High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 11.40% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 13.93% of cyclomatic complexity.

Fuzzers reach 18.49% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1051 / 5684

Cyclomatic complexity statically reachable by fuzzers

4398 / 31553

Runtime code coverage of functions

2100 / 5684

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_bufq

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	468	88.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	63	11.8%
All colors	531	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
386	113	Curl_bufq_pass	call site: 00113	append
14	2	LLVMFuzzerTestOneInput	call site: 00002	allocate_template_buffer
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	504	Curl_bufq_skip	call site: 00504	Curl_bufq_write
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
7	49	chunk_peek	call site: 00049	Curl_bufq_peek_at
5	520	chunk_append	call site: 00520	Curl_bufq_free
4	27	Curl_bufq_init	call site: 00027	Curl_bufq_is_empty
4	35	Curl_bufq_len	call site: 00035	Curl_bufq_peek
2	24	bufq_init	call site: 00024	FV_PRINTF
2	32	Curl_bufq_is_empty	call site: 00032	Curl_bufq_len

Runtime coverage analysis

Covered functions

45

Functions that are reachable but not covered

24

Reachable functions

59

Percentage of reachable functions covered

59.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	60
curl/lib/curlx/strdup.c	5
curl/lib/protocol.c	4
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	33
curl/lib/curlx/snprintf.c	3
curl/lib/curlx/dynbuf.c	14
curl/lib/escape.c	13
curl/lib/idn.c	2
curl/lib/curlx/inet_pton.c	7
curl/lib/curlx/inet_ntop.c	7
curl/lib/curlx/strcopy.c	2

Fuzzer: fuzz_doh

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	14	18.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	1.31%
lawngreen	50+	61	80.2%
All colors	76	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	23	doh_store_aaaa	call site: 00023	doh_store_https
3	65	LLVMFuzzerTestOneInput	call site: 00065	doh_req_encode
2	2	LLVMFuzzerTestOneInput	call site: 00002	de_init
1	9	curlx_dyn_init	call site: 00009	doh_resp_decode
1	49	dyn_nappend	call site: 00049	curlx_dyn_free
1	59	doh_resp_decode	call site: 00059	de_cleanup
1	61	de_cleanup	call site: 00061	curlx_safefree
1	74	doh_req_encode	call site: 00074

Runtime coverage analysis

Covered functions

27

Functions that are reachable but not covered

18

Reachable functions

35

Percentage of reachable functions covered

48.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_doh.cc	10
curl/lib/doh.c	20
curl/lib/curlx/dynbuf.c	6
curl/lib/curlx/strdup.c	2

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	244	63.8%
gold	[1:9]	1	0.26%
yellow	[10:29]	12	3.14%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	125	32.7%
All colors	382	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
48	294	curl_url_cleanup	call site: 00294	url_sethost
37	255	Curl_urldecode	call site: 00255	checkurl
18	111	formatf	call site: 00111	out_double
18	132	curl_mvsnprintf	call site: 00132	curl_url_get
15	227	curlx_dyn_addn	call site: 00227	curl_maprintf
12	211	dyn_nappend	call site: 00211	curl_easy_escape
11	19	free_urlhandle	call site: 00019	curlx_strzero
8	100	out_number	call site: 00100	OUTCHAR
8	152	urlget_url	call site: 00152	file_url
8	176	curlx_dyn_ptr	call site: 00176	curlx_dyn_addf
6	43	Curl_get_scheme	call site: 00043	set_url_port
6	59	curl_url_set	call site: 00059	curl_url_set

Runtime coverage analysis

Covered functions

82

Functions that are reachable but not covered

92

Reachable functions

161

Percentage of reachable functions covered

42.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	60
curl/lib/curlx/strdup.c	5
curl/lib/protocol.c	4
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/tests/libtest/lib1560.c	9
curl/lib/mprintf.c	33
curl/lib/curlx/snprintf.c	3
curl/lib/curlx/dynbuf.c	14
curl/lib/escape.c	13
curl/lib/idn.c	2
curl/lib/curlx/inet_pton.c	7
curl/lib/curlx/inet_ntop.c	7
curl/lib/curlx/strcopy.c	2

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2387	87.0%
gold	[1:9]	2	0.07%
yellow	[10:29]	57	2.07%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	295	10.7%
All colors	2741	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
310	1297	curlx_dyn_add	call site: 01297	url_query
249	1608	curlx_memzero	call site: 01608	Curl_async_shutdown
242	1860	curlx_dyn_reset	call site: 01860	Curl_req_done
227	570	LLVMFuzzerTestOneInput	call site: 00570	fuzz_handle_transfer
212	356	formadd	call site: 00356	free_chain
139	1101	curlx_strcopy	call site: 01101	Curl_cshutdn_terminate
124	2171	Curl_close	call site: 02171	curl_multi_cleanup
112	2602	Curl_close	call site: 02602	curl_multi_perform
83	1016	Curl_pgrs_now	call site: 01016	disconnect
69	946	sigpipe_ignore	call site: 00946	cpool_discard_conn
66	2104	Curl_netrc_cleanup	call site: 02104	Curl_conn_terminate
52	859	Curl_llist_insert_next	call site: 00859	Curl_async_thrdd_multi_init

