High level conclusions

Fuzzers reach 29.18% of cyclomatic complexity.

Fuzzers reach 30.76% of all functions.

Fuzzer fuzz-url-decode-mem is blocked:

The runtime code coverage of fuzz-url-decode-mem covers 14.59% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-config is blocked:

The runtime code coverage of fuzz-config covers 24.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-commit-graph is blocked:

The runtime code coverage of fuzz-commit-graph covers 3.176% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-pack-idx is blocked:

The runtime code coverage of fuzz-pack-idx covers 9.302% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-pack-headers is blocked:

The runtime code coverage of fuzz-pack-headers covers 9.923% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-credential-from-url-gently is blocked:

The runtime code coverage of fuzz-credential-from-url-gently covers 20.54% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

2098 / 6819

Cyclomatic complexity statically reachable by fuzzers

11963 / 40988

Runtime code coverage of functions

199 / 6819

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz-credential-from-url-gently

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	266	82.3%
gold	[1:9]	3	0.92%
yellow	[10:29]	3	0.92%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	51	15.7%
All colors	323	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
173	116	xrealloc	call site: 00116	url_decode_internal
55	22	strbuf_add	call site: 00022	die
22	92	git_env_ulong	call site: 00092	die
3	12	credential_from_url_1	call site: 00012	_
3	78	strbuf_add	call site: 00078	BUG_fl
3	304	xmallocz	call site: 00304	die
2	86	strbuf_grow	call site: 00086	xmalloc
2	315	check_url_component	call site: 00315	_
1	84	strbuf_grow	call site: 00084	die
1	294	url_decode_internal	call site: 00294	strbuf_addch
1	296	url_decode_internal	call site: 00296	strbuf_detach

Runtime coverage analysis

Covered functions

30

Functions that are reachable but not covered

116

Reachable functions

146

Percentage of reachable functions covered

20.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-credential-from-url-gently.c	1
git/credential.c	6
git/string-list.c	1
git/strvec.c	4
git/./gettext.h	1
git/usage.c	8
git/url.c	3
git/strbuf.c	10
git/common-exit.c	2
git/wrapper.c	13
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/./git-compat-util.h	5
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hex-ll.h	2

Fuzzer: fuzz-pack-headers

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	264	94.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	15	5.37%
All colors	279	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
240	34	trace2_cmd_error_va_fl	call site: 00034	tr2_dst_get_trace_fd
10	4	unpack_object_header_buffer	call site: 00004	die
7	26	xwrite	call site: 00026	trace2_cmd_error_va_fl
3	18	vfreportf	call site: 00018	_
2	15	vfreportf	call site: 00015	fprintf
1	275	unpack_object_header_buffer	call site: 00275	die
1	277	unpack_object_header_buffer	call site: 00277	die

Runtime coverage analysis

Covered functions

14

Functions that are reachable but not covered

118

Reachable functions

131

Percentage of reachable functions covered

9.92%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-pack-headers.c	1
git/packfile.c	1
git/usage.c	8
git/./git-compat-util.h	8
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	9
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1

Fuzzer: fuzz-pack-idx

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	266	90.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	1.36%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	24	8.16%
All colors	294	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
239	40	trace2_cmd_error_va_fl	call site: 00040	tr2_dst_get_trace_fd
10	10	load_idx	call site: 00010	die
7	32	xwrite	call site: 00032	trace2_cmd_error_va_fl
3	24	vfreportf	call site: 00024	_
2	3	load_idx	call site: 00003	error
2	21	vfreportf	call site: 00021	fprintf
2	289	load_idx	call site: 00289	error
1	280	load_idx	call site: 00280	die

Runtime coverage analysis

Covered functions

13

Functions that are reachable but not covered

117

Reachable functions

129

Percentage of reachable functions covered

9.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-pack-idx.c	1
git/packfile.c	1
git/usage.c	8
git/./git-compat-util.h	6
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	9
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1

Fuzzer: fuzz-date

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	282	63.9%
gold	[1:9]	20	4.53%
yellow	[10:29]	15	3.40%
greenyellow	[30:49]	5	1.13%
lawngreen	50+	119	26.9%
All colors	441	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
116	159	strbuf_release	call site: 00159	strbuf_grow
56	3	xmallocz	call site: 00003	die
23	102	strbuf_addch	call site: 00102	strbuf_grow
22	72	git_env_ulong	call site: 00072	die
21	137	strbuf_vaddf	call site: 00137	strbuf_addstr
20	410	show_date	call site: 00410	strbuf_addftime
4	132	strbuf_vaddf	call site: 00132	strbuf_grow
3	98	strbuf_add	call site: 00098	BUG_fl
2	66	strbuf_grow	call site: 00066	xmalloc
2	129	strbuf_vaddf	call site: 00129	die
2	388	show_date_relative	call site: 00388	strbuf_addf
2	396	time_to_tm	call site: 00396	die

