High level conclusions

Fuzzers reach 76.99% code coverage.

Fuzzers reach 24.56% of cyclomatic complexity.

Fuzzers reach 32.17% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

712 / 2213

Cyclomatic complexity statically reachable by fuzzers

3658 / 14890

Runtime code coverage of functions

1704 / 2213

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: dng_camera_profile_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	75	10.0%
gold	[1:9]	33	4.41%
yellow	[10:29]	3	0.40%
greenyellow	[30:49]	11	1.47%
lawngreen	50+	626	83.6%
All colors	748	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
14	93	dng_stream::Flush()	call site: 00093	dng_pthread_now
5	178	dng_stream::Get_real64()	call site: 00178	abort
5	585	dng_stream::Put_uint32(unsigned int)	call site: 00585
4	110	ThrowEndOfFile(char const*)	call site: 00110
4	580	tiff_tag::Size() const	call site: 00580
2	24	dng_file_stream::dng_file_stream(char const*, bool, unsigned int)	call site: 00024
2	89	dng_stream::Get_uint16()	call site: 00089
2	160	dng_stream::TagValue_uint32(unsigned int)	call site: 00160	abort
2	237	SafeUint32Add(unsigned int, unsigned int)	call site: 00237	abort
2	265	dng_string::Set_UTF8(char const*)	call site: 00265
2	394	operator*(dng_matrix const&, dng_vector const&)	call site: 00394
2	481	dng_ref_counted_block::EnsureWriteable()	call site: 00481

Runtime coverage analysis

Covered functions

249

Functions that are reachable but not covered

55

Reachable functions

522

Percentage of reachable functions covered

89.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/dng_camera_profile_fuzzer.cpp	1
/src/dng_sdk/source/./dng_file_stream.cpp	2
/src/dng_sdk/source/./dng_stream.cpp	22
/src/dng_sdk/source/./dng_memory.cpp	5
/src/dng_sdk/source/./dng_exceptions.h	7
/src/dng_sdk/source/./dng_exceptions.cpp	1
/src/dng_sdk/source/./dng_memory.h	5
/src/dng_sdk/source/./dng_camera_profile.cpp	16
/src/dng_sdk/source/./dng_string.cpp	16
/src/dng_sdk/source/./dng_matrix.cpp	8
/src/dng_sdk/source/./dng_fingerprint.cpp	9
/src/dng_sdk/source/./dng_hue_sat_map.cpp	5
/src/dng_sdk/source/./dng_ref_counted_block.cpp	5
/src/dng_sdk/source/./dng_rational.h	3
/src/dng_sdk/source/./dng_tone_curve.cpp	4
/src/dng_sdk/source/./dng_tone_curve.h	1
/src/dng_sdk/source/./dng_mutex.cpp	9
/src/dng_sdk/source/./dng_ref_counted_block.h	6
/src/dng_sdk/source/./dng_matrix.h	14
/src/dng_sdk/source/./dng_auto_ptr.h	3
/src/dng_sdk/source/./dng_shared.cpp	4
/src/dng_sdk/source/./dng_stream.h	11
/src/dng_sdk/source/./dng_bottlenecks.h	2
/src/dng_sdk/source/./dng_abort_sniffer.cpp	3
/src/dng_sdk/source/./dng_abort_sniffer.h	1
/src/dng_sdk/source/./dng_pthread.cpp	1
/src/dng_sdk/source/./dng_utils.h	12
/src/dng_sdk/source/./dng_safe_arithmetic.cpp	10
/src/dng_sdk/source/./dng_tag_types.cpp	1
/src/dng_sdk/source/./dng_parse_utils.cpp	5
/src/dng_sdk/source/./dng_safe_arithmetic.h	1
/src/dng_sdk/source/./dng_camera_profile.h	16
/src/dng_sdk/source/./dng_string.h	1
/src/dng_sdk/source/./dng_fingerprint.h	14
/src/dng_sdk/source/./dng_xy_coord.cpp	3
/src/dng_sdk/source/./dng_xy_coord.h	2
/src/dng_sdk/source/./dng_hue_sat_map.h	8
/src/dng_sdk/source/./dng_point.h	1
/src/dng_sdk/source/./dng_rational.cpp	2
/src/dng_sdk/source/./dng_image_writer.cpp	2
/src/dng_sdk/source/./dng_image_writer.h	10

Fuzzer: dng_parser_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	23	8.71%
gold	[1:9]	6	2.27%
yellow	[10:29]	6	2.27%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	229	86.7%
All colors	264	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
11	33	(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)	call site: 00033	dng_pthread_now
3	24	dng_stream::Flush()	call site: 00024
2	128	AutoPtr ::~AutoPtr()	call site: 00128
2	154	dng_info::dng_info()	call site: 00154
1	7	dng_memory_data::Allocate(unsigned int)	call site: 00007
1	19	dng_memory_data::~dng_memory_data()	call site: 00019	__cxa_begin_catch
1	21	LLVMFuzzerTestOneInput	call site: 00021
1	147	dng_negative::Make(dng_host&)	call site: 00147
1	162	dng_info::Parse(dng_host&, dng_stream&)	call site: 00162

