2
curl/lib/mime.c	18
curl/lib/setopt.c	2
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/slist.c	8
curl/lib/rand.c	17
curl/lib/curlx/timeval.c	8
curl/lib/strdup.c	3
curl/lib/formdata.c	26
curl/lib/strequal.c	2
curl/lib/multi.c	150
curl/lib/hostip.c	13
curl/lib/multi_ntfy.c	6
curl/lib/uint-bset.c	8
curl/lib/multi_ev.c	47
curl/lib/uint-table.c	10
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/cshutdn.c	54
curl/lib/conncache.c	39
curl/lib/vtls/vtls_scache.c	8
curl/lib/sigpipe.h	4
curl/lib/llist.c	7
curl/lib/connect.c	8
curl/lib/progress.c	17
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/strcopy.c	2
curl/lib/curlx/winapi.c	4
curl/lib/cfilters.c	24
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/lib/select.c	25
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/transfer.c	16
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/ratelimit.c	4
curl/lib/http.c	6
curl/lib/bufq.c	18
curl/lib/uint-spbset.c	8
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/lib/curlx/wait.c	5
curl/lib/cw-out.c	29
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/ws.c	29
curl/lib/curlx/warnless.c	2
curltool_progress.c	11
curl/lib/curl_trc.c	8
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	4
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	2
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	19
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	18
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1024	53.0%
gold	[1:9]	5	0.25%
yellow	[10:29]	399	20.6%
greenyellow	[30:49]	84	4.35%
lawngreen	50+	417	21.6%
All colors	1929	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
71	1060	mev_sh_entry_get	call site: 01060	mev_sh_entry_add
37	608	curl_free	call site: 00608	curl_mvsnprintf
26	124	Curl_conn_cf_cntrl	call site: 00124	ws_enc_add_pending
24	1209	cshutdn_run_once	call site: 01209	disconnect
24	1704	randit	call site: 01704	curl_maprintf
22	358	pgrs_update	call site: 00358	curl_msnprintf
21	433	out_string	call site: 00433	time2str
20	1495	Curl_pollfds_init	call site: 01495	Curl_cshutdn_add_pollfds
19	456	curlx_strcopy	call site: 00456	time2str
19	547	xfer_send	call site: 00547	trc_print_ids
18	1527	Curl_poll	call site: 01527	our_select
17	586	Curl_conn_cf_needs_flush	call site: 00586	data_urlencode

Runtime coverage analysis

Covered functions

5940

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	17
curl/lib/sigpipe.h	4
curl/lib/url.c	46
curl/lib/multi.c	118
curl/lib/cw-out.c	29
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/bufq.c	18
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	16
curl/lib/ratelimit.c	4
curl/lib/progress.c	17
curl/lib/curlx/timeval.c	8
curl/lib/cfilters.c	24
curl/lib/ws.c	29
curl/lib/curlx/warnless.c	3
curl/lib/curlx/strparse.c	4
curl/lib/connect.c	8
curl/lib/conncache.c	38
curl/lib/hash.c	17
curl/lib/llist.c	7
curltool_progress.c	11
curl/lib/mprintf.c	28
curl/lib/curlx/strcopy.c	2
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/hostip.c	12
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/request.c	32
curl/lib/curl_trc.c	8
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/lib/multi_ev.c	46
curl/lib/select.c	25
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/http.c	6
curl/lib/uint-spbset.c	8
curl/lib/cshutdn.c	51
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/winapi.c	4
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/docs/examples/hiperfifo.c	3
curl/lib/curlx/wait.c	5
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	6
curl/lib/multi_ntfy.c	3
curl/lib/bufref.c	3
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	19
curl/lib/rand.c	17
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	18
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/mime.c	8

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	256	50.2%
gold	[1:9]	9	1.76%
yellow	[10:29]	36	7.07%
greenyellow	[30:49]	30	5.89%
lawngreen	50+	178	34.9%
All colors	509	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
16	0	EP	call site: 00000	fuzz_handle_bufq
13	449	ipv6_parse	call site: 00449	curlx_inet_ntop
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
12	387	urlget_format	call site: 00387	checkurl
12	432	curl_url_set	call site: 00432	hostname_check
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	203	curlx_str_single	call site: 00203	dollarstring
10	247	out_string	call site: 00247	out_double
10	482	Curl_bufq_skip	call site: 00482	Curl_bufq_write
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
8	231	out_number	call site: 00231	OUTCHAR
8	423	curlx_dyn_add	call site: 00423	curlx_dyn_ptr

