High level conclusions

Fuzzers reach 41.19% of cyclomatic complexity.

Fuzzers reach 43.88% of all functions.

Fuzzer flb-it-fuzz-engine_fuzzer_OSSFUZZ is blocked:

The runtime code coverage of flb-it-fuzz-engine_fuzzer_OSSFUZZ covers 15.90% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

1181/2691

Cyclomatic complexity statically reachable by fuzzers

7804/18943

Functions covered at runtime

1467

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: flb-it-fuzz-ctrace_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	100.%
All colors	1	100

Runtime coverage analysis

Covered functions

150

Functions that are reachable but not covered

0

Reachable functions

1

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/ctrace_fuzzer.c	1

Fuzzer: flb-it-fuzz-base64_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	3	100.%
All colors	3	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	flb_base64_encode	call site	/src/fluent-bit/src/flb_base64.c:95
0	0	None	0	0	flb_base64_encode	call site	/src/fluent-bit/src/flb_base64.c:103

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

0

Reachable functions

3

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/base64_fuzzer.c	1
src/flb_base64.c	2

Fuzzer: flb-it-fuzz-msgpack_to_gelf_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	28	19.0%
gold	[1:9]	2	1.36%
yellow	[10:29]	2	1.36%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	115	78.2%
All colors	147	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
2	2	1 : View List ['flb_worker_log_level']	2	2	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:105
0	61	2 : View List ['flb_log_check.123', 'flb_log_print']	0	61	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:446
0	0	None	18	1528	flb_msgpack_to_gelf	call site	/src/fluent-bit/src/flb_pack_gelf.c:469
0	0	None	2	71	flb_sds_create	call site	/src/fluent-bit/src/flb_sds.c:81
0	0	None	0	195	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:422
0	0	None	0	65	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:439
0	0	None	0	61	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:430
0	0	None	0	2	flb_msgpack_to_gelf	call site	/src/fluent-bit/src/flb_pack_gelf.c:631
0	0	None	0	2	flb_msgpack_gelf_flatten	call site	/src/fluent-bit/src/flb_pack_gelf.c:357
0	0	None	0	0	flb_calloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:84
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:70

Runtime coverage analysis

Covered functions

68

Functions that are reachable but not covered

21

Reachable functions

51

Percentage of reachable functions covered

58.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/msgpack_to_gelf_fuzzer.c	1
src/flb_sds.c	9
include/fluent-bit/flb_mem.h	5
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	1
src/flb_pack_gelf.c	6
include/fluent-bit/flb_sds.h	3
include/fluent-bit/flb_utf8.h	2

Fuzzer: flb-it-fuzz-utils_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	87	23.4%
gold	[1:9]	17	4.58%
yellow	[10:29]	18	4.85%
greenyellow	[30:49]	18	4.85%
lawngreen	50+	231	62.2%
All colors	371	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
2	8	2 : View List ['flb_hash_table_entry_free', 'time']	2	8	flb_hash_table_get	call site	/src/fluent-bit/src/flb_hash_table.c:396
2	2	1 : View List ['flb_worker_log_level']	2	2	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:105
2	2	1 : View List ['ERR_get_error']	2	2	flb_hash_init	call site	/src/fluent-bit/src/flb_hash.c:66
2	2	1 : View List ['ERR_get_error']	2	2	flb_hash_finalize	call site	/src/fluent-bit/src/flb_hash.c:99
2	2	1 : View List ['ERR_get_error']	2	2	flb_hash_update	call site	/src/fluent-bit/src/flb_hash.c:128
2	2	1 : View List ['EVP_sha256']	2	2	flb_crypto_get_digest_algorithm_instance_by_id	call site	/src/fluent-bit/src/flb_hash.c:25
2	2	1 : View List ['EVP_md5']	2	2	flb_crypto_get_digest_algorithm_instance_by_id	call site	/src/fluent-bit/src/flb_hash.c:28
0	130	5 : View List ['flb_sds_increase', 'flb_sds_len.122', 'flb_log_print', 'flb_log_check.123', 'flb_sds_avail']	0	130	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:437
0	0	None	18	34	flb_utils_proxy_url_split	call site	/src/fluent-bit/src/flb_utils.c:1029
0	0	None	16	87	flb_utils_url_split	call site	/src/fluent-bit/src/flb_utils.c:926
0	0	None	10	10	flb_utils_size_to_bytes	call site	/src/fluent-bit/src/flb_utils.c:408

Runtime coverage analysis

Covered functions

293

Functions that are reachable but not covered

42

Reachable functions

125

Percentage of reachable functions covered

66.4%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/utils_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	5
src/flb_utils.c	14
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	1
include/fluent-bit/flb_utf8.h	2
include/fluent-bit/flb_str.h	2
src/flb_uri.c	5
src/flb_sds.c	8
include/fluent-bit/flb_uri.h	1
include/fluent-bit/flb_sds.h	3
src/flb_hash_table.c	14
src/flb_gzip.c	5
src/flb_hash.c	5
src/flb_regex.c	7
src/flb_slist.c	5

Fuzzer: flb-it-fuzz-strp_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	1.47%
greenyellow	[30:49]	6	8.82%
lawngreen	50+	61	89.7%
All colors	68	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:70
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:75
0	0	None	0	0	flb_fuzz_get_probability	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:58
0	0	None	0	0	_conv_num64	call site	/src/fluent-bit/src/flb_strptime.c:697
0	0	None	0	0	_conv_num64	call site	/src/fluent-bit/src/flb_strptime.c:716

Runtime coverage analysis

Covered functions

11

Functions that are reachable but not covered

7

Reachable functions

18

Percentage of reachable functions covered

61.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/strp_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	3
src/flb_strptime.c	6