Runtime coverage analysis

Covered functions

768

Functions that are reachable but not covered

29

Reachable functions

232

Percentage of reachable functions covered

87.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/dng_sdk/source/../fuzzer/dng_parser_fuzzer.cpp	1
/src/dng_sdk/source/./dng_host.cpp	4
/src/dng_sdk/source/./dng_memory_stream.cpp	2
/src/dng_sdk/source/./dng_stream.cpp	10
/src/dng_sdk/source/./dng_memory.cpp	5
/src/dng_sdk/source/./dng_exceptions.h	5
/src/dng_sdk/source/./dng_exceptions.cpp	1
/src/dng_sdk/source/./dng_memory.h	2
/src/dng_sdk/source/./dng_bottlenecks.h	1
/src/dng_sdk/source/./dng_abort_sniffer.cpp	3
/src/dng_sdk/source/./dng_abort_sniffer.h	1
/src/dng_sdk/source/./dng_mutex.cpp	7
/src/dng_sdk/source/./dng_pthread.cpp	1
/src/dng_sdk/source/./dng_stream.h	3
/src/dng_sdk/source/./dng_utils.h	4
/src/dng_sdk/source/./dng_negative.cpp	5
/src/dng_sdk/source/./dng_string.cpp	2
/src/dng_sdk/source/./dng_rational.h	3
/src/dng_sdk/source/./dng_point.h	1
/src/dng_sdk/source/./dng_matrix.cpp	2
/src/dng_sdk/source/./dng_xy_coord.h	1
/src/dng_sdk/source/./dng_fingerprint.cpp	1
/src/dng_sdk/source/./dng_auto_ptr.h	32
/src/dng_sdk/source/./dng_orientation.h	1
/src/dng_sdk/source/./dng_opcode_list.cpp	3
/src/dng_sdk/source/./dng_jpeg_image.h	1
/src/dng_sdk/source/./dng_matrix.h	2
/src/dng_sdk/source/./dng_negative.h	1
/src/dng_sdk/source/./dng_info.cpp	5

Fuzzer: dng_stage_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	314	20.4%
gold	[1:9]	7	0.45%
yellow	[10:29]	17	1.10%
greenyellow	[30:49]	10	0.65%
lawngreen	50+	1190	77.3%
All colors	1538	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
39	1333	Invert(dng_matrix const&)	call site: 01333	__cxa_atexit
34	1473	dng_rect::TL() const	call site: 01473
26	1374	runFuzzerWithVariableHost(char*, unsigned int, bool, bool, bool, bool, bool, bool, int, bool)	call site: 01374
19	1216	runFuzzerWithVariableHost(char*, unsigned int, bool, bool, bool, bool, bool, bool, int, bool)	call site: 01216	__cxa_guard_acquire
16	1456	ResampleImage(dng_host&, dng_image const&, dng_image&, dng_rect const&, dng_rect const&, dng_resample_function const&)	call site: 01456
14	160	dng_stream::Flush()	call site: 00160	dng_pthread_now
14	1139	dng_negative::FindNewRawImageDigest(dng_host&) const	call site: 01139
9	1251	operator*(dng_matrix const&, dng_vector const&)	call site: 01251
8	15	dng_host::ValidateSizes()	call site: 00015
6	410	dng_string::operator==(dng_string const&) const	call site: 00410
6	829	dng_memory_block::Buffer_real32()	call site: 00829
6	994	dng_jpeg_image::FindDigest(dng_host&) const	call site: 00994