Runtime coverage analysis

Covered functions

5940

Functions that are reachable but not covered

24

Reachable functions

59

Percentage of reachable functions covered

59.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	37	0	78	25	34	1603	0	7800	3220
cf_osslq_connect	/src/curl/lib/vquic/curl_osslq.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	89	22	29	581	0	2025	1337
myssh_connect	/src/curl/lib/vssh/libssh.c	2	['struct Curl_easy*', 'bool*']	22	0	79	19	20	370	0	1338	930

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1620 / 5035

Cyclomatic complexity statically reachable by fuzzers

10239 / 28982

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'Curl_urldecode', 'formatf', 'curlx_dyn_addn', 'dollarstring', 'curl_url_set', 'free_urlhandle', 'dyn_nappend', 'urlget_url', 'ipv6_parse']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curlx_dyn_add', 'Curl_llist_append', 'curlx_dyn_reset', 'FormAdd', 'Curl_llist_insert_next', 'LLVMFuzzerTestOneInput', 'Curl_close', 'Curl_pgrs_now', 'Curl_netrc_cleanup']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['mev_sh_entry_get', 'curl_free', 'Curl_conn_cf_cntrl', 'cshutdn_run_once', 'randit', 'pgrs_update', 'out_string', 'Curl_pollfds_init', 'curlx_strcopy', 'xfer_send']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['ipv6_parse', 'bufq_slurpn', 'urlget_format', 'curl_url_set', 'Curl_bufq_read', 'curlx_str_single', 'out_string', 'Curl_bufq_skip', 'chunk_peek_at']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
parsefmt	342	122	35.67%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'fuzz_url', 'curl_fuzzer']
curl_url_set	172	56	32.55%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'fuzz_url', 'curl_fuzzer']
urlget_url	104	57	54.80%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'fuzz_url', 'curl_fuzzer']
altsvc_add	49	15	30.61%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
replace_existing	64	9	14.06%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_fopen	51	16	31.37%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
global_init	52	23	44.23%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
FormAdd	237	66	27.84%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
FormAddCheck	54	29	53.70%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_hsts_save	48	26	54.16%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_llist_insert_next	33	17	51.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
setopt_slist	52	10	19.23%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
setopt_pointers	96	35	36.45%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
setopt_func	115	25	21.73%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
_dopr	322	113	35.09%
doapr_outch	36	12	33.33%
fmtstr	53	28	52.83%
OPENSSL_cpuid_setup	52	15	28.84%
OpenSSL_version	35	7	20.0%
DSO_load	43	18	41.86%
ENGINE_ctrl_cmd_string	58	27	46.55%
int_ctrl_helper	51	24	47.05%
dynamic_ctrl	72	34	47.22%
dynamic_load	74	19	25.67%
engine_add_dynamic_id	40	6	15.0%
ossl_engine_table_select	76	13	17.10%
EVP_EncryptUpdate	39	21	53.84%
evp_cipher_init_internal	263	62	23.57%
EVP_RAND_CTX_new	39	20	51.28%
CRYPTO_aligned_alloc	37	14	37.83%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	25	34.24%
ossl_method_store_cache_set	53	29	54.71%
ossl_provider_new	73	32	43.83%
ossl_provider_query_operation	36	10	27.77%
OPENSSL_sk_deep_copy	35	14	40.0%
internal_find	51	16	31.37%
ossl_cipher_generic_get_params	52	21	40.38%
ossl_cipher_generic_block_update	111	25	22.52%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_common_get_ctx_params	34	10	29.41%
cipher_generic_get_ctx_params_decoder	88	30	34.09%
ossl_prov_drbg_instantiate	100	48	48.0%
ossl_prov_drbg_generate	73	40	54.79%
ossl_drbg_get_ctx_params	36	15	41.66%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
drbg_ctr_get_ctx_params_decoder	260	77	29.61%
seed_src_get_ctx_params_decoder	50	23	46.0%
ossl_pool_acquire_entropy	62	23	37.09%
Curl_cf_https_setup	65	28	43.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
time_to_start_next	37	6	16.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
is_connected	50	8	16.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_ip_ballers_run	155	61	39.35%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
socket_open	38	20	52.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_tcp_connect	71	15	21.12%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
bindlocal	177	22	12.42%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_send	52	21	40.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_recv	45	17	37.77%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_query	53	18	33.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_conn_connect	83	35	42.16%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_cpool_check_limits	78	14	17.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_addr2string	42	22	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_setup_connect	90	42	46.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cookie_output	71	25	35.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_cshutdn_setfds	31	3	9.677%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cshutdn_terminate_all	39	15	38.46%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cw_pause_flush	36	7	19.44%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_doh_is_resolved	63	33	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_resolv	121	40	33.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