Runtime coverage analysis

Covered functions

65

Functions that are reachable but not covered

118

Reachable functions

174

Percentage of reachable functions covered

32.18%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-date.c	1
git/wrapper.c	13
git/usage.c	8
git/./git-compat-util.h	5
git/common-exit.c	2
git/./gettext.h	2
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	12
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/date.c	32
git/./compat/../sane-ctype.h	1
git/./compat/posix.h	1

Fuzzer: fuzz-commit-graph

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8847	98.2%
gold	[1:9]	34	0.37%
yellow	[10:29]	14	0.15%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	109	1.21%
All colors	9004	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2967	409	free_individual_entries	call site: 00409	config_with_options
2903	6098	repo_clear	call site: 06098	submodule_from_path
2609	3377	parse_commit_graph	call site: 03377	load_commit_graph_chain
179	94	xrealloc	call site: 00094	die
32	33	trace2_cmd_error_va_fl	call site: 00033	tr2_dst_get_trace_fd
22	70	git_env_ulong	call site: 00070	die
14	386	parse_commit_graph	call site: 00386	prepare_repo_settings
13	6057	release_index	call site: 06057	strbuf_release
11	5987	repo_clear	call site: 05987	odb_close
10	3	remote_state_new	call site: 00003	die
10	6027	repo_clear	call site: 06027	git_configset_clear
7	25	xwrite	call site: 00025	trace2_cmd_error_va_fl

Runtime coverage analysis

Covered functions

72

Functions that are reachable but not covered

2164

Reachable functions

2235

Percentage of reachable functions covered

3.18%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-commit-graph.c	1
git/repository.c	21
git/remote.c	43
git/wrapper.c	47
git/usage.c	18
git/common-exit.c	2
git/./gettext.h	2
git/trace2.c	19
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/./git-compat-util.h	24
git/abspath.c	10
git/trace2/tr2_sid.c	3
git/./strbuf.h	10
git/strbuf.c	44
git/parse.c	9
git/trace2/tr2_tbuf.c	1
git/./hash.h	19
git/hex.c	10
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	8
git/trace.c	19
git/trace2/tr2_tls.c	7
git/hashmap.c	23
git/object.c	15
git/alloc.c	9
git/commit.c	45
git/read-cache.c	64
git/hash.c	3
git/commit-graph.c	52
git/./compat/bswap.h	3
git/chunk-format.c	7
git/repo-settings.c	9
git/config.c	99
git/./hashmap.h	7
git/string-list.c	14
git/./compat/../sane-ctype.h	2
git/object-name.c	57
git/./hex-ll.h	2
git/refs.c	40
git/refs/debug.c	1
git/./trace.h	1
git/path.c	47
git/refs/files-backend.c	1
git/refs/../git-compat-util.h	1
git/refs/../strbuf.h	2
git/exec-cmd.c	3
git/environment.c	3
git/quote.c	11
git/refspec.c	16
git/transport.c	1
git/./dir.h	3
git/advice.c	5
git/color.c	10
git/pager.c	2
git/editor.c	1
git/urlmatch.c	3
git/odb.c	37
git/dir.c	68
git/object-file.c	56
git/oidtree.c	6
git/./cbtree.h	1
git/mem-pool.c	7
git/hex-ll.c	1
git/cbtree.c	6
git/midx.c	29
git/packfile.c	82
git/compat/open.c	1
git/strmap.c	8
git/compat/qsort_s.c	2
git/compat/../git-compat-util.h	1
git/hash-lookup.c	3
git/./odb.h	3
git/oid-array.c	6
git/./compat/posix.h	2
git/./oid-array.h	1
git/object-file-convert.c	6
git/loose.c	10
git/./khash.h	12
git/./replace-object.h	1
git/replace-object.c	4
git/./oidmap.h	1
git/oidmap.c	5
git/refs/iterator.c	5
git/./oidset.h	3
git/oidset.c	4
git/./list.h	6
git/pack-revindex.c	11
git/pack-check.c	1
zlib/crc32.c	5
git/git-zlib.c	12
zlib/inflate.c	10
zlib/adler32.c	2
zlib/inftrees.c	1
zlib/inffast.c	1
git/patch-delta.c	1
git/./delta.h	1
git/promisor-remote.c	11
git/run-command.c	42
git/bloom.c	7
git/sigchain.c	4
git/symlinks.c	8
git/./read-cache-ll.h	3
git/shallow.c	2
git/statinfo.c	5
git/odb/streaming.c	6
git/blob.c	2
git/tree.c	6
git/tag.c	7
git/tree-walk.c	18
git/./object.h	3
git/gpg-interface.c	11
git/pretty.c	31
git/utf8.c	27
git/compat/nonblock.c	1
git/diff.c	1
git/revision.c	3
git/log-tree.c	11
git/./refs.h	1
git/wildmatch.c	2
git/decorate.c	5
git/reflog-walk.c	3
git/date.c	31
git/ident.c	1
git/mailmap.c	9
git/./utf8.h	1
git/trailer.c	30
git/wt-status.c	1
git/prio-queue.c	8
git/./commit.h	1
git/setup.c	21
git/sparse-index.c	18
git/./lockfile.h	5
git/lockfile.c	9
git/tempfile.c	15
git/./tempfile.h	3
git/./wrapper.h	1
git/cache-tree.c	17
git/./write-or-die.h	1
git/tmp-objdir.c	15
git/submodule.c	7
git/submodule-config.c	31
git/chdir-notify.c	3
git/resolve-undo.c	3
git/name-hash.c	29
git/split-index.c	11
zlib/deflate.c	16
zlib/trees.c	20
git/trace2/tr2_ctr.c	1
git/write-or-die.c	4
git/csum-file.c	14
git/progress.c	5
git/pack-write.c	22
git/./csum-file.h	2
git/./pack-objects.h	1
git/thread-utils.c	2
git/./tree.h	1
git/./tree-walk.h	2
git/./pathspec.h	2
git/pathspec.c	1
git/attr.c	46
git/fsmonitor.c	16
git/fsmonitor-settings.c	11
git/fsmonitor-ipc.c	2
git/./run-command.h	1
git/convert.c	30
git/sub-process.c	8
git/pkt-line.c	20
git/./pkt-line.h	1
git/fsck.c	22
git/url.c	3
git/./convert.h	1
git/./fsmonitor.h	2
git/ewah/ewah_bitmap.c	4
git/ewah/ewah_io.c	1
git/varint.c	1
git/ewah/ewok_rlw.h	3
git/./strmap.h	3