Runtime coverage analysis

Covered functions

1365

Functions that are reachable but not covered

150

Reachable functions

1052

Percentage of reachable functions covered

85.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/dng_stage_fuzzer.cpp	2
/src/dng_sdk/source/./dng_host.cpp	5
/src/dng_sdk/source/./dng_host.h	12
/src/dng_sdk/source/./dng_utils.h	21
/src/dng_sdk/source/./dng_camera_profile.cpp	2
/src/dng_sdk/source/./dng_string.cpp	10
/src/dng_sdk/source/./dng_memory.cpp	5
/src/dng_sdk/source/./dng_matrix.cpp	15
/src/dng_sdk/source/./dng_fingerprint.cpp	11
/src/dng_sdk/source/./dng_hue_sat_map.cpp	3
/src/dng_sdk/source/./dng_ref_counted_block.cpp	3
/src/dng_sdk/source/./dng_rational.h	3
/src/dng_sdk/source/./dng_tone_curve.cpp	6
/src/dng_sdk/source/./dng_tone_curve.h	1
/src/dng_sdk/source/./dng_mutex.cpp	9
/src/dng_sdk/source/./dng_ref_counted_block.h	3
/src/dng_sdk/source/./dng_matrix.h	12
/src/dng_sdk/source/./dng_auto_ptr.h	85
/src/dng_sdk/source/./dng_camera_profile.h	14
/src/dng_sdk/source/./dng_safe_arithmetic.h	3
/src/dng_sdk/source/./dng_exceptions.h	8
/src/dng_sdk/source/./dng_exceptions.cpp	1
/src/dng_sdk/source/./dng_memory.h	10
/src/dng_sdk/source/./dng_safe_arithmetic.cpp	9
/src/dng_sdk/source/./dng_fingerprint.h	13
/src/dng_sdk/source/./dng_info.cpp	5
/src/dng_sdk/source/./dng_file_stream.cpp	2
/src/dng_sdk/source/./dng_stream.cpp	11
/src/dng_sdk/source/./dng_stream.h	3
/src/dng_sdk/source/./dng_bottlenecks.h	2
/src/dng_sdk/source/./dng_abort_sniffer.cpp	3
/src/dng_sdk/source/./dng_abort_sniffer.h	1
/src/dng_sdk/source/./dng_pthread.cpp	1
/src/dng_sdk/source/./dng_negative.cpp	35
/src/dng_sdk/source/./dng_point.h	4
/src/dng_sdk/source/./dng_xy_coord.h	3
/src/dng_sdk/source/./dng_orientation.h	1
/src/dng_sdk/source/./dng_opcode_list.cpp	6
/src/dng_sdk/source/./dng_jpeg_image.h	4
/src/dng_sdk/source/./dng_negative.h	42
/src/dng_sdk/source/./dng_hue_sat_map.h	3
/src/dng_sdk/source/./dng_rational.cpp	2
/src/dng_sdk/source/./dng_ifd.h	1
/src/dng_sdk/source/./dng_rect.h	9
/src/dng_sdk/source/./dng_opcodes.h	5
/src/dng_sdk/source/./dng_opcode_list.h	4
/src/dng_sdk/source/./dng_image.h	4
/src/dng_sdk/source/./dng_image_writer.cpp	4
/src/dng_sdk/source/./dng_rect.cpp	2
/src/dng_sdk/source/./dng_mosaic_info.h	1
/src/dng_sdk/source/./dng_utils.cpp	4
/src/dng_sdk/source/./dng_area_task.cpp	2
/src/dng_sdk/source/./dng_tile_iterator.cpp	3
/src/dng_sdk/source/./dng_image.cpp	6
/src/dng_sdk/source/./dng_pixel_buffer.cpp	4
/src/dng_sdk/source/./dng_pixel_buffer.h	2
/src/dng_sdk/source/./dng_1d_function.h	2
/src/dng_sdk/source/./dng_1d_table.cpp	5
/src/dng_sdk/source/./dng_1d_function.cpp	2
/src/dng_sdk/source/./dng_misc_opcodes.h	1
/src/dng_sdk/source/./dng_misc_opcodes.cpp	1
/src/dng_sdk/source/./dng_opcodes.cpp	2
/src/dng_sdk/source/./dng_jpeg_image.cpp	7
/src/dng_sdk/source/./dng_ifd.cpp	7
/src/dng_sdk/source/./dng_tag_types.cpp	1
/src/dng_sdk/source/./dng_preview.cpp	2
/src/dng_sdk/source/./dng_render.cpp	5
/src/dng_sdk/source/./dng_render.h	5
/src/dng_sdk/source/./dng_color_space.cpp	5
/src/dng_sdk/source/./dng_xy_coord.cpp	3
/src/dng_sdk/source/./dng_color_space.h	2
/src/dng_sdk/source/./dng_spline.cpp	3
/src/dng_sdk/source/./dng_resample.cpp	8
/src/dng_sdk/source/./dng_resample.h	4
/src/dng_sdk/source/./dng_filter_task.cpp	2

Fuzzer: dng_validate_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	237	12.3%
gold	[1:9]	70	3.65%
yellow	[10:29]	21	1.09%
greenyellow	[30:49]	18	0.93%
lawngreen	50+	1571	81.9%
All colors	1917	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
17	1745	dng_date_time_info::Encode_ISO_8601() const	call site: 01745
14	756	dng_negative::TransparencyMask() const	call site: 00756
11	343	(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)	call site: 00343	dng_pthread_now
9	901	dng_pixel_buffer::SetConstant(dng_rect const&, unsigned int, unsigned int, unsigned int)	call site: 00901
7	1685	dng_render::Render()	call site: 01685
7	1767	dng_time_zone::Encode_ISO_8601() const	call site: 01767	sprintf
6	1286	dng_memory_block::Buffer_real32()	call site: 01286
5	551	dng_timer::~dng_timer()	call site: 00551
5	608	dng_md5_printer::dng_md5_printer()	call site: 00608
5	1008	dng_negative::BuildStage2Image(dng_host&)	call site: 01008
5	1021	dng_negative::BuildStage2Image(dng_host&)	call site: 01021
5	1057	dng_negative::BuildStage3Image(dng_host&, int)	call site: 01057

