Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
158	158	1 : View List ['buf_put_dss_pub_key']	368	433	buf_put_pub_key	call site: 00126	/src/dropbear/src/signkey.c:427
158	158	1 : View List ['buf_put_rsa_pub_key']	210	275	buf_put_pub_key	call site: 00127	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	174	192	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:385
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:291
52	65	2 : View List ['buf_put_ecdsa_pub_key', 'signkey_key_ptr']	52	114	buf_put_pub_key	call site: 00175	/src/dropbear/src/signkey.c:437
21	21	1 : View List ['parse_recv_window']	73	89	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:401
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_rsa_priv_key	call site: 00000	/src/dropbear/src/rsa.c:133
15	27	5 : View List ['getuid', 'm_malloc', 'strlen', 'getenv', 'fuzz_getpwuid']	15	43	expand_homedir_path	call site: 00000	/src/dropbear/src/dbutil.c:640
13	13	1 : View List ['m_str_to_uint']	13	19	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:439


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           fuzz_set_input

[function] [call site] 00001


             wrapfd_setup

[function] [call site] 00002


               wrapfd_remove

[function] [call site] 00003


                 __assert_fail

[call site] 00004


                 __assert_fail

[call site] 00005


                 __assert_fail

[call site] 00006


                 close

[call site] 00007


               wrapfd_setseed

[function] [call site] 00008


                 nrand48

[call site] 00009


             fuzz_seed

[function] [call site] 00010


               sha256_init

[function] [call site] 00011


                 crypt_argchk

[function] [call site] 00012


                   fprintf

[call site] 00013


                   abort

[call site] 00014


               sha256_process

[function] [call site] 00015


                 crypt_argchk

[function] [call site] 00016


                 sha256_compress

[function] [call site] 00017


               sha256_process

[function] [call site] 00018


               sha256_done

[function] [call site] 00019


                 crypt_argchk

[function] [call site] 00020


                 crypt_argchk

[function] [call site] 00021


                 sha256_compress

[function] [call site] 00022


                 sha256_compress

[function] [call site] 00023


           m_malloc_set_epoch

[function] [call site] 00024


           _setjmp

[call site] 00025


           buf_getint

[function] [call site] 00026


             buf_getptr

[function] [call site] 00027


               dropbear_exit

[function] [call site] 00028


             buf_incrpos

[function] [call site] 00029


               dropbear_exit

[function] [call site] 00030


           buf_getstringbuf

[function] [call site] 00031


             buf_getstringbuf_int

[function] [call site] 00032


               buf_getint

[function] [call site] 00033


               dropbear_exit

[function] [call site] 00034


               buf_new

[function] [call site] 00035


                 dropbear_exit

[function] [call site] 00036


                 m_malloc

[function] [call site] 00037


                   dropbear_exit

[function] [call site] 00038


                   calloc

[call site] 00039


                   dropbear_exit

[function] [call site] 00040


                   put_alloc

[function] [call site] 00041


                     __assert_fail

[call site] 00042


                     __assert_fail

[call site] 00043


               buf_putint

[function] [call site] 00044


                 buf_getwriteptr

[function] [call site] 00045


                   dropbear_exit

[function] [call site] 00046


                 buf_incrwritepos

[function] [call site] 00047


                   dropbear_exit

[function] [call site] 00048


               buf_getwriteptr

[function] [call site] 00049


               buf_incrpos

[function] [call site] 00050


               buf_incrlen

[function] [call site] 00051


                 dropbear_exit

[function] [call site] 00052


               buf_setpos

[function] [call site] 00053


                 dropbear_exit

[function] [call site] 00054


           buf_new

[function] [call site] 00055


           kexcurve25519_comb_key

[function] [call site] 00056


             dropbear_exit

[function] [call site] 00057


             dropbear_curve25519_scalarmult

[function] [call site] 00058


               unpack25519

[function] [call site] 00059


               sel25519

[function] [call site] 00060


               sel25519

[function] [call site] 00061

[function] [call site] 00062

[function] [call site] 00063

[function] [call site] 00064

[function] [call site] 00065