Fuzzer: fuzz-parse-attr-line

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	253	69.8%
gold	[1:9]	15	4.14%
yellow	[10:29]	9	2.48%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	85	23.4%
All colors	362	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
116	160	strbuf_release	call site: 00160	strbuf_grow
25	39	trace2_cmd_error_va_fl	call site: 00039	tr2_dst_get_trace_fd
23	103	xrealloc	call site: 00103	die
22	79	git_env_ulong	call site: 00079	die
21	138	strbuf_vaddf	call site: 00138	strbuf_addstr
10	10	strbuf_add	call site: 00010	die
7	31	xwrite	call site: 00031	trace2_cmd_error_va_fl
4	284	fprintf_ln	call site: 00284	attr_name_valid
3	65	strbuf_add	call site: 00065	BUG_fl
3	304	xmallocz	call site: 00304	die
2	21	vfreportf	call site: 00021	fprintf
2	24	vfreportf	call site: 00024	_

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

112

Reachable functions

164

Percentage of reachable functions covered

31.71%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-parse-attr-line.c	1
git/attr.c	10
git/./gettext.h	1
git/usage.c	8
git/quote.c	1
git/strbuf.c	10
git/common-exit.c	2
git/wrapper.c	14
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/./git-compat-util.h	7
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/hashmap.c	8
git/./hashmap.h	2
git/dir.c	3

Fuzzer: fuzz-config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	276	74.3%
gold	[1:9]	14	3.77%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	81	21.8%
All colors	371	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	157	strbuf_release	call site: 00157	strbuf_release
57	4	strbuf_init	call site: 00004	die
23	101	strbuf_addch	call site: 00101	tr2_sid_append_my_sid_component
22	70	git_env_ulong	call site: 00070	die
21	135	strbuf_vaddf	call site: 00135	strbuf_addstr
14	351	strbuf_detach	call site: 00351	xstrfmt
5	94	xrealloc	call site: 00094	die
4	130	strbuf_vaddf	call site: 00130	strbuf_grow
3	64	strbuf_grow	call site: 00064	xmalloc
3	301	hashmap_add	call site: 00301	rehash
2	127	strbuf_vaddf	call site: 00127	die
2	283	xcalloc	call site: 00283	die

Runtime coverage analysis

Covered functions

46

Functions that are reachable but not covered

132

Reachable functions

175

Percentage of reachable functions covered

24.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-config.c	2
git/config.c	11
git/strbuf.c	12
git/usage.c	8
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	11
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/./git-compat-util.h	7
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hashmap.h	2
git/hashmap.c	11
git/./compat/../sane-ctype.h	1