Runtime coverage analysis

Covered functions

1494

Functions that are reachable but not covered

131

Reachable functions

1139

Percentage of reachable functions covered

88.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/dng_validate_fuzzer.cpp	2
/src/dng_sdk/source/./dng_string.cpp	10
/src/dng_sdk/source/./dng_safe_arithmetic.h	3
/src/dng_sdk/source/./dng_exceptions.h	10
/src/dng_sdk/source/./dng_exceptions.cpp	1
/src/dng_sdk/source/./dng_memory.cpp	5
/src/dng_sdk/source/./dng_memory.h	10
/src/dng_sdk/source/./dng_safe_arithmetic.cpp	13
/src/dng_sdk/source/./dng_color_space.cpp	16
/src/dng_sdk/source/./dng_matrix.cpp	15
/src/dng_sdk/source/./dng_matrix.h	12
/src/dng_sdk/source/./dng_xy_coord.cpp	3
/src/dng_sdk/source/./dng_xy_coord.h	3
/src/dng_sdk/source/./dng_utils.h	21
/src/dng_sdk/source/./dng_color_space.h	7
/src/dng_sdk/source/./dng_file_stream.cpp	2
/src/dng_sdk/source/./dng_stream.cpp	12
/src/dng_sdk/source/./dng_host.cpp	5
/src/dng_sdk/source/./dng_host.h	10
/src/dng_sdk/source/./dng_string.h	1
/src/dng_sdk/source/./dng_auto_ptr.h	85
/src/dng_sdk/source/./dng_info.cpp	5
/src/dng_sdk/source/./dng_stream.h	3
/src/dng_sdk/source/./dng_bottlenecks.h	5
/src/dng_sdk/source/./dng_abort_sniffer.cpp	3
/src/dng_sdk/source/./dng_abort_sniffer.h	1
/src/dng_sdk/source/./dng_mutex.cpp	9
/src/dng_sdk/source/./dng_pthread.cpp	1
/src/dng_sdk/source/./dng_negative.cpp	34
/src/dng_sdk/source/./dng_rational.h	3
/src/dng_sdk/source/./dng_point.h	4
/src/dng_sdk/source/./dng_fingerprint.cpp	10
/src/dng_sdk/source/./dng_orientation.h	1
/src/dng_sdk/source/./dng_opcode_list.cpp	6
/src/dng_sdk/source/./dng_jpeg_image.h	4
/src/dng_sdk/source/./dng_negative.h	38
/src/dng_sdk/source/./dng_utils.cpp	7
/src/dng_sdk/source/./dng_ifd.h	1
/src/dng_sdk/source/./dng_rect.h	10
/src/dng_sdk/source/./dng_fingerprint.h	15
/src/dng_sdk/source/./dng_jpeg_image.cpp	7
/src/dng_sdk/source/./dng_area_task.cpp	2
/src/dng_sdk/source/./dng_image.h	5
/src/dng_sdk/source/./dng_tag_types.cpp	1
/src/dng_sdk/source/./dng_pixel_buffer.cpp	10
/src/dng_sdk/source/./dng_tile_iterator.cpp	4
/src/dng_sdk/source/./dng_image.cpp	8
/src/dng_sdk/source/./dng_rect.cpp	2
/src/dng_sdk/source/./dng_pixel_buffer.h	4
/src/dng_sdk/source/./dng_image_writer.cpp	7
/src/dng_sdk/source/./dng_opcodes.h	5
/src/dng_sdk/source/./dng_opcode_list.h	4
/src/dng_sdk/source/./dng_rational.cpp	1
/src/dng_sdk/source/./dng_mosaic_info.h	1
/src/dng_sdk/source/./dng_1d_function.h	2
/src/dng_sdk/source/./dng_1d_table.cpp	5
/src/dng_sdk/source/./dng_1d_function.cpp	2
/src/dng_sdk/source/./dng_misc_opcodes.h	1
/src/dng_sdk/source/./dng_misc_opcodes.cpp	1
/src/dng_sdk/source/./dng_opcodes.cpp	2
/src/dng_sdk/source/./dng_ifd.cpp	7
/src/dng_sdk/source/./dng_preview.cpp	7
/src/dng_sdk/source/./dng_date_time.cpp	8
/src/dng_sdk/source/./dng_date_time.h	9
/src/dng_sdk/source/./dng_render.cpp	5
/src/dng_sdk/source/./dng_render.h	8
/src/dng_sdk/source/./dng_camera_profile.h	4
/src/dng_sdk/source/./dng_tone_curve.cpp	2
/src/dng_sdk/source/./dng_spline.cpp	3
/src/dng_sdk/source/./dng_resample.cpp	8
/src/dng_sdk/source/./dng_resample.h	4
/src/dng_sdk/source/./dng_filter_task.cpp	2
/src/dng_sdk/source/./dng_memory_stream.cpp	2

