High level conclusions

Fuzzers reach 39.00% of cyclomatic complexity.

Fuzzers reach 29.67% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

357 / 1203

Cyclomatic complexity statically reachable by fuzzers

3971 / 10181

Runtime code coverage of functions

369 / 1203

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz-libelf

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	213	40.6%
gold	[1:9]	3	0.57%
yellow	[10:29]	3	0.57%
greenyellow	[30:49]	1	0.19%
lawngreen	50+	304	58.0%
All colors	524	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
32	27	pread_retry	call site: 00027	read_file
15	271	inflate	call site: 00271	crc32
15	377	deflate	call site: 00377	crc32
14	162	load_shdr_wrlock	call site: 00162	__libelf_seterrno
11	434	deflate	call site: 00434	_tr_flush_block
9	16	elf_begin	call site: 00016	lock_dup_elf
9	288	adler32	call site: 00288	crc32
5	193	__elf64_getshdr_rdlock	call site: 00193	__bswap_64
5	428	_tr_flush_block	call site: 00428	_tr_flush_block
4	398	read_buf	call site: 00398	read_buf
4	452	__libelf_compress_zlib	call site: 00452	do_deflate_cleanup
3	134	elf_begin	call site: 00134	write_file

Runtime coverage analysis

Covered functions

154

Functions that are reachable but not covered

44

Reachable functions

152

Percentage of reachable functions covered

71.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz-libelf.c	3
elfutils/./lib/system.h	1
elfutils/libelf/elf_version.c	2
elfutils/libelf/elf_error.c	1
elfutils/libelf/elf_begin.c	13
elfutils/libelf/../lib/system.h	2
elfutils/libelf/./common.h	4
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
elfutils/lib/eu-search.c	3
elfutils/libelf/elf_getshdrstrndx.c	1
elfutils/libelf/elf_nextscn.c	1
elfutils/libelf/gelf_getshdr.c	1
elfutils/libelf/elf32_getshdr.c	5
elfutils/libelf/elf_getshdrnum.c	1
elfutils/libelf/./elf32_getshdr.c	5
elfutils/libelf/elf_strptr.c	2
elfutils/libelf/elf_compress.c	8
elfutils/libelf/gelf_getchdr.c	1
elfutils/libelf/./elf32_getchdr.h	2
elfutils/libelf/elf_getdata.c	6
elfutils/libelf/gelf_getehdr.c	2
elfutils/zlib/inflate.c	10
elfutils/zlib/crc32.c	5
elfutils/zlib/adler32.c	2
elfutils/zlib/inftrees.c	1
elfutils/zlib/inffast.c	1
elfutils/zlib/deflate.c	16
elfutils/zlib/trees.c	20
elfutils/libelf/gelf_xlatetof.c	1
elfutils/libelf/elf32_xlatetof.c	1
elfutils/libelf/./elf32_xlatetof.c	1
elfutils/libelf/elf_compress_gnu.c	1
elfutils/libelf/elf_end.c	2
elfutils/libelf/elf_rawfile.c	1
elfutils/libelf/elf_readall.c	2

Fuzzer: fuzz-libdwfl

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	869	70.3%
gold	[1:9]	128	10.3%
yellow	[10:29]	76	6.14%
greenyellow	[30:49]	72	5.82%
lawngreen	50+	91	7.36%
All colors	1236	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
142	917	elf_compress_gnu	call site: 00917	__libdwfl_relocate
112	219	crc32_z	call site: 00219	gz_comp
55	821	find_debuginfo	call site: 00821	find_prelink_address_sync
51	1152	load_dw	call site: 01152	find_debug_altlink
50	607	open_elf_file	call site: 00607	__libdw_open_file
38	667	find_elf_build_id	call site: 00667	__libdwfl_relocate_value
36	1115	valid_p	call site: 01115	scngrp_read
33	881	elf_compress_gnu	call site: 00881	__libelf_compress
20	462	load_shdr_wrlock	call site: 00462	gelf_update_shdr
20	738	__libelf_set_data_list_rdlock	call site: 00738	__libelf_decompress
17	784	find_dw	call site: 00784	find_symtab
16	43	__libelf_next_arhdr_wrlock	call site: 00043	read_long_names