Runtime coverage analysis

Covered functions

1422

Functions that are reachable but not covered

1088

Reachable functions

1228

Percentage of reachable functions covered

11.4%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	22
curl/lib/mprintf.c	33
curl/lib/curlx/strparse.c	4
curl/lib/curlx/snprintf.c	3
curl/lib/url.c	58
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/bufref.c	6
curl/lib/request.c	35
curl/lib/getinfo.c	3
curl/lib/netrc.c	3
curl/lib/setopt.c	2
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/slist.c	8
curl/lib/mime.c	18
curl/lib/rand.c	13
curl/lib/curlx/winapi.c	4
curl/lib/curlx/timeval.c	7
curl/lib/curlx/strdup.c	5
curl/lib/formdata.c	26
curl/lib/strequal.c	2
curl/lib/multi.c	158
curl/lib/dnscache.c	2
curl/lib/multi_ntfy.c	6
curl/lib/uint-bset.c	8
curl/lib/multi_ev.c	50
curl/lib/uint-table.c	10
curl/lib/uint-spbset.c	11
curl/lib/cshutdn.c	55
curl/lib/conncache.c	38
curl/lib/vtls/vtls_scache.c	10
curl/lib/socketpair.c	29
curl/lib/curlx/nonblock.c	5
curl/lib/cf-socket.c	1
curl/lib/select.c	24
curl/lib/curlx/wait.c	5
curl/lib/hostip.c	4
curl/lib/asyn-thrdd.c	16
curl/lib/thrdqueue.c	28
curl/lib/thrdpool.c	35
curl/lib/llist.c	7
curl/lib/curl_threads.c	7
curl/lib/sigpipe.h	4
curl/lib/connect.c	7
curl/lib/progress.c	21
curl/lib/splay.c	3
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/strcopy.c	2
curl/lib/cfilters.c	23
curl/tests/unit/unit2606.c	1
curl/lib/transfer.c	16
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/ratelimit.c	6
curl/lib/http.c	6
curl/lib/bufq.c	11
curl/lib/peer.c	2
curl/lib/creds.c	3
curl/lib/vtls/vtls_config.c	2
curl/lib/cw-out.c	27
curl/lib/sendf.c	15
curl/lib/content_encoding.c	5
curl/lib/ws.c	2
curltool_progress.c	11
curl/lib/curl_trc.c	15
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	5
curl/tests/libtest/cli_ev_download.c	1
curl/lib/psl.c	2
curl/lib/asyn-base.c	5
curl/lib/asyn-ares.c	4
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/doh.c	10
curl/lib/urlapi.c	3
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	20
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	19
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	4
curl/lib/curl_share.c	20

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	991	49.7%
gold	[1:9]	106	5.32%
yellow	[10:29]	10	0.50%
greenyellow	[30:49]	9	0.45%
lawngreen	50+	876	43.9%
All colors	1992	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
77	920	mev_sh_entry_get	call site: 00920	mev_sh_entry_xfer_add
46	1341	Curl_thrdq_trace	call site: 01341	Curl_thrdpool_trace
32	0	EP	call site: 00000	init
28	461	curl_free	call site: 00461	curl_mvsnprintf
25	1893	Curl_close	call site: 01893	share_unlink
20	250	out_string	call site: 00250	out_double
20	279	curlx_strcopy	call site: 00279	timebuf
20	1495	Curl_pollfds_init	call site: 01495	Curl_cshutdn_add_pollfds
20	1749	randit	call site: 01749	curl_maprintf
19	1123	cshutdn_run_conn_handler	call site: 01123	logmsg
18	394	xfer_send	call site: 00394	trc_print_ids
18	1223	Curl_ssl_conn_config_cleanup	call site: 01223	curlx_safefree

Runtime coverage analysis

Covered functions

9908

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	16
curl/lib/sigpipe.h	4
curl/lib/url.c	44
curl/lib/multi.c	123
curl/lib/hostip.c	2
curl/lib/cw-out.c	27
curl/lib/sendf.c	15
curl/lib/content_encoding.c	5
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	16
curl/lib/ratelimit.c	6
curl/lib/progress.c	21
curl/lib/curlx/timeval.c	7
curl/lib/cfilters.c	23
curl/lib/ws.c	2
curltool_progress.c	11
curl/lib/mprintf.c	33
curl/lib/curlx/strparse.c	4
curl/lib/curlx/snprintf.c	3
curl/lib/curlx/strcopy.c	2
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/multi_ev.c	49
curl/lib/uint-spbset.c	11
curl/lib/request.c	34
curl/lib/bufq.c	11
curl/lib/curl_trc.c	15
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	5
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/connect.c	7
curl/lib/llist.c	7
curl/lib/splay.c	3
curl/lib/conncache.c	37
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	2
curl/lib/select.c	24
curl/tests/unit/unit2606.c	1
curl/lib/http.c	6
curl/lib/hash.c	17
curl/lib/ftplistparser.c	5
curl/lib/cshutdn.c	52
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	13
curltoolx/tool_time.c	3
curl/lib/curlx/strerr.c	13
curl/lib/curlx/winapi.c	4
curl/lib/peer.c	2
curl/lib/creds.c	3
curl/lib/curlx/strdup.c	2
curl/lib/vtls/vtls_config.c	2
curl/tests/libtest/cli_ev_download.c	1
curl/lib/asyn-thrdd.c	10
curl/lib/thrdqueue.c	19
curl/lib/thrdpool.c	23
curl/lib/curl_threads.c	5
curl/lib/curlx/wait.c	5
curl/lib/dnscache.c	1
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	7
curl/lib/multi_ntfy.c	3
curl/lib/bufref.c	3
curl/lib/asyn-base.c	5
curl/lib/asyn-ares.c	4
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/doh.c	10
curl/lib/urlapi.c	3
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	20
curl/lib/rand.c	13
curl/lib/altsvc.c	15
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	19
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	4
curl/lib/curl_share.c	20
curl/lib/mime.c	8
curl/lib/curlx/warnless.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	34	0	78	25	34	1699	0	7663	3527
cf_h3_proxy_connect	/src/curl/lib/vquic/cf-ngtcp2-proxy.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	18	4	5	666	0	2129	1399
ftp_pp_statemachine	/src/curl/lib/ftp.c	2	['struct Curl_easy*', 'struct connectdata*']	44	0	197	68	66	1042	0	3559	1293

