High level conclusions

Fuzzers reach 86.86% of cyclomatic complexity.

Fuzzers reach 86.62% of all functions.

Fuzzers reach 90.81% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

33153 / 38272

Cyclomatic complexity statically reachable by fuzzers

96882 / 111538

Runtime code coverage of functions

34758 / 38272

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: hb-gpu-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	871	29.1%
gold	[1:9]	145	4.85%
yellow	[10:29]	25	0.83%
greenyellow	[30:49]	9	0.30%
lawngreen	50+	1938	64.8%
All colors	2988	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1559	hb_lazy_loader_t ::get_unconst() const	call site: 01559	hypotf
27	2342	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02342	hb_shape_plan_destroy
25	1513	CrapHelper ::get_crap()	call site: 01513	hb_draw_funcs_set_line_to_func
21	2722	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 02722	hb_free
18	2810	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 02810	hb_free
17	2171	hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)	call site: 02171	hb_map_get
16	1618	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01618
14	37	hb_blob_t::try_make_writable()	call site: 00037	sysconf
14	90	CrapHelper ::get_crap()	call site: 00090	hb_free
12	2945	OT::SVG::accelerator_t::~accelerator_t()	call site: 02945	hb_blob_destroy
11	2776	hb_lazy_loader_t , hb_face_t, 27u, OT::GSUB_accelerator_t>::do_destroy(OT::GSUB_accelerator_t*)	call site: 02776	hb_free

Runtime coverage analysis

Covered functions

4015

Functions that are reachable but not covered

702

Reachable functions

3767

Percentage of reachable functions covered

81.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	13
../../src/harfbuzz/src/hb-null.hh	126
../../src/harfbuzz/src/hb-object.hh	97
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	38
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	83
../../src/harfbuzz/src/hb-vector.hh	293
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	466
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	60
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	17
../../src/harfbuzz/src/hb-font.hh	6
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-gpu-draw.cc	40
../../src/harfbuzz/src/hb-gpu-draw.hh	4
../../src/harfbuzz/src/hb-gpu-paint.cc	46
../../src/harfbuzz/src/hb-gpu-paint.hh	4
../../src/harfbuzz/src/hb-geometry.hh	2
../../src/harfbuzz/src/hb-draw.cc	12
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-gpu-cu2qu.hh	5
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint.cc	28
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-raster-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1206	36.1%
gold	[1:9]	295	8.83%
yellow	[10:29]	179	5.36%
greenyellow	[30:49]	51	1.52%
lawngreen	50+	1607	48.1%
All colors	3338	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
36	2413	composite_pixel(unsigned int, unsigned int, hb_paint_composite_mode_t)	call site: 02413	sqrtf
35	1603	hb_lazy_loader_t ::get_unconst() const	call site: 01603	hypotf
27	2698	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02698	hb_shape_plan_destroy
24	1557	CrapHelper ::get_crap()	call site: 01557	hb_draw_funcs_set_line_to_func
24	2579	hb_raster_paint_funcs_lazy_loader_t::create()	call site: 02579	hb_paint_normalize_color_line
21	3078	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 03078	hb_free
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3166	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 03166	hb_free
17	2306	hb_raster_clip_t::update_bounds_from_rect()	call site: 02306
17	2368	hb_raster_image_t::composite_from(hb_raster_image_t const*, hb_paint_composite_mode_t)	call site: 02368
17	2394	pack_from_float(float, float, float, float)	call site: 02394

Runtime coverage analysis

Covered functions

3479

Functions that are reachable but not covered

826

Reachable functions

4093

Percentage of reachable functions covered

79.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	12
../../src/harfbuzz/src/hb-null.hh	135
../../src/harfbuzz/src/hb-object.hh	105
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	33
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	93
../../src/harfbuzz/src/hb-vector.hh	339
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	475
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	62
../../src/harfbuzz/src/hb-iter.hh	68
../../src/harfbuzz/src/hb-meta.hh	7
../../src/harfbuzz/src/hb-font.cc	20
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-raster-draw.cc	27
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-raster-paint.cc	39
../../src/harfbuzz/src/hb-raster-paint.hh	21
../../src/harfbuzz/src/hb-raster-image.cc	32
../../src/harfbuzz/src/hb-raster-image.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	30
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-cplusplus.hh	7
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-vector-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1023	22.9%
gold	[1:9]	321	7.20%
yellow	[10:29]	84	1.88%
greenyellow	[30:49]	89	1.99%
lawngreen	50+	2936	65.9%
All colors	4453	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1706	hb_lazy_loader_t ::get_unconst() const	call site: 01706	hypotf
26	3827	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 03827	hb_shape_plan_destroy
25	1660	CrapHelper ::get_crap()	call site: 01660	hb_draw_funcs_set_line_to_func
21	3506	hb_vector_draw_render_svg(hb_vector_draw_t*)	call site: 03506
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3092	hb_vector_paint_funcs_lazy_loader_t::create()	call site: 03092
18	3759	hb_vector_paint_render_pdf(hb_vector_paint_t*)	call site: 03759
18	4281	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 04281	hb_free
17	3684	hb_vector_paint_render_svg(hb_vector_paint_t*)	call site: 03684
15	1765	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01765
15	3611	hb_vector_draw_render_pdf(hb_vector_draw_t*)	call site: 03611

