High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 14.00% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 15.02% of cyclomatic complexity.

Fuzzers reach 19.24% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1009 / 5243

Cyclomatic complexity statically reachable by fuzzers

4418 / 29403

Runtime code coverage of functions

1925 / 5243

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	225	65.4%
gold	[1:9]	2	0.58%
yellow	[10:29]	2	0.58%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	115	33.4%
All colors	344	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	276	curl_url_cleanup	call site: 00276	hostname_check
30	109	formatf	call site: 00109	out_double
28	246	Curl_urldecode	call site: 00246	checkurl
13	220	curlx_dyn_addn	call site: 00220	curl_maprintf
12	68	dollarstring	call site: 00068	dollarstring
12	154	curl_url_set	call site: 00154	curl_url_set
12	204	dyn_nappend	call site: 00204	curl_easy_escape
11	17	free_urlhandle	call site: 00017	curlx_safefree
9	168	urlget_url	call site: 00168	curlx_dyn_addf
9	323	ipv6_parse	call site: 00323	inet_pton6
8	98	out_number	call site: 00098	OUTCHAR
6	41	Curl_get_scheme	call site: 00041	set_url_port

Runtime coverage analysis

Covered functions

70

Functions that are reachable but not covered

90

Reachable functions

148

Percentage of reachable functions covered

39.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	53
curl/lib/protocol.c	4
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	30
curl/lib/curlx/dynbuf.c	14
curl/lib/curlx/snprintf.c	3
curl/tests/libtest/lib1560.c	9
curl/lib/escape.c	13
curl/lib/curlx/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2432	87.7%
gold	[1:9]	3	0.10%
yellow	[10:29]	56	2.01%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	282	10.1%
All colors	2773	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
655	1299	curlx_dyn_add	call site: 01299	Curl_async_shutdown
232	1957	curlx_dyn_reset	call site: 01957	Curl_req_done
223	564	LLVMFuzzerTestOneInput	call site: 00564	fuzz_handle_transfer
212	350	FormAdd	call site: 00350	free_chain
128	1084	curlx_strcopy	call site: 01084	Curl_cshutdn_terminate
105	2642	Curl_close	call site: 02642	curl_multi_perform
77	1005	Curl_pgrs_now	call site: 01005	disconnect
72	2260	Curl_close	call site: 02260	curl_multi_cleanup
69	935	sigpipe_ignore	call site: 00935	cpool_discard_conn
69	2190	Curl_netrc_cleanup	call site: 02190	Curl_conn_terminate
51	849	Curl_llist_insert_next	call site: 00849	Curl_async_thrdd_multi_init
44	2434	Curl_fopen	call site: 02434	get_netscape_format

Runtime coverage analysis

Covered functions

1629

Functions that are reachable but not covered

1038

Reachable functions

1207

Percentage of reachable functions covered

14.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	22
curl/lib/mprintf.c	30
curl/lib/curlx/strparse.c	4
curl/lib/curlx/snprintf.c	3
curl/lib/url.c	57
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/bufref.c	6
curl/lib/request.c	35
curl/lib/getinfo.c	3
curl/lib/netrc.c	2
curl/lib/setopt.c	2
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/slist.c	8
curl/lib/mime.c	18
curl/lib/rand.c	14
curl/lib/curlx/timeval.c	7
curl/lib/curlx/strdup.c	3
curl/lib/formdata.c	26
curl/lib/strequal.c	2
curl/lib/multi.c	154
curl/lib/dnscache.c	2
curl/lib/multi_ntfy.c	6
curl/lib/uint-bset.c	8
curl/lib/multi_ev.c	48
curl/lib/uint-table.c	10
curl/lib/uint-spbset.c	8
curl/lib/cshutdn.c	55
curl/lib/conncache.c	38
curl/lib/vtls/vtls_scache.c	8
curl/lib/socketpair.c	29
curl/lib/curlx/nonblock.c	5
curl/lib/cf-socket.c	1
curl/lib/select.c	25
curl/lib/curlx/wait.c	5
curl/lib/hostip.c	5
curl/lib/asyn-thrdd.c	13
curl/lib/thrdqueue.c	24
curl/lib/thrdpool.c	29
curl/lib/llist.c	7
curl/lib/curl_threads.c	7
curl/lib/sigpipe.h	4
curl/lib/connect.c	12
curl/lib/progress.c	17
curl/lib/splay.c	3
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/strcopy.c	2
curl/lib/curlx/winapi.c	2
curl/lib/cfilters.c	23
curl/lib/content_encoding.c	4
curl/tests/unit/unit2600.c	5
curl/lib/transfer.c	16
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/ratelimit.c	5
curl/lib/http.c	6
curl/lib/bufq.c	18
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/lib/cw-out.c	32
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/ws.c	30
curl/lib/curlx/warnless.c	2
curltool_progress.c	11
curl/lib/curl_trc.c	8
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	4
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	2
curl/lib/asyn-base.c	5
curl/lib/asyn-ares.c	4
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/doh.c	9
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	20
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	19
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/curl_share.c	19