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1888 / 5684

Cyclomatic complexity statically reachable by fuzzers

10617 / 31553

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['Curl_bufq_pass', 'LLVMFuzzerTestOneInput', 'bufq_slurpn', 'Curl_bufq_read', 'Curl_bufq_skip', 'chunk_peek_at', 'chunk_peek', 'chunk_append', 'Curl_bufq_init', 'Curl_bufq_len']

curl_fuzzer/fuzz_doh.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['doh_store_aaaa', 'LLVMFuzzerTestOneInput', 'curlx_dyn_init', 'dyn_nappend', 'doh_resp_decode', 'de_cleanup', 'doh_req_encode']

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'Curl_urldecode', 'formatf', 'curl_mvsnprintf', 'curlx_dyn_addn', 'dyn_nappend', 'free_urlhandle', 'out_number', 'urlget_url', 'curlx_dyn_ptr']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curlx_dyn_add', 'curlx_memzero', 'curlx_dyn_reset', 'LLVMFuzzerTestOneInput', 'formadd', 'curlx_strcopy', 'Curl_close', 'Curl_pgrs_now', 'sigpipe_ignore']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['mev_sh_entry_get', 'Curl_thrdq_trace', 'curl_free', 'Curl_close', 'out_string', 'curlx_strcopy', 'Curl_pollfds_init', 'randit', 'cshutdn_run_conn_handler']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
OPENSSL_cpuid_setup	52	16	30.76%
parse_flags	116	57	49.13%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parse_conversion	91	44	48.35%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_url_set	95	19	20.0%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
altsvc_add	50	15	30.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_eapi_enter	88	29	32.95%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
replace_existing	66	9	13.63%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_fopen	55	16	29.09%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
global_init	52	23	44.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
formadd	237	66	27.84%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
formadd_check	54	29	53.70%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts_save	48	26	54.16%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_slist	52	16	30.76%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_pointers	41	20	48.78%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
setopt_func	115	25	21.73%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
OpenSSL_version	34	6	17.64%
DSO_load	43	18	41.86%
EVP_EncryptUpdate	41	22	53.65%
evp_cipher_init_internal	123	41	33.33%
EVP_RAND_CTX_new	40	21	52.5%
OPENSSL_init_crypto	86	46	53.48%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	25	34.24%
ossl_provider_new	74	32	43.24%
ossl_provider_query_operation	37	10	27.02%
internal_find	55	17	30.90%
ossl_cipher_generic_get_params	52	21	40.38%
ossl_cipher_generic_block_update	111	25	22.52%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_common_get_ctx_params	34	10	29.41%
cipher_generic_get_ctx_params_decoder	88	30	34.09%
ossl_prov_drbg_instantiate	97	48	49.48%
ossl_prov_drbg_generate	73	40	54.79%
ossl_drbg_get_ctx_params	36	15	41.66%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
drbg_ctr_get_ctx_params_decoder	260	77	29.61%
seed_src_get_ctx_params_decoder	50	23	46.0%
ossl_pool_acquire_entropy	62	23	37.09%
Curl_mapi_enter	51	25	49.01%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
async_thrdd_check_done	49	26	53.06%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
on_resp_header_udp	74	26	35.13%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_socket_send	51	21	41.17%
cf_socket_recv	44	24	54.54%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_socket_query	53	27	50.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_cpool_check_limits	78	14	17.94%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_conn_connect	98	48	48.97%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_cshutdn_setfds	31	3	9.677%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cshutdn_terminate_all	38	14	36.84%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_looks_like_ipv6	33	18	54.54%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_debug	44	3	6.818%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_out_do_write	35	16	45.71%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_doh_take_result	75	39	52.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
hsts_check	36	15	41.66%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
hsts_pull	35	4	11.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_http_auth_act	68	26	38.23%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_compareheader	36	9	25.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_multi_pollset	92	35	38.04%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_update_timer	40	7	17.5%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
multi_xfers_add	35	14	40.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
multi_adjust_pollset	36	14	38.88%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
multistate_do	100	37	37.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
mev_assess	35	5	14.28%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_netrc_scan	48	14	29.16%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
netrc_scan	68	33	48.52%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
netrc_lexer_next	61	18	29.50%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_peer_from_connect_to	53	28	52.83%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
time2str	41	6	14.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