Fuzzer: flb-it-fuzz-pack_json_state_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	63.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	24	36.3%
All colors	66	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
61	65	3 : View List ['flb_errno_print', '__errno_location', 'flb_realloc']	61	177	pack_string_token	call site	/src/fluent-bit/src/flb_pack.c:125
0	2	1 : View List ['octal_digit']	2	4	u8_read_escape_sequence	call site	/src/fluent-bit/src/flb_unescape.c:91
0	0	None	122	165	flb_unescape_string_utf8	call site	/src/fluent-bit/src/flb_unescape.c:176
0	0	None	122	122	flb_unescape_string_utf8	call site	/src/fluent-bit/src/flb_unescape.c:196
0	0	None	61	67	flb_pack_state_init	call site	/src/fluent-bit/src/flb_pack.c:312
0	0	None	61	65	flb_json_tokenise	call site	/src/fluent-bit/src/flb_pack.c:72
0	0	None	2	8	u8_read_escape_sequence	call site	/src/fluent-bit/src/flb_unescape.c:98
0	0	None	2	8	u8_read_escape_sequence	call site	/src/fluent-bit/src/flb_unescape.c:106
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:70
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:75
0	0	None	0	0	flb_fuzz_get_probability	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:58
0	0	None	0	0	flb_pack_state_init	call site	/src/fluent-bit/src/flb_pack.c:322

Runtime coverage analysis

Covered functions

35

Functions that are reachable but not covered

24

Reachable functions

41

Percentage of reachable functions covered

41.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/pack_json_state_fuzzer.c	1
src/flb_pack.c	7
include/fluent-bit/flb_mem.h	4
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	1
src/flb_unescape.c	5

Fuzzer: flb-it-fuzz-flb_json_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	77	38.8%
gold	[1:9]	4	2.02%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	117	59.0%
All colors	198	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
7	7	2 : View List ['flb_mp_count', 'msgpack_pack_array']	7	779	flb_pack_msgpack_to_json_format	call site	/src/fluent-bit/src/flb_pack.c:926
2	2	1 : View List ['flb_worker_log_level']	2	2	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:105
0	186	1 : View List ['flb_msgpack_raw_to_json_sds']	0	193	flb_pack_msgpack_to_json_format	call site	/src/fluent-bit/src/flb_pack.c:1084
0	2	1 : View List ['octal_digit']	2	4	u8_read_escape_sequence	call site	/src/fluent-bit/src/flb_unescape.c:91
0	0	None	61	290	flb_msgpack_raw_to_json_sds	call site	/src/fluent-bit/src/flb_pack.c:757
0	0	None	61	217	flb_msgpack_to_json_str	call site	/src/fluent-bit/src/flb_pack.c:1126
0	0	None	61	67	flb_pack_state_init	call site	/src/fluent-bit/src/flb_pack.c:312
0	0	None	61	66	flb_msgpack_raw_to_json_sds	call site	/src/fluent-bit/src/flb_pack.c:775
0	0	None	61	65	flb_json_tokenise	call site	/src/fluent-bit/src/flb_pack.c:72
0	0	None	61	61	flb_msgpack_to_json_str	call site	/src/fluent-bit/src/flb_pack.c:1137
0	0	None	7	779	flb_pack_msgpack_to_json_format	call site	/src/fluent-bit/src/flb_pack.c:906

Runtime coverage analysis

Covered functions

105

Functions that are reachable but not covered

28

Reachable functions

76

Percentage of reachable functions covered

63.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/flb_json_fuzzer.c	1
src/flb_pack.c	16
include/fluent-bit/flb_mem.h	4
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	6
src/flb_unescape.c	5
src/flb_utils.c	2
include/fluent-bit/flb_utf8.h	2
src/flb_sds.c	7
src/flb_mp.c	2
include/fluent-bit/flb_sds.h	4

Fuzzer: flb-it-fuzz-msgpack_parse_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	39	40.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	58	59.7%
All colors	97	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	61	290	flb_msgpack_raw_to_json_sds	call site	/src/fluent-bit/src/flb_pack.c:757
0	0	None	61	66	flb_msgpack_raw_to_json_sds	call site	/src/fluent-bit/src/flb_pack.c:775
0	0	None	0	6	msgpack2json	call site	/src/fluent-bit/src/flb_pack.c:592
0	0	None	0	0	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:109
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:70
0	0	None	0	0	flb_malloc	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:75
0	0	None	0	0	flb_fuzz_get_probability	call site	/src/fluent-bit/include/fluent-bit/flb_mem.h:58
0	0	None	0	0	flb_msgpack_to_json	call site	/src/fluent-bit/src/flb_pack.c:728
0	0	None	0	0	flb_sds_increase	call site	/src/fluent-bit/src/flb_sds.c:108
0	0	None	0	0	sds_alloc	call site	/src/fluent-bit/src/flb_sds.c:42
0	0	None	0	0	flb_utils_write_str	call site	/src/fluent-bit/src/flb_utils.c:703

Runtime coverage analysis

Covered functions

58

Functions that are reachable but not covered

22

Reachable functions

42

Percentage of reachable functions covered

47.62%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/msgpack_parse_fuzzer.c	1
src/flb_pack.c	5
src/flb_sds.c	4
include/fluent-bit/flb_mem.h	4
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	1
src/flb_utils.c	2
include/fluent-bit/flb_utf8.h	2
include/fluent-bit/flb_sds.h	2

Fuzzer: flb-it-fuzz-record_ac_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	232	45.6%
gold	[1:9]	30	5.90%
yellow	[10:29]	7	1.37%
greenyellow	[30:49]	5	0.98%
lawngreen	50+	234	46.0%
All colors	508	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
338	338	3 : View List ['flb_env_destroy', 'flb_env_create', 'flb_env_var_translate']	340	1149	flb_ra_create	call site	/src/fluent-bit/src/flb_record_accessor.c:262
88	88	8 : View List ['clearerr', 'flb_ra_restart', 'getc', 'ferror', 'fread', '__errno_location', 'flb_ra_realloc', 'yy_fatal_error']	88	88	yy_get_next_buffer	call site	/src/fluent-bit/build/src/record_accessor/ra_lex.c:1239
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
2	217	5 : View List ['flb_errno_print', 'flb_realloc', '__errno_location', 'flb_free.33', 'flb_msgpack_to_json']	2	217	flb_msgpack_to_json_str	call site	/src/fluent-bit/src/flb_pack.c:1133
2	65	3 : View List ['flb_errno_print', '__errno_location', 'flb_realloc']	2	177	pack_string_token	call site	/src/fluent-bit/src/flb_pack.c:125
2	2	1 : View List ['__errno_location']	2	2	flb_ra_lex_init	call site	/src/fluent-bit/build/src/record_accessor/ra_lex.c:2063
2	2	1 : View List ['flb_worker_log_level']	2	2	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:105
0	5	1 : View List ['flb_sds_destroy']	0	23	flb_ra_create	call site	/src/fluent-bit/src/flb_record_accessor.c:312
0	2	1 : View List ['octal_digit']	2	4	u8_read_escape_sequence	call site	/src/fluent-bit/src/flb_unescape.c:91
0	0	None	19	176	flb_ra_lex	call site	/src/fluent-bit/build/src/record_accessor/ra_lex.c:964
0	0	None	19	174	flb_ra_lex	call site	/src/fluent-bit/build/src/record_accessor/ra_lex.c:1122
0	0	None	19	174	flb_ra_lex	call site	/src/fluent-bit/build/src/record_accessor/ra_lex.c:1158