Runtime coverage analysis

Covered functions

143

Functions that are reachable but not covered

213

Reachable functions

347

Percentage of reachable functions covered

38.62%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz-libdwfl.c	1
elfutils/./lib/system.h	1
elfutils/libdwfl/dwfl_begin.c	1
elfutils/libelf/elf_version.c	2
elfutils/libelf/elf_error.c	2
elfutils/libdwfl/dwfl_error.c	4
elfutils/libdw/dwarf_error.c	2
elfutils/libdwfl/dwfl_module.c	7
elfutils/libdwfl/offline.c	6
elfutils/libdwfl/open.c	4
elfutils/libelf/elf_begin.c	13
elfutils/libelf/../lib/system.h	2
elfutils/libelf/./common.h	4
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
elfutils/lib/eu-search.c	3
elfutils/libelf/elf_kind.c	1
elfutils/libdwfl/gzip.c	6
elfutils/libdwfl/../lib/system.h	2
elfutils/zlib/gzlib.c	5
elfutils/zlib/gzread.c	10
elfutils/zlib/inflate.c	10
elfutils/zlib/gzclose.c	1
elfutils/zlib/gzwrite.c	4
elfutils/zlib/deflate.c	16
elfutils/zlib/crc32.c	5
elfutils/zlib/adler32.c	2
elfutils/zlib/trees.c	20
elfutils/zlib/inftrees.c	1
elfutils/zlib/inffast.c	1
elfutils/libelf/elf_memory.c	1
elfutils/libelf/elf_end.c	2
elfutils/libdwfl/image-header.c	1
elfutils/libdwfl/dwfl_report_elf.c	2
elfutils/libelf/gelf_getehdr.c	2
elfutils/libelf/elf_nextscn.c	1
elfutils/libelf/gelf_getshdr.c	1
elfutils/libelf/elf32_getshdr.c	5
elfutils/libelf/elf_getshdrnum.c	2
elfutils/libelf/./elf32_getshdr.c	5
elfutils/libelf/gelf_update_shdr.c	1
elfutils/libelf/elf_getphdrnum.c	3
elfutils/libelf/gelf_getphdr.c	1
elfutils/libelf/elf32_getphdr.c	2
elfutils/libelf/./elf32_getphdr.c	2
elfutils/libelf/elf_cntl.c	1
elfutils/libelf/elf_readall.c	2
elfutils/libdw/dwarf_begin_elf.c	8
elfutils/libelf/elf_getarhdr.c	1
elfutils/libelf/elf_next.c	1
elfutils/libdwfl/dwfl_module_getdwarf.c	20
elfutils/libdwfl_stacktrace/dwflst_tracker_find_elf.c	2
elfutils/libelf/elf_hash.c	1
elfutils/libelf/./dl-hash.h	1
elfutils/libdwfl_stacktrace/./../lib/dynamicsizehash_concurrent.c	8
elfutils/lib/next_prime.c	2
elfutils/libdwfl/dwfl_module_build_id.c	2
elfutils/libdwelf/dwelf_elf_gnu_build_id.c	3
elfutils/libelf/elf_getdata_rawchunk.c	2
elfutils/libelf/../lib/eu-search.h	2
elfutils/libelf/gelf_getnote.c	1
elfutils/libelf/elf_ndxscn.c	1
elfutils/libdwfl/relocate.c	7
elfutils/libelf/elf_getscn.c	1
elfutils/libelf/elf_getshdrstrndx.c	1
elfutils/libelf/elf_strptr.c	2
elfutils/libelf/elf_compress.c	8
elfutils/libelf/gelf_getchdr.c	1
elfutils/libelf/./elf32_getchdr.h	2
elfutils/libelf/elf_getdata.c	7
elfutils/libdwfl/./libdwflP.h	4
elfutils/libebl/eblopenbackend.c	3
elfutils/libdwelf/dwelf_elf_gnu_debuglink.c	1
elfutils/libelf/elf_rawdata.c	1
elfutils/libelf/gelf_xlatetom.c	1
elfutils/libelf/elf32_xlatetom.c	1
elfutils/libelf/./elf32_xlatetom.c	1
elfutils/libelf/gelf_fsize.c	1
elfutils/libelf/elf_getident.c	1
elfutils/libelf/gelf_getdyn.c	1
elfutils/libelf/gelf_getclass.c	1
elfutils/libelf/elf_compress_gnu.c	1
elfutils/libelf/gelf_xlatetof.c	1
elfutils/libelf/elf32_xlatetof.c	1
elfutils/libelf/./elf32_xlatetof.c	1
elfutils/libebl/ebldebugscnp.c	1
elfutils/libelf/gelf_getrel.c	1
elfutils/libebl/eblrelocsimpletype.c	1
elfutils/libelf/gelf_getsymshndx.c	1
elfutils/libebl/eblelfmachine.c	1
elfutils/libelf/gelf_update_rel.c	1
elfutils/libelf/gelf_getrela.c	1
elfutils/libelf/gelf_update_rela.c	1
elfutils/libdw/../lib/dynamicsizehash_concurrent.c	3
elfutils/libdw/./../lib/next_prime.c	2
elfutils/libdw/../lib/system.h	1
elfutils/libdwelf/dwelf_dwarf_gnu_debugaltlink.c	1
elfutils/libdw/dwarf_setalt.c	1
elfutils/libdw/dwarf_end.c	4
elfutils/libdw/frame-cache.c	3
elfutils/libebl/eblclosebackend.c	1
elfutils/libdwfl/dwfl_end.c	1
elfutils/libdwfl_stacktrace/dwflst_process_tracker.c	1
elfutils/libdwfl/dwfl_frame.c	1
elfutils/libdw/dwarf_cfi_end.c	1

Fuzzer: fuzz-dwfl-core

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1065	70.7%
gold	[1:9]	4	0.26%
yellow	[10:29]	2	0.13%
greenyellow	[30:49]	1	0.06%
lawngreen	50+	433	28.7%
All colors	1505	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
246	1060	openbackend	call site: 01060	load_dw
160	892	elf32_xlatetom	call site: 00892	dwfl_module_getdwarf
122	392	adler32	call site: 00392	gzclose
90	801	integrated_memory_callback	call site: 00801	dwfl_module_address_section
38	1307	__libdwfl_canon_error	call site: 01307	__libdwfl_relocate_section
32	24	pread_retry	call site: 00024	read_file
28	363	inflateEnd	call site: 00363	gzclose_w
22	323	__libdw_gunzip	call site: 00323	gzdirect
20	570	gelf_getehdr	call site: 00570	elf_getphdrnum
17	595	dwfl_link_map_report	call site: 00595	consider_executable
14	537	inflate	call site: 00537	gzclose
12	173	load_shdr_wrlock	call site: 00173	pread_retry