pgrsupdate	42	10	23.80%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
req_flush	46	9	19.56%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_pollset_change	63	29	46.03%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
curl_url_strerror	74	23	31.08%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
tftp_translate_code	41	7	17.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
url_find_or_create_conn	113	54	47.78%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_set_conn_peer	107	20	18.69%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
parse_connect_to_string	42	20	47.61%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
url_match_conn	43	7	16.27%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_init_method	42	21	50.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
client_cert	131	34	25.95%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_connect	69	35	50.72%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ssl_cf_connect	48	25	52.08%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cf_ssl_find_peer_by_key	50	18	36.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	67	11.47%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ASN1_mbstring_ncopy	168	62	36.90%
a2d_ASN1_OBJECT	126	68	53.96%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	52	27	51.92%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	33	8	24.24%
buffer_write	58	26	44.82%
buffer_ctrl	170	56	32.94%
BIO_gets	40	21	52.5%
file_ctrl	110	40	36.36%
mem_ctrl	98	48	48.97%
int_bn_mod_inverse	177	83	46.89%
bn_mul_fixed_top	86	43	50.0%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	36	18	50.0%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	31	15	48.38%
ossl_ec_group_new_ex	39	20	51.28%
EC_GROUP_copy	88	46	52.27%
EC_GROUP_set_generator	41	20	48.78%
ossl_ec_GFp_simple_oct2point	78	41	52.56%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	36	18	50.0%
OSSL_DECODER_from_bio	59	19	32.20%
ossl_decoder_ctx_setup_for_pkey	82	44	53.65%
collect_decoder_keymgmt	50	24	48.0%
ossl_decoder_ctx_for_pkey_dup	75	41	54.66%
evp_md_init_internal	68	37	54.41%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	56	30	53.57%
EVP_PKEY_CTX_set_params	38	14	36.84%
CRYPTO_free_ex_data	42	21	50.0%
wpacket_intern_close	51	22	43.13%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	73	49.32%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	53	8	15.09%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	16	41.02%
rsa_new_intern	34	17	50.0%
X509_load_crl_file	54	28	51.85%
by_file_ctrl_ex	32	16	50.0%
X509_STORE_new	47	20	42.55%
x509_sig_info_init	61	33	54.09%
ec_get_ecm_params	42	8	19.04%
ecx_gen_set_params	43	22	51.16%
ecx_gen	58	31	53.44%
ecx_get_params_decoder	132	67	50.75%
ecx_gen_set_params_decoder	40	16	40.0%
ml_kem_get_params	62	23	37.09%
ml_kem_export	71	36	50.70%
ml_kem_get_params_decoder	160	69	43.12%
export_sub_cb	34	14	41.17%
tls_get_more_records	256	101	39.45%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	104	45	43.26%
tls_post_encryption_processing_default	48	18	37.5%
tls_retry_write_records	75	28	37.33%
ssl3_write_bytes	133	73	54.88%
ssl3_read_bytes	297	133	44.78%
ssl3_ctrl	343	29	8.454%
ssl3_ctx_ctrl	210	13	6.190%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	106	39	36.79%
ossl_ctrl_internal	97	12	12.37%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	168	90	53.57%
ossl_ssl_get_error	72	35	48.61%
ssl_do_config	72	24	33.33%
use_certificate_chain_file	97	32	32.98%
final_server_name	68	19	27.94%
tls_construct_ctos_renegotiate	33	17	51.51%
tls_construct_ctos_server_name	36	18	50.0%
tls_construct_ctos_session_ticket	34	4	11.76%
tls_construct_ctos_status_request	52	19	36.53%
tls_construct_ctos_use_srtp	31	6	19.35%
tls_construct_ctos_early_data	138	26	18.84%
tls_construct_ctos_psk	185	14	7.567%
tls_parse_stoc_renegotiate	41	21	51.21%
tls_parse_stoc_sct	41	15	36.58%
tls_parse_stoc_alpn	63	19	30.15%
tls_construct_ctos_ech	181	14	7.734%
custom_ext_parse	31	10	32.25%
custom_ext_add	114	9	7.894%
ossl_statem_client_read_transition	150	19	12.66%
ossl_statem_client_write_transition	107	13	12.14%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	13	15.66%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	149	14	9.395%
tls_process_server_hello	321	150	46.72%
tls_process_server_certificate	78	21	26.92%
tls_construct_client_hello_aux	147	76	51.70%
set_client_ciphersuite	49	26	53.06%
ssl3_do_write	50	20	40.0%
tls_setup_handshake	80	23	28.74%
tls1_alert_code	78	20	25.64%
tls12_sigalg_allowed	46	20	43.47%
ssl_srp_ctx_init_intern	38	15	39.47%
on_resp_header	59	23	38.98%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_pause_write	48	18	37.5%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cw_pause_flush	39	8	20.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_getformdata	91	44	48.35%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
http_target	97	47	48.45%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
on_header	139	66	47.48%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
add_last_chunk	43	10	23.25%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
multistate_performing	96	44	45.83%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
rlimit_tune_steps	42	5	11.90%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
cr_in_rewind	49	16	32.65%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_sendrecv	58	26	44.82%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_retry_request	41	14	34.14%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