Fuzzer: fuzz-url-decode-mem

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	262	89.4%
gold	[1:9]	3	1.02%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	28	9.55%
All colors	293	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
174	101	xrealloc	call site: 00101	url_decode_internal
56	6	strbuf_add	call site: 00006	die
22	77	git_env_ulong	call site: 00077	die
3	63	strbuf_add	call site: 00063	BUG_fl
3	71	strbuf_grow	call site: 00071	xmalloc
2	286	LLVMFuzzerTestOneInput	call site: 00286	url_decode_internal
1	69	strbuf_grow	call site: 00069	die
1	282	url_decode_internal	call site: 00282	strbuf_detach

Runtime coverage analysis

Covered functions

20

Functions that are reachable but not covered

117

Reachable functions

137

Percentage of reachable functions covered

14.6%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-url-decode-mem.c	1
git/url.c	6
git/strbuf.c	10
git/usage.c	8
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/./git-compat-util.h	5
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/./hash.h	2
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hex-ll.h	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
complete_action	/src/git/sequencer.c	11	['N/A', 'N/A', 'int', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'int', 'int', 'N/A']	164	0	344	47	18	4148	0	24942	12733
fetch_refs_via_pack	/src/git/transport.c	3	['N/A', 'int', 'N/A']	131	0	571	45	14	2518	0	14039	1407
reftable_be_rename_ref	/src/git/refs/reftable-backend.c	4	['N/A', 'N/A', 'N/A', 'N/A']	115	0	92	11	4	2449	0	13414	1033

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

4385 / 6819

Cyclomatic complexity statically reachable by fuzzers

27088 / 40988

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

git/oss-fuzz/fuzz-credential-from-url-gently.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xrealloc', 'strbuf_add', 'git_env_ulong', 'credential_from_url_1', 'xmallocz', 'strbuf_grow', 'check_url_component', 'url_decode_internal']

git/oss-fuzz/fuzz-pack-headers.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['trace2_cmd_error_va_fl', 'unpack_object_header_buffer', 'xwrite', 'vfreportf']

git/oss-fuzz/fuzz-pack-idx.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['trace2_cmd_error_va_fl', 'load_idx', 'xwrite', 'vfreportf']

git/oss-fuzz/fuzz-date.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'xmallocz', 'strbuf_addch', 'git_env_ulong', 'strbuf_vaddf', 'show_date', 'strbuf_add', 'strbuf_grow']

git/oss-fuzz/fuzz-commit-graph.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['free_individual_entries', 'repo_clear', 'parse_commit_graph', 'xrealloc', 'trace2_cmd_error_va_fl', 'git_env_ulong', 'release_index', 'remote_state_new']

git/oss-fuzz/fuzz-parse-attr-line.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'trace2_cmd_error_va_fl', 'xrealloc', 'git_env_ulong', 'strbuf_vaddf', 'strbuf_add', 'xwrite', 'fprintf_ln', 'xmallocz']

git/oss-fuzz/fuzz-config.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'strbuf_init', 'strbuf_addch', 'git_env_ulong', 'strbuf_vaddf', 'strbuf_detach', 'xrealloc', 'strbuf_grow', 'hashmap_add']

