High level conclusions

Fuzzer fuzz-pack-headers is blocked:

The runtime code coverage of fuzz-pack-headers covers 9.160% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer git/oss-fuzz/fuzz-reftable.c is blocked:

The runtime code coverage of git/oss-fuzz/fuzz-reftable.c covers 1.190% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-commit-graph is blocked:

The runtime code coverage of fuzz-commit-graph covers 3.781% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-credential-from-url-gently is blocked:

The runtime code coverage of fuzz-credential-from-url-gently covers 20.94% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-config is blocked:

The runtime code coverage of fuzz-config covers 24.43% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-pack-idx is blocked:

The runtime code coverage of fuzz-pack-idx covers 9.230% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz-url-decode-mem is blocked:

The runtime code coverage of fuzz-url-decode-mem covers 15.10% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 24.41% of cyclomatic complexity.

Fuzzers reach 25.71% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1912 / 7434

Cyclomatic complexity statically reachable by fuzzers

10837 / 44386

Runtime code coverage of functions

203 / 7434

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz-url-decode-mem

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	265	89.2%
gold	[1:9]	3	1.01%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	9.76%
All colors	297	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
177	102	xrealloc	call site: 00102	url_decode_internal
56	7	strbuf_grow	call site: 00007	die
22	78	git_env_ulong	call site: 00078	die
3	64	strbuf_add	call site: 00064	BUG_fl
3	72	strbuf_grow	call site: 00072	xmalloc
2	290	LLVMFuzzerTestOneInput	call site: 00290	url_decode_internal
1	70	strbuf_grow	call site: 00070	die
1	286	url_decode_internal	call site: 00286	strbuf_detach

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

118

Reachable functions

139

Percentage of reachable functions covered

15.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-url-decode-mem.c	1
git/url.c	6
git/strbuf.c	10
git/./git-compat-util.h	6
git/usage.c	8
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hex-ll.h	2

Fuzzer: fuzz-parse-attr-line

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	255	69.8%
gold	[1:9]	9	2.46%
yellow	[10:29]	14	3.83%
greenyellow	[30:49]	1	0.27%
lawngreen	50+	86	23.5%
All colors	365	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
116	164	strbuf_release	call site: 00164	strbuf_grow
26	104	xrealloc	call site: 00104	die
25	40	trace2_cmd_error_va_fl	call site: 00040	tr2_dst_get_trace_fd
22	80	git_env_ulong	call site: 00080	die
21	142	strbuf_vaddf	call site: 00142	strbuf_addstr
10	11	strbuf_grow	call site: 00011	die
7	32	xwrite	call site: 00032	trace2_cmd_error_va_fl
4	288	fprintf_ln	call site: 00288	attr_name_valid
3	66	strbuf_add	call site: 00066	BUG_fl
3	308	xmallocz	call site: 00308	die
2	22	vfreportf	call site: 00022	fprintf
2	25	vfreportf	call site: 00025	_

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

113

Reachable functions

165

Percentage of reachable functions covered

31.52%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-parse-attr-line.c	1
git/attr.c	10
git/./gettext.h	1
git/usage.c	8
git/quote.c	1
git/strbuf.c	10
git/./git-compat-util.h	7
git/common-exit.c	2
git/wrapper.c	14
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/hashmap.c	8
git/./hashmap.h	2
git/dir.c	3

Fuzzer: fuzz-date

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	283	62.8%
gold	[1:9]	3	0.66%
yellow	[10:29]	13	2.88%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	151	33.5%
All colors	450	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
116	163	strbuf_release	call site: 00163	strbuf_grow
56	3	xmallocz	call site: 00003	die
26	103	strbuf_addch	call site: 00103	strbuf_grow
22	73	git_env_ulong	call site: 00073	die
21	141	strbuf_vaddf	call site: 00141	strbuf_addstr
21	418	show_date	call site: 00418	strbuf_addftime
4	136	strbuf_vaddf	call site: 00136	strbuf_grow
3	99	strbuf_add	call site: 00099	BUG_fl
2	67	strbuf_grow	call site: 00067	xmalloc
2	133	strbuf_vaddf	call site: 00133	die
2	404	gm_time_t	call site: 00404	die
1	63	strbuf_grow	call site: 00063	die

Runtime coverage analysis

Covered functions

69

Functions that are reachable but not covered

119

Reachable functions

178

Percentage of reachable functions covered

33.15%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-date.c	1
git/wrapper.c	13
git/usage.c	8
git/./git-compat-util.h	6
git/common-exit.c	2
git/./gettext.h	2
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	12
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/date.c	34
git/compat/../sane-ctype.h	1
git/compat/posix.h	1

Fuzzer: fuzz-pack-idx

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	269	90.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	1.34%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	24	8.08%
All colors	297	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
243	40	trace2_cmd_error_va_fl	call site: 00040	tr2_dst_get_trace_fd
10	10	load_idx	call site: 00010	die
7	32	xwrite	call site: 00032	trace2_cmd_error_va_fl
3	24	vfreportf	call site: 00024	_
2	3	load_idx	call site: 00003	error
2	21	vfreportf	call site: 00021	fprintf
2	292	load_idx	call site: 00292	error