urlset_clear	46	16	34.78%	['fuzz_url', 'curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_auth_decode_digest_http_message	113	55	48.67%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
auth_create_digest_http_message	207	109	52.65%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	16	17.39%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	59	28	47.45%
nghttp2_session_on_request_headers_received	60	16	26.66%
nghttp2_session_update_local_settings	72	38	52.77%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	215	111	51.62%
session_prep_frame	258	133	51.55%
ws_cw_flush	37	17	45.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
google::protobuf::DescriptorBuilder::AddSymbol(absl::lts_20240116::string_view,voidconst*,absl::lts_20240116::string_view,google::protobuf::Messageconst&,google::protobuf::Symbol)	44	8	18.18%
google::protobuf::DescriptorBuilder::BuildFile(google::protobuf::FileDescriptorProtoconst&)	54	22	40.74%
google::protobuf::DescriptorBuilder::BuildFileImpl(google::protobuf::FileDescriptorProtoconst&,google::protobuf::internal::FlatAllocator&)	283	153	54.06%
google::protobuf::DescriptorBuilder::BuildMessage(google::protobuf::DescriptorProtoconst&,google::protobuf::Descriptorconst*,google::protobuf::Descriptor*,google::protobuf::internal::FlatAllocator&)	142	77	54.22%
google::protobuf::DescriptorBuilder::BuildFieldOrExtension(google::protobuf::FieldDescriptorProtoconst&,google::protobuf::Descriptor*,google::protobuf::FieldDescriptor*,bool,google::protobuf::internal::FlatAllocator&)	240	102	42.5%
google::protobuf::DescriptorBuilder::BuildEnum(google::protobuf::EnumDescriptorProtoconst&,google::protobuf::Descriptorconst*,google::protobuf::EnumDescriptor*,google::protobuf::internal::FlatAllocator&)	81	43	53.08%
google::protobuf::DescriptorBuilder::BuildEnumValue(google::protobuf::EnumValueDescriptorProtoconst&,google::protobuf::EnumDescriptorconst*,google::protobuf::EnumValueDescriptor*,google::protobuf::internal::FlatAllocator&)	42	21	50.0%
google::protobuf::DescriptorBuilder::CrossLinkField(google::protobuf::FieldDescriptor*,google::protobuf::FieldDescriptorProtoconst&)	210	63	30.0%
google::protobuf::DescriptorPool::DeferredValidation::Validate()	40	2	5.0%
google::protobuf::FileDescriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::FileDescriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	15	41.66%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::FileDescriptor::Protoconst&,google::protobuf::FileDescriptor*,google::protobuf::FileDescriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	17	54.83%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::Descriptor::Protoconst&,google::protobuf::Descriptor*,google::protobuf::Descriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	15	48.38%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::OneofDescriptor::Protoconst&,google::protobuf::OneofDescriptor*,google::protobuf::OneofDescriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	15	48.38%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::Descriptor::ExtensionRange::Protoconst&,google::protobuf::Descriptor::ExtensionRange*,google::protobuf::Descriptor::ExtensionRange::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	15	48.38%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::EnumDescriptor::Protoconst&,google::protobuf::EnumDescriptor*,google::protobuf::EnumDescriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	15	48.38%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::EnumValueDescriptor::Protoconst&,google::protobuf::EnumValueDescriptor*,google::protobuf::EnumValueDescriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	15	48.38%
voidgoogle::protobuf::DescriptorBuilder::ResolveFeaturesImpl (google::protobuf::Edition,google::protobuf::FieldDescriptor::Protoconst&,google::protobuf::FieldDescriptor*,google::protobuf::FieldDescriptor::OptionsType*,google::protobuf::internal::FlatAllocator&,google::protobuf::DescriptorPool::ErrorCollector::ErrorLocation,bool)	31	17	54.83%
google::protobuf::Descriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::Descriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	4	11.11%
google::protobuf::(anonymousnamespace)::FlatAllocatorImpl ,std::__1::allocator >,google::protobuf::SourceCodeInfo,google::protobuf::FileDescriptorTables,google::protobuf::FeatureSet,google::protobuf::MessageOptions,google::protobuf::FieldOptions,google::protobuf::EnumOptions,google::protobuf::EnumValueOptions,google::protobuf::ExtensionRangeOptions,google::protobuf::OneofOptions,google::protobuf::ServiceOptions,google::protobuf::MethodOptions,google::protobuf::FileOptions>::AllocateFieldNames(absl::lts_20240116::string_view,absl::lts_20240116::string_view,std::__1::basic_string ,std::__1::allocator >const*)	40	15	37.5%
google::protobuf::FieldDescriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::FieldDescriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	15	41.66%
google::protobuf::Descriptor::ExtensionRange::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::Descriptor::ExtensionRange::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	4	11.11%
google::protobuf::OneofDescriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::OneofDescriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	4	11.11%
google::protobuf::EnumDescriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::EnumDescriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	4	11.11%