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	979	48.1%
gold	[1:9]	27	1.32%
yellow	[10:29]	12	0.59%
greenyellow	[30:49]	11	0.54%
lawngreen	50+	1003	49.3%
All colors	2032	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
67	1052	mev_sh_entry_get	call site: 01052	mev_sh_entry_add
37	620	curl_free	call site: 00620	curl_mvsnprintf
28	127	Curl_conn_cf_cntrl	call site: 00127	ws_enc_add_pending
24	1200	cshutdn_run_once	call site: 01200	disconnect
24	1940	Curl_close	call site: 01940	share_unlink
20	1542	Curl_pollfds_init	call site: 01542	Curl_cshutdn_add_pollfds
20	1785	randit	call site: 01785	curl_maprintf
19	446	out_string	call site: 00446	out_double
19	474	curlx_strcopy	call site: 00474	timebuf
19	559	xfer_send	call site: 00559	trc_print_ids
18	1522	cshutdn_perform	call site: 01522	Curl_cshutdn_terminate
18	1574	Curl_poll	call site: 01574	our_select

Runtime coverage analysis

Covered functions

6004

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	16
curl/lib/sigpipe.h	4
curl/lib/url.c	44
curl/lib/multi.c	120
curl/lib/hostip.c	3
curl/lib/cw-out.c	32
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/bufq.c	18
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	16
curl/lib/ratelimit.c	5
curl/lib/progress.c	17
curl/lib/curlx/timeval.c	7
curl/lib/cfilters.c	23
curl/lib/ws.c	30
curl/lib/curlx/warnless.c	3
curl/lib/curlx/strparse.c	4
curl/lib/connect.c	12
curl/lib/conncache.c	37
curl/lib/hash.c	17
curl/lib/llist.c	7
curltool_progress.c	11
curl/lib/mprintf.c	30
curl/lib/curlx/snprintf.c	3
curl/lib/curlx/strcopy.c	2
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/multi_ev.c	47
curl/lib/uint-spbset.c	8
curl/lib/request.c	34
curl/lib/curl_trc.c	8
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/lib/select.c	25
curl/tests/unit/unit2600.c	5
curl/lib/http.c	6
curl/lib/cshutdn.c	52
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/winapi.c	2
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/docs/examples/hiperfifo.c	3
curl/lib/asyn-thrdd.c	7
curl/lib/thrdqueue.c	15
curl/lib/thrdpool.c	19
curl/lib/curl_threads.c	5
curl/lib/curlx/wait.c	5
curl/lib/dnscache.c	1
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	6
curl/lib/multi_ntfy.c	3
curl/lib/bufref.c	3
curl/lib/asyn-base.c	5
curl/lib/asyn-ares.c	4
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/doh.c	9
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	20
curl/lib/rand.c	14
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	19
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/curl_share.c	19
curl/lib/mime.c	8

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	239	48.4%
gold	[1:9]	3	0.60%
yellow	[10:29]	7	1.41%
greenyellow	[30:49]	3	0.60%
lawngreen	50+	241	48.8%
All colors	493	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
16	0	EP	call site: 00000	fuzz_handle_bufq
14	372	urlget_format	call site: 00372	checkurl
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
12	416	curl_url_set	call site: 00416	hostname_check
11	240	curl_mvsnprintf	call site: 00240	curl_msnprintf
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	226	out_string	call site: 00226	out_double
10	466	Curl_bufq_skip	call site: 00466	Curl_bufq_write
9	435	ipv6_parse	call site: 00435	inet_pton6
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
8	407	curlx_dyn_add	call site: 00407	curlx_dyn_ptr
8	453	curl_url_set	call site: 00453	curl_url_set

