High level conclusions

Fuzzer ext2fs_check_directory_fuzzer is blocked:

The runtime code coverage of ext2fs_check_directory_fuzzer covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 19.78% of cyclomatic complexity.

Fuzzers reach 19.75% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

159 / 805

Cyclomatic complexity statically reachable by fuzzers

1062 / 5367

Runtime code coverage of functions

128 / 805

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: ext2fs_check_directory_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	254	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	254	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
253	0	EP	call site: 00000	ext2fs_open

Runtime coverage analysis

Covered functions

0

Functions that are reachable but not covered

131

Reachable functions

131

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz/ext2fs_check_directory_fuzzer.cc	1
/src/e2fsprogs/lib/ext2fs/openfs.c	4
/src/e2fsprogs/lib/ext2fs/./ext2fs.h	8
/src/e2fsprogs/lib/ext2fs/getenv.c	1
/src/e2fsprogs/lib/ext2fs/io_manager.c	7
/src/e2fsprogs/lib/ext2fs/inline.c	1
/src/e2fsprogs/lib/ext2fs/csum.c	12
/src/e2fsprogs/lib/ext2fs/./ext2_fs.h	14
/src/e2fsprogs/lib/ext2fs/crc32c.c	3
/src/e2fsprogs/lib/ext2fs/blknum.c	8
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/ext2_fs.h	2
/src/e2fsprogs/lib/ext2fs/closefs.c	8
/src/e2fsprogs/lib/ext2fs/crc16.c	1
/src/e2fsprogs/lib/ext2fs/mmp.c	6
/src/e2fsprogs/lib/ext2fs/getsectsize.c	1
/src/e2fsprogs/lib/ext2fs/llseek.c	2
/src/e2fsprogs/lib/ext2fs/hashmap.c	3
/src/e2fsprogs/lib/ext2fs/nls_utf8.c	1
/src/e2fsprogs/lib/ext2fs/freefs.c	4
/src/e2fsprogs/lib/ext2fs/bitmaps.c	2
/src/e2fsprogs/lib/ext2fs/gen_bitmap64.c	2
/src/e2fsprogs/lib/ext2fs/gen_bitmap.c	2
/src/e2fsprogs/lib/ext2fs/inode.c	6
/src/e2fsprogs/lib/ext2fs/mkjournal.c	1
/src/e2fsprogs/lib/ext2fs/./ext2fsP.h	1

Fuzzer: ext2fs_read_bitmap_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	234	53.5%
gold	[1:9]	2	0.45%
yellow	[10:29]	12	2.74%
greenyellow	[30:49]	4	0.91%
lawngreen	50+	185	42.3%
All colors	437	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
30	118	ext2fs_llseek	call site: 00118	ext2fs_mmp_stop
20	413	ext2fs_close	call site: 00413	ext2fs_flush2
16	180	ext2fs_free_inode_bitmap	call site: 00180	ext2fs_free_dblist
16	262	ext2fs_allocate_block_bitmap	call site: 00262	ext2fs_alloc_generic_bmap
12	103	ext2fs_open2	call site: 00103	ext2fs_mmp_start
12	228	ext2fs_block_bitmap_loc	call site: 00228	ext2fs_group_desc_csum_set
12	242	ext2fs_inode_bitmap_loc	call site: 00242	read_bitmaps_range_prepare
11	215	com_err	call site: 00215	ext2fs_group_desc_csum_set
10	80	ext2fs_group_desc	call site: 00080	ext2fs_group_desc_csum_set
9	149	ext2fs_mmp_stop	call site: 00149	ext2fs_mmp_read
8	365	ext2fs_mark_generic_bmap	call site: 00365	ext2fs_mark_generic_bmap
6	172	ext2fs_free_generic_bitmap	call site: 00172	ext2fs_safe_getenv