Runtime coverage analysis

Covered functions

4450

Functions that are reachable but not covered

711

Reachable functions

4425

Percentage of reachable functions covered

83.93%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	2
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	14
../../src/harfbuzz/src/hb-null.hh	132
../../src/harfbuzz/src/hb-object.hh	113
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	34
../../src/harfbuzz/src/hb-atomic.hh	138
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	93
../../src/harfbuzz/src/hb-vector.hh	331
../../src/harfbuzz/src/hb-mutex.hh	4
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	518
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	75
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	19
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-vector-draw.cc	25
../../src/harfbuzz/src/hb-vector-draw.hh	11
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-vector-buf.hh	15
../../src/harfbuzz/src/hb-vector-paint.cc	11
../../src/harfbuzz/src/hb-vector-paint.hh	9
../../src/harfbuzz/src/hb-map.hh	11
../../src/harfbuzz/src/hb-set.cc	7
../../src/harfbuzz/src/hb-set.hh	12
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-bit-set.hh	15
../../src/harfbuzz/src/hb-vector-paint-pdf.cc	57
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	32
../../src/harfbuzz/src/hb-paint.hh	9
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-vector-internal.hh	7
../../src/harfbuzz/src/hb-vector.cc	5
../../src/harfbuzz/src/hb-vector-path.cc	17
../../src/harfbuzz/src/hb-vector-paint-svg.cc	35
../../src/harfbuzz/src/hb-bit-page.hh	12
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-repacker-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2281	43.3%
gold	[1:9]	39	0.74%
yellow	[10:29]	42	0.79%
greenyellow	[30:49]	23	0.43%
lawngreen	50+	2882	54.7%
All colors	5267	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	4010	hb_array_t ::qsort()	call site: 04010	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSB_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
102	3760	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 03760	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
86	1698	hb_serialize_context_t::check_success(bool, hb_serialize_error_t)	call site: 01698	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_10SmallTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage14clone_coverageERNSE_24gsubgpos_graph_context_tEjjjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
64	3137	CrapHelper >::get_crap()	call site: 03137	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
60	3202	OT::ArrayOf , OT::NumType >::operator[](int)	call site: 03202	_ZN2OT17ClassDefFormat2_4INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
55	4203	graph::graph_t::vertex_t::is_shared() const	call site: 04203	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph20LigatureSubstFormat16shrinkERNSB_24gsubgpos_graph_context_tEjj11hb_vector_tIjLb0EEjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSN_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSV_18is_sorted_iteratorEvE4typeELSN_0EEEbP22hb_serialize_context_tSV_
49	4153	hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t )#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &	call site: 04153	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSE_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
48	2169	hb_filter_iter_t ::item_t>, bool (hb_hashmap_t ::item_t::*)() const, $_19 const&, (void*)0>::__next__()	call site: 02169	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph14PairPosFormat16shrinkERNSB_24gsubgpos_graph_context_tEjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
47	2997	hb_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &	call site: 02997	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
47	3952	graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 03952	_ZN9hb_pair_tIRjjEcvS_IT_T0_EIjjTnPN12hb_enable_ifIXaasr3std14is_convertibleIS0_S2_EE5valuesr3std14is_convertibleIjS3_EE5valueEvE4typeELPv0EEEv
34	1835	hb_serialize_context_t::pop_pack(bool)	call site: 01835	_ZN12hb_hashmap_tIPKN22hb_serialize_context_t8object_tEjLb0EE6item_t13default_valueILb0ETnPN12hb_enable_ifIXeqT_Lb0EEvE4typeELPv0EEERKjv
34	2820	graph::PairPosFormat2::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 02820