Fuzzer: dng_fixed_validate_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	273	14.6%
gold	[1:9]	62	3.32%
yellow	[10:29]	13	0.69%
greenyellow	[30:49]	20	1.07%
lawngreen	50+	1497	80.2%
All colors	1865	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
17	1693	dng_date_time_info::Encode_ISO_8601() const	call site: 01693
14	678	dng_negative::TransparencyMask() const	call site: 00678
13	146	InvertNbyN(dng_matrix const&)	call site: 00146
12	972	Floor_uint32(double)	call site: 00972
11	265	(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)	call site: 00265	dng_pthread_now
9	823	dng_pixel_buffer::SetConstant(dng_rect const&, unsigned int, unsigned int, unsigned int)	call site: 00823
9	1462	dng_render::dng_render(dng_host&, dng_negative const&)	call site: 01462
8	199	dng_host::ValidateSizes()	call site: 00199
7	1633	dng_render::Render()	call site: 01633
7	1715	dng_time_zone::Encode_ISO_8601() const	call site: 01715	sprintf
6	1208	dng_memory_block::Buffer_real32()	call site: 01208
5	473	dng_timer::~dng_timer()	call site: 00473

Runtime coverage analysis

Covered functions

1405

Functions that are reachable but not covered

136

Reachable functions

1115

Percentage of reachable functions covered

87.8%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/dng_fixed_validate_fuzzer.cpp	2
/src/dng_sdk/source/./dng_string.cpp	10
/src/dng_sdk/source/./dng_safe_arithmetic.h	3
/src/dng_sdk/source/./dng_exceptions.h	10
/src/dng_sdk/source/./dng_exceptions.cpp	1
/src/dng_sdk/source/./dng_memory.cpp	5
/src/dng_sdk/source/./dng_memory.h	10
/src/dng_sdk/source/./dng_safe_arithmetic.cpp	13
/src/dng_sdk/source/./dng_color_space.cpp	8
/src/dng_sdk/source/./dng_matrix.cpp	15
/src/dng_sdk/source/./dng_matrix.h	12
/src/dng_sdk/source/./dng_xy_coord.cpp	3
/src/dng_sdk/source/./dng_xy_coord.h	3
/src/dng_sdk/source/./dng_utils.h	21
/src/dng_sdk/source/./dng_color_space.h	3
/src/dng_sdk/source/./dng_file_stream.cpp	2
/src/dng_sdk/source/./dng_stream.cpp	12
/src/dng_sdk/source/./dng_host.cpp	5
/src/dng_sdk/source/./dng_host.h	10
/src/dng_sdk/source/./dng_string.h	1
/src/dng_sdk/source/./dng_auto_ptr.h	85
/src/dng_sdk/source/./dng_info.cpp	5
/src/dng_sdk/source/./dng_stream.h	3
/src/dng_sdk/source/./dng_bottlenecks.h	5
/src/dng_sdk/source/./dng_abort_sniffer.cpp	3
/src/dng_sdk/source/./dng_abort_sniffer.h	1
/src/dng_sdk/source/./dng_mutex.cpp	9
/src/dng_sdk/source/./dng_pthread.cpp	1
/src/dng_sdk/source/./dng_negative.cpp	34
/src/dng_sdk/source/./dng_rational.h	3
/src/dng_sdk/source/./dng_point.h	4
/src/dng_sdk/source/./dng_fingerprint.cpp	10
/src/dng_sdk/source/./dng_orientation.h	1
/src/dng_sdk/source/./dng_opcode_list.cpp	6
/src/dng_sdk/source/./dng_jpeg_image.h	4
/src/dng_sdk/source/./dng_negative.h	38
/src/dng_sdk/source/./dng_utils.cpp	7
/src/dng_sdk/source/./dng_ifd.h	1
/src/dng_sdk/source/./dng_rect.h	10
/src/dng_sdk/source/./dng_fingerprint.h	15
/src/dng_sdk/source/./dng_jpeg_image.cpp	7
/src/dng_sdk/source/./dng_area_task.cpp	2
/src/dng_sdk/source/./dng_image.h	5
/src/dng_sdk/source/./dng_tag_types.cpp	1
/src/dng_sdk/source/./dng_pixel_buffer.cpp	10
/src/dng_sdk/source/./dng_tile_iterator.cpp	4
/src/dng_sdk/source/./dng_image.cpp	8
/src/dng_sdk/source/./dng_rect.cpp	2
/src/dng_sdk/source/./dng_pixel_buffer.h	4
/src/dng_sdk/source/./dng_image_writer.cpp	7