Runtime coverage analysis

Covered functions

122

Functions that are reachable but not covered

98

Reachable functions

188

Percentage of reachable functions covered

47.87%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz/ext2fs_read_bitmap_fuzzer.cc	1
/src/e2fsprogs/lib/ext2fs/openfs.c	4
/src/e2fsprogs/lib/ext2fs/./ext2fs.h	9
/src/e2fsprogs/lib/ext2fs/getenv.c	1
/src/e2fsprogs/lib/ext2fs/io_manager.c	7
/src/e2fsprogs/lib/ext2fs/inline.c	1
/src/e2fsprogs/lib/ext2fs/csum.c	15
/src/e2fsprogs/lib/ext2fs/./ext2_fs.h	15
/src/e2fsprogs/lib/ext2fs/crc32c.c	3
/src/e2fsprogs/lib/ext2fs/blknum.c	14
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/ext2_fs.h	2
/src/e2fsprogs/lib/ext2fs/closefs.c	8
/src/e2fsprogs/lib/ext2fs/crc16.c	1
/src/e2fsprogs/lib/ext2fs/mmp.c	6
/src/e2fsprogs/lib/ext2fs/getsectsize.c	1
/src/e2fsprogs/lib/ext2fs/llseek.c	2
/src/e2fsprogs/lib/ext2fs/hashmap.c	3
/src/e2fsprogs/lib/ext2fs/nls_utf8.c	1
/src/e2fsprogs/lib/ext2fs/freefs.c	4
/src/e2fsprogs/lib/ext2fs/bitmaps.c	8
/src/e2fsprogs/lib/ext2fs/gen_bitmap64.c	9
/src/e2fsprogs/lib/ext2fs/gen_bitmap.c	8
/src/e2fsprogs/lib/ext2fs/inode.c	1
/src/e2fsprogs/lib/ext2fs/mkjournal.c	1
/src/e2fsprogs/lib/ext2fs/rw_bitmaps.c	14
/src/e2fsprogs/lib/et/com_err.c	2
/src/e2fsprogs/lib/ext2fs/bitops.c	2
/src/e2fsprogs/lib/ext2fs/get_num_dirs.c	1
/src/e2fsprogs/lib/ext2fs/alloc_sb.c	1
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/bitops.h	2
/src/e2fsprogs/lib/ext2fs/./ext2fsP.h	1

Fuzzer: ext2fs_image_read_write_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	273	57.7%
gold	[1:9]	7	1.47%
yellow	[10:29]	3	0.63%
greenyellow	[30:49]	5	1.05%
lawngreen	50+	185	39.1%
All colors	473	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
30	118	ext2fs_llseek	call site: 00118	ext2fs_mmp_stop
24	172	ext2fs_free_generic_bitmap	call site: 00172	ext2fs_free_inode_bitmap
20	449	ext2fs_close	call site: 00449	ext2fs_flush2
16	263	ext2fs_allocate_block_bitmap	call site: 00263	ext2fs_alloc_generic_bmap
16	332	read_bitmaps_range_start	call site: 00332	ext2fs_group_desc_csum_verify
12	103	ext2fs_open2	call site: 00103	ext2fs_mmp_start
12	229	ext2fs_block_bitmap_loc	call site: 00229	ext2fs_group_desc_csum_set
12	243	ext2fs_inode_bitmap_loc	call site: 00243	read_bitmaps_range_prepare
10	80	ext2fs_group_desc	call site: 00080	ext2fs_group_desc_csum_set
9	149	ext2fs_mmp_stop	call site: 00149	ext2fs_mmp_read
9	218	ext2fs_get_generic_bmap_range	call site: 00218	ext2fs_group_desc_csum_set
9	286	ext2fs_make_generic_bitmap	call site: 00286	ext2fs_allocate_inode_bitmap