Runtime coverage analysis

Covered functions

235

Functions that are reachable but not covered

244

Reachable functions

392

Percentage of reachable functions covered

37.76%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzz-dwfl-core.c	1
elfutils/libelf/elf_version.c	2
elfutils/libelf/elf_error.c	2
elfutils/libelf/elf_begin.c	13
elfutils/libelf/../lib/system.h	2
elfutils/libelf/./common.h	4
/usr/include/x86_64-linux-gnu/bits/byteswap.h	3
elfutils/lib/eu-search.c	3
elfutils/libdwfl/dwfl_begin.c	1
elfutils/libdwfl/dwfl_error.c	4
elfutils/libdw/dwarf_error.c	2
elfutils/libdwfl/core-file.c	10
elfutils/libelf/elf_getphdrnum.c	3
elfutils/libelf/elf32_getshdr.c	5
elfutils/libelf/elf_getshdrnum.c	2
elfutils/libelf/./elf32_getshdr.c	5
elfutils/libelf/gelf_getphdr.c	1
elfutils/libelf/elf32_getphdr.c	2
elfutils/libelf/./elf32_getphdr.c	2
elfutils/libdwfl/segment.c	7
elfutils/libelf/elf_getdata_rawchunk.c	2
elfutils/libelf/../lib/eu-search.h	2
elfutils/libelf/gelf_getnote.c	1
elfutils/libdwfl/link_map.c	11
elfutils/libdwfl/open.c	4
elfutils/libelf/elf_kind.c	1
elfutils/libdwfl/gzip.c	6
elfutils/libdwfl/../lib/system.h	3
elfutils/zlib/gzlib.c	5
elfutils/zlib/gzread.c	10
elfutils/zlib/inflate.c	10
elfutils/zlib/gzclose.c	1
elfutils/zlib/gzwrite.c	4
elfutils/zlib/deflate.c	16
elfutils/zlib/crc32.c	5
elfutils/zlib/adler32.c	2
elfutils/zlib/trees.c	20
elfutils/zlib/inftrees.c	1
elfutils/zlib/inffast.c	1
elfutils/libelf/elf_memory.c	1
elfutils/libelf/elf_end.c	2
elfutils/libdwfl/image-header.c	1
elfutils/libelf/gelf_getehdr.c	2
elfutils/libdwfl/./libdwflP.h	4
elfutils/libelf/gelf_fsize.c	1
elfutils/libelf/gelf_getdyn.c	1
elfutils/libdwelf/dwelf_elf_gnu_build_id.c	4
elfutils/libelf/elf_nextscn.c	1
elfutils/libelf/gelf_getshdr.c	1
elfutils/libelf/elf_ndxscn.c	1
elfutils/libdwfl/relocate.c	8
elfutils/libelf/elf_getscn.c	1
elfutils/libelf/elf_getshdrstrndx.c	1
elfutils/libelf/elf_strptr.c	2
elfutils/libelf/elf_compress.c	8
elfutils/libelf/gelf_getchdr.c	1
elfutils/libelf/./elf32_getchdr.h	2
elfutils/libelf/elf_getdata.c	7
elfutils/libelf/gelf_update_shdr.c	1
elfutils/libdwfl/dwfl_report_elf.c	2
elfutils/libdwfl/dwfl_module.c	7
elfutils/libdwfl/derelocate.c	5
elfutils/libdwfl/dwfl_module_getdwarf.c	20
elfutils/libdwfl_stacktrace/dwflst_tracker_find_elf.c	2
elfutils/libelf/elf_hash.c	1
elfutils/libelf/./dl-hash.h	1
elfutils/libdwfl_stacktrace/./../lib/dynamicsizehash_concurrent.c	9
elfutils/lib/next_prime.c	2
elfutils/libdwfl/dwfl_module_build_id.c	2
elfutils/libdwelf/dwelf_elf_gnu_debuglink.c	1
elfutils/libelf/elf_rawdata.c	1
elfutils/libelf/gelf_xlatetom.c	1
elfutils/libelf/elf32_xlatetom.c	1
elfutils/libelf/./elf32_xlatetom.c	1
elfutils/libelf/elf_getident.c	1
elfutils/libelf/gelf_getclass.c	1