google::protobuf::EnumValueDescriptor::OptionsTypeconst*google::protobuf::DescriptorBuilder::AllocateOptionsImpl (absl::lts_20240116::string_view,absl::lts_20240116::string_view,google::protobuf::EnumValueDescriptor::Protoconst&,absl::lts_20240116::Span ,absl::lts_20240116::string_view,google::protobuf::internal::FlatAllocator&)	36	4	11.11%
google::protobuf::FileDescriptorProto::Clear()	35	17	48.57%
google::protobuf::FileOptions::Clear()	60	14	23.33%
google::protobuf::FileOptions::_InternalSerialize(unsignedchar*,google::protobuf::io::EpsCopyOutputStream*)const	134	71	52.98%
google::protobuf::FieldOptions::Clear()	32	15	46.87%
google::protobuf::internal::ExtensionSet::InternalExtensionMergeFrom(google::protobuf::MessageLiteconst*,int,google::protobuf::internal::ExtensionSet::Extensionconst&,google::protobuf::Arena*)	116	43	37.06%
google::protobuf::internal::ExtensionSet::Extension::ByteSize(int)const	125	17	13.60%
google::protobuf::internal::ExtensionSet::Extension::Free()	36	13	36.11%
google::protobuf::internal::ExtensionSet::Extension::InternalSerializeFieldWithCachedSizesToArray(google::protobuf::MessageLiteconst*,google::protobuf::internal::ExtensionSetconst*,int,unsignedchar*,google::protobuf::io::EpsCopyOutputStream*)const	142	16	11.26%
charconst*google::protobuf::internal::ExtensionSet::ParseFieldWithExtensionInfo (int,bool,google::protobuf::internal::ExtensionInfoconst&,google::protobuf::internal::InternalMetadata*,charconst*,google::protobuf::internal::ParseContext*)	149	15	10.06%
google::protobuf::Reflection::FieldSize(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	42	14	33.33%
google::protobuf::Reflection::HasFieldSingular(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	52	5	9.615%
google::protobuf::internal::TcParser::ChangeOneof(google::protobuf::internal::TcParseTableBaseconst*,google::protobuf::internal::TcParseTableBase::FieldEntryconst&,unsignedint,google::protobuf::internal::ParseContext*,google::protobuf::MessageLite*)	51	10	19.60%
charconst*google::protobuf::internal::TcParser::MpRepeatedVarint (google::protobuf::MessageLite*,charconst*,google::protobuf::internal::ParseContext*,google::protobuf::internal::TcFieldData,google::protobuf::internal::TcParseTableBaseconst*,unsignedlong)	52	19	36.53%
google::protobuf::internal::EpsCopyInputStream::NextBuffer(int,int)	41	11	26.82%
absl::lts_20240116::container_internal::btree_node ,256,false>>::clear_and_delete(absl::lts_20240116::container_internal::btree_node ,256,false>>*,std::__1::allocator *)	41	6	14.63%
absl::lts_20240116::container_internal::btree_node ,256,false>>::clear_and_delete(absl::lts_20240116::container_internal::btree_node ,256,false>>*,std::__1::allocator *)	41	6	14.63%
absl::lts_20240116::container_internal::AssertIsFull(absl::lts_20240116::container_internal::ctrl_tconst*,unsignedchar,unsignedcharconst*,charconst*)	32	2	6.25%
absl::lts_20240116::container_internal::AssertSameContainer(absl::lts_20240116::container_internal::ctrl_tconst*,absl::lts_20240116::container_internal::ctrl_tconst*,voidconst*const&,voidconst*const&,unsignedcharconst*,unsignedcharconst*)	44	2	4.545%
absl::lts_20240116::container_internal::raw_hash_set ,google::protobuf::internal::(anonymousnamespace)::ExtensionHasher,google::protobuf::internal::(anonymousnamespace)::ExtensionEq,std::__1::allocator >::resize(unsignedlong)	40	14	35.0%
absl::lts_20240116::container_internal::raw_hash_set ,absl::lts_20240116::container_internal::StringHash,absl::lts_20240116::container_internal::StringEq,std::__1::allocator >::resize(unsignedlong)	40	14	35.0%
protobuf_mutator::(anonymousnamespace)::PostProcessing::Run(google::protobuf::Message*,int)	49	26	53.06%
rtsp_filter_rtp	149	71	47.65%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	26	43.33%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	81	19	23.45%
ldap_get_option	268	22	8.208%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	63	48.83%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
chkResponseList	85	26	30.58%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	65	36.93%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
bnrand	61	25	40.98%
generate_key	94	45	47.87%
dh_new_intern	31	16	51.61%
EC_GROUP_new_from_params	175	25	14.28%
ossl_ec_wNAF_mul	254	25	9.842%
ossl_ec_GFp_nistp384_points_mul	142	66	46.47%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	82	34	41.46%
dh_gen_set_params_decoder	129	19	14.72%
dh_get_params_decoder	250	69	27.6%
ec_gen_set_group_from_params	65	27	41.53%
sm2_gen	32	15	46.87%
ftp_port_bind_socket	56	27	48.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ftp_state_retr	54	24	44.44%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ftp_state_ul_setup	59	27	45.76%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ftp_state_mdtm_resp	83	38	45.78%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
ossl_ec_GFp_nistp521_points_mul	147	66	44.89%
Curl_sasl_continue	119	63	52.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
Curl_auth_create_digest_md5_message	124	34	27.41%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
pkcs12load	92	18	19.56%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
imap_state_capability_resp	48	18	37.5%	['/src/curl_fuzzer/fuzz_fnmatch.cc']
OPENSSL_DIR_read	31	17	54.83%
file_set_ctx_params	50	9	18.0%
file_set_ctx_params_decoder	50	16	32.0%
Curl_multi_xfer_ulbuf_borrow	37	20	54.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