Runtime coverage analysis

Covered functions

124

Functions that are reachable but not covered

103

Reachable functions

196

Percentage of reachable functions covered

47.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz/ext2fs_image_read_write_fuzzer.cc	1
/src/e2fsprogs/lib/ext2fs/openfs.c	4
/src/e2fsprogs/lib/ext2fs/./ext2fs.h	9
/src/e2fsprogs/lib/ext2fs/getenv.c	1
/src/e2fsprogs/lib/ext2fs/io_manager.c	7
/src/e2fsprogs/lib/ext2fs/inline.c	1
/src/e2fsprogs/lib/ext2fs/csum.c	15
/src/e2fsprogs/lib/ext2fs/./ext2_fs.h	15
/src/e2fsprogs/lib/ext2fs/crc32c.c	3
/src/e2fsprogs/lib/ext2fs/blknum.c	14
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/ext2_fs.h	2
/src/e2fsprogs/lib/ext2fs/closefs.c	8
/src/e2fsprogs/lib/ext2fs/crc16.c	1
/src/e2fsprogs/lib/ext2fs/mmp.c	6
/src/e2fsprogs/lib/ext2fs/getsectsize.c	1
/src/e2fsprogs/lib/ext2fs/llseek.c	2
/src/e2fsprogs/lib/ext2fs/hashmap.c	3
/src/e2fsprogs/lib/ext2fs/nls_utf8.c	1
/src/e2fsprogs/lib/ext2fs/freefs.c	4
/src/e2fsprogs/lib/ext2fs/bitmaps.c	8
/src/e2fsprogs/lib/ext2fs/gen_bitmap64.c	9
/src/e2fsprogs/lib/ext2fs/gen_bitmap.c	8
/src/e2fsprogs/lib/ext2fs/inode.c	2
/src/e2fsprogs/lib/ext2fs/mkjournal.c	1
/src/e2fsprogs/lib/ext2fs/imager.c	7
/src/e2fsprogs/lib/ext2fs/rw_bitmaps.c	14
/src/e2fsprogs/lib/et/com_err.c	2
/src/e2fsprogs/lib/ext2fs/bitops.c	2
/src/e2fsprogs/lib/ext2fs/get_num_dirs.c	1
/src/e2fsprogs/lib/ext2fs/alloc_sb.c	1
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/bitops.h	2
/src/e2fsprogs/lib/ext2fs/./ext2fsP.h	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
ext2fs_symlink	/src/e2fsprogs/lib/ext2fs/symlink.c	5	['N/A', 'int', 'int', 'N/A', 'N/A']	28	0	481	79	32	396	0	2997	2297
ext2fs_add_journal_inode	/src/e2fsprogs/lib/ext2fs/mkjournal.c	3	['N/A', 'int', 'int']	22	0	21	3	2	245	0	1794	177
unix_read_blk	/src/e2fsprogs/lib/ext2fs/unix_io.c	4	['N/A', 'size_t', 'int', 'N/A']	6	0	24	3	2	25	0	193	156
rb_unmark_bmap_extent	/src/e2fsprogs/lib/ext2fs/blkmap64_rb.c	3	['N/A', 'size_t', 'int']	5	0	38	5	2	19	0	125	120
unix_open	/src/e2fsprogs/lib/ext2fs/unix_io.c	3	['N/A', 'int', 'N/A']	5	0	96	14	6	38	0	151	96
ext2fs_get_next_inode	/src/e2fsprogs/lib/ext2fs/inode.c	3	['N/A', 'N/A', 'N/A']	8	0	21	3	2	33	0	204	93
utf8_casefold_cmp	/src/e2fsprogs/lib/ext2fs/nls_utf8.c	5	['N/A', 'N/A', 'size_t', 'N/A', 'size_t']	5	0	106	19	8	9	0	70	70
ext2fs_open_inode_scan	/src/e2fsprogs/lib/ext2fs/inode.c	3	['N/A', 'int', 'N/A']	19	0	458	52	21	191	0	1391	68
ext2fs_get_free_blocks	/src/e2fsprogs/lib/ext2fs/alloc.c	6	['N/A', 'int', 'int', 'int', 'N/A', 'N/A']	7	0	51	6	3	19	0	107	58
default_com_err_proc	/src/e2fsprogs/lib/et/com_err.c	4	['N/A', 'size_t', 'N/A', 'N/A']	2	0	138	25	10	14	0	54	50

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

511 / 805

Cyclomatic complexity statically reachable by fuzzers

4177 / 5367

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/fuzz/ext2fs_check_directory_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

/src/fuzz/ext2fs_read_bitmap_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['ext2fs_llseek', 'ext2fs_close', 'ext2fs_free_inode_bitmap', 'ext2fs_allocate_block_bitmap', 'ext2fs_open2', 'ext2fs_block_bitmap_loc', 'ext2fs_inode_bitmap_loc', 'com_err', 'ext2fs_group_desc', 'ext2fs_mmp_stop']