/src/dng_sdk/source/./dng_opcodes.h	5
/src/dng_sdk/source/./dng_opcode_list.h	4
/src/dng_sdk/source/./dng_rational.cpp	1
/src/dng_sdk/source/./dng_mosaic_info.h	1
/src/dng_sdk/source/./dng_1d_function.h	2
/src/dng_sdk/source/./dng_1d_table.cpp	5
/src/dng_sdk/source/./dng_1d_function.cpp	2
/src/dng_sdk/source/./dng_misc_opcodes.h	1
/src/dng_sdk/source/./dng_misc_opcodes.cpp	1
/src/dng_sdk/source/./dng_opcodes.cpp	2
/src/dng_sdk/source/./dng_ifd.cpp	7
/src/dng_sdk/source/./dng_preview.cpp	7
/src/dng_sdk/source/./dng_date_time.cpp	8
/src/dng_sdk/source/./dng_date_time.h	9
/src/dng_sdk/source/./dng_render.cpp	5
/src/dng_sdk/source/./dng_render.h	8
/src/dng_sdk/source/./dng_camera_profile.h	4
/src/dng_sdk/source/./dng_tone_curve.cpp	2
/src/dng_sdk/source/./dng_spline.cpp	3
/src/dng_sdk/source/./dng_resample.cpp	8
/src/dng_sdk/source/./dng_resample.h	4
/src/dng_sdk/source/./dng_filter_task.cpp	2
/src/dng_sdk/source/./dng_memory_stream.cpp	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
dng_image_writer::WriteDNG(dng_host&,dng_stream&,dng_negativeconst&,dng_metadataconst&,dng_preview_listconst*,unsignedint,bool)	/src/dng_sdk/source/./dng_image_writer.cpp	8	['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'int', 'bool']	13	0	4419	965	707	972	0	3485	2403
dng_host::Make_dng_opcode(unsignedint,dng_stream&)	/src/dng_sdk/source/./dng_host.cpp	3	['N/A', 'int', 'N/A']	11	0	297	50	37	274	0	782	512
dng_render_task::Start(unsignedint,dng_pointconst&,dng_memory_allocator*,dng_abort_sniffer*)	/src/dng_sdk/source/./dng_render.cpp	5	['N/A', 'int', 'N/A', 'N/A', 'N/A']	9	0	617	117	59	412	0	1025	469
dng_image_writer::WriteTIFFWithProfile(dng_host&,dng_stream&,dng_imageconst&,unsignedint,unsignedint,dng_metadataconst*,voidconst*,unsignedint,dng_resolutionconst*,dng_jpeg_previewconst*,dng_memory_blockconst*,dng_metadata_subset)	/src/dng_sdk/source/./dng_image_writer.cpp	13	['N/A', 'N/A', 'N/A', 'N/A', 'int', 'int', 'N/A', 'N/A', 'int', 'N/A', 'N/A', 'N/A', 'int']	11	0	810	171	106	458	0	1837	396
dng_read_image::ReadLosslessJPEG(dng_host&,dng_ifdconst&,dng_stream&,dng_image&,dng_rectconst&,unsignedint,unsignedint,unsignedint,AutoPtr &,AutoPtr &)	/src/dng_sdk/source/./dng_read_image.cpp	11	['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'int', 'int', 'int', 'N/A', 'N/A']	16	0	214	26	25	196	0	576	363
dng_negative::Parse(dng_host&,dng_stream&,dng_info&)	/src/dng_sdk/source/./dng_negative.cpp	4	['N/A', 'N/A', 'N/A', 'N/A']	11	0	865	138	132	590	0	1273	317
dng_ifd::ReadImage(dng_host&,dng_stream&,dng_image&,dng_jpeg_image*,dng_fingerprint*)const	/src/dng_sdk/source/./dng_ifd.cpp	6	['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A']	11	0	53	6	6	281	0	691	284

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1174 / 2213

Cyclomatic complexity statically reachable by fuzzers

8400 / 14890

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/dng_camera_profile_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['dng_stream::Flush()', 'dng_stream::Get_real64()', 'dng_stream::Put_uint32(unsigned int)', 'ThrowEndOfFile(char const*)', 'tiff_tag::Size() const', 'dng_file_stream::dng_file_stream(char const*, bool, unsigned int)', 'dng_stream::Get_uint16()', 'dng_stream::TagValue_uint32(unsigned int)', 'SafeUint32Add(unsigned int, unsigned int)', 'dng_string::Set_UTF8(char const*)']