Runtime coverage analysis

Covered functions

154

Functions that are reachable but not covered

67

Reachable functions

162

Percentage of reachable functions covered

58.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/record_ac_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	5
src/flb_pack.c	13
src/flb_log.c	3
include/fluent-bit/flb_log.h	1
src/flb_worker.c	2
src/flb_pipe.c	1
src/flb_time.c	1
src/flb_unescape.c	5
src/flb_sds.c	8
src/flb_record_accessor.c	14
src/flb_env.c	7
src/flb_hash_table.c	11
include/fluent-bit/flb_str.h	2
include/fluent-bit/flb_sds.h	4
src/record_accessor/flb_ra_parser.c	12
build/src/record_accessor/ra_lex.c	23
build/src/record_accessor/ra_parser.c	4
build/src/record_accessor/ra.l	1
build/src/record_accessor/ra.y	1
src/flb_ra_key.c	5
src/flb_utils.c	2
include/fluent-bit/flb_utf8.h	2
src/flb_regex.c	1

Fuzzer: flb-it-fuzz-engine_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	911	93.2%
gold	[1:9]	51	5.22%
yellow	[10:29]	10	1.02%
greenyellow	[30:49]	1	0.10%
lawngreen	50+	4	0.40%
All colors	977	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
5604	5604	2 : View List ['flb_hs_start', 'flb_hs_create']	9737	13498	flb_engine_start	call site	/src/fluent-bit/src/flb_engine.c:786
1394	1394	3 : View List ['flb_output_instance_destroy', 'flb_output_thread_pool_start', 'flb_output_thread_pool_create']	1394	1394	flb_output_enable_multi_threading	call site	/src/fluent-bit/src/flb_output.c:945
1245	1245	2 : View List ['flb_ring_buffer_add_event_loop', 'flb_input_thread_instance_init']	3225	3473	flb_input_instance_init	call site	/src/fluent-bit/src/flb_input.c:1124
816	885	4 : View List ['flb_config_exit', 'flb_log_check', 'flb_destroy', 'flb_log_print']	816	885	flb_create	call site	/src/fluent-bit/src/flb_lib.c:197
795	795	2 : View List ['flb_engine_dispatch_retry', 'flb_sched_request_destroy']	795	795	flb_sched_event_handler	call site	/src/fluent-bit/src/flb_scheduler.c:400
178	239	3 : View List ['flb_log_check.1298', 'flb_config_exit', 'flb_log_print']	178	239	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:323
163	289	12 : View List ['flb_log_check_level.9069', 'cio_chunk_get_content_size', 'cio_chunk_is_up', 'cio_chunk_lock', 'flb_input_name', 'cio_error_get', 'sb_append_chunk_to_segregated_backlogs', 'cio_chunk_close', 'flb_log_print', 'cio_chunk_up_force', 'sb_allocate_backlogs', 'cio_chunk_down']	163	289	sb_segregate_chunks	call site	/src/fluent-bit/plugins/in_storage_backlog/sb.c:338
145	206	4 : View List ['flb_free.1389', 'flb_log_check.1387', 'parse_string_map_to_list', 'flb_log_print']	145	206	translate_default_value	call site	/src/fluent-bit/src/flb_config_map.c:167
138	138	1 : View List ['flb_tls_create']	7983	9909	flb_input_instance_init	call site	/src/fluent-bit/src/flb_input.c:1018
126	126	4 : View List ['flb_task_queue_create', 'flb_free.975', 'flb_errno_print', '__errno_location']	126	130	flb_output_new	call site	/src/fluent-bit/src/flb_output.c:679
113	113	2 : View List ['flb_net_host_set', 'flb_task_queue_destroy']	239	243	flb_output_new	call site	/src/fluent-bit/src/flb_output.c:666
92	275	3 : View List ['flb_log_print', 'flb_log_check.2899', 'flb_router_match']	92	340	flb_router_io_set	call site	/src/fluent-bit/src/flb_router.c:181

Runtime coverage analysis

Covered functions

483

Functions that are reachable but not covered

238

Reachable functions

283

Percentage of reachable functions covered

15.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/engine_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	5
src/flb_lib.c	7
src/flb_output.c	9
src/flb_log.c	8
include/fluent-bit/flb_log.h	2
src/flb_worker.c	4
src/flb_pipe.c	2
src/flb_time.c	8
src/flb_callback.c	2
src/flb_hash_table.c	11
src/flb_task.c	6
src/flb_network.c	1
src/flb_sds.c	6
src/flb_uri.c	2
include/fluent-bit/flb_str.h	2
src/flb_kv.c	4
src/flb_filter.c	7
src/flb_input.c	19
src/flb_ring_buffer.c	4
src/flb_config.c	2
include/fluent-bit/flb_sds.h	4
src/flb_input_chunk.c	38
src/flb_routes_mask.c	5
src/flb_chunk_trace.c	14
include/fluent-bit/flb_input.h	1
src/flb_input_thread.c	2
src/flb_engine.c	3
src/flb_router.c	3
src/tls/flb_tls.c	1
src/flb_config_map.c	2
src/flb_slist.c	1
src/flb_scheduler.c	6
src/flb_event.c	1
src/flb_metrics.c	3
src/flb_storage.c	2
src/flb_regex.c	1
src/flb_output_thread.c	1
include/fluent-bit/flb_output_plugin.h	1
src/flb_thread_pool.c	1
src/flb_custom.c	3
src/flb_metrics_exporter.c	1
src/http_server/flb_hs.c	1
src/http_server/api/v1/health.c	1
src/http_server/flb_hs_endpoints.c	1
src/flb_env.c	1
src/flb_plugin.c	2
src/flb_parser.c	2
src/flb_parser_decoder.c	1
src/multiline/flb_ml.c	1
src/multiline/flb_ml_parser.c	2
src/multiline/flb_ml_rule.c	2
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	1
src/config_format/flb_config_format.c	5
plugins/in_storage_backlog/sb.c	7
src/flb_pack.c	1
plugins/in_emitter/emitter.c	4
src/flb_input_log.c	2
src/flb_mp.c	2