Runtime coverage analysis

Covered functions

13

Functions that are reachable but not covered

118

Reachable functions

130

Percentage of reachable functions covered

9.23%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-pack-idx.c	1
git/packfile.c	1
git/usage.c	8
git/./git-compat-util.h	6
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	9
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1

Fuzzer: fuzz-config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	278	74.3%
gold	[1:9]	14	3.74%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	82	21.9%
All colors	374	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	161	strbuf_release	call site: 00161	strbuf_release
57	5	strbuf_grow	call site: 00005	die
26	102	strbuf_addch	call site: 00102	tr2_sid_append_my_sid_component
22	71	git_env_ulong	call site: 00071	die
21	139	strbuf_vaddf	call site: 00139	strbuf_addstr
14	354	strbuf_detach	call site: 00354	xstrfmt
5	95	xrealloc	call site: 00095	die
4	134	strbuf_vaddf	call site: 00134	strbuf_grow
3	65	strbuf_grow	call site: 00065	xmalloc
3	304	hashmap_add	call site: 00304	rehash
2	131	strbuf_vaddf	call site: 00131	die
2	287	xcalloc	call site: 00287	die

Runtime coverage analysis

Covered functions

46

Functions that are reachable but not covered

133

Reachable functions

176

Percentage of reachable functions covered

24.43%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-config.c	2
git/config.c	11
git/strbuf.c	12
git/./git-compat-util.h	7
git/usage.c	8
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	11
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hashmap.h	2
git/hashmap.c	11
git/compat/../sane-ctype.h	1

Fuzzer: fuzz-credential-from-url-gently

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	269	82.2%
gold	[1:9]	3	0.91%
yellow	[10:29]	3	0.91%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	52	15.9%
All colors	327	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
176	117	xrealloc	call site: 00117	url_decode_internal
55	23	strbuf_grow	call site: 00023	die
22	93	git_env_ulong	call site: 00093	die
3	12	credential_from_url_1	call site: 00012	_
3	79	strbuf_add	call site: 00079	BUG_fl
3	308	xmallocz	call site: 00308	die
2	87	strbuf_grow	call site: 00087	xmalloc
2	319	check_url_component	call site: 00319	_
1	85	strbuf_grow	call site: 00085	die
1	298	url_decode_internal	call site: 00298	strbuf_addch
1	300	url_decode_internal	call site: 00300	strbuf_detach

Runtime coverage analysis

Covered functions

31

Functions that are reachable but not covered

117

Reachable functions

148

Percentage of reachable functions covered

20.95%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-credential-from-url-gently.c	1
git/credential.c	6
git/string-list.c	1
git/strvec.c	4
git/./gettext.h	1
git/usage.c	8
git/url.c	3
git/strbuf.c	10
git/./git-compat-util.h	6
git/common-exit.c	2
git/wrapper.c	13
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/trace.c	3
git/trace2/tr2_tls.c	1
git/./hex-ll.h	2

Fuzzer: fuzz-commit-graph

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7748	97.9%
gold	[1:9]	34	0.42%
yellow	[10:29]	11	0.13%
greenyellow	[30:49]	5	0.06%
lawngreen	50+	111	1.40%
All colors	7909	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3216	2604	parse_commit_graph	call site: 02604	load_commit_graph_chain
2188	415	free_individual_entries	call site: 00415	config_with_options
1967	5939	repo_clear	call site: 05939	submodule_from_path
191	84	xrealloc	call site: 00084	die
28	27	trace2_cmd_error_va_fl	call site: 00027	tr2_dst_get_trace_fd
22	60	git_env_ulong	call site: 00060	die
18	5882	release_index	call site: 05882	strbuf_release
14	392	parse_commit_graph	call site: 00392	prepare_repo_settings
11	5821	repo_clear	call site: 05821	odb_close
10	5852	repo_clear	call site: 05852	git_configset_clear
9	5909	repo_clear	call site: 05909	remote_clear
7	19	xwrite	call site: 00019	trace2_cmd_error_va_fl