Runtime coverage analysis

Covered functions

6004

Functions that are reachable but not covered

24

Reachable functions

59

Percentage of reachable functions covered

59.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	53
curl/lib/protocol.c	4
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	30
curl/lib/curlx/dynbuf.c	14
curl/lib/curlx/snprintf.c	3
curl/lib/escape.c	13
curl/lib/curlx/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	33	0	78	25	34	1638	0	7660	3414
cf_quiche_connect	/src/curl/lib/vquic/curl_quiche.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	68	16	24	613	0	2135	1315
ftp_pp_statemachine	/src/curl/lib/ftp.c	2	['struct Curl_easy*', 'struct connectdata*']	43	0	198	68	66	1045	0	3677	1183

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1737 / 5243

Cyclomatic complexity statically reachable by fuzzers

10330 / 29403

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'formatf', 'Curl_urldecode', 'curlx_dyn_addn', 'dollarstring', 'curl_url_set', 'dyn_nappend', 'free_urlhandle', 'urlget_url', 'ipv6_parse']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curlx_dyn_add', 'curlx_dyn_reset', 'LLVMFuzzerTestOneInput', 'FormAdd', 'curlx_strcopy', 'Curl_close', 'Curl_pgrs_now', 'sigpipe_ignore', 'Curl_netrc_cleanup']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['mev_sh_entry_get', 'curl_free', 'Curl_conn_cf_cntrl', 'cshutdn_run_once', 'Curl_close', 'Curl_pollfds_init', 'randit', 'out_string', 'curlx_strcopy', 'xfer_send']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['urlget_format', 'bufq_slurpn', 'curl_url_set', 'curl_mvsnprintf', 'Curl_bufq_read', 'out_string', 'Curl_bufq_skip', 'ipv6_parse', 'chunk_peek_at']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
curl_url_set	172	58	33.72%	['fuzz_url', '/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
OPENSSL_cpuid_setup	52	16	30.76%
altsvc_add	50	15	30.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
replace_existing	64	9	14.06%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_fopen	55	16	29.09%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
global_init	52	23	44.23%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
FormAdd	237	66	27.84%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
FormAddCheck	54	29	53.70%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_hsts_save	48	26	54.16%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
setopt_slist	52	16	30.76%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
setopt_pointers	56	27	48.21%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
setopt_func	115	25	21.73%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
_dopr	321	124	38.62%
doapr_outch	36	12	33.33%
fmtstr	53	29	54.71%
OpenSSL_version	35	7	20.0%
DSO_load	43	18	41.86%
ENGINE_ctrl_cmd_string	59	28	47.45%
int_ctrl_helper	48	22	45.83%
dynamic_ctrl	72	34	47.22%
dynamic_load	70	18	25.71%
engine_add_dynamic_id	40	6	15.0%
ossl_engine_table_select	76	13	17.10%
EVP_EncryptUpdate	43	22	51.16%
evp_cipher_init_internal	263	62	23.57%
EVP_RAND_CTX_new	40	21	52.5%
CRYPTO_aligned_alloc	37	14	37.83%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	25	34.24%
ossl_method_store_cache_set	53	29	54.71%
ossl_provider_new	74	32	43.24%
ossl_provider_query_operation	37	10	27.02%
ossl_cipher_generic_get_params	52	21	40.38%
ossl_cipher_generic_block_update	111	25	22.52%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_common_get_ctx_params	34	10	29.41%
cipher_generic_get_ctx_params_decoder	88	30	34.09%
ossl_prov_drbg_instantiate	97	48	49.48%
ossl_prov_drbg_generate	73	40	54.79%
ossl_drbg_get_ctx_params	36	15	41.66%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
drbg_ctr_get_ctx_params_decoder	260	77	29.61%
seed_src_get_ctx_params_decoder	50	23	46.0%
ossl_pool_acquire_entropy	62	23	37.09%
cf_socket_send	52	21	40.38%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_socket_ctx_init	35	19	54.28%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_conn_connect	86	43	50.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_cpool_check_limits	78	14	17.94%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_cshutdn_setfds	31	3	9.677%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
cshutdn_terminate_all	38	14	36.84%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
cw_pause_flush	36	7	19.44%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_doh_take_result	62	33	53.22%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts	36	15	41.66%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