Fuzzer: flb-it-fuzz-parse_logfmt_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	595	69.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	4	0.46%
lawngreen	50+	258	30.1%
All colors	857	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
541	541	1 : View List ['flb_parser_ltsv_do']	541	541	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:965
514	514	1 : View List ['flb_parser_json_do']	514	514	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:961
336	336	1 : View List ['flb_parser_regex_do']	336	336	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:957
290	290	2 : View List ['flb_parser_decoder_do', 'msgpack_sbuffer_destroy.4308']	290	290	flb_parser_logfmt_do	call site	/src/fluent-bit/src/flb_parser_logfmt.c:314
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
4	4	1 : View List ['close']	23	183	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:396
4	4	1 : View List ['getpagesize']	8	1260	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:279

Runtime coverage analysis

Covered functions

275

Functions that are reachable but not covered

120

Reachable functions

202

Percentage of reachable functions covered

40.59%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/parse_logfmt_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	5
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	7
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	11
src/flb_regex.c	8
src/flb_parser_decoder.c	7
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	2
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
include/fluent-bit/flb_sds.h	3
src/flb_pack.c	8
src/flb_unescape.c	7
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2

Fuzzer: flb-it-fuzz-config_random_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	457	44.0%
gold	[1:9]	37	3.56%
yellow	[10:29]	21	2.02%
greenyellow	[30:49]	11	1.06%
lawngreen	50+	511	49.2%
All colors	1037	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
61	61	1 : View List ['flb_utils_error']	61	1291	flb_parser_conf_file	call site	/src/fluent-bit/src/flb_parser.c:887
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
14	2025	23 : View List ['strchr', 'flb_cf_group_create', 'config_error', 'flb_errno_print', 'flb_malloc.3675', 'strlen', 'check_indent', '__errno_location', 'flb_cf_meta_property_add', '__ctype_b_loc', 'flb_cf_section_property_add', 'config_warn', 'read_config', 'strncasecmp', 'read_glob', 'flb_sds_create', 'char_search', 'flb_cf_section_create', 'mk_list_add.3656', 'fgets', 'flb_sds_len.3662', 'flb_sds_create_len', 'feof']	18	2044	read_config	call site	/src/fluent-bit/src/config_format/flb_cf_fluentbit.c:546
4	4	1 : View List ['close']	23	183	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:396
4	4	1 : View List ['getpagesize']	8	1260	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:279
4	4	1 : View List ['strncmp']	4	4	hash_get_entry	call site	/src/fluent-bit/src/flb_hash_table.c:213
2	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	2	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
2	2	1 : View List ['stat']	26	2359	read_config	call site	/src/fluent-bit/src/config_format/flb_cf_fluentbit.c:441
2	2	1 : View List ['strlen']	4	116	flb_cf_meta_property_add	call site	/src/fluent-bit/src/config_format/flb_config_format.c:409

Runtime coverage analysis

Covered functions

498

Functions that are reachable but not covered

77

Reachable functions

208

Percentage of reachable functions covered

62.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/config_random_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	4
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	14
src/flb_sds.c	10
src/flb_env.c	7
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	12
src/flb_regex.c	5
src/flb_parser_decoder.c	3
src/multiline/flb_ml.c	3
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	10
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	3
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_utils.c	5
src/config_format/flb_cf_fluentbit.c	10
include/fluent-bit/flb_sds.h	5

Fuzzer: flb-it-fuzz-config_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1385	67.0%
gold	[1:9]	33	1.59%
yellow	[10:29]	14	0.67%
greenyellow	[30:49]	4	0.19%
lawngreen	50+	630	30.4%
All colors	2066	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
541	541	1 : View List ['flb_parser_ltsv_do']	541	541	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:965
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
79	79	1 : View List ['flb_slist_add']	79	79	flb_slist_split_tokens	call site	/src/fluent-bit/src/flb_slist.c:200
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
16	16	1 : View List ['strncasecmp']	16	16	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:90
6	6	1 : View List ['strcasecmp']	6	6	flb_ml_type_lookup	call site	/src/fluent-bit/src/multiline/flb_ml.c:85
5	5	2 : View List ['merge_record_and_extra_keys', 'msgpack_sbuffer_destroy.4212']	5	5	flb_parser_decoder_do	call site	/src/fluent-bit/src/flb_parser_decoder.c:537
4	4	1 : View List ['close']	23	183	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:396
4	4	1 : View List ['getpagesize']	8	1260	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:279