[function] [call site] 00066

[function] [call site] 00067


                   car25519

[function] [call site] 00068


                   car25519

[function] [call site] 00069

[function] [call site] 00070

[function] [call site] 00071

[function] [call site] 00072

[function] [call site] 00073

[function] [call site] 00074

[function] [call site] 00075

[function] [call site] 00076

[function] [call site] 00077

[function] [call site] 00078

[function] [call site] 00079

[function] [call site] 00080

[function] [call site] 00081

[function] [call site] 00082


               sel25519

[function] [call site] 00083


               sel25519

[function] [call site] 00084


               inv25519

[function] [call site] 00085

[function] [call site] 00086

[function] [call site] 00087

[function] [call site] 00088


               pack25519

[function] [call site] 00089


                 car25519

[function] [call site] 00090


                 car25519

[function] [call site] 00091


                 car25519

[function] [call site] 00092


                 sel25519

[function] [call site] 00093


             constant_time_memcmp

[function] [call site] 00094


             dropbear_exit

[function] [call site] 00095


             m_mp_alloc_init_multi

[function] [call site] 00096


               m_malloc

[function] [call site] 00097


               mp_init

[function] [call site] 00098


                 m_calloc

[function] [call site] 00099


                   dropbear_exit

[function] [call site] 00100


                   m_malloc

[function] [call site] 00101


               dropbear_exit

[function] [call site] 00102


             bytes_to_mp

[function] [call site] 00103


               mp_from_ubin

[function] [call site] 00104


                 mp_grow

[function] [call site] 00105


                   m_realloc_ltm

[function] [call site] 00106


                     m_realloc

[function] [call site] 00107


                       dropbear_exit

[function] [call site] 00108


                       get_header

[function] [call site] 00109


                       remove_alloc

[function] [call site] 00110


                       realloc

[call site] 00111


                       dropbear_exit

[function] [call site] 00112


                       put_alloc

[function] [call site] 00113


                 mp_zero

[function] [call site] 00114


                 mp_mul_2d

[function] [call site] 00115


                   mp_copy

[function] [call site] 00116


                     mp_grow

[function] [call site] 00117


                   mp_grow

[function] [call site] 00118


                   mp_lshd

[function] [call site] 00119


                   mp_clamp

[function] [call site] 00120


                 mp_clamp

[function] [call site] 00121


               dropbear_exit

[function] [call site] 00122


             m_burn

[function] [call site] 00123


               explicit_bzero

[call site] 00124


             buf_put_pub_key

[function] [call site] 00125


               buf_new

[function] [call site] 00126


               buf_put_dss_pub_key

[function] [call site] 00127


                 fail_assert

[function] [call site] 00128


                   dropbear_exit

[function] [call site] 00129


                 buf_putstring

[function] [call site] 00130


                   buf_putint

[function] [call site] 00131


                   buf_putbytes

[function] [call site] 00132


                     buf_getwriteptr

[function] [call site] 00133


                     buf_incrwritepos

[function] [call site] 00134


                 buf_putmpint

[function] [call site] 00135


                   fail_assert

[function] [call site] 00136


                   dropbear_exit

[function] [call site] 00137


                   mp_count_bits

[function] [call site] 00138


                   buf_putint

[function] [call site] 00139


                   buf_putbyte

[function] [call site] 00140


                     buf_incrlen

[function] [call site] 00141


                   buf_getwriteptr

[function] [call site] 00142


                   mp_to_ubin

[function] [call site] 00143


                     mp_ubin_size

[function] [call site] 00144


                       mp_count_bits

[function] [call site] 00145


                     mp_init_copy

[function] [call site] 00146


                       mp_init_size

[function] [call site] 00147


                         m_calloc

[function] [call site] 00148


                       mp_copy

[function] [call site] 00149


                       mp_clear

[function] [call site] 00150


                         m_free_ltm

[function] [call site] 00151


                           m_free_direct

[function] [call site] 00152