elfutils/libelf/elf_compress_gnu.c	1
elfutils/libelf/gelf_xlatetof.c	1
elfutils/libelf/elf32_xlatetof.c	1
elfutils/libelf/./elf32_xlatetof.c	1
elfutils/libebl/eblopenbackend.c	3
elfutils/libebl/ebldebugscnp.c	1
elfutils/libelf/gelf_getrel.c	1
elfutils/libebl/eblrelocsimpletype.c	1
elfutils/libelf/gelf_getsymshndx.c	1
elfutils/libebl/eblelfmachine.c	1
elfutils/libelf/gelf_update_rel.c	1
elfutils/libelf/gelf_getrela.c	1
elfutils/libelf/gelf_update_rela.c	1
elfutils/libdw/dwarf_begin_elf.c	8
elfutils/libdw/../lib/dynamicsizehash_concurrent.c	3
elfutils/libdw/./../lib/next_prime.c	2
elfutils/libdw/../lib/system.h	1
elfutils/libelf/elf_cntl.c	1
elfutils/libelf/elf_readall.c	2
elfutils/libdwelf/dwelf_dwarf_gnu_debugaltlink.c	1
elfutils/libdw/dwarf_setalt.c	1
elfutils/libdw/dwarf_end.c	4
elfutils/libdw/frame-cache.c	3
elfutils/libebl/eblclosebackend.c	1
elfutils/libdwfl/dwfl_segment_report_module.c	8
elfutils/libdwfl/dwfl_module_report_build_id.c	1
elfutils/libelf/elf_clone.c	1
elfutils/libdw/dwarf_cfi_end.c	1
elfutils/libdwfl/linux-core-attach.c	1
elfutils/libebl/eblinitreg.c	1
elfutils/libebl/eblcorenote.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1
elfutils/libdwfl/dwfl_frame.c	3
elfutils/libdwfl_stacktrace/dwflst_process_tracker.c	2
elfutils/libdwfl/dwfl_end.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
ia64_return_value_location	/src/elfutils/backends/ia64_retval.c	2	['N/A', 'N/A']	29	0	360	71	13	291	0	2928	1057
dwfl_getthread_frames	/src/elfutils/libdwfl/dwfl_frame.c	4	['N/A', 'int', 'N/A', 'N/A']	26	0	29	3	2	410	0	3814	694
riscv_disasm	/src/elfutils/libcpu/riscv_disasm.c	9	['N/A', 'N/A', 'N/A', 'size_t', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A']	1	0	5462	729	217	11	0	239	223
x86_64_disasm	/src/elfutils/libcpu/./i386_disasm.c	9	['N/A', 'N/A', 'N/A', 'size_t', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A']	1	0	4531	713	182	9	0	200	186
dwarf_getlocation_addr	/src/elfutils/libdw/dwarf_getlocation.c	5	['N/A', 'size_t', 'N/A', 'N/A', 'size_t']	28	0	294	46	19	288	0	2863	167
i386_disasm	/src/elfutils/libcpu/i386_disasm.c	9	['N/A', 'N/A', 'N/A', 'size_t', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A']	1	0	4147	639	165	9	0	183	165
dwfl_standard_find_debuginfo	/src/elfutils/libdwfl/find-debuginfo.c	8	['N/A', 'N/A', 'N/A', 'size_t', 'N/A', 'N/A', 'int', 'N/A']	17	0	195	36	15	222	0	2117	154
dwflst_tracker_linux_proc_find_elf	/src/elfutils/libdwfl_stacktrace/dwflst_tracker_find_elf.c	6	['N/A', 'N/A', 'N/A', 'size_t', 'N/A', 'N/A']	8	0	104	16	7	83	0	520	139
dwarf_default_lower_bound	/src/elfutils/libdw/dwarf_default_lower_bound.c	2	['int', 'N/A']	1	0	314	76	77	1	0	80	77
dwfl_linux_proc_report	/src/elfutils/libdwfl/linux-proc-maps.c	2	['N/A', 'int']	6	0	85	12	6	29	0	124	71