Runtime coverage analysis

Covered functions

75

Functions that are reachable but not covered

1883

Reachable functions

1957

Percentage of reachable functions covered

3.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-commit-graph.c	1
git/repository.c	21
git/usage.c	18
git/./gettext.h	2
git/wrapper.c	37
git/trace2.c	18
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/common-exit.c	2
git/compat/linux/procinfo.c	4
git/strbuf.c	40
git/./strbuf.h	9
git/./git-compat-util.h	23
git/parse.c	9
git/compat/fopen.c	1
git/strvec.c	8
git/trace.c	19
git/trace2/tr2_tls.c	7
git/./abspath.h	1
git/abspath.c	11
git/trace2/tr2_sid.c	3
git/trace2/tr2_tbuf.c	1
git/hash.c	6
git/hex.c	11
git/compat/strlcpy.c	1
git/remote.c	47
git/hashmap.c	23
git/object.c	17
git/alloc.c	10
git/commit.c	46
git/read-cache.c	64
git/environment.c	10
git/commit-graph.c	52
git/compat/bswap.h	3
git/chunk-format.c	7
git/./hash.h	13
git/repo-settings.c	9
git/config.c	101
git/./hashmap.h	7
git/string-list.c	14
git/compat/../sane-ctype.h	2
git/object-name.c	47
git/./hex-ll.h	2
git/refs.c	42
git/refs/debug.c	1
git/./trace.h	1
git/path.c	44
git/refs/files-backend.c	1
git/refs/../git-compat-util.h	1
git/refs/../strbuf.h	2
git/exec-cmd.c	3
git/quote.c	7
git/refspec.c	16
git/transport.c	1
git/./dir.h	3
git/advice.c	5
git/color.c	11
git/pager.c	3
git/editor.c	1
git/urlmatch.c	3
git/odb.c	26
git/./odb/source.h	11
git/./odb.h	3
git/odb/source.c	4
git/odb/source-files.c	2
git/odb/source-loose.c	2
git/chdir-notify.c	2
git/./list.h	6
git/loose.c	7
git/./khash.h	10
git/oidtree.c	2
git/./cbtree.h	1
git/mem-pool.c	7
git/cbtree.c	4
git/odb/source-packed.c	2
git/strmap.c	7
git/oid-array.c	6
git/compat/posix.h	2
git/./oid-array.h	1
git/compat/qsort_s.c	2
git/compat/../git-compat-util.h	1
git/object-file-convert.c	6
git/./odb/source-files.h	1
git/./replace-object.h	1
git/replace-object.c	4
git/./oidmap.h	1
git/oidmap.c	6
git/./refs.h	1
git/refs/iterator.c	5
git/promisor-remote.c	12
git/run-command.c	44
git/bloom.c	7
git/sigchain.c	4
git/symlinks.c	8
git/packfile.c	2
git/hash-lookup.c	3
git/./read-cache-ll.h	3
git/shallow.c	3
git/statinfo.c	5
git/compat/open.c	1
git/odb/streaming.c	7
git/object-file.c	13
git/blob.c	2
git/tree.c	6
git/tag.c	7
git/oidset.c	4
git/tree-walk.c	18
git/./object.h	3
git/gpg-interface.c	11
git/pretty.c	31
git/utf8.c	27
git/compat/nonblock.c	1
git/diff.c	1
git/revision.c	3
git/log-tree.c	11
git/wildmatch.c	2
git/decorate.c	5
git/reflog-walk.c	3
git/date.c	33
git/ident.c	1
git/mailmap.c	9
git/./utf8.h	1
git/trailer.c	30
git/wt-status.c	1
git/prio-queue.c	7
git/./prio-queue.h	1
git/./commit.h	1
git/setup.c	23
git/dir.c	65
git/sparse-index.c	18
git/./lockfile.h	3
git/lockfile.c	14
git/tempfile.c	13
git/./tempfile.h	1
git/wrapper.h	1
git/cache-tree.c	19
git/./odb/transaction.h	2
git/odb/transaction.c	4
git/name-hash.c	29
git/thread-utils.c	2
git/./tree.h	1
git/./tree-walk.h	2
git/./pathspec.h	2
git/pathspec.c	1
git/attr.c	46
git/submodule.c	13
git/submodule-config.c	31
git/odb/source-inmemory.c	1
git/resolve-undo.c	3
git/split-index.c	11
git/hook.c	1
git/fsmonitor.c	16
git/fsmonitor-settings.c	12
git/compat/fsmonitor/fsm-path-utils-linux.c	5
git/compat/fsmonitor/fsm-settings-unix.c	2
git/compat/fsmonitor/fsm-ipc-unix.c	2
git/sha1dc/sha1.c	9
git/sha1dc_git.c	2
git/sha1dc/ubc_check.c	1
git/fsmonitor-ipc.c	2
git/compat/simple-ipc/ipc-unix-socket.c	4
git/unix-socket.c	4
git/./pkt-line.h	1
git/pkt-line.c	19
git/./run-command.h	1
git/convert.c	30
git/sub-process.c	8
git/fsck.c	23
git/url.c	3
git/./oidset.h	2
git/./convert.h	1
git/./fsmonitor.h	2
git/ewah/ewah_bitmap.c	4
git/ewah/ewah_io.c	1
git/ewah/ewok_rlw.h	3
git/./strmap.h	3

Fuzzer: git/oss-fuzz/fuzz-reftable.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	180	98.3%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	3	1.63%
All colors	183	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
172	10	LLVMFuzzerTestOneInput	call site: 00010	reftable_table_iterator_next
8	1	LLVMFuzzerTestOneInput	call site: 00001	reftable_alloc_grow

Runtime coverage analysis

Covered functions

204

Functions that are reachable but not covered

83

Reachable functions

84

Percentage of reachable functions covered

1.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-reftable.c	1
git/reftable/basics.c	10
git/reftable/basics.h	6
git/reftable/blocksource.c	5
git/reftable/table.c	17
git/reftable/block.c	9
zlib/crc32.c	5
git/reftable/iter.c	8
git/reftable/record.c	3
zlib/inflate.c	9
zlib/adler32.c	2
zlib/inftrees.c	2
zlib/inffast.c	1