git/oss-fuzz/fuzz-url-decode-mem.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xrealloc', 'strbuf_add', 'git_env_ulong', 'strbuf_grow', 'LLVMFuzzerTestOneInput', 'url_decode_internal']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/git/./pkt-line.h	['fuzz-commit-graph']	[]
/src/git/wt-status.c	['fuzz-commit-graph']	[]
/src/git/connect.c	[]	[]
/src/git/copy.c	[]	[]
/src/git/ewah/ewah_rlw.c	[]	[]
/src/git/./progress.h	[]	[]
/src/git/tempfile.c	['fuzz-commit-graph']	[]
/src/git/./list.h	['fuzz-commit-graph']	[]
/src/git/./diff.h	[]	[]
/src/zlib/adler32.c	['fuzz-commit-graph']	[]
/src/git/./delta.h	['fuzz-commit-graph']	[]
/src/git/shallow.c	['fuzz-commit-graph']	[]
/src/git/symlinks.c	['fuzz-commit-graph']	[]
/src/git/repo-settings.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/hash.c	['fuzz-commit-graph']	[]
/src/git/compat/strlcpy.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/./help.h	[]	[]
/src/git/xdiff/xemit.c	[]	[]
/src/git/./tempfile.h	['fuzz-commit-graph']	[]
/src/git/bloom.c	['fuzz-commit-graph']	[]
/src/git/range-diff.c	[]	[]
/src/git/reftable/basics.c	[]	[]
/src/git/xdiff/xhistogram.c	[]	[]
/src/git/refs/reftable-backend.c	[]	[]
/src/git/log-tree.c	['fuzz-commit-graph']	[]
/src/git/ewah/ewah_io.c	['fuzz-commit-graph']	[]
/src/git/compat/open.c	['fuzz-commit-graph']	[]
/src/git/reftable/table.c	[]	[]
/src/git/trace2/tr2_tgt_normal.c	[]	[]
/src/git/fsck.c	['fuzz-commit-graph']	[]
/src/git/reftable/../lockfile.h	[]	[]
/src/git/diff.c	['fuzz-commit-graph']	[]
/src/git/diffcore-order.c	[]	[]
/src/git/varint.c	['fuzz-commit-graph']	[]
/src/git/refs.c	['fuzz-commit-graph']	[]
/src/git/version.c	[]	[]
/src/git/patch-delta.c	['fuzz-commit-graph']	[]
/src/git/tmp-objdir.c	['fuzz-commit-graph']	[]
/src/git/ident.c	['fuzz-commit-graph']	[]
/src/git/pager.c	['fuzz-commit-graph']	[]
/src/git/ewah/ewok.h	[]	[]
/src/git/bundle-uri.c	[]	[]
/src/git/column.c	[]	[]
/src/git/revision.c	['fuzz-commit-graph']	[]
/src/git/decorate.c	['fuzz-commit-graph']	[]
/src/git/./oidmap.h	['fuzz-commit-graph']	[]
/src/git/./symlinks.h	[]	[]
/src/git/diff-merges.c	[]	[]
/src/git/dir.c	['fuzz-commit-graph', 'fuzz-parse-attr-line']	['fuzz-commit-graph', 'fuzz-parse-attr-line']
/src/git/trace2/tr2_cfg.c	[]	[]
/src/git/negotiator/../commit.h	[]	[]
/src/git/resolve-undo.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/./compat/posix.h	['fuzz-date', 'fuzz-commit-graph']	[]
/src/git/stable-qsort.c	[]	[]
/src/git/tree-walk.c	['fuzz-commit-graph']	[]
/src/git/parallel-checkout.c	[]	[]
/src/git/xdiff/xutils.c	[]	[]
/src/git/list-objects-filter.c	[]	[]
/src/git/merge-ll.c	[]	[]
/src/git/parse.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-credential-from-url-gently', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']
/src/git/./parse-options.h	[]	[]
/src/git/convert.c	['fuzz-commit-graph']	[]
/src/git/pack-revindex.c	['fuzz-commit-graph']	[]
/src/git/reftable/record.c	[]	[]
/src/git/odb/streaming.c	['fuzz-commit-graph']	[]
/src/git/quote.c	['fuzz-commit-graph', 'fuzz-parse-attr-line']	['fuzz-parse-attr-line']
/src/git/refs/../wrapper.h	[]	[]
/src/git/reftable/fsck.c	[]	[]
/src/git/diffcore-break.c	[]	[]
/src/git/./wrapper.h	['fuzz-commit-graph']	[]
/src/git/cache-tree.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/pack-check.c	['fuzz-commit-graph']	[]
/src/git/xdiff/xutils.h	[]	[]
/src/git/wildmatch.c	['fuzz-commit-graph']	[]
/src/git/environment.c	['fuzz-commit-graph']	[]
/src/git/parse-options-cb.c	[]	[]
/src/git/./write-or-die.h	['fuzz-commit-graph']	[]
/src/git/usage.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-commit-graph', 'fuzz-parse-attr-line']
/src/git/pkt-line.c	['fuzz-commit-graph']	[]
/src/git/ewah/ewah_bitmap.c	['fuzz-commit-graph']	[]
/src/git/sparse-index.c	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-config.c	['fuzz-config']	['fuzz-config']
/src/git/line-range.c	[]	[]