fetch_addr	46	13	28.26%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
show_resolve_info	49	9	18.36%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts	36	15	41.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
hsts_pull	35	4	11.42%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_http_neg_init	36	11	30.55%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_multi_pollset	91	32	35.16%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_update_timer	39	7	17.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
multi_xfers_add	35	14	40.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
multi_adjust_pollset	37	15	40.54%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
multi_runsingle	272	135	49.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
state_do	99	28	28.28%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
multi_handle_timeout	46	7	15.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
mev_assess	35	5	14.28%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_parsenetrc	39	8	20.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
parsenetrc	223	53	23.76%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_check_noproxy	48	5	10.41%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
pgrsupdate	41	4	9.756%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
time2str	41	6	14.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
req_flush	46	9	19.56%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_pollset_change	64	30	46.87%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_splay	47	18	38.29%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_splayinsert	32	11	34.37%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_splayremove	40	18	45.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_url_strerror	72	9	12.5%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
tftp_translate_code	41	7	17.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
create_conn	238	110	46.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
create_conn_helper_init_proxy	124	48	38.70%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
override_login	104	38	36.53%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
parse_connect_to_slist	124	26	20.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
parse_connect_to_string	48	22	45.83%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
parse_connect_to_host_port	62	29	46.77%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
url_match_conn	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
url_match_connect_config	31	12	38.70%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
urlget_format	61	25	40.98%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'fuzz_url', 'curl_fuzzer']
ossl_init_method	43	20	46.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
client_cert	131	34	25.95%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_init_session_and_alpns	69	23	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_connect	63	33	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_ssl_find_peer_by_key	50	18	36.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	50	8.561%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ossl_i2c_ASN1_BIT_STRING	54	24	44.44%
ASN1_mbstring_ncopy	145	61	42.06%
a2d_ASN1_OBJECT	125	67	53.6%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	52	27	51.92%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	33	8	24.24%
buffer_write	58	26	44.82%
buffer_ctrl	169	56	33.13%
BIO_gets	40	21	52.5%
file_ctrl	102	39	38.23%
mem_ctrl	94	48	51.06%
int_bn_mod_inverse	177	83	46.89%
bn_mul_fixed_top	92	49	53.26%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	36	18	50.0%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	48	20	41.66%
ossl_ec_group_new_ex	39	20	51.28%
EC_GROUP_copy	87	45	51.72%
EC_GROUP_set_generator	41	20	48.78%
ossl_ec_GFp_simple_oct2point	80	43	53.75%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	36	15	41.66%
OSSL_DECODER_from_bio	57	19	33.33%
collect_decoder_keymgmt	47	24	51.06%
ossl_decoder_ctx_for_pkey_dup	74	40	54.05%
EVP_DigestUpdate	31	11	35.48%
EVP_DigestFinal_ex	43	20	46.51%
EVP_DigestFinalXOF	39	15	38.46%
evp_md_init_internal	152	57	37.5%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	77	29	37.66%
gen_init	54	21	38.88%
evp_pkey_ctx_free_old_ops	31	10	32.25%
EVP_PKEY_CTX_set_params	43	15	34.88%
OBJ_create	38	18	47.36%
OBJ_add_sigid	46	18	39.13%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	50	22	44.0%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	74	50.0%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	54	8	14.81%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	16	41.02%
rsa_new_intern	53	25	47.16%
X509_load_crl_file	55	29	52.72%
ossl_x509v3_cache_extensions	193	100	51.81%
X509_STORE_new	36	13	36.11%