Runtime coverage analysis

Covered functions

469

Functions that are reachable but not covered

303

Reachable functions

478

Percentage of reachable functions covered

36.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/config_fuzzer.c	1
src/flb_config.c	8
include/fluent-bit/flb_mem.h	5
src/flb_log.c	7
include/fluent-bit/flb_log.h	2
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	8
src/config_format/flb_config_format.c	14
src/flb_sds.c	10
src/flb_env.c	7
src/flb_hash_table.c	12
src/flb_plugin.c	12
src/flb_scheduler.c	6
src/flb_parser.c	18
src/flb_regex.c	8
src/flb_parser_decoder.c	9
src/multiline/flb_ml.c	3
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	11
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	6
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_utils.c	5
src/config_format/flb_cf_fluentbit.c	10
include/fluent-bit/flb_sds.h	5
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
src/flb_pack.c	9
src/flb_unescape.c	7
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2
tests/internal/fuzzers/flb_fuzz_header.h	1
src/flb_plugin_proxy.c	15
src/flb_api.c	2
src/flb_output.c	8
src/flb_input.c	17
src/proxy/go/go.c	10
include/fluent-bit/flb_output.h	2
src/flb_coro.c	1
src/flb_output_thread.c	2
src/flb_input_log.c	2
src/flb_mp.c	2
src/flb_input_chunk.c	35
src/flb_ring_buffer.c	3
src/flb_task.c	5
src/flb_routes_mask.c	5
src/flb_chunk_trace.c	14
include/fluent-bit/flb_input.h	1
src/flb_input_thread.c	2
src/flb_lib.c	2
src/flb_engine.c	3
src/flb_router.c	3
src/flb_uri.c	1
src/tls/flb_tls.c	1
src/flb_config_map.c	2
src/flb_event.c	1
src/flb_metrics.c	3
src/flb_storage.c	2
src/flb_filter.c	5
include/fluent-bit/flb_output_plugin.h	1
src/flb_thread_pool.c	1
src/flb_callback.c	1
src/flb_custom.c	3
src/flb_metrics_exporter.c	1
src/http_server/flb_hs.c	1
src/http_server/api/v1/health.c	1
src/http_server/flb_hs_endpoints.c	1
plugins/in_storage_backlog/sb.c	7
plugins/in_emitter/emitter.c	4

Fuzzer: flb-it-fuzz-multiline_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	628	57.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.09%
greenyellow	[30:49]	2	0.18%
lawngreen	50+	468	42.5%
All colors	1099	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1099	1099	2 : View List ['flb_parser_ltsv_do', 'flb_parser_logfmt_do']	1099	1099	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:961
302	302	8 : View List ['flb_regex_parse', 'msgpack_pack_map.4050', 'ntohs', 'msgpack_sbuffer_destroy.4047', 'msgpack_sbuffer_init.4056', 'ntohl', 'msgpack_packer_init.4055', 'flb_parser_decoder_do']	302	302	flb_parser_regex_do	call site	/src/fluent-bit/src/flb_parser_regex.c:133
290	290	3 : View List ['flb_parser_decoder_do', 'msgpack_unpack_next', 'msgpack_unpacked_init.4096']	294	605	flb_parser_json_do	call site	/src/fluent-bit/src/flb_parser_json.c:94
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
70	340	4 : View List ['package_content', 'flb_time_pop_from_msgpack', 'get_key_id', 'msgpack_unpacked_destroy']	70	340	process_append	call site	/src/fluent-bit/src/multiline/flb_ml.c:433
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
61	61	3 : View List ['flb_malloc.3927', 'flb_errno_print', '__errno_location']	112	112	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:248
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438

Runtime coverage analysis

Covered functions

433

Functions that are reachable but not covered

250

Reachable functions

407

Percentage of reachable functions covered

38.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/multiline_fuzzer.c	3
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	5
src/flb_pack.c	11
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	9
src/flb_unescape.c	7
src/flb_config.c	2
src/config_format/flb_config_format.c	8
src/flb_sds.c	9
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	11
src/flb_regex.c	9
src/flb_parser_decoder.c	7
src/multiline/flb_ml.c	21
src/multiline/flb_ml_parser.c	9
src/multiline/flb_ml_rule.c	11
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	2
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/multiline/flb_ml_group.c	3
src/multiline/flb_ml_stream.c	10
include/fluent-bit/flb_time.h	2
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
include/fluent-bit/flb_sds.h	5
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2

Fuzzer: flb-it-fuzz-parser_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	404	44.9%
gold	[1:9]	5	0.55%
yellow	[10:29]	5	0.55%
greenyellow	[30:49]	3	0.33%
lawngreen	50+	482	53.6%
All colors	899	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
4	4	1 : View List ['close']	23	183	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:396
4	4	1 : View List ['getpagesize']	8	1260	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:279
4	4	2 : View List ['ntohl', 'ntohs']	4	294	flb_parser_regex_do	call site	/src/fluent-bit/src/flb_parser_regex.c:188
2	2	1 : View List ['flb_worker_log_level']	2	2	flb_log_check	call site	/src/fluent-bit/include/fluent-bit/flb_log.h:105
0	239	3 : View List ['flb_log_check.1298', 'flb_config_exit', 'flb_log_print']	0	239	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:323
0	106	2 : View List ['flb_regex_create', 'flb_ml_rule_destroy']	0	106	flb_ml_rule_create	call site	/src/fluent-bit/src/multiline/flb_ml_rule.c:105

Runtime coverage analysis

Covered functions

390

Functions that are reachable but not covered

76

Reachable functions

205

Percentage of reachable functions covered

62.93%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/parser_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	5
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	7
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	11
src/flb_regex.c	8
src/flb_parser_decoder.c	7
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	2
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
tests/internal/fuzzers/flb_fuzz_header.h	1
src/flb_utils.c	1
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
include/fluent-bit/flb_sds.h	3
src/flb_pack.c	8
src/flb_unescape.c	7
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2

Fuzzer: flb-it-fuzz-signv4_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	695	58.5%
gold	[1:9]	5	0.42%
yellow	[10:29]	20	1.68%
greenyellow	[30:49]	10	0.84%
lawngreen	50+	457	38.5%
All colors	1187	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
158	219	6 : View List ['flb_log_check.2787', 'atoi', 'flb_utils_proxy_url_split', 'flb_log_print', 'flb_errno_print', '__errno_location']	158	221	flb_upstream_create	call site	/src/fluent-bit/src/flb_upstream.c:257
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
61	144	4 : View List ['flb_sds_create', 'flb_errno_print', '__errno_location', 'flb_aws_credentials_destroy']	61	144	get_credentials_fn_environment	call site	/src/fluent-bit/src/aws/flb_aws_credentials.c:635
61	61	3 : View List ['flb_malloc.3927', 'flb_errno_print', '__errno_location']	112	112	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:248
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
22	144	3 : View List ['flb_log_print', 'flb_log_check.5892', 'proxy_parse']	83	237	flb_http_client	call site	/src/fluent-bit/src/flb_http_client.c:759
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
7	16	2 : View List ['flb_sds_casecmp', 'flb_kv_item_destroy']	7	101	flb_http_add_header	call site	/src/fluent-bit/src/flb_http_client.c:899