hsts_pull	35	4	11.42%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_multi_pollset	92	30	32.60%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_update_timer	39	7	17.94%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
multi_xfers_add	35	14	40.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
multi_adjust_pollset	37	15	40.54%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
state_do	99	31	31.31%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
multi_handle_timeout	41	20	48.78%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
mev_assess	35	5	14.28%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_parsenetrc	39	8	20.51%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
netrc_get_token	44	12	27.27%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
pgrsupdate	40	10	25.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
time2str	41	6	14.63%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
req_flush	46	9	19.56%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_pollset_change	63	29	46.03%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_url_strerror	72	21	29.16%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
tftp_translate_code	41	7	17.07%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_find_or_create_conn	115	56	48.69%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
parse_connect_to_slist	124	26	20.96%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
parse_connect_to_string	42	22	52.38%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
parse_connect_to_host_port	62	29	46.77%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
url_match_conn	40	6	15.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_match_connect_config	31	12	38.70%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_init_method	42	21	50.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
client_cert	131	34	25.95%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_init_session_and_alpns	78	22	28.20%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_connect	68	34	50.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_ssl_find_peer_by_key	50	18	36.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	67	11.47%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ossl_i2c_ASN1_BIT_STRING	54	24	44.44%
ASN1_mbstring_ncopy	149	62	41.61%
a2d_ASN1_OBJECT	125	67	53.6%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	52	27	51.92%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	33	8	24.24%
buffer_write	58	14	24.13%
buffer_ctrl	168	52	30.95%
BIO_gets	40	21	52.5%
file_ctrl	105	39	37.14%
mem_ctrl	94	48	51.06%
int_bn_mod_inverse	177	82	46.32%
BN_cmp	41	22	53.65%
bn_mul_fixed_top	92	49	53.26%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	36	18	50.0%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	48	20	41.66%
ossl_ec_group_new_ex	39	20	51.28%
EC_GROUP_copy	88	42	47.72%
EC_GROUP_set_generator	41	20	48.78%
ossl_ec_GFp_simple_oct2point	78	41	52.56%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	36	15	41.66%
OSSL_DECODER_from_bio	59	19	32.20%
ossl_decoder_ctx_setup_for_pkey	82	44	53.65%
collect_decoder_keymgmt	49	24	48.97%
ossl_decoder_ctx_for_pkey_dup	74	40	54.05%
EVP_DigestUpdate	31	11	35.48%
EVP_DigestFinal_ex	43	20	46.51%
EVP_DigestFinalXOF	39	15	38.46%
evp_md_init_internal	152	57	37.5%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	76	29	38.15%
gen_init	52	20	38.46%
EVP_PKEY_CTX_set_params	38	14	36.84%
OBJ_create	38	18	47.36%
OBJ_add_sigid	46	18	39.13%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	51	21	41.17%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	73	49.32%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	53	8	15.09%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	10	25.64%
rsa_new_intern	53	25	47.16%
X509_load_crl_file	54	28	51.85%
by_file_ctrl_ex	32	16	50.0%
ossl_x509v3_cache_extensions	193	100	51.81%
X509_STORE_new	36	13	36.11%
x509_sig_info_init	61	33	54.09%
ec_get_ecm_params	42	8	19.04%
ecx_get_params_decoder	132	67	50.75%
ecx_gen_set_params	43	19	44.18%
ecx_gen_set_params_decoder	40	16	40.0%
ecx_gen	58	26	44.82%
ml_kem_get_params	62	20	32.25%
ml_kem_get_params_decoder	160	63	39.37%
ml_kem_export	71	36	50.70%
export_sub_cb	34	14	41.17%
ml_kem_import_export_decoder	35	17	48.57%
tls_get_more_records	286	113	39.51%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	104	45	43.26%
tls_post_encryption_processing_default	48	18	37.5%
tls_retry_write_records	59	28	47.45%
tls_new_record_layer	37	19	51.35%
ssl3_write_bytes	133	73	54.88%
ssl3_read_bytes	297	133	44.78%
ssl3_ctrl	343	25	7.288%
ssl3_ctx_ctrl	210	34	16.19%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	106	39	36.79%