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

566 / 1203

Cyclomatic complexity statically reachable by fuzzers

6858 / 10181

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

fuzz-libelf.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pread_retry', 'inflate', 'deflate', 'load_shdr_wrlock', 'elf_begin', 'adler32', '__elf64_getshdr_rdlock', '_tr_flush_block', 'read_buf']

fuzz-libdwfl.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['elf_compress_gnu', 'crc32_z', 'find_debuginfo', 'load_dw', 'open_elf_file', 'find_elf_build_id', 'valid_p', 'load_shdr_wrlock', '__libelf_set_data_list_rdlock']

fuzz-dwfl-core.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['openbackend', 'elf32_xlatetom', 'adler32', 'integrated_memory_callback', '__libdwfl_canon_error', 'pread_retry', 'inflateEnd', '__libdw_gunzip', 'gelf_getehdr', 'dwfl_link_map_report']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
elf_begin	64	29	45.31%	['fuzz-libdwfl', 'fuzz-dwfl-core', 'fuzz-libelf']
__libelf_readall	55	30	54.54%	['fuzz-libdwfl', 'fuzz-dwfl-core', 'fuzz-libelf']
deflate	257	78	30.35%	['fuzz-libdwfl', 'fuzz-dwfl-core', 'fuzz-libelf']
dwarf_begin_elf	71	35	49.29%	['fuzz-dwfl-core', 'fuzz-libdwfl']
valid_p	128	19	14.84%	['fuzz-dwfl-core', 'fuzz-libdwfl']
dwelf_elf_gnu_debuglink	49	7	14.28%	['fuzz-dwfl-core', 'fuzz-libdwfl']
__libdwfl_module_free	47	19	40.42%	['fuzz-dwfl-core', 'fuzz-libdwfl']
open_elf	49	4	8.163%	['fuzz-dwfl-core', 'fuzz-libdwfl']
load_dw	44	9	20.45%	['fuzz-dwfl-core', 'fuzz-libdwfl']
__libdwfl_elf_address_range	149	60	40.26%	['fuzz-dwfl-core', 'fuzz-libdwfl']
dwfl_standard_find_debuginfo	32	17	53.12%	['fuzz-libdwfl']
find_debuginfo_in_path	145	67	46.20%	['fuzz-libdwfl']
process_archive_member	62	22	35.48%	['fuzz-libdwfl']
__elf32_getphdr_wrlock	146	64	43.83%	['fuzz-dwfl-core', 'fuzz-libdwfl']
__elf64_getphdr_wrlock	146	64	43.83%	['fuzz-dwfl-core', 'fuzz-libdwfl']
__libelf_next_arhdr_wrlock	141	73	51.77%	['fuzz-libdwfl', 'fuzz-dwfl-core', 'fuzz-libelf']
gz_open	126	60	47.61%	['fuzz-dwfl-core', 'fuzz-libdwfl']
gz_look	52	25	48.07%	['fuzz-dwfl-core', 'fuzz-libdwfl']
elf_begin_rand	47	18	38.29%	['fuzz-dwfl-core']
dwfl_attach_state	62	23	37.09%	['fuzz-dwfl-core']
reify_segments	64	7	10.93%	['fuzz-dwfl-core']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/elfutils/libdwfl/dwfl_report_elf.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_attr_integrate.c	[]	[]
/src/elfutils/libdw/dwarf_highpc.c	[]	[]
/src/elfutils/libdw/dwarf_next_cfi.c	[]	[]
/src/elfutils/libdw/dwarf_getalt.c	[]	[]
/src/elfutils/libelf/../lib/eu-search.h	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/dwfl_module_report_build_id.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_diecu.c	[]	[]
/src/elfutils/libcpu/riscv_disasm.c	[]	[]
/src/elfutils/backends/x86_64_unwind.c	[]	[]
/src/elfutils/libdwfl/frame_unwind.c	[]	[]
/src/elfutils/libdwfl/image-header.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libcpu/i386_disasm.c	[]	[]
/src/elfutils/backends/ppc_init.c	[]	[]
/src/elfutils/backends/csky_cfi.c	[]	[]
/src/elfutils/libdwfl/dwfl_end.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_formflag.c	[]	[]
/src/elfutils/libebl/eblelfclass.c	[]	[]
/src/elfutils/backends/arm_symbol.c	[]	[]
/src/elfutils/backends/loongarch_regs.c	[]	[]
/src/elfutils/libdw/dwarf_error.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libdwfl/relocate.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_get_units.c	[]	[]
/src/elfutils/backends/csky_initreg.c	[]	[]
/src/elfutils/backends/csky_init.c	[]	[]
/src/elfutils/libdw/dwarf_attr.c	[]	[]
/src/elfutils/backends/ppc64_retval.c	[]	[]
/src/elfutils/libelf/./version_xlate.h	[]	[]
/src/elfutils/backends/aarch64_initreg.c	[]	[]
/src/elfutils/backends/ppc64_init.c	[]	[]
/src/elfutils/libelf/elf_getdata.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/./lib/system.h	['fuzz-libelf', 'fuzz-libdwfl']	[]
/src/elfutils/libelf/elf_getarhdr.c	['fuzz-libdwfl']	['fuzz-libdwfl']
/src/elfutils/libdwfl/dwfl_frame.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/lib/next_prime.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/backends/ppc64_symbol.c	[]	[]
/src/elfutils/libebl/eblrelocsimpletype.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/sh_init.c	[]	[]
/src/elfutils/libdw/./encoded-value.h	[]	[]
/src/elfutils/libdw/dwarf_srclang.c	[]	[]
/src/elfutils/backends/loongarch_cfi.c	[]	[]
/src/elfutils/backends/./common-reloc.c	[]	[]
/src/elfutils/libelf/gelf_getchdr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-dwfl-core']
/src/elfutils/zlib/trees.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/backends/arm_initreg.c	[]	[]
/src/elfutils/libdw/dwarf_lowpc.c	[]	[]
/src/elfutils/backends/i386_corenote.c	[]	[]
/src/elfutils/zlib/adler32.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-dwfl-core']
/src/elfutils/libdwfl/dwfl_segment_report_module.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/zlib/zutil.c	[]	[]
/src/elfutils/libdw/dwarf_getlocation.c	[]	[]
/src/elfutils/libdw/dwarf_whatform.c	[]	[]