/src/dng_sdk/source/../fuzzer/dng_parser_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)', 'dng_stream::Flush()', 'AutoPtr::~AutoPtr()', 'dng_info::dng_info()', 'dng_memory_data::Allocate(unsigned int)', 'dng_memory_data::~dng_memory_data()', 'LLVMFuzzerTestOneInput', 'dng_negative::Make(dng_host&)', 'dng_info::Parse(dng_host&, dng_stream&)']

/src/dng_stage_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['Invert(dng_matrix const&)', 'dng_rect::TL() const', 'runFuzzerWithVariableHost(char*, unsigned int, bool, bool, bool, bool, bool, bool, int, bool)', 'runFuzzerWithVariableHost(char*, unsigned int, bool, bool, bool, bool, bool, bool, int, bool)', 'ResampleImage(dng_host&, dng_image const&, dng_image&, dng_rect const&, dng_rect const&, dng_resample_function const&)', 'dng_stream::Flush()', 'dng_negative::FindNewRawImageDigest(dng_host&) const', 'operator*(dng_matrix const&, dng_vector const&)', 'dng_host::ValidateSizes()', 'dng_string::operator==(dng_string const&) const']

/src/dng_validate_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['dng_date_time_info::Encode_ISO_8601() const', 'dng_negative::TransparencyMask() const', '(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)', 'dng_pixel_buffer::SetConstant(dng_rect const&, unsigned int, unsigned int, unsigned int)', 'dng_render::Render()', 'dng_time_zone::Encode_ISO_8601() const', 'dng_memory_block::Buffer_real32()', 'dng_timer::~dng_timer()', 'dng_md5_printer::dng_md5_printer()', 'dng_negative::BuildStage2Image(dng_host&)']