cf-ngtcp2-proxy.c

Target file: /src/curl/lib/vquic/cf-ngtcp2-proxy.c
Target functions: cf_h3_proxy_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_h3_proxy_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_h3_proxy_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

ftp.c

Target file: /src/curl/lib/ftp.c
Target functions: ftp_pp_statemachine

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target ftp_pp_statemachine */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  structconnectdata* new_var6 = calloc(sizeof(structconnectdata), 1);
  ftp_pp_statemachine(new_var5, new_var6);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/lib/curl_ed25519.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/tests/tunit/tool1720.c	[]	[]
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/tests/libtest/lib1582.c	[]	[]
/src/curl/lib/vquic/cf-ngtcp2.c	[]	[]
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib5004.c	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/lib/sendf.h	[]	[]
/src/curl/tests/libtest/lib1648.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/api.c	[]	[]
/src/curl/lib/curlx/multibyte.c	[]	[]
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/docs/examples/log_failed_transfers.c	[]	[]
/src/curl/lib/bufq.c	['fuzz_bufq', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_bufq', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/tests/unit/unit1667.c	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_operate.c	[]	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/tests/libtest/lib1686.c	[]	[]
/src/curl/lib/http_negotiate.c	[]	[]
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/lib/file.c	[]	[]
/src/curl/tests/libtest/cli_ws_pause.c	[]	[]
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/lib/mprintf.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/lib/hostip6.c	[]	[]
/src/curl/docs/examples/threaded.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/lib/gopher.c	[]	[]
/src/curl/lib/vtls/vtls_config.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/tests/tunit/tool1623.c	[]	[]
/src/curl/lib/vauth/cleartext.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/lib/curl_share.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/bufref.h	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/tests/libtest/lib5000.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/tests/libtest/lib2414.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/tests/unit/unit3219.c	[]	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/tests/libtest/lib766.c	[]	[]
/src/curl/lib/vauth/oauth2.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/lib/idn.c	['fuzz_bufq', 'fuzz_url']	[]
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/tests/unit/unit1961.c	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit3301.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/src/tool_help.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/tests/unit/unit1666.c	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/lib/vssh/libssh2.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_bufq', 'fuzz_doh', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_doh', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http2.c	[]	[]
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/lib/url.h	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/lib/proxy.h	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/lib/cw-pause.c	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/tests/unit/unit3302.c	[]	[]
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/lib/curlx/strparse.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/tests/unit/unit2605.c	[]	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/tests/libtest/lib1902.c	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl_fuzzer/fuzz_bufq.cc	['fuzz_bufq']	['fuzz_bufq']
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/lib/hmac.c	[]	[]
/src/curl/lib/strequal.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer']	['fuzz_url', 'curl_fuzzer']
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/tests/libtest/lib1920.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/lib/socketpair.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/lib/smtp.c	[]	[]
/src/curl/tests/unit/unit3216.c	[]	[]
/src/curl/tests/libtest/lib1900.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/url.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/lib/curl_get_line.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/lib/vauth/gsasl.c	[]	[]
/src/curl/lib/doh.h	[]	[]
/src/curl/tests/unit/unit3300.c	[]	[]
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/tests/unit/unit1669.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/lib/uint-hash.c	[]	[]
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/thrdpool.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1676.c	[]	[]
/src/curl/lib/creds.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/lib/strcase.c	[]	[]
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/tests/libtest/lib2412.c	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1678.c	[]	[]
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/tests/unit/unit1636.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/lib/multi_ntfy.h	[]	[]
/src/curl/lib/multi_ntfy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/lib/curl_threads.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/projects/vms/report_openssl_version.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/tests/unit/unit3304.c	[]	[]
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/tests/libtest/lib1647.c	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl_fuzzer/fuzz_doh.cc	['fuzz_doh']	['fuzz_doh']
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/tests/libtest/lib1965.c	[]	[]
/src/curl/lib/thrdqueue.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/scenario_runner.h	[]	[]
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/lib/curlx/base64.c	[]	[]
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/tests/libtest/lib1589.c	[]	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/lib/cf-recvbuf.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/tests/unit/unit2606.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/lib/connect.h	[]	[]
/src/curl/lib/ratelimit.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/lib/protocol.c	['fuzz_bufq', 'fuzz_url']	['fuzz_url']
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/lib/http_ntlm.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/option_apply.cc	[]	[]
/src/curl/lib/escape.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cookie.h	[]	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/tests/libtest/lib1921.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/lib/peer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vssh/libssh.c	[]	[]
/src/curl/projects/OS400/ccsidcurl.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/tests/cmake/test.cpp	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/lib/vquic/cf-ngtcp2-cmn.h	[]	[]
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_bufq', 'fuzz_url']	[]