/src/elfutils/libdwfl/dwfl_module_getdwarf.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/lib/eu-search.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdwfl_stacktrace/./../lib/dynamicsizehash_concurrent.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libebl/eblnormalizepc.c	[]	[]
/src/elfutils/libelf/gelf_getdyn.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/dwfl_frame_regs.c	[]	[]
/src/elfutils/backends/riscv_init.c	[]	[]
/src/elfutils/backends/./linux-core-note.c	[]	[]
/src/elfutils/libdw/./../lib/next_prime.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libelf/elf_readall.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/backends/i386_symbol.c	[]	[]
/src/elfutils/libdwfl/derelocate.c	['fuzz-dwfl-core']	[]
/src/elfutils/zlib/deflate.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/backends/sh_retval.c	[]	[]
/src/elfutils/backends/i386_cfi.c	[]	[]
/src/elfutils/libelf/gelf_update_rel.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/loongarch_init.c	[]	[]
/src/elfutils/libdw/dwarf_setalt.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libelf/gelf_getrela.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/hexagon_symbol.c	[]	[]
/src/elfutils/zlib/inftrees.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/gelf_xlatetof.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/backends/sh_regs.c	[]	[]
/src/elfutils/backends/i386_init.c	[]	[]
/src/elfutils/backends/m68k_init.c	[]	[]
/src/elfutils/libelf/elf32_getshdr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libebl/ebldebugscnp.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libelf/elf_clone.c	['fuzz-dwfl-core']	[]
/src/elfutils/libdw/fde.c	[]	[]
/src/elfutils/libebl/eblclosebackend.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/backends/arc_symbol.c	[]	[]
/src/elfutils/libelf/./chdr_xlate.h	[]	[]
/src/elfutils/libelf/gelf_getsymshndx.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/arm_init.c	[]	[]
/src/elfutils/libebl/ebldwarftoregno.c	[]	[]
/src/elfutils/backends/riscv_retval.c	[]	[]
/src/elfutils/libelf/gelf_getnote.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/backends/alpha_retval.c	[]	[]
/src/elfutils/libdwfl/elf-from-memory.c	[]	[]
/src/elfutils/libelf/./elf32_offscn.c	[]	[]
/src/elfutils/backends/bpf_symbol.c	[]	[]
/src/elfutils/backends/ppc_symbol.c	[]	[]
/src/elfutils/libdwfl_stacktrace/dwflst_process_tracker.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libelf/./elf32_xlatetof.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/libelf/gelf_getphdr.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/loongarch_unwind.c	[]	[]
/src/elfutils/backends/arm_machineflagname.c	[]	[]
/src/elfutils/libelf/gelf_update_rela.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/ppc_cfi.c	[]	[]
/src/elfutils/libelf/elf32_xlatetof.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf']
/src/elfutils/backends/csky_symbol.c	[]	[]
/src/elfutils/libdw/dwarf_cfi_addrframe.c	[]	[]
/src/elfutils/libebl/eblelfmachine.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/riscv_regs.c	[]	[]
/src/elfutils/libdwfl/./libdwflP.h	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/cie.c	[]	[]
/src/elfutils/libdwfl/gzip.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/gelf_xlatetom.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/aarch64_init.c	[]	[]
/src/elfutils/libdwfl/linux-core-attach.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/zlib/gzclose.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libelf/gelf_getshdr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/./common.h	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libelf/./elf32_getshdr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/mips_initreg.c	[]	[]
/src/elfutils/libdw/dwarf_peel_type.c	[]	[]
/src/elfutils/libdw/dwarf_getcfi.c	[]	[]
/src/fuzz-dwfl-core.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_haschildren.c	[]	[]
/src/elfutils/zlib/inflate.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_aggregate_size.c	[]	[]
/src/elfutils/libdw/dwarf_getabbrev.c	[]	[]
/src/elfutils/libdw/../lib/dynamicsizehash_concurrent.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/bpf_regs.c	[]	[]
/src/elfutils/libdw/dwarf_formudata.c	[]	[]
/src/elfutils/libelf/elf32_xlatetom.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_formblock.c	[]	[]
/src/elfutils/backends/arc_init.c	[]	[]
/src/elfutils/libdwfl/segment.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_begin_elf.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libelf/elf_error.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/m68k_retval.c	[]	[]
/src/elfutils/libdw/dwarf_formaddr.c	[]	[]
/src/elfutils/libelf/../lib/system.h	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/dwfl_module_build_id.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libdwfl/dwfl_build_id_find_debuginfo.c	[]	[]
/src/elfutils/backends/./libebl_CPU.h	[]	[]
/src/elfutils/libelf/elf32_getphdr.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/s390_symbol.c	[]	[]