/src/git/rerere.c	[]	[]
/src/git/./strmap.h	['fuzz-commit-graph']	[]
/src/git/./lockfile.h	['fuzz-commit-graph']	[]
/src/git/grep.c	[]	[]
/src/git/oss-fuzz/fuzz-pack-headers.c	['fuzz-pack-headers']	['fuzz-pack-headers']
/src/git/unpack-trees.c	[]	[]
/src/git/reftable/block.c	[]	[]
/src/git/xdiff-interface.c	[]	[]
/src/git/trace2/tr2_cmd_name.c	[]	[]
/src/git/refs/debug.c	['fuzz-commit-graph']	[]
/src/git/thread-utils.c	['fuzz-commit-graph']	[]
/src/git/strvec.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-credential-from-url-gently']
/src/git/prio-queue.c	['fuzz-commit-graph']	[]
/src/git/credential.c	['fuzz-credential-from-url-gently']	['fuzz-credential-from-url-gently']
/src/git/loose.c	['fuzz-commit-graph']	[]
/src/git/list-objects-filter-options.c	[]	[]
/src/git/repository.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/refs/ref-cache.c	[]	[]
/src/git/oidmap.c	['fuzz-commit-graph']	[]
/src/git/refs/../tempfile.h	[]	[]
/src/git/merge-ort.c	[]	[]
/src/git/negotiator/skipping.c	[]	[]
/src/git/odb.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/diff-delta.c	[]	[]
/src/git/reftable/merged.c	[]	[]
/src/git/trace2/tr2_sid.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/trace2/tr2_tgt_event.c	[]	[]
/src/git/fsmonitor.c	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-url-decode-mem.c	['fuzz-url-decode-mem']	['fuzz-url-decode-mem']
/src/git/urlmatch.c	['fuzz-commit-graph']	[]
/src/git/./strbuf.h	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/sub-process.c	['fuzz-commit-graph']	[]
/src/git/transport.c	['fuzz-commit-graph']	[]
/src/git/dir-iterator.c	[]	[]
/src/zlib/inflate.c	['fuzz-commit-graph']	[]
/src/git/prompt.c	[]	[]
/src/git/diffcore-delta.c	[]	[]
/src/git/diffcore-rename.c	[]	[]
/src/git/reftable/../tempfile.h	[]	[]
/src/git/trace2/tr2_tmr.c	[]	[]
/src/git/promisor-remote.c	['fuzz-commit-graph']	[]
/src/git/./trace.h	['fuzz-commit-graph']	[]
/src/git/date.c	['fuzz-date', 'fuzz-commit-graph']	['fuzz-date']
/src/git/reftable/record.h	[]	[]
/src/git/userdiff.c	[]	[]
/src/git/line-log.c	[]	[]
/src/git/strbuf.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-credential-from-url-gently', 'fuzz-date', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']
/src/git/object.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/submodule.c	['fuzz-commit-graph']	[]
/src/git/sideband.c	[]	[]
/src/git/match-trees.c	[]	[]
/src/zlib/inftrees.c	['fuzz-commit-graph']	[]
/src/git/trace.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/xdiff/xdiffi.c	[]	[]
/src/git/./read-cache.h	[]	[]
/src/git/./list-objects-filter-options.h	[]	[]
/src/git/./object.h	['fuzz-commit-graph']	[]
/src/git/reftable/basics.h	[]	[]
/src/git/./tree-walk.h	['fuzz-commit-graph']	[]
/src/git/./replace-object.h	['fuzz-commit-graph']	[]
/src/git/tag.c	['fuzz-commit-graph']	[]
/src/git/./pretty.h	[]	[]
/src/git/apply.c	[]	[]
/src/git/merge.c	[]	[]
/src/git/diff-lib.c	[]	[]
/src/git/oss-fuzz/fuzz-parse-attr-line.c	['fuzz-parse-attr-line']	['fuzz-parse-attr-line']
/src/git/compat/fopen.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/./refs.h	['fuzz-commit-graph']	[]
/src/git/fsmonitor-settings.c	['fuzz-commit-graph']	[]
/src/git/reftable/writer.c	[]	[]
/src/git/trace2/tr2_tls.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/parse-options.c	[]	[]
/src/git/name-hash.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/json-writer.c	[]	[]
/src/git/hashmap.c	['fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config']	['fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config']
/src/git/oid-array.c	['fuzz-commit-graph']	[]
/src/git/commit-graph.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/oss-fuzz/fuzz-commit-graph.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/packfile.c	['fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-commit-graph']	['fuzz-pack-headers', 'fuzz-pack-idx']
/src/git/./entry.h	[]	[]