/src/dng_fixed_validate_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['dng_date_time_info::Encode_ISO_8601() const', 'dng_negative::TransparencyMask() const', 'InvertNbyN(dng_matrix const&)', 'Floor_uint32(double)', '(anonymous namespace)::InnermostMutexHolder::SetInnermostMutex(dng_mutex*)', 'dng_pixel_buffer::SetConstant(dng_rect const&, unsigned int, unsigned int, unsigned int)', 'dng_render::dng_render(dng_host&, dng_negative const&)', 'dng_host::ValidateSizes()', 'dng_render::Render()', 'dng_time_zone::Encode_ISO_8601() const']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
tag_data_ptr::Put(dng_stream&)const	51	4	7.843%	['dng_fixed_validate_fuzzer', 'dng_camera_profile_fuzzer', 'dng_validate_fuzzer', 'dng_stage_fuzzer']
dng_pixel_buffer::CopyArea(dng_pixel_bufferconst&,dng_rectconst&,unsignedint,unsignedint,unsignedint)	390	176	45.12%	['dng_fixed_validate_fuzzer', 'dng_parser_fuzzer', 'dng_validate_fuzzer', 'dng_stage_fuzzer']
dng_image::GetEdge(dng_pixel_buffer&,dng_image::edge_option,dng_rectconst&,dng_rectconst&)const	46	17	36.95%	['dng_fixed_validate_fuzzer', 'dng_validate_fuzzer', 'dng_stage_fuzzer']
dng_opcode_MapPolynomial::ProcessArea(dng_negative&,unsignedint,dng_pixel_buffer&,dng_rectconst&,dng_rectconst&)	121	32	26.44%	['dng_fixed_validate_fuzzer', 'dng_stage_fuzzer']
dng_camera_profile::HueSatMapForWhite(dng_xy_coordconst&)const	44	4	9.090%	['dng_fixed_validate_fuzzer', 'dng_validate_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/dng_sdk/source/./dng_lossless_jpeg.h	[]	[]
/src/dng_sdk/source/./dng_resample.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_jpeg_image.h	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_string.h	['dng_camera_profile_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_tone_curve.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_pixel_buffer.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_mutex.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_orientation.cpp	[]	[]
/src/dng_sdk/source/./dng_temperature.cpp	[]	[]
/src/dng_sdk/source/./dng_image.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_preview.h	[]	[]
/src/dng_sdk/source/./dng_read_image.cpp	[]	[]
/src/dng_sdk/source/./dng_utils.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_color_space.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_render.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_rational.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_lossless_jpeg.cpp	[]	[]
/src/dng_sdk/source/./dng_image.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/usr/local/bin/../include/c++/v1/stdexcept	[]	[]
/src/dng_sdk/source/./dng_ifd.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_image_writer.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_jpeg_memory_source.cpp	[]	[]
/src/dng_stage_fuzzer.cpp	['dng_stage_fuzzer']	['dng_stage_fuzzer']
/src/dng_sdk/source/./dng_stream.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_exceptions.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_stream.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_mosaic_info.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_area_task.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_ref_counted_block.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_temperature.h	[]	[]
/src/dng_sdk/source/./dng_opcode_list.cpp	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_spline.h	[]	[]
/src/dng_sdk/source/dng_memory.cpp	[]	[]
/src/dng_sdk/source/./dng_safe_arithmetic.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_render.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/../fuzzer/dng_parser_fuzzer.cpp	['dng_parser_fuzzer']	[]
/src/dng_sdk/source/./dng_bad_pixels.h	[]	[]
/src/dng_sdk/source/./dng_file_stream.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_matrix.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_utils.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_1d_function.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_camera_profile_fuzzer.cpp	['dng_camera_profile_fuzzer']	['dng_camera_profile_fuzzer']
/src/dng_sdk/source/./dng_shared.h	[]	[]
/src/dng_sdk/source/./dng_date_time.cpp	['dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_color_spec.h	[]	[]
/src/dng_sdk/source/./dng_camera_profile.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_area_task.h	[]	[]
/src/dng_sdk/source/./dng_1d_function.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_gain_map.h	[]	[]
/src/dng_sdk/source/./dng_opcodes.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/dng_string.cpp	[]	[]
/src/dng_sdk/source/./dng_host.cpp	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_orientation.h	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_spline.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_memory.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_preview.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_bad_pixels.cpp	[]	[]
/src/dng_sdk/source/./dng_read_image.h	[]	[]
/src/dng_sdk/source/./dng_1d_table.h	[]	[]
/src/dng_sdk/source/./dng_linearization_info.cpp	[]	[]
/src/dng_sdk/source/./dng_lens_correction.h	[]	[]
/src/dng_sdk/source/./dng_rect.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_abort_sniffer.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/dng_date_time.cpp	[]	[]
/src/dng_validate_fuzzer.cpp	['dng_validate_fuzzer']	['dng_validate_fuzzer']
/src/dng_fixed_validate_fuzzer.cpp	['dng_fixed_validate_fuzzer']	['dng_fixed_validate_fuzzer']
/src/dng_sdk/source/./dng_hue_sat_map.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_safe_arithmetic.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_gain_map.cpp	[]	[]
/src/dng_sdk/source/./dng_exif.cpp	[]	[]
/src/dng_sdk/source/./dng_rational.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_pthread.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_shared.cpp	['dng_camera_profile_fuzzer']	[]
/src/dng_sdk/source/./dng_negative.cpp	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_auto_ptr.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_hue_sat_map.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_resample.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_fingerprint.h	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/dng_mutex.cpp	[]	[]
/src/dng_sdk/source/./dng_filter_task.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_opcodes.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_reference.cpp	[]	[]
/src/dng_sdk/source/./dng_point.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_mosaic_info.cpp	[]	[]
/src/dng_sdk/source/./dng_pixel_buffer.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_misc_opcodes.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_opcode_list.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_image_writer.h	['dng_camera_profile_fuzzer']	[]
/src/dng_sdk/source/./dng_tag_types.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_bottlenecks.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_string.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_parse_utils.cpp	['dng_camera_profile_fuzzer']	[]
/src/dng_sdk/source/./dng_ref_counted_block.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_memory.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_rect.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_lens_correction.cpp	[]	[]
/src/dng_sdk/source/./dng_matrix.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_abort_sniffer.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_tone_curve.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_memory_stream.cpp	['dng_parser_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_date_time.h	['dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_info.cpp	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_xy_coord.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_misc_opcodes.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_jpeg_image.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_negative.h	['dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_xy_coord.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_color_space.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_camera_profile.cpp	['dng_camera_profile_fuzzer', 'dng_stage_fuzzer']	[]
/src/dng_sdk/source/./dng_color_spec.cpp	[]	[]
/src/dng_sdk/source/./dng_exif.h	[]	[]
/src/dng_sdk/source/./dng_host.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_1d_table.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/dng_abort_sniffer.cpp	[]	[]
/src/dng_sdk/source/./dng_tile_iterator.cpp	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_exceptions.h	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_filter_task.h	[]	[]
/src/dng_sdk/source/./dng_simple_image.cpp	[]	[]
/src/dng_sdk/source/./dng_fingerprint.cpp	['dng_camera_profile_fuzzer', 'dng_parser_fuzzer', 'dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]
/src/dng_sdk/source/./dng_ifd.h	['dng_stage_fuzzer', 'dng_validate_fuzzer', 'dng_fixed_validate_fuzzer']	[]

Directories in report

Directory
/src/dng_sdk/source/
/src/dng_sdk/source/./
/usr/local/bin/../include/c++/v1/
/src/dng_sdk/source/../fuzzer/
/src/