Fuzzer: fuzz-pack-headers

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	266	95.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	14	5.0%
All colors	280	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
244	34	trace2_cmd_error_va_fl	call site: 00034	tr2_dst_get_trace_fd
10	4	unpack_object_header_buffer	call site: 00004	die
7	26	xwrite	call site: 00026	trace2_cmd_error_va_fl
3	18	vfreportf	call site: 00018	_
2	15	vfreportf	call site: 00015	fprintf

Runtime coverage analysis

Covered functions

13

Functions that are reachable but not covered

119

Reachable functions

131

Percentage of reachable functions covered

9.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
git/oss-fuzz/fuzz-pack-headers.c	1
git/packfile.c	1
git/usage.c	8
git/./git-compat-util.h	7
git/common-exit.c	2
git/./gettext.h	1
git/wrapper.c	10
git/trace2.c	4
git/trace2/tr2_dst.c	10
git/trace2/tr2_sysenv.c	2
git/./abspath.h	1
git/abspath.c	1
git/trace2/tr2_sid.c	3
git/./strbuf.h	4
git/strbuf.c	9
git/parse.c	4
git/trace2/tr2_tbuf.c	1
git/hash.c	3
git/hex.c	1
git/compat/strlcpy.c	1
git/compat/linux/procinfo.c	4
git/compat/fopen.c	1
git/strvec.c	4
git/trace.c	3
git/trace2/tr2_tls.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
complete_action	/src/git/sequencer.c	11	['N/A', 'N/A', 'int', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'int', 'int', 'N/A']	175	0	344	47	18	4111	0	24663	14171
fetch_refs_via_pack	/src/git/transport.c	3	['N/A', 'int', 'N/A']	141	0	581	45	14	2325	0	12685	1651
apply_all_patches	/src/git/apply.c	4	['N/A', 'int', 'N/A', 'int']	148	0	380	52	20	2466	0	14178	1081

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

4402 / 7434

Cyclomatic complexity statically reachable by fuzzers

27664 / 44386

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

git/oss-fuzz/fuzz-url-decode-mem.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xrealloc', 'strbuf_grow', 'git_env_ulong', 'strbuf_add', 'LLVMFuzzerTestOneInput', 'url_decode_internal']

git/oss-fuzz/fuzz-parse-attr-line.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'xrealloc', 'trace2_cmd_error_va_fl', 'git_env_ulong', 'strbuf_vaddf', 'strbuf_grow', 'xwrite', 'fprintf_ln', 'strbuf_add', 'xmallocz']

git/oss-fuzz/fuzz-date.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'xmallocz', 'strbuf_addch', 'git_env_ulong', 'strbuf_vaddf', 'show_date', 'strbuf_add', 'strbuf_grow']

git/oss-fuzz/fuzz-pack-idx.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['trace2_cmd_error_va_fl', 'load_idx', 'xwrite', 'vfreportf']

git/oss-fuzz/fuzz-config.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strbuf_release', 'strbuf_grow', 'strbuf_addch', 'git_env_ulong', 'strbuf_vaddf', 'strbuf_detach', 'xrealloc', 'hashmap_add']

git/oss-fuzz/fuzz-credential-from-url-gently.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xrealloc', 'strbuf_grow', 'git_env_ulong', 'credential_from_url_1', 'strbuf_add', 'xmallocz', 'check_url_component', 'url_decode_internal']

git/oss-fuzz/fuzz-commit-graph.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parse_commit_graph', 'free_individual_entries', 'repo_clear', 'xrealloc', 'trace2_cmd_error_va_fl', 'git_env_ulong', 'release_index']

git/oss-fuzz/fuzz-reftable.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['LLVMFuzzerTestOneInput']