Runtime coverage analysis

Covered functions

322

Functions that are reachable but not covered

105

Reachable functions

240

Percentage of reachable functions covered

56.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/signv4_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	4
src/aws/flb_aws_credentials.c	3
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/flb_config.c	2
src/config_format/flb_config_format.c	8
src/flb_sds.c	9
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	5
src/flb_regex.c	5
src/flb_parser_decoder.c	1
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	4
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/tls/flb_tls.c	2
src/flb_upstream.c	8
include/fluent-bit/flb_stream.h	6
src/flb_network.c	1
src/flb_utils.c	5
src/flb_http_client.c	6
include/fluent-bit/flb_sds.h	5
src/flb_signv4.c	15
src/flb_hash.c	7
src/flb_hmac.c	7
src/flb_connection.c	1

Fuzzer: flb-it-fuzz-parse_json_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	606	70.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	252	29.3%
All colors	858	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1099	1099	2 : View List ['flb_parser_ltsv_do', 'flb_parser_logfmt_do']	1099	1099	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:961
336	336	1 : View List ['flb_parser_regex_do']	336	336	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:957
290	290	3 : View List ['flb_parser_decoder_do', 'msgpack_unpack_next', 'msgpack_unpacked_init.4096']	605	605	flb_parser_json_do	call site	/src/fluent-bit/src/flb_parser_json.c:94
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
61	239	3 : View List ['flb_log_check.1298', 'flb_config_exit', 'flb_log_print']	61	239	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:323
61	89	3 : View List ['flb_ml_parser_destroy', 'flb_log_check.6782', 'flb_log_print']	61	89	flb_ml_parser_go	call site	/src/fluent-bit/src/multiline/flb_ml_parser_go.c:133
61	89	3 : View List ['flb_ml_parser_destroy', 'flb_log_print', 'flb_log_check.6746']	61	89	flb_ml_parser_java	call site	/src/fluent-bit/src/multiline/flb_ml_parser_java.c:136
61	89	3 : View List ['flb_ml_parser_destroy', 'flb_log_check.6716', 'flb_log_print']	61	89	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:91
61	89	3 : View List ['flb_log_check.6820', 'flb_log_print', 'flb_ml_parser_destroy']	61	89	flb_ml_parser_ruby	call site	/src/fluent-bit/src/multiline/flb_ml_parser_ruby.c:80
61	61	3 : View List ['flb_malloc.3927', 'flb_errno_print', '__errno_location']	112	112	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:248
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316

Runtime coverage analysis

Covered functions

323

Functions that are reachable but not covered

117

Reachable functions

202

Percentage of reachable functions covered

42.08%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/parse_json_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	5
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	7
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	11
src/flb_regex.c	8
src/flb_parser_decoder.c	7
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	2
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
include/fluent-bit/flb_sds.h	3
src/flb_pack.c	8
src/flb_unescape.c	7
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2

Fuzzer: flb-it-fuzz-config_map_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	465	56.4%
gold	[1:9]	8	0.97%
yellow	[10:29]	7	0.84%
greenyellow	[30:49]	3	0.36%
lawngreen	50+	341	41.3%
All colors	824	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
76	81	2 : View List ['buf_append', 'flb_sds_destroy']	76	219	flb_env_var_translate	call site	/src/fluent-bit/src/flb_env.c:240
65	130	5 : View List ['flb_sds_increase', 'flb_sds_len.122', 'flb_log_print', 'flb_log_check.123', 'flb_sds_avail']	65	130	flb_sds_printf	call site	/src/fluent-bit/src/flb_sds.c:437
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
65	65	1 : View List ['flb_sds_increase']	65	65	flb_sds_copy	call site	/src/fluent-bit/src/flb_sds.c:266
61	61	3 : View List ['flb_malloc.3927', 'flb_errno_print', '__errno_location']	112	112	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:248
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
4	4	1 : View List ['strcasecmp']	142	537	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:195

Runtime coverage analysis

Covered functions

293

Functions that are reachable but not covered

74

Reachable functions

182

Percentage of reachable functions covered

59.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/config_map_fuzzer.c	1
tests/internal/fuzzers/flb_fuzz_header.h	1
include/fluent-bit/flb_mem.h	4
src/flb_config.c	2
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	9
src/flb_env.c	7
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	5
src/flb_regex.c	5
src/flb_parser_decoder.c	1
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	9
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	4
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_config_map.c	13
include/fluent-bit/flb_env.h	1
include/fluent-bit/flb_sds.h	4
src/flb_utils.c	3

Fuzzer: flb-it-fuzz-http_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	768	64.5%
gold	[1:9]	4	0.33%
yellow	[10:29]	13	1.09%
greenyellow	[30:49]	3	0.25%
lawngreen	50+	401	33.7%
All colors	1189	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
881	881	1 : View List ['net_io_write']	888	888	flb_io_net_write	call site	/src/fluent-bit/src/flb_io.c:646
206	1670	9 : View List ['flb_http_buffer_increase', 'process_data', 'flb_http_buffer_available', 'flb_log_print', 'flb_io_net_read', 'check_connection', 'flb_io_net_write', 'flb_upstream_conn_recycle', 'flb_log_check.5892']	208	1731	flb_http_do	call site	/src/fluent-bit/src/flb_http_client.c:1188
121	121	1 : View List ['flb_http_proxy_auth']	121	1442	flb_http_client_proxy_connect	call site	/src/fluent-bit/src/flb_http_client.c:1320
99	219	6 : View List ['flb_log_check.2787', 'atoi', 'flb_utils_proxy_url_split', 'flb_log_print', 'flb_errno_print', '__errno_location']	99	221	flb_upstream_create	call site	/src/fluent-bit/src/flb_upstream.c:257
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
85	85	2 : View List ['flb_tls_net_write_async', 'flb_tls_net_write']	92	92	flb_io_net_write	call site	/src/fluent-bit/src/flb_io.c:645
65	65	2 : View List ['perror', 'flb_pipe_write_all']	65	65	flb_log_print	call site	/src/fluent-bit/src/flb_log.c:647
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316
20	20	1 : View List ['flb_log_destroy']	53	213	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:359
20	20	1 : View List ['strncasecmp']	20	20	get_section_type	call site	/src/fluent-bit/src/config_format/flb_config_format.c:84
19	19	1 : View List ['flb_sched_destroy']	19	132	flb_config_exit	call site	/src/fluent-bit/src/flb_config.c:438
8	8	3 : View List ['strchr', 'atoi', 'strndup']	8	8	proxy_parse	call site	/src/fluent-bit/src/flb_http_client.c:511