                             get_header

[function] [call site] 00153


                             remove_alloc

[function] [call site] 00154


                     mp_div_2d

[function] [call site] 00155


                       mp_zero

[function] [call site] 00156


                       mp_copy

[function] [call site] 00157


                       mp_mod_2d

[function] [call site] 00158


                         mp_zero

[function] [call site] 00159


                         mp_copy

[function] [call site] 00160


                         mp_copy

[function] [call site] 00161


                         mp_clamp

[function] [call site] 00162


                       mp_rshd

[function] [call site] 00163


                       mp_clamp

[function] [call site] 00164


                     mp_clear

[function] [call site] 00165


                   dropbear_exit

[function] [call site] 00166


                   buf_incrwritepos

[function] [call site] 00167


                 buf_putmpint

[function] [call site] 00168


                 buf_putmpint

[function] [call site] 00169


                 buf_putmpint

[function] [call site] 00170


               buf_put_rsa_pub_key

[function] [call site] 00171


                 buf_putstring

[function] [call site] 00172


                 buf_putmpint

[function] [call site] 00173


                 buf_putmpint

[function] [call site] 00174


               signkey_is_ecdsa

[function] [call site] 00175


               signkey_key_ptr

[function] [call site] 00176


               buf_put_ecdsa_pub_key

[function] [call site] 00177


                 curve_for_dp

[function] [call site] 00178


                   __assert_fail

[call site] 00179


                 snprintf

[call site] 00180


                 strlen

[call site] 00181


                 buf_putstring

[function] [call site] 00182


                 strlen

[call site] 00183


                 buf_putstring

[function] [call site] 00184


                 buf_put_ecc_raw_pubkey_string

[function] [call site] 00185


                   buf_putint

[function] [call site] 00186


                   buf_getwriteptr

[function] [call site] 00187


                   ecc_ansi_x963_export

[function] [call site] 00188


                     crypt_argchk

[function] [call site] 00189


                     crypt_argchk

[function] [call site] 00190


                     ltc_ecc_is_valid_idx

[function] [call site] 00191


                     crypt_argchk

[function] [call site] 00192


                     zeromem

[function] [call site] 00193


                       m_burn

[function] [call site] 00194


                     zeromem

[function] [call site] 00195


                   dropbear_exit

[function] [call site] 00196


                   buf_incrwritepos

[function] [call site] 00197


               buf_put_ed25519_pub_key

[function] [call site] 00198


                 fail_assert

[function] [call site] 00199


                 buf_putstring

[function] [call site] 00200


                 buf_putstring

[function] [call site] 00201


               dropbear_exit

[function] [call site] 00202


               buf_putbufstring

[function] [call site] 00203


                 buf_putstring

[function] [call site] 00204


               buf_free

[function] [call site] 00205


                 m_free_direct

[function] [call site] 00206


             buf_putstring

[function] [call site] 00207


             buf_putstring

[function] [call site] 00208


             buf_putmpint

[function] [call site] 00209


             finish_kexhashbuf

[function] [call site] 00210


               buf_setpos

[function] [call site] 00211


               buf_getptr

[function] [call site] 00212


               buf_new

[function] [call site] 00213


               buf_getwriteptr

[function] [call site] 00214


               buf_setlen

[function] [call site] 00215


                 dropbear_exit

[function] [call site] 00216


               buf_burn_free

[function] [call site] 00217


                 m_burn

[function] [call site] 00218


                 m_free_direct

[function] [call site] 00219


               m_burn

[function] [call site] 00220


               buf_newcopy

[function] [call site] 00221


                 buf_new

[function] [call site] 00222


           mp_clear

[function] [call site] 00223


           m_free_direct

[function] [call site] 00224


           buf_free

[function] [call site] 00225


           buf_free

[function] [call site] 00226


           buf_free

[function] [call site] 00227


           m_malloc_free_epoch

[function] [call site] 00228


             put_alloc

[function] [call site] 00229

Fuzz blockers

Fuzzer calltree