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/tests/libtest/lib2504.c	[]	[]
/src/curl/lib/hostip4.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/tests/libtest/lib1649.c	[]	[]
/src/curl/projects/vms/curl_crtl_init.c	[]	[]
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/lib/vssh/ssh.h	[]	[]
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/lib/setopt.h	[]	[]
/src/curl/lib/vquic/cf-ngtcp2-proxy.c	[]	[]
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/lib/vssh/vssh.c	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/lib/vquic/cf-capsule.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/tests/unit/unit3303.c	[]	[]
/src/curl/lib/curlx/strdup.c	['fuzz_bufq', 'fuzz_doh', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/amigaos.h	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/lib/curlx/basename.h	[]	[]
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/projects/OS400/curlcl.c	[]	[]
/src/curl/lib/hostip.h	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_httpsig.c	[]	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/lib/curlx/fopen.h	[]	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/projects/OS400/os400sys.c	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/libtest/lib1588.c	[]	[]
/src/curl/lib/vquic/cf-ngtcp2-cmn.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/mock_server_base.h	[]	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/lib/vauth/vauth.c	[]	[]
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/lib/curl_fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/proto_fuzzer/scenario_runner.cc	[]	[]
/src/curl/docs/examples/htmltitle.cpp	['fuzz_bufq']	[]
/src/curl/lib/doh.c	['fuzz_doh', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_doh', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/fuzzer_main.cc	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/ws_accept_key.h	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/lib/curlx/strcopy.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/tests/unit/unit3400.c	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/lib/curlx/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/libtest/cli_ev_download.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/tests/unit/unit1627.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/tests/libtest/lib2505.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/lib/vauth/cram.c	[]	[]
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/tests/unit/unit1674.c	[]	[]
/src/curl/lib/parsedate.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl_fuzzer/standalone_fuzz_target_runner.cc	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/mock_server_base.cc	[]	[]
/src/curl/lib/select.h	[]	[]
/src/curl/lib/system_win32.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/sha256.c	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/lib/curlx/snprintf.c	['fuzz_bufq', 'fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curlx/warnless.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/lib/vquic/capsule.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/tests/unit/unit1625.c	[]	[]
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib1587.c	[]	[]
/src/curl/tests/unit/unit3306.c	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/lib/vquic/vquic.c	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/lib/curl_sspi.c	[]	[]
/src/curl/lib/curl_share.h	[]	[]
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/tests/unit/unit1668.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/websocket_mock_server.cc	[]	[]
/src/curl/lib/asyn-ares.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/tests/unit/unit2600.c	[]	[]
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/lib/curl_sasl.c	[]	[]
/src/curl/lib/api.h	[]	[]
/src/curl/lib/if2ip.h	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/lib/cf-dns.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/lib/mime.h	[]	[]
/src/curl/lib/psl.h	[]	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/tests/unit/unit1626.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/lib/curlx/strerr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/tests/libtest/lib751.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/lib/dnscache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/lib/vquic/cf-quiche.c	[]	[]
/src/curl/lib/request.h	[]	[]
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl_fuzzer/proto_fuzzer/mock_server.h	[]	[]
/src/curl_fuzzer/proto_fuzzer/ws_frame.cc	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/tests/unit/unit2413.c	[]	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/lib/curlx/inet_ntop.c	['fuzz_bufq', 'fuzz_url']	['fuzz_url']
/src/curl_fuzzer/proto_fuzzer/mock_server.cc	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/tests/libtest/lib1967.c	[]	[]
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/tests/libtest/lib1922.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/lib/rand.h	[]	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/tests/libtest/cli_ftp_upload.c	[]	[]
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/lib/curlx/nonblock.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/toolx/tool_time.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib2506.c	[]	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/proxy.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/lib/md4.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1675.c	[]	[]
/src/curl/lib/cf-https-connect.c	[]	[]
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/lib/creds.h	[]	[]
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/lib/pingpong.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/lib/strerror.c	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/lib/amigaos.c	[]	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/tests/tunit/tool1622.c	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/lib/version.c	[]	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/lib/vtls/vtls.c	[]	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/lib/cf-setup.c	[]	[]
/src/curl/tests/unit/unit3227.c	[]	[]
/src/curl/lib/strcase.h	[]	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]

Directories in report

Directory
/src/curl/lib/vssh/
/src/curl/src/
/src/curl/lib/curlx/
/src/curl/projects/vms/
/src/curl/CMake/
/src/curl_fuzzer/
/src/curl/lib/vauth/
/src/curl/projects/OS400/
/src/curl/lib/
/src/curl_fuzzer/proto_fuzzer/
/src/curl/lib/vtls/
/src/curl/tests/unit/
/src/curl/docs/examples/
/src/curl/scripts/
/src/curl/tests/cmake/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/tests/tunit/
/src/curl/include/curl/
/src/curl/tests/server/
/src/curl/tests/libtest/
/src/curl/lib/vquic/
/src/curl/src/toolx/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:26 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:137 ['int', 'void*', 'size_t'] ssize_t [] do_tftp in /src/curl/tests/server/tftpd.c:887 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:641 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:261 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/cf-ngtcp2-cmn.c:175 ['void*', 'uint32_t', 'void*', 'size_t'] void []