git/oss-fuzz/fuzz-pack-headers.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['trace2_cmd_error_va_fl', 'unpack_object_header_buffer', 'xwrite', 'vfreportf']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/git/hash.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/urlmatch.c	['fuzz-commit-graph']	[]
/src/git/wrapper.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']
/src/git/dir-iterator.c	[]	[]
/src/git/reftable/record.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/./pretty.h	[]	[]
/src/git/convert.c	['fuzz-commit-graph']	[]
/src/git/submodule-config.c	['fuzz-commit-graph']	[]
/src/git/compat/posix.h	['fuzz-date', 'fuzz-commit-graph']	['fuzz-date']
/src/git/trace2/tr2_cmd_name.c	[]	[]
/src/git/statinfo.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/zlib/adler32.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/./refs.h	['fuzz-commit-graph']	[]
/src/git/lockfile.c	['fuzz-commit-graph']	[]
/src/git/tmp-objdir.c	[]	[]
/src/git/pretty.c	['fuzz-commit-graph']	[]
/src/git/path.c	['fuzz-commit-graph']	[]
/src/zlib/inflate.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/resolve-undo.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/reftable/blocksource.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/compat/strlcpy.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/pack-write.c	[]	[]
/src/git/ewah/ewok.h	[]	[]
/src/git/common-exit.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/zlib/inffast.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/exec-cmd.c	['fuzz-commit-graph']	[]
/src/git/./odb/source-inmemory.h	[]	[]
/src/git/advice.c	['fuzz-commit-graph']	[]
/src/git/connected.c	[]	[]
/src/zlib/deflate.c	[]	[]
/src/git/reftable/basics.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/sub-process.c	['fuzz-commit-graph']	[]
/src/git/tree-walk.c	['fuzz-commit-graph']	[]
/src/git/trace2.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-parse-attr-line', 'fuzz-pack-idx', 'fuzz-commit-graph', 'fuzz-pack-headers']
/src/git/compat/fsmonitor/fsm-path-utils-linux.c	['fuzz-commit-graph']	[]
/src/git/negotiator/skipping.c	[]	[]
/src/git/unix-socket.c	['fuzz-commit-graph']	[]
/src/git/rebase-interactive.c	[]	[]
/src/git/reftable/table.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/rerere.c	[]	[]
/src/git/fetch-object-info.c	[]	[]
/src/git/./fsmonitor.h	['fuzz-commit-graph']	[]
/src/git/ws.c	[]	[]
/src/git/oss-fuzz/fuzz-commit-graph.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/shallow.c	['fuzz-commit-graph']	[]
/src/git/xdiff/xdiffi.c	[]	[]
/src/git/./commit.h	['fuzz-commit-graph']	[]
/src/git/sha256/block/sha256.c	[]	[]
/src/git/trace2/tr2_tbuf.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/oidtree.c	['fuzz-commit-graph']	[]
/src/git/compat/fopen.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/strbuf.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-config', 'fuzz-credential-from-url-gently']
/src/git/fsck.c	['fuzz-commit-graph']	[]
/src/git/odb/source-files.c	['fuzz-commit-graph']	[]
/src/git/replace-object.c	['fuzz-commit-graph']	[]
/src/git/./tree.h	['fuzz-commit-graph']	[]
/src/git/reftable/basics.h	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/./help.h	[]	[]
/src/git/refs/ref-cache.c	[]	[]
/src/git/diffcore-rotate.c	[]	[]
/src/git/object-file-convert.c	['fuzz-commit-graph']	[]
/src/git/xdiff-interface.c	[]	[]
/src/git/parse-options.c	[]	[]
/src/git/./pkt-line.h	['fuzz-commit-graph']	[]
/src/git/bisect.c	[]	[]
/src/git/transport.c	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-config.c	['fuzz-config']	['fuzz-config']
/src/git/refs/../tempfile.h	[]	[]
/src/git/compat/simple-ipc/ipc-unix-socket.c	['fuzz-commit-graph']	[]
/src/git/hex-ll.c	[]	[]
/src/git/kwset.c	[]	[]
/src/git/sha1dc/ubc_check.c	['fuzz-commit-graph']	[]
/src/git/./packfile.h	[]	[]
/src/git/negotiator/../commit.h	[]	[]
/src/git/worktree.c	[]	[]
/src/git/./pathspec.h	['fuzz-commit-graph']	[]
/src/git/connect.c	[]	[]
/src/git/column.c	[]	[]
/src/git/chunk-format.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/preload-index.c	[]	[]
/src/git/xdiff/xprepare.c	[]	[]
/src/git/./entry.h	[]	[]
/src/git/wrapper.h	['fuzz-commit-graph']	[]
/src/git/./odb/source-files.h	['fuzz-commit-graph']	[]