ossl_ctrl_internal	97	12	12.37%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	168	90	53.57%
ossl_ssl_get_error	73	36	49.31%
ssl_do_config	65	21	32.30%
use_certificate_chain_file	97	32	32.98%
final_server_name	68	19	27.94%
tls_construct_ctos_session_ticket	31	4	12.90%
tls_construct_ctos_status_request	49	5	10.20%
tls_construct_ctos_early_data	122	23	18.85%
tls_construct_ctos_padding	37	17	45.94%
tls_construct_ctos_psk	117	14	11.96%
tls_parse_stoc_renegotiate	41	21	51.21%
tls_parse_stoc_sct	41	15	36.58%
tls_parse_stoc_alpn	63	19	30.15%
custom_ext_parse	31	10	32.25%
custom_ext_add	59	9	15.25%
ossl_statem_client_read_transition	150	19	12.66%
ossl_statem_client_write_transition	107	13	12.14%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	13	15.66%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	124	62	50.0%
tls_process_server_certificate	78	21	26.92%
set_client_ciphersuite	49	26	53.06%
ssl3_do_write	50	20	40.0%
tls_setup_handshake	80	23	28.74%
tls1_alert_code	74	20	27.02%
gid_cb	174	68	39.08%
tls12_sigalg_allowed	46	20	43.47%
ssl_srp_ctx_init_intern	38	15	39.47%
on_resp_header	59	23	38.98%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_debug	44	3	6.818%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
cw_out_do_write	35	16	45.71%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_out_cb_write	34	18	52.94%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
cw_pause_write	51	21	41.17%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_getformdata	91	44	48.35%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_http_auth_act	67	35	52.23%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_compareheader	34	9	26.47%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
http_target	85	46	54.11%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
on_header	139	66	47.48%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
add_last_chunk	40	10	25.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_multi_xfer_buf_borrow	37	20	54.05%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
state_performing	96	43	44.79%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
rlimit_tune_steps	39	5	12.82%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
cr_in_rewind	47	16	34.04%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_sendrecv	58	26	44.82%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_retry_request	41	14	34.14%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
urlset_clear	45	15	33.33%	['fuzz_url', '/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer']
Curl_auth_decode_digest_http_message	113	55	48.67%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
auth_create_digest_http_message	204	100	49.01%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	12	13.04%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	57	26	45.61%
nghttp2_session_on_request_headers_received	60	16	26.66%
nghttp2_session_update_local_settings	72	36	50.0%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	213	111	52.11%
session_prep_frame	254	129	50.78%
rtsp_filter_rtp	149	71	47.65%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	26	43.33%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	81	19	23.45%
ldap_get_option	268	22	8.208%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	63	48.83%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	65	36.93%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
ftp_port_bind_socket	57	27	47.36%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ftp_state_ul_setup	58	27	46.55%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
ftp_state_mdtm_resp	83	38	45.78%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
bnrand	61	25	40.98%
generate_key	94	45	47.87%
dh_new_intern	49	22	44.89%
EC_GROUP_new_from_params	181	26	14.36%
ossl_ec_wNAF_mul	254	25	9.842%
ossl_ec_GFp_nistp384_points_mul	142	66	46.47%
ossl_ec_GFp_nistp521_points_mul	147	66	44.89%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	82	34	41.46%
ec_gen_set_group_from_params	65	27	41.53%
Curl_auth_create_digest_md5_message	120	30	25.0%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
engineload	49	12	24.48%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
pkcs12load	92	25	27.17%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
imap_state_capability_resp	48	18	37.5%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']
file_set_ctx_params	50	9	18.0%
file_set_ctx_params_decoder	50	16	32.0%
Curl_multi_xfer_ulbuf_borrow	38	20	52.63%	['/src/curl_fuzzer/fuzz_bufq.cc', '/src/curl_fuzzer/fuzz_fnmatch.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