Runtime coverage analysis

Covered functions

324

Functions that are reachable but not covered

164

Reachable functions

299

Percentage of reachable functions covered

45.15%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/http_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	5
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	8
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	8
src/flb_parser.c	5
src/flb_regex.c	5
src/flb_parser_decoder.c	1
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	3
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_upstream.c	10
include/fluent-bit/flb_stream.h	8
src/flb_network.c	35
src/flb_utils.c	2
src/flb_connection.c	10
tests/internal/fuzzers/flb_fuzz_header.h	1
src/flb_http_client.c	30
include/fluent-bit/flb_sds.h	4
src/flb_base64.c	1
src/flb_io.c	7
src/flb_coro.c	1
src/flb_socket.c	1
src/flb_engine.c	1
src/tls/flb_tls.c	9

Fuzzer: flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2674	76.5%
gold	[1:9]	8	0.22%
yellow	[10:29]	1	0.02%
greenyellow	[30:49]	2	0.05%
lawngreen	50+	806	23.0%
All colors	3491	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
5604	5604	2 : View List ['flb_hs_start', 'flb_hs_create']	5842	13498	flb_engine_start	call site	/src/fluent-bit/src/flb_engine.c:786
1321	1956	4 : View List ['flb_chunk_trace_new', 'flb_chunk_trace_context_destroy', 'flb_chunk_trace_input', 'flb_chunk_trace_context_hit_limit']	1323	1958	flb_chunk_trace_do_input	call site	/src/fluent-bit/src/flb_chunk_trace.c:399
1245	1245	2 : View List ['flb_ring_buffer_add_event_loop', 'flb_input_thread_instance_init']	1245	3473	flb_input_instance_init	call site	/src/fluent-bit/src/flb_input.c:1124
1187	1187	1 : View List ['flb_chunk_trace_pre_output']	1187	1276	input_chunk_append_raw	call site	/src/fluent-bit/src/flb_input_chunk.c:1811
795	795	2 : View List ['flb_engine_dispatch_retry', 'flb_sched_request_destroy']	795	795	flb_sched_event_handler	call site	/src/fluent-bit/src/flb_scheduler.c:400
704	1343	2 : View List ['flb_output_task_singleplex_flush_next', 'flb_task_users_dec']	704	1343	flb_output_task_flush	call site	/src/fluent-bit/src/flb_output.c:311
704	704	1 : View List ['flb_output_task_singleplex_flush_next']	1022	1548	handle_output_event	call site	/src/fluent-bit/src/flb_engine.c:271
644	644	1 : View List ['memrb_input_chunk_release_space']	1833	7277	input_chunk_append_raw	call site	/src/fluent-bit/src/flb_input_chunk.c:1569
303	303	5 : View List ['flb_task_retry_create', 'flb_task_users_release.1987', 'flb_sched_request_create', 'flb_task_retry_destroy', 'cmt_counter_inc']	311	613	handle_output_event	call site	/src/fluent-bit/src/flb_engine.c:278
259	264	4 : View List ['flb_pack_msgpack_to_json_format', 'flb_sds_destroy', 'write', 'flb_sds_len.11605']	263	268	cb_stdout_flush	call site	/src/fluent-bit/plugins/out_stdout/stdout.c:190
248	629	13 : View List ['flb_regex_create', 'strcasecmp', 'strncasecmp', 'flb_utils_time_to_seconds', 'flb_log_get_level_str', 'prop_key_check.978', 'flb_sds_destroy', 'atoi', 'flb_utils_size_to_bytes', 'flb_log_print', 'flb_kv_item_create', 'flb_log_check.927', 'flb_utils_bool']	248	629	flb_output_set_property	call site	/src/fluent-bit/src/flb_output.c:735
240	571	11 : View List ['prop_key_check', 'strcasecmp', 'strncasecmp', 'flb_log_get_level_str', 'flb_sds_destroy', 'atoi', 'flb_utils_size_to_bytes', 'flb_log_print', 'flb_kv_item_create', 'flb_log_check.322', 'flb_utils_bool']	240	571	flb_input_set_property	call site	/src/fluent-bit/src/flb_input.c:471