x509_sig_info_init	61	33	54.09%
X509_VERIFY_PARAM_inherit	48	26	54.16%
ec_get_ecm_params	42	8	19.04%
ecx_get_params_decoder	132	67	50.75%
ecx_gen_set_params	43	19	44.18%
ecx_gen_set_params_decoder	40	16	40.0%
ecx_gen	57	25	43.85%
ml_kem_get_params	63	23	36.50%
ml_kem_get_params_decoder	160	69	43.12%
ml_kem_export	71	36	50.70%
export_sub_cb	34	14	41.17%
ml_kem_import_export_decoder	35	17	48.57%
rsa_get_params	37	20	54.05%
tls_get_more_records	283	115	40.63%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	100	45	45.0%
tls_post_encryption_processing_default	47	17	36.17%
tls_retry_write_records	61	30	49.18%
tls_new_record_layer	37	19	51.35%
ssl3_read_bytes	297	129	43.43%
ssl3_ctrl	353	32	9.065%
ssl3_ctx_ctrl	219	35	15.98%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	107	39	36.44%
ossl_ctrl_internal	98	12	12.24%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	164	86	52.43%
ossl_ssl_get_error	74	37	50.0%
ssl_do_config	65	21	32.30%
use_certificate_chain_file	95	31	32.63%
final_server_name	68	19	27.94%
tls_construct_ctos_session_ticket	32	4	12.5%
tls_construct_ctos_status_request	49	16	32.65%
tls_construct_ctos_early_data	122	23	18.85%
tls_construct_ctos_padding	37	19	51.35%
tls_construct_ctos_psk	115	14	12.17%
tls_parse_stoc_renegotiate	39	21	53.84%
tls_parse_stoc_sct	39	13	33.33%
tls_parse_stoc_alpn	64	19	29.68%
custom_ext_parse	32	10	31.25%
custom_ext_add	64	9	14.06%
ossl_statem_client_read_transition	151	19	12.58%
ossl_statem_client_write_transition	107	13	12.14%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	13	15.66%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	125	63	50.4%
tls_process_server_certificate	77	21	27.27%
set_client_ciphersuite	49	26	53.06%
ssl3_do_write	50	20	40.0%
tls_setup_handshake	78	23	29.48%
tls1_alert_code	74	20	27.02%
tls12_sigalg_allowed	46	20	43.47%
ssl_srp_ctx_init_intern	58	27	46.55%
fuzz_handle_transfer(fuzz_data*)	79	32	40.50%
on_resp_header	59	23	38.98%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_debug	44	3	6.818%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cw_out_do_write	35	16	45.71%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_out_ptr_flush	35	16	45.71%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cw_out_cb_write	33	17	51.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cw_pause_write	51	21	41.17%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_getformdata	91	44	48.35%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
http_target	85	45	52.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
on_header	136	66	48.52%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
add_last_chunk	40	10	25.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_xfer_buf_borrow	37	19	51.35%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
state_performing	96	32	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
cw_download_write	83	27	32.53%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_in_rewind	47	16	34.04%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_sendrecv	58	22	37.93%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
Curl_retry_request	41	12	29.26%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer']
urlset_clear	45	15	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc', 'fuzz_url', 'curl_fuzzer']
Curl_auth_decode_digest_http_message	113	43	38.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
auth_create_digest_http_message	189	94	49.73%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	12	13.04%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	57	26	45.61%
nghttp2_session_on_request_headers_received	60	16	26.66%
nghttp2_session_update_local_settings	72	38	52.77%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	213	111	52.11%
session_prep_frame	254	129	50.78%
SSL_CTX_use_certificate_file	44	16	36.36%
rtsp_filter_rtp	139	71	51.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
pkcs12load	92	18	19.56%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	26	43.33%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	81	19	23.45%
ldap_get_option	268	22	8.208%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	63	48.83%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	65	36.93%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
ftp_state_ul_setup	58	27	46.55%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
bnrand	61	25	40.98%
generate_key	95	46	48.42%
dh_new_intern	49	22	44.89%
EC_GROUP_new_from_params	180	26	14.44%
ossl_ec_wNAF_mul	258	25	9.689%
ossl_ec_GFp_nistp384_points_mul	148	69	46.62%
ossl_ec_GFp_nistp521_points_mul	153	69	45.09%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	82	34	41.46%
ec_gen	45	24	53.33%
ec_gen_set_group_from_params	65	27	41.53%
Curl_auth_create_digest_md5_message	110	27	24.54%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
engineload	49	11	22.44%
imap_state_capability_resp	53	19	35.84%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
OPENSSL_DIR_read	31	17	54.83%
file_set_ctx_params	50	9	18.0%
file_set_ctx_params_decoder	50	16	32.0%
Curl_multi_xfer_ulbuf_borrow	38	20	52.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