/src/git/./odb/transaction.h	['fuzz-commit-graph']	[]
/src/git/./convert.h	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-date.c	['fuzz-date']	['fuzz-date']
/src/git/./strmap.h	['fuzz-commit-graph']	[]
/src/git/remote.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/./prio-queue.h	['fuzz-commit-graph']	[]
/src/git/log-tree.c	['fuzz-commit-graph']	[]
/src/git/./git-compat-util.h	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/hashmap.c	['fuzz-parse-attr-line', 'fuzz-config', 'fuzz-commit-graph']	['fuzz-parse-attr-line', 'fuzz-config', 'fuzz-commit-graph']
/src/git/pack-bitmap.c	[]	[]
/src/git/./odb.h	['fuzz-commit-graph']	[]
/src/git/tempfile.c	['fuzz-commit-graph']	[]
/src/git/./oid-array.h	['fuzz-commit-graph']	[]
/src/git/tree-diff.c	[]	[]
/src/git/./gettext.h	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/oss-fuzz/fuzz-parse-attr-line.c	['fuzz-parse-attr-line']	['fuzz-parse-attr-line']
/src/git/line-log.c	[]	[]
/src/git/decorate.c	['fuzz-commit-graph']	[]
/src/git/gpg-interface.c	['fuzz-commit-graph']	[]
/src/git/mem-pool.c	['fuzz-commit-graph']	[]
/src/git/prio-queue.c	['fuzz-commit-graph']	[]
/src/git/string-list.c	['fuzz-credential-from-url-gently', 'fuzz-commit-graph']	['fuzz-credential-from-url-gently', 'fuzz-commit-graph']
/src/git/refs/reftable-backend.c	[]	[]
/src/git/refs/iterator.c	['fuzz-commit-graph']	[]
/src/git/fsmonitor.c	['fuzz-commit-graph']	[]
/src/git/compat/../sane-ctype.h	['fuzz-date', 'fuzz-config', 'fuzz-commit-graph']	[]
/src/git/wt-status.c	['fuzz-commit-graph']	[]
/src/git/utf8.c	['fuzz-commit-graph']	[]
/src/git/reftable/fsck.c	[]	[]
/src/git/commit.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/oss-fuzz/fuzz-url-decode-mem.c	['fuzz-url-decode-mem']	['fuzz-url-decode-mem']
/src/git/copy.c	[]	[]
/src/git/./oidset.h	['fuzz-commit-graph']	[]
/src/git/refs/../lockfile.h	[]	[]
/src/git/./diff.h	[]	[]
/src/git/diffcore-pickaxe.c	[]	[]
/src/git/entry.c	[]	[]
/src/git/./odb/source.h	['fuzz-commit-graph']	[]
/src/git/linear-assignment.c	[]	[]
/src/git/repack-geometry.c	[]	[]
/src/git/url.c	['fuzz-url-decode-mem', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph']	['fuzz-url-decode-mem', 'fuzz-credential-from-url-gently']
/src/git/refs.c	['fuzz-commit-graph']	[]
/src/git/revision.c	['fuzz-commit-graph']	[]
/src/git/graph.c	[]	[]
/src/git/reftable/../tempfile.h	[]	[]
/src/git/credential.c	['fuzz-credential-from-url-gently']	['fuzz-credential-from-url-gently']
/src/git/setup.c	['fuzz-commit-graph']	[]
/src/git/write-or-die.c	[]	[]
/src/zlib/crc32.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/xdiff/xhistogram.c	[]	[]
/src/git/./read-cache-ll.h	['fuzz-commit-graph']	[]
/src/git/fetch-negotiator.c	[]	[]
/src/git/reftable/stack.c	[]	[]
/src/git/promisor-remote.c	['fuzz-commit-graph']	[]
/src/git/./dir.h	['fuzz-commit-graph']	[]
/src/git/patch-ids.c	[]	[]
/src/git/packfile.c	['fuzz-pack-idx', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-pack-idx', 'fuzz-pack-headers']
/src/git/compat/fsmonitor/fsm-settings-unix.c	['fuzz-commit-graph']	[]
/src/git/./strbuf.h	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/symlinks.c	['fuzz-commit-graph']	[]
/src/git/compat/fsmonitor/fsm-ipc-unix.c	['fuzz-commit-graph']	[]
/src/git/repack.c	[]	[]
/src/git/reftable/pq.h	[]	[]
/src/git/fsmonitor-ipc.c	['fuzz-commit-graph']	[]
/src/git/parse-options-cb.c	[]	[]
/src/git/refspec.c	['fuzz-commit-graph']	[]
/src/git/./hashmap.h	['fuzz-parse-attr-line', 'fuzz-config', 'fuzz-commit-graph']	[]
/src/git/abspath.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/csum-file.c	[]	[]
/src/git/version.c	[]	[]
/src/git/./pack-objects.h	[]	[]
/src/git/color.c	['fuzz-commit-graph']	[]
/src/git/trace2/tr2_sid.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/split-index.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/config.c	['fuzz-config', 'fuzz-commit-graph']	['fuzz-config']
/src/git/run-command.c	['fuzz-commit-graph']	[]
/src/git/hook.c	['fuzz-commit-graph']	[]
/src/git/negotiator/noop.c	[]	[]
/src/git/./parse-options.h	[]	[]
/src/git/range-diff.c	[]	[]
/src/git/./column.h	[]	[]
/src/git/json-writer.c	[]	[]
/src/git/./symlinks.h	[]	[]
/src/git/./utf8.h	['fuzz-commit-graph']	[]
/src/git/odb/source-loose.c	['fuzz-commit-graph']	[]