/src/fuzz/ext2fs_image_read_write_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['ext2fs_llseek', 'ext2fs_free_generic_bitmap', 'ext2fs_close', 'ext2fs_allocate_block_bitmap', 'read_bitmaps_range_start', 'ext2fs_open2', 'ext2fs_block_bitmap_loc', 'ext2fs_inode_bitmap_loc', 'ext2fs_group_desc', 'ext2fs_mmp_stop']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
error_message	67	30	44.77%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
ext2fs_zero_blocks2	53	9	16.98%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer', 'ext2fs_check_directory_fuzzer']
ext2fs_rw_bitmaps	96	21	21.87%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
unix_open_channel	138	62	44.92%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
flush_cached_blocks	70	19	27.14%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
raw_read_blk	93	44	47.31%	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/e2fsprogs/lib/ext2fs/llseek.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/blkmap64_rb.c	[]	[]
/src/e2fsprogs/lib/et/com_err.c	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/crc16.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/et/et_name.c	[]	[]
/src/e2fsprogs/lib/ext2fs/mmp.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/./ext2_fs.h	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/usr/local/bin/../include/c++/v1/string	[]	[]
/src/e2fsprogs/lib/ext2fs/unix_io.c	[]	[]
/src/fuzz/ext2fs_image_read_write_fuzzer.cc	['ext2fs_image_read_write_fuzzer']	['ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/inode.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/bmap.c	[]	[]
/src/e2fsprogs/lib/ext2fs/inline_data.c	[]	[]
/src/e2fsprogs/lib/ext2fs/csum.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/mkjournal.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/closefs.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/rw_bitmaps.c	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/badblocks.c	[]	[]
/src/e2fsprogs/lib/ext2fs/blknum.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/get_num_dirs.c	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/extent.c	[]	[]
/src/e2fsprogs/lib/ext2fs/sha512.c	[]	[]
/src/e2fsprogs/lib/ext2fs/newdir.c	[]	[]
/src/e2fsprogs/lib/ext2fs/read_bb.c	[]	[]
/src/e2fsprogs/lib/ext2fs/ismounted.c	[]	[]
/src/e2fsprogs/lib/ext2fs/link.c	[]	[]
/src/e2fsprogs/lib/ext2fs/openfs.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/alloc_sb.c	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/dirhash.c	[]	[]
/src/e2fsprogs/lib/ext2fs/lookup.c	[]	[]
/src/e2fsprogs/lib/ext2fs/rbtree.c	[]	[]
/src/e2fsprogs/lib/ext2fs/ext_attr.c	[]	[]
/src/e2fsprogs/lib/ext2fs/bitops.c	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/ind_block.c	[]	[]
/src/e2fsprogs/lib/ext2fs/getsectsize.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/symlink.c	[]	[]
/src/e2fsprogs/lib/ext2fs/fileio.c	[]	[]
/src/e2fsprogs/lib/ext2fs/gen_bitmap64.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/usr/local/bin/../include/c++/v1/stdexcept	[]	[]
/src/e2fsprogs/lib/ext2fs/dirblock.c	[]	[]
/src/e2fsprogs/lib/ext2fs/imager.c	['ext2fs_image_read_write_fuzzer']	['ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/./ext2fsP.h	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/punch.c	[]	[]
/src/fuzz/ext2fs_check_directory_fuzzer.cc	['ext2fs_check_directory_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/getenv.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/ext2_fs.h	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/blkmap64_ba.c	[]	[]
/src/e2fsprogs/lib/ext2fs/block.c	[]	[]
/src/e2fsprogs/lib/ext2fs/alloc.c	[]	[]
/src/e2fsprogs/lib/ext2fs/crc32c.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/inline.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/dir_iterate.c	[]	[]
/src/fuzz/ext2fs_read_bitmap_fuzzer.cc	['ext2fs_read_bitmap_fuzzer']	['ext2fs_read_bitmap_fuzzer']
/src/e2fsprogs/lib/ext2fs/i_block.c	[]	[]
/src/e2fsprogs/lib/ext2fs/gen_bitmap.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/alloc_stats.c	[]	[]
/src/e2fsprogs/lib/ext2fs/bitmaps.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/et/error_message.c	[]	[]
/src/e2fsprogs/lib/ext2fs/hashmap.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/freefs.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/bitops.h	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/io_manager.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/fallocate.c	[]	[]
/src/e2fsprogs/lib/ext2fs/valid_blk.c	[]	[]
/src/e2fsprogs/lib/ext2fs/./ext2fs.h	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	[]
/src/e2fsprogs/lib/ext2fs/nls_utf8.c	['ext2fs_check_directory_fuzzer', 'ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']	['ext2fs_read_bitmap_fuzzer', 'ext2fs_image_read_write_fuzzer']
/src/e2fsprogs/lib/ext2fs/./rbtree.h	[]	[]
/src/e2fsprogs/lib/ext2fs/expanddir.c	[]	[]

Directories in report

Directory
/src/e2fsprogs/lib/et/
/src/e2fsprogs/lib/ext2fs/
/src/e2fsprogs/lib/ext2fs/../../lib/ext2fs/
/usr/local/bin/../include/c++/v1/
/src/fuzz/
/src/e2fsprogs/lib/ext2fs/./