/src/git/advice.c	['fuzz-commit-graph']	[]
/src/git/object-file.c	['fuzz-commit-graph']	[]
/src/git/path.c	['fuzz-commit-graph']	[]
/src/git/notes.c	[]	[]
/src/git/./cbtree.h	['fuzz-commit-graph']	[]
/src/git/alias.c	[]	[]
/src/git/bisect.c	[]	[]
/src/git/rebase-interactive.c	[]	[]
/src/git/compat/terminal.c	[]	[]
/src/git/./khash.h	['fuzz-commit-graph']	[]
/src/git/sha1dc/ubc_check.c	[]	[]
/src/git/oss-fuzz/fuzz-pack-idx.c	['fuzz-pack-idx']	['fuzz-pack-idx']
/src/git/./utf8.h	['fuzz-commit-graph']	[]
/src/git/./setup.h	[]	[]
/src/git/wrapper.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']
/src/git/trace2/tr2_tbuf.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/trailer.c	['fuzz-commit-graph']	[]
/src/git/refs/iterator.c	['fuzz-commit-graph']	[]
/src/git/statinfo.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/zlib/zutil.c	[]	[]
/src/git/./oid-array.h	['fuzz-commit-graph']	[]
/src/git/patch-ids.c	[]	[]
/src/git/./hash.h	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/read-cache.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/color.c	['fuzz-commit-graph']	[]
/src/git/./pack-objects.h	['fuzz-commit-graph']	[]
/src/git/write-or-die.c	['fuzz-commit-graph']	[]
/src/git/lockfile.c	['fuzz-commit-graph']	[]
/src/git/./column.h	[]	[]
/src/git/reflog-walk.c	['fuzz-commit-graph']	[]
/src/git/./odb.h	['fuzz-commit-graph']	[]
/src/git/branch.c	[]	[]
/src/git/preload-index.c	[]	[]
/src/git/trace2/tr2_dst.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/kwset.c	[]	[]
/src/git/oidset.c	['fuzz-commit-graph']	[]
/src/git/exec-cmd.c	['fuzz-commit-graph']	[]
/src/git/./hex-ll.h	['fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-url-decode-mem']	[]
/src/zlib/deflate.c	['fuzz-commit-graph']	[]
/src/git/sha256/block/sha256.c	[]	[]
/src/git/combine-diff.c	[]	[]
/src/git/negotiator/noop.c	[]	[]
/src/git/mem-pool.c	['fuzz-commit-graph']	[]
/src/git/tree.c	['fuzz-commit-graph']	[]
/src/git/notes-utils.c	[]	[]
/src/zlib/crc32.c	['fuzz-commit-graph']	[]
/src/git/./dir.h	['fuzz-commit-graph']	[]
/src/git/hex.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/trace2.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	['fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-commit-graph', 'fuzz-parse-attr-line']
/src/git/./pathspec.h	['fuzz-commit-graph']	[]
/src/git/pathspec.c	['fuzz-commit-graph']	[]
/src/git/reftable/blocksource.c	[]	[]
/src/git/reset.c	[]	[]
/src/git/refs/files-backend.c	['fuzz-commit-graph']	[]
/src/git/xdiff/xprepare.c	[]	[]
/src/git/reftable/tree.c	[]	[]
/src/git/reftable/pq.h	[]	[]
/src/git/./commit-reach.h	[]	[]
/src/git/midx.c	['fuzz-commit-graph']	[]
/src/git/sha1dc/sha1.c	[]	[]
/src/git/refs/packed-backend.c	[]	[]
/src/git/reftable/error.c	[]	[]
/src/git/./gettext.h	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/compat/linux/procinfo.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/oidtree.c	['fuzz-commit-graph']	[]
/src/git/pretty.c	['fuzz-commit-graph']	[]
/src/git/refs/../lockfile.h	[]	[]
/src/git/pack-write.c	['fuzz-commit-graph']	[]
/src/git/common-exit.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/./commit.h	['fuzz-commit-graph']	[]
/src/git/graph.c	[]	[]
/src/git/hash-lookup.c	['fuzz-commit-graph']	[]
/src/git/negotiator/default.c	[]	[]
/src/git/csum-file.c	['fuzz-commit-graph']	[]
/src/git/gettext.c	[]	[]
/src/git/send-pack.c	[]	[]
/src/git/object-file-convert.c	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-credential-from-url-gently.c	['fuzz-credential-from-url-gently']	['fuzz-credential-from-url-gently']
/src/git/reftable/pq.c	[]	[]
/src/git/./run-command.h	['fuzz-commit-graph']	[]
/src/git/./csum-file.h	['fuzz-commit-graph']	[]
/src/git/ws.c	[]	[]
/src/git/commit-reach.c	[]	[]
/src/git/./convert.h	['fuzz-commit-graph']	[]
/src/git/transport-helper.c	[]	[]
/src/git/protocol.c	[]	[]
/src/git/./tree.h	['fuzz-commit-graph']	[]