/src/git/sideband.c	[]	[]
/src/git/diff-delta.c	[]	[]
/src/git/packfile-list.c	[]	[]
/src/git/xdiff/xmerge.c	[]	[]
/src/git/diff.c	['fuzz-commit-graph']	[]
/src/git/ident.c	['fuzz-commit-graph']	[]
/src/git/reflog-walk.c	['fuzz-commit-graph']	[]
/src/git/tag.c	['fuzz-commit-graph']	[]
/src/git/object-name.c	['fuzz-commit-graph']	[]
/src/git/trace2/tr2_tgt_perf.c	[]	[]
/src/git/odb/source.c	['fuzz-commit-graph']	[]
/src/git/merge-ort.c	[]	[]
/src/git/reftable/tree.c	[]	[]
/src/git/hex.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/./setup.h	[]	[]
/src/git/./list-objects.h	[]	[]
/src/git/merge.c	[]	[]
/src/git/trailer.c	['fuzz-commit-graph']	[]
/src/git/./write-or-die.h	[]	[]
/src/git/strmap.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/trace2/tr2_tmr.c	[]	[]
/src/git/fetch-pack.c	[]	[]
/src/git/ewah/ewah_rlw.c	[]	[]
/src/git/oidmap.c	['fuzz-commit-graph']	[]
/src/git/./oidmap.h	['fuzz-commit-graph']	[]
/src/git/branch.c	[]	[]
/src/git/pseudo-merge.c	[]	[]
/src/git/odb/source-inmemory.c	['fuzz-commit-graph']	[]
/src/git/prompt.c	[]	[]
/src/git/transport-helper.c	[]	[]
/src/git/./hex-ll.h	['fuzz-url-decode-mem', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph']	[]
/src/git/pack-objects.c	[]	[]
/src/git/hash-lookup.c	['fuzz-commit-graph']	[]
/src/git/ewah/ewah_bitmap.c	['fuzz-commit-graph']	[]
/src/git/environment.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/xdiff/xpatience.c	[]	[]
/src/git/dir.c	['fuzz-parse-attr-line', 'fuzz-commit-graph']	['fuzz-parse-attr-line', 'fuzz-commit-graph']
/src/git/reftable/record.h	[]	[]
/src/git/./hash.h	['fuzz-commit-graph']	[]
/src/git/./cbtree.h	['fuzz-commit-graph']	[]
/src/git/pkt-line.c	['fuzz-commit-graph']	[]
/src/git/pack-revindex.c	[]	[]
/src/git/notes-utils.c	[]	[]
/src/git/bundle.c	[]	[]
/src/git/merge-ll.c	[]	[]
/src/git/editor.c	['fuzz-commit-graph']	[]
/src/git/xdiff/xemit.c	[]	[]
/src/git/notes-cache.c	[]	[]
/src/git/strvec.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-credential-from-url-gently']
/src/git/match-trees.c	[]	[]
/src/git/oss-fuzz/fuzz-pack-idx.c	['fuzz-pack-idx']	['fuzz-pack-idx']
/src/git/./tree-walk.h	['fuzz-commit-graph']	[]
/src/git/oss-fuzz/fuzz-credential-from-url-gently.c	['fuzz-credential-from-url-gently']	['fuzz-credential-from-url-gently']
/src/git/trace2/tr2_tgt_event.c	[]	[]
/src/git/trace2/tr2_cfg.c	[]	[]
/src/git/chdir-notify.c	['fuzz-commit-graph']	[]
/src/git/refs/debug.c	['fuzz-commit-graph']	[]
/src/git/pathspec.c	['fuzz-commit-graph']	[]
/src/git/send-pack.c	[]	[]
/src/git/reftable/../lockfile.h	[]	[]
/src/git/./read-cache.h	[]	[]
/src/git/./trace.h	['fuzz-commit-graph']	[]
/src/git/./progress.h	[]	[]
/src/git/compat/bswap.h	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/reset.c	[]	[]
/src/git/blob.c	['fuzz-commit-graph']	[]
/src/git/thread-utils.c	['fuzz-commit-graph']	[]
/src/git/ewah/bitmap.c	[]	[]
/src/git/ewah/ewah_io.c	['fuzz-commit-graph']	[]
/src/git/tree.c	['fuzz-commit-graph']	[]
/src/git/commit-graph.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/bundle-uri.c	[]	[]
/src/git/reftable/merged.c	[]	[]
/src/git/unpack-trees.c	[]	[]
/src/git/date.c	['fuzz-date', 'fuzz-commit-graph']	['fuzz-date']
/src/git/attr.c	['fuzz-parse-attr-line', 'fuzz-commit-graph']	['fuzz-parse-attr-line']
/src/git/list-objects-filter.c	[]	[]
/src/git/oss-fuzz/fuzz-reftable.c	['git/oss-fuzz/fuzz-reftable.c']	['git/oss-fuzz/fuzz-reftable.c']
/src/git/mailmap.c	['fuzz-commit-graph']	[]
/src/git/sha1dc/sha1.c	['fuzz-commit-graph']	[]
/src/git/trace2/tr2_sysenv.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/reftable/iter.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/gettext.c	[]	[]
/src/git/odb/source-packed.c	['fuzz-commit-graph']	[]
/src/git/cbtree.c	['fuzz-commit-graph']	[]
/src/git/sha1dc_git.c	['fuzz-commit-graph']	[]
/src/git/userdiff.c	[]	[]
/src/git/pack-mtimes.c	[]	[]
/src/git/parse.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph']
/src/git/object.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/pack-bitmap-write.c	[]	[]
/src/git/xdiff/xutils.c	[]	[]
/src/git/./replace-object.h	['fuzz-commit-graph']	[]
/src/git/cache-tree.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/combine-diff.c	[]	[]
/src/git/base85.c	[]	[]