curl_quiche.c

Target file: /src/curl/lib/vquic/curl_quiche.c
Target functions: cf_quiche_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_quiche_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_quiche_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

ftp.c

Target file: /src/curl/lib/ftp.c
Target functions: ftp_pp_statemachine

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target ftp_pp_statemachine */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  structconnectdata* new_var6 = calloc(sizeof(structconnectdata), 1);
  ftp_pp_statemachine(new_var5, new_var6);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/lib/http_ntlm.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/lib/vauth/oauth2.c	[]	[]
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/lib/file.c	[]	[]
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/lib/vauth/vauth.c	[]	[]
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/lib/gopher.c	[]	[]
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/lib/multi_ntfy.h	[]	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/projects/vms/report_openssl_version.c	[]	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/lib/curlx/inet_pton.h	[]	[]
/src/curl/docs/examples/htmltitle.cpp	['curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/unit/unit1667.c	[]	[]
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/doh.h	[]	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/lib/thrdqueue.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit3216.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/tests/unit/unit1636.c	[]	[]
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/tests/libtest/lib1920.c	[]	[]
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/lib/strerror.c	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/lib/hostip.h	[]	[]
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/dllmain.c	[]	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/socketpair.c	['curl_fuzzer']	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/lib/vauth/cram.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/if2ip.h	[]	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/lib/sha256.c	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/tests/unit/unit3219.c	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/lib/cf-dns.c	[]	[]
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/lib/ratelimit.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/snprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/docs/examples/log_failed_transfers.c	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/lib/http_proxy.h	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/lib/cookie.h	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/lib/rand.h	[]	[]
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/tests/libtest/cli_ftp_upload.c	[]	[]
/src/curl/lib/vssh/ssh.h	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/lib/curl_sspi.c	[]	[]
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/src/toolx/tool_time.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/lib/amigaos.h	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/lib/hostip6.c	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib1902.c	[]	[]
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/lib/curlx/inet_ntop.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_url', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/lib/curlx/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/strcase.h	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/lib/http_negotiate.c	[]	[]
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/lib/psl.h	[]	[]
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/lib/asyn-ares.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/tests/libtest/lib1965.c	[]	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/lib/curlx/multibyte.c	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/tests/tunit/tool1623.c	[]	[]
/src/curl/lib/vquic/vquic.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_help.c	[]	[]
/src/curl/src/tool_operate.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/lib/parsedate.c	[]	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/lib/curlx/strcopy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/lib/hmac.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1626.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/projects/vms/curl_crtl_init.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/strequal.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/tests/unit/unit2605.c	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/mime.h	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/lib/curl_fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/url.h	[]	[]
/src/curl/tests/libtest/lib766.c	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_sasl.c	[]	[]
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/tests/tunit/tool1622.c	[]	[]
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/tests/unit/unit1674.c	[]	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/lib/smtp.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/lib/curl_get_line.c	[]	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/lib/amigaos.c	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/lib/curlx/base64.c	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/lib/cf-https-connect.c	[]	[]
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/request.h	[]	[]
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/tests/libtest/lib751.c	[]	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/lib/vssh/libssh.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/projects/OS400/curlcl.c	[]	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/lib/setopt.h	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/tests/unit/unit3300.c	[]	[]
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/tests/unit/unit1666.c	[]	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/lib/version.c	[]	[]
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/lib/connect.h	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/lib/vauth/cleartext.c	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/lib/http2.c	[]	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/system_win32.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_share.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-hash.c	[]	[]
/src/curl/tests/unit/unit3301.c	[]	[]
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/lib/vssh/vssh.c	[]	[]
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/projects/OS400/ccsidcurl.c	[]	[]
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/lib/curlx/nonblock.c	['curl_fuzzer']	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit1627.c	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/tests/unit/unit1625.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/lib/curlx/fopen.h	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/cmake/test.cpp	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1587.c	[]	[]
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/select.h	[]	[]
/src/curl/lib/bufref.h	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/tests/unit/unit1668.c	[]	[]
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/lib/vssh/libssh2.c	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/tests/libtest/lib1582.c	[]	[]
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/lib/strcase.c	[]	[]
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/protocol.c	['fuzz_url', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curlx/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/lib/noproxy.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/lib/vauth/gsasl.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/lib/url.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/tests/unit/unit1669.c	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/lib/thrdpool.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/lib/curlx/strerr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curlx/basename.h	[]	[]
/src/curl/lib/multi_ntfy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/docs/examples/threaded.c	[]	[]
/src/curl/lib/pingpong.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/lib/curl_share.h	[]	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/md4.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/lib/idn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/curlx/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/projects/OS400/os400sys.c	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/lib/curl_threads.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/lib/curlx/strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/lib/dnscache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hostip4.c	[]	[]
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/tests/libtest/lib1900.c	[]	[]

Directories in report

Directory
/src/curl/src/
/src/curl/tests/unit/
/src/curl/lib/curlx/
/src/curl/projects/vms/
/src/curl/tests/libtest/
/src/curl/lib/vssh/
/src/curl/include/curl/
/src/curl/tests/server/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/tests/tunit/
/src/curl/CMake/
/src/curl/scripts/
/src/curl/lib/vtls/
/src/curl/tests/cmake/
/src/curl/docs/examples/
/src/curl/lib/vauth/
/src/curl/lib/
/src/curl/projects/OS400/
/src/curl_fuzzer/
/src/curl/src/toolx/
/src/curl/lib/vquic/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:26 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:138 ['int', 'void*', 'size_t'] ssize_t [] do_tftp in /src/curl/tests/server/tftpd.c:887 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:658 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:266 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/curl_ngtcp2.c:439 ['void*', 'uint32_t', 'void*', 'size_t'] void []