/src/elfutils/libdw/dwarf_siblingof.c	[]	[]
/src/elfutils/backends/ia64_init.c	[]	[]
/src/elfutils/backends/aarch64_regs.c	[]	[]
/src/elfutils/libelf/./gnuhash_xlate.h	[]	[]
/src/elfutils/libelf/elf_strptr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/elf_getshdrnum.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/loongarch_initreg.c	[]	[]
/src/elfutils/libdw/dwarf_end.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/dwfl_addrmodule.c	[]	[]
/src/elfutils/backends/s390_initreg.c	[]	[]
/src/elfutils/libdw/dwarf_tag.c	[]	[]
/src/elfutils/libdwfl/dwfl_module_dwarf_cfi.c	[]	[]
/src/elfutils/libelf/elf_compress.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-dwfl-core']
/src/elfutils/libdwfl/dwfl_module.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/hexagon_init.c	[]	[]
/src/elfutils/libdw/dwarf_begin.c	[]	[]
/src/elfutils/backends/x86_64_initreg.c	[]	[]
/src/elfutils/libdw/libdw_alloc.c	[]	[]
/src/elfutils/libdw/dwarf_hasattr_integrate.c	[]	[]
/src/elfutils/libelf/./dl-hash.h	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/i386_regs.c	[]	[]
/src/elfutils/libelf/gelf_fsize.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/./../lib/crc32_file.c	[]	[]
/src/elfutils/libelf/elf_nextscn.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/x86_64_initreg_sample.c	[]	[]
/src/elfutils/libdwfl/../lib/system.h	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/m68k_symbol.c	[]	[]
/src/elfutils/backends/sparc_init.c	[]	[]
/src/elfutils/libdwfl/dwfl_frame_pc.c	[]	[]
/src/elfutils/libdwfl/offline.c	['fuzz-libdwfl']	['fuzz-libdwfl']
/src/elfutils/libdwfl/dwfl_error.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libebl/eblopenbackend.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/backends/i386_retval.c	[]	[]
/src/elfutils/libdwfl/open.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_getcfi_elf.c	[]	[]
/src/elfutils/backends/sparc_retval.c	[]	[]
/src/elfutils/backends/ppc64_resolve_sym.c	[]	[]
/src/elfutils/libdwfl/dwfl_build_id_find_elf.c	[]	[]
/src/elfutils/backends/mips_regs.c	[]	[]
/src/elfutils/backends/s390_retval.c	[]	[]
/src/elfutils/libcpu/./i386_data.h	[]	[]
/src/elfutils/backends/mips_cfi.c	[]	[]
/src/elfutils/backends/i386_auxv.c	[]	[]
/src/elfutils/backends/ppc_auxv.c	[]	[]
/src/elfutils/libdwelf/dwelf_elf_gnu_build_id.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/elf_rawdata.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/backends/riscv_initreg.c	[]	[]
/src/elfutils/backends/i386_unwind.c	[]	[]
/src/elfutils/backends/sparc_symbol.c	[]	[]
/src/elfutils/backends/ppc_retval.c	[]	[]
/src/elfutils/libebl/eblabicfi.c	[]	[]
/src/elfutils/libelf/elf_rawfile.c	['fuzz-libelf']	['fuzz-libelf']
/src/elfutils/libdwfl/dwfl_module_eh_cfi.c	[]	[]
/src/elfutils/backends/aarch64_symbol.c	[]	[]
/src/elfutils/backends/riscv_cfi.c	[]	[]
/src/elfutils/libdw/./memory-access.h	[]	[]
/src/elfutils/backends/x86_64_symbol.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	['fuzz-dwfl-core']	[]
/src/elfutils/backends/arm_auxv.c	[]	[]
/src/elfutils/zlib/gzread.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libelf/gelf_getclass.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_formstring.c	[]	[]
/src/elfutils/backends/s390_init.c	[]	[]
/src/elfutils/libelf/./gelf_xlate.h	[]	[]
/src/elfutils/libdw/dwarf_hasattr.c	[]	[]
/src/elfutils/libelf/elf_hash.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_ranges.c	[]	[]
/src/elfutils/libdw/dwarf_formref.c	[]	[]
/src/elfutils/backends/sparc_initreg.c	[]	[]
/src/elfutils/libelf/elf_compress_gnu.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl']
/src/elfutils/libdw/../lib/eu-search.h	[]	[]
/src/elfutils/libelf/gelf_getrel.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/m68k_initreg.c	[]	[]
/src/elfutils/libdw/dwarf_offdie.c	[]	[]
/src/elfutils/backends/s390_cfi.c	[]	[]
/src/elfutils/libdw/dwarf_cfi_end.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/zlib/crc32.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/fuzz-libdwfl.c	['fuzz-libdwfl']	['fuzz-libdwfl']
/src/elfutils/backends/loongarch_retval.c	[]	[]
/src/elfutils/libdw/./libdwP.h	[]	[]
/src/elfutils/libelf/elf_getphdrnum.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/csky_attrs.c	[]	[]
/src/elfutils/libdwfl_stacktrace/dwflst_tracker_find_elf.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/ia64_symbol.c	[]	[]
/src/elfutils/libelf/./elf32_getchdr.h	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/mips_init.c	[]	[]
/src/elfutils/libdwfl/linux-pid-attach.c	[]	[]
/src/elfutils/libcpu/./i386_disasm.c	[]	[]
/src/elfutils/backends/aarch64_cfi.c	[]	[]
/src/elfutils/libelf/elf_version.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libelf/elf_kind.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdwfl/find-debuginfo.c	[]	[]
/src/elfutils/backends/x86_64_retval.c	[]	[]
/src/elfutils/libelf/./elf32_getphdr.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/ppc64_unwind.c	[]	[]
/src/elfutils/libdw/libdw_find_split_unit.c	[]	[]
/src/elfutils/backends/mips_unwind.c	[]	[]