curl_osslq.c

Target file: /src/curl/lib/vquic/curl_osslq.c
Target functions: cf_osslq_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_osslq_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_osslq_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

libssh.c

Target file: /src/curl/lib/vssh/libssh.c
Target functions: myssh_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target myssh_connect */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_6;
  myssh_connect(new_var5, unknown_6);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/lib/vssh/libssh2.c	[]	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/lib/curl_get_line.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/lib/md4.c	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/lib/select.h	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/tests/libtest/lib1900.c	[]	[]
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/lib/http_ntlm.c	[]	[]
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/lib/vauth/vauth.c	[]	[]
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/lib/uint-hash.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_share.h	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/tests/unit/unit2605.c	[]	[]
/src/curl/lib/curlx/multibyte.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/lib/cf-socket.c	[]	[]
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curlx/fopen.h	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/lib/idn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/oauth2.c	[]	[]
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/sha256.c	[]	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/lib/curl_rtmp.c	[]	[]
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/lib/multi_ntfy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/strcase.h	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-socket.h	[]	[]
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/tests/unit/unit1636.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/libtest/cli_ftp_upload.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/toolx/tool_time.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/tunit/tool1622.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/strequal.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/lib/vauth/gsasl.c	[]	[]
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/rand.h	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/lib/file.c	[]	[]
/src/curl/lib/hostip4.c	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/libtest/lib766.c	[]	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/lib/psl.h	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/src/tool_cfgable.h	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/lib/smtp.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/ftp.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/lib/strerror.c	[]	[]
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/tests/libtest/lib1920.c	[]	[]
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/lib/connect.h	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/lib/parsedate.c	[]	[]
/src/curl/lib/system_win32.c	[]	[]
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/lib/curl_sasl.c	[]	[]
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/socketpair.c	[]	[]
/src/curl/lib/hmac.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/lib/strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/lib/curlx/nonblock.c	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/lib/multi_ntfy.h	[]	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/lib/curlx/strerr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/lib/curl_fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/asyn-ares.c	[]	[]
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/lib/hostip6.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/lib/curlx/base64.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/lib/vssh/libssh.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_help.c	[]	[]
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/lib/if2ip.h	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/lib/url.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/lib/amigaos.c	[]	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/lib/vauth/cleartext.c	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/http_proxy.h	[]	[]
/src/curl/lib/http_negotiate.c	[]	[]
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/lib/http2.c	[]	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/inet_ntop.c	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/tests/libtest/lib1902.c	[]	[]
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/lib/vauth/cram.c	[]	[]
/src/curl/docs/examples/log_failed_transfers.c	[]	[]
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/lib/strcase.c	[]	[]
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_url', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/lib/mime.h	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/lib/curl_sspi.c	[]	[]
/src/curl/lib/pingpong.c	[]	[]
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/lib/vquic/curl_osslq.c	[]	[]
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_strdup.c	[]	[]
/src/curl/lib/vquic/vquic.c	[]	[]
/src/curl/lib/amigaos.h	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/lib/gopher.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/noproxy.c	[]	[]
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/lib/curlx/binmode.h	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/lib/curl_setup_once.h	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/lib/ratelimit.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/packages/OS400/curlcl.c	[]	[]
/src/curl/lib/bufref.h	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/tests/unit/unit3216.c	[]	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/lib/setopt.h	[]	[]
/src/curl/lib/socketpair.h	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hostip.h	[]	[]
/src/curl/lib/curlx/inet_pton.h	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/threaded.c	[]	[]
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curlx/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/sws.c	[]	[]
/src/curl/lib/curl_share.c	[]	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/lib/curl_threads.c	[]	[]
/src/curl/lib/url.h	[]	[]
/src/curl/tests/libtest/lib1582.c	[]	[]
/src/curl/lib/curlx/strcopy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/version.c	[]	[]
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/src/tool_operate.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/docs/examples/htmltitle.cpp	['curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/src/tool_bname.c	[]	[]
/src/curl/packages/OS400/ccsidcurl.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/packages/vms/curl_crtl_init.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/lib/cf-https-connect.c	[]	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/docs/examples/usercertinmem.c	[]	[]
/src/curl/lib/vssh/vssh.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/packages/OS400/os400sys.c	[]	[]
/src/curl/lib/cookie.h	[]	[]
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/tests/libtest/lib751.c	[]	[]

Directories in report

Directory
/src/curl/lib/vquic/
/src/curl_fuzzer/
/src/curl/tests/libtest/
/src/curl/lib/
/src/curl/include/curl/
/src/curl/packages/OS400/
/src/curl/tests/tunit/
/src/curl/tests/server/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/docs/examples/
/src/curl/packages/vms/
/src/curl/lib/curlx/
/src/curl/src/toolx/
/src/curl/lib/vtls/
/src/curl/scripts/
/src/curl/lib/vssh/
/src/curl/CMake/
/src/curl/src/
/src/curl/tests/unit/
/src/curl/lib/vauth/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:26 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:138 ['int', 'void*', 'size_t'] ssize_t [] do_tftp in /src/curl/tests/server/tftpd.c:888 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:688 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:307 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/curl_ngtcp2.c:438 ['void*', 'uint32_t', 'void*', 'size_t'] void []