Runtime coverage analysis

Covered functions

809

Functions that are reachable but not covered

557

Reachable functions

919

Percentage of reachable functions covered

39.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/filter_stdout_fuzzer.c	1
src/flb_lib.c	14
include/fluent-bit/flb_mem.h	4
src/flb_config.c	7
src/flb_log.c	10
include/fluent-bit/flb_log.h	2
src/flb_worker.c	9
src/flb_pipe.c	4
src/flb_time.c	9
src/config_format/flb_config_format.c	14
src/flb_sds.c	10
src/flb_env.c	7
src/flb_hash_table.c	12
src/flb_plugin.c	12
src/flb_scheduler.c	23
src/flb_parser.c	12
src/flb_regex.c	5
src/flb_parser_decoder.c	3
src/multiline/flb_ml.c	3
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	10
include/fluent-bit/flb_bucket_queue.h	6
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	6
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_engine.c	15
src/flb_input.c	37
include/fluent-bit/flb_input.h	2
src/flb_input_thread.c	16
src/flb_router.c	6
src/flb_uri.c	2
src/tls/flb_tls.c	5
src/flb_config_map.c	9
src/flb_task.c	16
src/flb_input_chunk.c	39
src/flb_routes_mask.c	5
src/flb_chunk_trace.c	17
src/flb_event.c	3
src/flb_metrics.c	9
src/flb_storage.c	13
src/flb_ring_buffer.c	6
src/flb_filter.c	6
src/flb_output.c	25
src/flb_output_thread.c	14
include/fluent-bit/flb_output_plugin.h	1
include/fluent-bit/flb_sds.h	5
src/flb_thread_pool.c	7
src/flb_callback.c	2
src/flb_custom.c	5
src/flb_metrics_exporter.c	7
src/http_server/flb_hs.c	7
src/http_server/api/v1/health.c	10
src/http_server/flb_hs_endpoints.c	3
src/flb_utils.c	11
src/config_format/flb_cf_fluentbit.c	10
src/flb_plugin_proxy.c	16
src/flb_api.c	2
src/proxy/go/go.c	11
include/fluent-bit/flb_output.h	4
src/flb_coro.c	4
src/flb_input_log.c	2
src/flb_mp.c	2
plugins/in_storage_backlog/sb.c	14
src/flb_pack.c	16
plugins/in_emitter/emitter.c	4
src/flb_network.c	16
src/tls/openssl.c	4
src/flb_upstream.c	14
src/flb_downstream.c	7
include/fluent-bit/flb_env.h	1
include/fluent-bit/flb_storage.h	1
include/fluent-bit/flb_stream.h	7
include/fluent-bit/flb_upstream.h	1
src/flb_connection.c	3
include/fluent-bit/flb_downstream.h	1
include/fluent-bit/flb_event_loop.h	2
src/flb_engine_dispatch.c	4
src/flb_random.c	1
include/fluent-bit/flb_task.h	3
include/fluent-bit/flb_time.h	1
src/flb_sosreport.c	8
include/fluent-bit/flb_utf8.h	2
src/http_server/api/v1/register.c	1
src/http_server/api/v1/uptime.c	3
src/http_server/flb_hs_utils.c	1
src/http_server/api/v1/metrics.c	12
src/http_server/api/v1/plugins.c	2
src/http_server/api/v1/trace.c	10
src/flb_unescape.c	5
src/http_server/api/v1/storage.c	6
include/fluent-bit/flb_router.h	1
tests/internal/fuzzers/flb_fuzz_header.h	1

Fuzzer: flb-it-fuzz-parse_ltsv_fuzzer_OSSFUZZ

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	622	72.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	235	27.4%
All colors	857	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
558	558	1 : View List ['flb_parser_logfmt_do']	558	558	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:965
514	514	1 : View List ['flb_parser_json_do']	514	514	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:961
336	336	1 : View List ['flb_parser_regex_do']	336	336	flb_parser_do	call site	/src/fluent-bit/src/flb_parser.c:957
290	290	2 : View List ['flb_parser_decoder_do', 'msgpack_sbuffer_destroy.4250']	290	290	flb_parser_ltsv_do	call site	/src/fluent-bit/src/flb_parser_ltsv.c:257
87	87	1 : View List ['rule_error']	87	87	flb_ml_parser_python	call site	/src/fluent-bit/src/multiline/flb_ml_parser_python.c:84
61	239	3 : View List ['flb_log_check.1298', 'flb_config_exit', 'flb_log_print']	61	239	flb_config_init	call site	/src/fluent-bit/src/flb_config.c:323
61	89	3 : View List ['flb_ml_parser_destroy', 'flb_log_check.6782', 'flb_log_print']	61	89	flb_ml_parser_go	call site	/src/fluent-bit/src/multiline/flb_ml_parser_go.c:133
61	89	3 : View List ['flb_ml_parser_destroy', 'flb_log_print', 'flb_log_check.6746']	61	89	flb_ml_parser_java	call site	/src/fluent-bit/src/multiline/flb_ml_parser_java.c:136
61	89	3 : View List ['flb_log_check.6820', 'flb_log_print', 'flb_ml_parser_destroy']	61	89	flb_ml_parser_ruby	call site	/src/fluent-bit/src/multiline/flb_ml_parser_ruby.c:80
61	61	3 : View List ['flb_malloc.3927', 'flb_errno_print', '__errno_location']	112	112	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:248
61	61	3 : View List ['flb_free.5594', 'flb_errno_print', '__errno_location']	61	61	flb_kernel_info	call site	/src/fluent-bit/src/flb_kernel.c:137
26	26	3 : View List ['flb_parser_tzone_offset', 'flb_interim_parser_destroy', 'strlen']	26	26	flb_parser_create	call site	/src/fluent-bit/src/flb_parser.c:316

Runtime coverage analysis

Covered functions

263

Functions that are reachable but not covered

130

Reachable functions

202

Percentage of reachable functions covered

35.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
tests/internal/fuzzers/parse_ltsv_fuzzer.c	1
src/flb_config.c	2
include/fluent-bit/flb_mem.h	5
src/flb_log.c	5
include/fluent-bit/flb_log.h	1
src/flb_worker.c	5
src/flb_pipe.c	2
src/flb_time.c	1
src/config_format/flb_config_format.c	8
src/flb_sds.c	7
src/flb_env.c	4
src/flb_hash_table.c	11
src/flb_plugin.c	3
src/flb_scheduler.c	5
src/flb_parser.c	11
src/flb_regex.c	8
src/flb_parser_decoder.c	7
src/multiline/flb_ml.c	2
src/multiline/flb_ml_parser.c	5
src/multiline/flb_ml_rule.c	8
src/flb_slist.c	5
include/fluent-bit/flb_bucket_queue.h	3
include/fluent-bit/flb_plugins.h	2
src/flb_kv.c	2
src/flb_kernel.c	1
include/fluent-bit/flb_str.h	3
src/multiline/flb_ml_parser_docker.c	2
src/multiline/flb_ml_parser_cri.c	2
src/multiline/flb_ml_parser_java.c	2
src/multiline/flb_ml_parser_go.c	2
src/multiline/flb_ml_parser_ruby.c	2
src/multiline/flb_ml_parser_python.c	2
src/flb_parser_regex.c	2
src/flb_strptime.c	6
include/fluent-bit/flb_parser.h	1
include/fluent-bit/flb_sds.h	3
src/flb_pack.c	8
src/flb_unescape.c	7
src/flb_parser_json.c	1
src/flb_parser_ltsv.c	2
src/flb_parser_logfmt.c	2