/src/elfutils/libdw/libdw_findcu.c	[]	[]
/src/elfutils/backends/sparc_cfi.c	[]	[]
/src/elfutils/libelf/elf_getscn.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_bytesize.c	[]	[]
/src/elfutils/backends/csky_regs.c	[]	[]
/src/elfutils/backends/aarch64_retval.c	[]	[]
/src/elfutils/backends/x86_64_regs.c	[]	[]
/src/elfutils/backends/mips_symbol.c	[]	[]
/src/elfutils/libdw/cfi.c	[]	[]
/src/elfutils/backends/m68k_cfi.c	[]	[]
/src/elfutils/libelf/elf_end.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/sh_symbol.c	[]	[]
/src/elfutils/libelf/./elf32_xlatetom.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libcpu/bpf_disasm.c	[]	[]
/src/elfutils/zlib/gzlib.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/libelf/elf_memory.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdwfl/./../lib/crc32.c	[]	[]
/src/elfutils/libebl/eblinitreg.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libelf/elf_next.c	['fuzz-libdwfl']	[]
/src/elfutils/backends/./x86_initreg_sample.c	[]	[]
/src/elfutils/libdw/dwarf_child.c	[]	[]
/src/elfutils/libdwfl/linux-proc-maps.c	[]	[]
/src/fuzz-libelf.c	['fuzz-libelf']	['fuzz-libelf']
/src/elfutils/libelf/elf_getdata_rawchunk.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libelf/elf_begin.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdw/dwarf_cu_dwp_section_info.c	[]	[]
/src/elfutils/backends/sparc_auxv.c	[]	[]
/src/elfutils/libdw/dwarf_bitsize.c	[]	[]
/src/elfutils/libelf/elf_getident.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/backends/ppc_regs.c	[]	[]
/src/elfutils/backends/i386_initreg.c	[]	[]
/src/elfutils/backends/arm_retval.c	[]	[]
/src/elfutils/libelf/gelf_getehdr.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/libdwelf/dwelf_elf_gnu_debuglink.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl']
/src/elfutils/backends/arm_regs.c	[]	[]
/src/elfutils/backends/alpha_init.c	[]	[]
/src/elfutils/backends/sparc_attrs.c	[]	[]
/src/elfutils/libelf/elf_ndxscn.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libebl/eblunwind.c	[]	[]
/src/elfutils/backends/sparc_regs.c	[]	[]
/src/elfutils/libelf/gelf_offscn.c	[]	[]
/src/elfutils/libdw/dwarf_formref_die.c	[]	[]
/src/elfutils/libdw/dwarf_frame_register.c	[]	[]
/src/elfutils/backends/i386_initreg_sample.c	[]	[]
/src/elfutils/libelf/./note_xlate.h	[]	[]
/src/elfutils/zlib/inffast.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/x86_64_init.c	[]	[]
/src/elfutils/libelf/elf_getshdrstrndx.c	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/m68k_regs.c	[]	[]
/src/elfutils/backends/ia64_retval.c	[]	[]
/src/elfutils/libdwelf/dwelf_dwarf_gnu_debugaltlink.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libelf/gelf_update_shdr.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/zlib/gzwrite.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdwfl/core-file.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/libdwfl/link_map.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']
/src/elfutils/backends/ia64_regs.c	[]	[]
/src/elfutils/backends/alpha_regs.c	[]	[]
/src/elfutils/backends/arm_cfi.c	[]	[]
/src/elfutils/backends/mips_retval.c	[]	[]
/src/elfutils/libelf/elf_cntl.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_default_lower_bound.c	[]	[]
/src/elfutils/libdw/dwarf_frame_cfa.c	[]	[]
/src/elfutils/backends/ppc_attrs.c	[]	[]
/src/elfutils/libdwfl/dwfl_begin.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	['fuzz-libdwfl', 'fuzz-dwfl-core']
/src/elfutils/backends/bpf_init.c	[]	[]
/usr/include/x86_64-linux-gnu/bits/byteswap.h	['fuzz-libelf', 'fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/libdw/dwarf_formsdata.c	[]	[]
/src/elfutils/libdw/libdw_form.c	[]	[]
/src/elfutils/backends/alpha_symbol.c	[]	[]
/src/elfutils/backends/ppc_initreg.c	[]	[]
/src/elfutils/backends/arm_attrs.c	[]	[]
/src/elfutils/backends/riscv_symbol.c	[]	[]
/src/elfutils/backends/./x86_corenote.c	[]	[]
/src/elfutils/backends/s390_unwind.c	[]	[]
/src/elfutils/libdw/dwarf_nextcu.c	[]	[]
/src/elfutils/libelf/gelf_xlate.c	[]	[]
/src/elfutils/backends/s390_regs.c	[]	[]
/src/elfutils/libdw/frame-cache.c	['fuzz-libdwfl', 'fuzz-dwfl-core']	[]
/src/elfutils/backends/loongarch_symbol.c	[]	[]
/src/elfutils/backends/alpha_auxv.c	[]	[]
/src/elfutils/libelf/elf32_offscn.c	[]	[]
/src/elfutils/backends/x86_64_cfi.c	[]	[]
/src/elfutils/backends/aarch64_unwind.c	[]	[]
/src/elfutils/libebl/eblcorenote.c	['fuzz-dwfl-core']	['fuzz-dwfl-core']

Directories in report

Directory
/src/elfutils/backends/
/src/elfutils/libcpu/./
/src/elfutils/libdwfl/
/src/elfutils/lib/
/usr/include/x86_64-linux-gnu/bits/
/src/elfutils/libdw/./
/src/elfutils/libelf/../lib/
/src/elfutils/libdw/./../lib/
/src/elfutils/libdwelf/
/src/elfutils/libdwfl/./../lib/
/src/elfutils/libdwfl_stacktrace/./../lib/
/src/elfutils/zlib/
/src/elfutils/libdw/../lib/
/src/elfutils/./lib/
/src/elfutils/libdwfl_stacktrace/
/src/elfutils/libdwfl/./
/src/elfutils/libelf/./
/src/elfutils/libdwfl/../lib/
/src/elfutils/libcpu/
/src/elfutils/libelf/
/src/
/src/elfutils/backends/./
/src/elfutils/libdw/
/src/elfutils/libebl/