/src/git/progress.c	['fuzz-commit-graph']	[]
/src/git/attr.c	['fuzz-commit-graph', 'fuzz-parse-attr-line']	['fuzz-parse-attr-line']
/src/git/./fsmonitor.h	['fuzz-commit-graph']	[]
/src/git/./read-cache-ll.h	['fuzz-commit-graph']	[]
/src/git/./oidset.h	['fuzz-commit-graph']	[]
/src/git/base85.c	[]	[]
/src/git/split-index.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/abspath.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/cbtree.c	['fuzz-commit-graph']	[]
/src/zlib/trees.c	['fuzz-commit-graph']	[]
/src/git/string-list.c	['fuzz-credential-from-url-gently', 'fuzz-commit-graph']	['fuzz-credential-from-url-gently']
/src/git/xdiff/xmerge.c	[]	[]
/src/git/utf8.c	['fuzz-commit-graph']	[]
/src/git/list-objects.c	[]	[]
/src/git/linear-assignment.c	[]	[]
/src/git/fetch-pack.c	[]	[]
/src/git/chunk-format.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/fsmonitor-ipc.c	['fuzz-commit-graph']	[]
/src/git/refspec.c	['fuzz-commit-graph']	[]
/src/git/diffcore-rotate.c	[]	[]
/src/git/git-zlib.c	['fuzz-commit-graph']	[]
/src/git/gpg-interface.c	['fuzz-commit-graph']	[]
/src/git/config.c	['fuzz-commit-graph', 'fuzz-config']	['fuzz-config']
/src/git/trace2/tr2_tgt_perf.c	[]	[]
/src/git/./compat/bswap.h	['fuzz-commit-graph']	[]
/src/git/connected.c	[]	[]
/src/git/chdir-notify.c	['fuzz-commit-graph']	[]
/src/git/url.c	['fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-url-decode-mem']	['fuzz-credential-from-url-gently', 'fuzz-url-decode-mem']
/src/git/reftable/iter.c	[]	[]
/src/git/trace2/tr2_ctr.c	['fuzz-commit-graph']	[]
/src/git/reftable/stack.c	[]	[]
/src/git/sequencer.c	[]	[]
/src/git/./hashmap.h	['fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config']	[]
/src/git/bundle.c	[]	[]
/src/git/alloc.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/replace-object.c	['fuzz-commit-graph']	[]
/src/git/ewah/bitmap.c	[]	[]
/src/git/./git-compat-util.h	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/diffcore-pickaxe.c	[]	[]
/src/git/editor.c	['fuzz-commit-graph']	[]
/src/git/blob.c	['fuzz-commit-graph']	[]
/src/git/entry.c	[]	[]
/src/git/ewah/ewok_rlw.h	['fuzz-commit-graph']	[]
/src/git/tree-diff.c	[]	[]
/src/git/setup.c	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-date.c	['fuzz-date']	['fuzz-date']
/src/git/sigchain.c	['fuzz-commit-graph']	[]
/src/git/compat/nonblock.c	['fuzz-commit-graph']	[]
/src/git/hook.c	[]	[]
/src/git/hex-ll.c	['fuzz-commit-graph']	[]
/src/git/./compat/../sane-ctype.h	['fuzz-date', 'fuzz-commit-graph', 'fuzz-config']	[]
/src/git/fetch-negotiator.c	[]	[]
/src/git/compat/qsort_s.c	['fuzz-commit-graph']	[]
/src/git/strmap.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/sha1dc_git.c	[]	[]
/src/git/object-name.c	['fuzz-commit-graph']	[]
/src/git/notes-cache.c	[]	[]
/src/git/run-command.c	['fuzz-commit-graph']	[]
/src/git/commit.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/worktree.c	[]	[]
/src/git/submodule-config.c	['fuzz-commit-graph']	[]
/src/git/trace2/tr2_sysenv.c	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]
/src/git/reftable/system.c	[]	[]
/src/git/xdiff/xpatience.c	[]	[]
/src/git/./list-objects.h	[]	[]
/src/git/mailmap.c	['fuzz-commit-graph']	[]
/src/git/merge-ort-wrappers.c	[]	[]
/src/git/remote.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/zlib/inffast.c	['fuzz-commit-graph']	[]
/src/git/./abspath.h	['fuzz-credential-from-url-gently', 'fuzz-pack-headers', 'fuzz-pack-idx', 'fuzz-date', 'fuzz-commit-graph', 'fuzz-parse-attr-line', 'fuzz-config', 'fuzz-url-decode-mem']	[]

Directories in report

Directory
/src/git/xdiff/
/src/git/ewah/
/src/git/sha256/block/
/src/git/
/src/git/negotiator/../
/src/git/sha1dc/
/src/git/refs/
/src/git/negotiator/
/src/git/compat/linux/
/src/git/compat/
/src/git/./compat/../
/src/git/./
/src/git/reftable/
/src/zlib/
/src/git/refs/../
/src/git/oss-fuzz/
/src/git/odb/
/src/git/reftable/../
/src/git/trace2/
/src/git/./compat/