/src/git/repository.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/trace2/tr2_tgt_normal.c	[]	[]
/src/git/loose.c	['fuzz-commit-graph']	[]
/src/git/grep.c	[]	[]
/src/git/refs/files-backend.c	['fuzz-commit-graph']	[]
/src/git/./list.h	['fuzz-commit-graph']	[]
/src/git/compat/open.c	['fuzz-commit-graph']	[]
/src/git/./abspath.h	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/parallel-checkout.c	[]	[]
/src/git/odb.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/reftable/block.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/diffcore-order.c	[]	[]
/src/git/unix-stream-server.c	[]	[]
/src/git/./khash.h	['fuzz-commit-graph']	[]
/src/git/sequencer.c	[]	[]
/src/git/diff-merges.c	[]	[]
/src/git/submodule.c	['fuzz-commit-graph']	[]
/src/zlib/trees.c	[]	[]
/src/git/list-objects.c	[]	[]
/src/git/git-zlib.c	[]	[]
/src/git/oidset.c	['fuzz-commit-graph']	[]
/src/git/diffcore-delta.c	[]	[]
/src/git/./csum-file.h	[]	[]
/src/git/line-range.c	[]	[]
/src/zlib/inftrees.c	['git/oss-fuzz/fuzz-reftable.c']	[]
/src/git/sparse-index.c	['fuzz-commit-graph']	[]
/src/git/trace2/tr2_ctr.c	[]	[]
/src/git/./ewah/ewok.h	[]	[]
/src/git/reftable/writer.c	[]	[]
/src/git/compat/linux/procinfo.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/reftable/error.c	[]	[]
/src/git/diff-lib.c	[]	[]
/src/git/oss-fuzz/fuzz-pack-headers.c	['fuzz-pack-headers']	['fuzz-pack-headers']
/src/git/notes.c	[]	[]
/src/git/trace2/tr2_tls.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/pager.c	['fuzz-commit-graph']	[]
/src/git/sigchain.c	['fuzz-commit-graph']	[]
/src/git/midx.c	[]	[]
/src/git/./tempfile.h	['fuzz-commit-graph']	[]
/src/git/oid-array.c	['fuzz-commit-graph']	[]
/src/git/merge-ort-wrappers.c	[]	[]
/src/git/commit-reach.c	[]	[]
/src/git/./lockfile.h	['fuzz-commit-graph']	[]
/src/zlib/zutil.c	[]	[]
/src/git/./object.h	['fuzz-commit-graph']	[]
/src/git/reftable/system.c	[]	[]
/src/git/./odb/source-loose.h	[]	[]
/src/git/./delta.h	[]	[]
/src/git/./list-objects-filter-options.h	[]	[]
/src/git/./commit-reach.h	[]	[]
/src/git/trace2/tr2_dst.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/name-hash.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/pack-check.c	[]	[]
/src/git/protocol.c	[]	[]
/src/git/stable-qsort.c	[]	[]
/src/git/apply.c	[]	[]
/src/git/diffcore-break.c	[]	[]
/src/git/repo-settings.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/reftable/pq.c	[]	[]
/src/git/quote.c	['fuzz-parse-attr-line', 'fuzz-commit-graph']	['fuzz-parse-attr-line']
/src/git/bloom.c	['fuzz-commit-graph']	[]
/src/git/odb/transaction.c	['fuzz-commit-graph']	[]
/src/git/patch-delta.c	[]	[]
/src/git/compat/qsort_s.c	['fuzz-commit-graph']	[]
/src/git/alloc.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/usage.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	['fuzz-parse-attr-line', 'fuzz-pack-idx', 'fuzz-commit-graph', 'fuzz-pack-headers']
/src/git/fsmonitor-settings.c	['fuzz-commit-graph']	[]
/src/git/alias.c	[]	[]
/src/git/refs/packed-backend.c	[]	[]
/src/git/xdiff/xutils.h	[]	[]
/src/git/compat/terminal.c	[]	[]
/src/git/wildmatch.c	['fuzz-commit-graph']	[]
/src/git/list-objects-filter-options.c	[]	[]
/src/git/object-file.c	['fuzz-commit-graph']	[]
/src/git/compat/nonblock.c	['fuzz-commit-graph']	[]
/src/git/progress.c	[]	[]
/src/git/read-cache.c	['fuzz-commit-graph']	['fuzz-commit-graph']
/src/git/ewah/ewok_rlw.h	['fuzz-commit-graph']	[]
/src/git/./run-command.h	['fuzz-commit-graph']	[]
/src/git/./odb/source-packed.h	[]	[]
/src/git/diffcore-rename.c	[]	[]
/src/git/negotiator/default.c	[]	[]
/src/git/trace.c	['fuzz-url-decode-mem', 'fuzz-parse-attr-line', 'fuzz-date', 'fuzz-pack-idx', 'fuzz-config', 'fuzz-credential-from-url-gently', 'fuzz-commit-graph', 'fuzz-pack-headers']	[]
/src/git/odb/streaming.c	['fuzz-commit-graph']	[]

Directories in report

Directory
/src/git/compat/fsmonitor/
/src/git/negotiator/
/src/git/./odb/
/src/git/compat/
/src/git/refs/
/src/git/reftable/../
/src/git/refs/../
/src/git/reftable/
/src/git/trace2/
/src/git/sha1dc/
/src/git/compat/linux/
/src/git/sha256/block/
/src/zlib/
/src/git/xdiff/
/src/git/ewah/
/src/git/compat/simple-ipc/
/src/git/compat/../
/src/git/negotiator/../
/src/git/
/src/git/./
/src/git/oss-fuzz/
/src/git/odb/
/src/git/./ewah/