Runtime coverage analysis

Covered functions

1755

Functions that are reachable but not covered

1579

Reachable functions

5381

Percentage of reachable functions covered

70.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	1
../../src/harfbuzz/src/hb-subset-serialize.cc	1
../../src/harfbuzz/src/hb-vector.hh	321
../../src/harfbuzz/src/hb-algs.hh	248
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-null.hh	127
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-serialize.hh	110
../../src/harfbuzz/src/hb-map.hh	176
../../src/harfbuzz/src/hb-object.hh	33
../../src/harfbuzz/src/hb-atomic.hh	20
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-set.hh	34
../../src/harfbuzz/src/hb-bit-set-invertible.hh	33
../../src/harfbuzz/src/hb-bit-set.hh	44
../../src/harfbuzz/src/hb-debug.hh	4
../../src/harfbuzz/src/hb-bit-page.hh	34
../../src/harfbuzz/src/hb-array.hh	127
../../src/harfbuzz/src/hb-iter.hh	944
../../src/harfbuzz/src/hb-meta.hh	116
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	9
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	4
../../src/harfbuzz/src/graph/../hb-object.hh	2
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	5
../../src/harfbuzz/src/hb-open-type.hh	90
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	1
../../src/harfbuzz/src/hb-machinery.hh	4
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	2
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	6
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	4
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	16
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	18
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/hb-ot-layout-common.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	1
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	12
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/hb-blob.cc	7
../../src/harfbuzz/src/hb-blob.hh	3

Fuzzer: hb-shape-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3192	20.5%
gold	[1:9]	285	1.83%
yellow	[10:29]	223	1.43%
greenyellow	[30:49]	70	0.45%
lawngreen	50+	11762	75.7%
All colors	15532	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	3504	hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)	call site: 03504	strncmp
114	14692	hb_ot_metrics_get_variation	call site: 14692	hb_ot_metrics_get_variation
60	11533	hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)	call site: 11533	hb_shape_full
42	14865	hb_lazy_loader_t , hb_face_t, 7u, OT::post_accelerator_t>::get() const	call site: 14865	hb_ot_metrics_get_variation
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
34	11167	hb_lazy_loader_t ::get_unconst() const	call site: 11167	hypotf
33	4799	hb_array_t ::qsort()	call site: 04799	_ZN10hb_array_tIN20hb_aat_map_builder_t15feature_event_tEE5qsortIZNS2_6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EESC_S6_
31	11128	CrapHelper ::get_crap()	call site: 11128	hb_draw_funcs_set_line_to_func
28	13708	OT::OffsetTo , void, true>::operator()(void const*) const	call site: 13708	_ZNK4$_20clIRZNK2OT8LigGlyph14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS1_18ItemVariationStoreEjPjPiEUlRKNS1_10CaretValueEE_SD_EEDTcl4implclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_Ecv11hb_priorityILj16EE_EEEOSG_OSH_
26	2582	OT::Device::sanitize(hb_sanitize_context_t*) const	call site: 02582	_ZN21hb_sanitize_context_t8dispatchIN2OT6DeviceEJEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOS5_
25	14665	NullHelper ::get_null()	call site: 14665	hb_ot_metrics_get_variation
23	13646	hb_iter_t , void, true> const>, OT::OffsetTo , void, true> const&>::operator+() const	call site: 13646	_ZorI13hb_map_iter_tIS0_I10hb_array_tIKN2OT8OffsetToINS2_10CaretValueENS2_7NumTypeILb1EtLj2EEEvLb1EEEE12hb_partial_tILj2EPK4$_40PKNS2_8LigGlyphEEL24hb_function_sortedness_t0ELPv0EEZNKSE_14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS2_18ItemVariationStoreEjPjPiEUlRKS4_E_LSI_0ELSJ_0EE9hb_sink_tIS1_IiEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS11_6item_tEEE5valueEvE4typeELSJ_0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardIS11_Efp_EEEOS11_OS16_

Runtime coverage analysis

Covered functions

11906

Functions that are reachable but not covered

1445

Reachable functions

16640

Percentage of reachable functions covered

91.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	11
../../src/harfbuzz/src/hb-null.hh	609
../../src/harfbuzz/src/hb-object.hh	119
../../src/harfbuzz/src/hb-common.cc	17
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	108
../../src/harfbuzz/src/hb-atomic.hh	188
../../src/harfbuzz/src/hb-debug.hh	5
../../src/harfbuzz/src/hb-algs.hh	473
../../src/harfbuzz/src/hb-vector.hh	478
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	17
../../src/harfbuzz/src/hb-sanitize.hh	611
../../src/harfbuzz/src/hb-dispatch.hh	24
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	922
../../src/harfbuzz/src/hb-machinery.hh	919
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	16
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	442
../../src/harfbuzz/src/hb-iter.hh	855
../../src/harfbuzz/src/hb-meta.hh	133
../../src/harfbuzz/src/hb-font.cc	28
../../src/harfbuzz/src/hb-font.hh	57
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	14
../../src/harfbuzz/src/hb-ot-var.cc	6
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	69
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	136
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	5
../../src/harfbuzz/src/hb-ot-layout-common.hh	126
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	39
../../src/harfbuzz/src/hb-fallback-shape.cc	5
../../src/harfbuzz/src/hb-buffer.cc	44
../../src/harfbuzz/src/hb-buffer.hh	53
../../src/harfbuzz/src/hb-set-digest.hh	15
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	11
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-utf.hh	6
../../src/harfbuzz/src/hb-shape.cc	2
../../src/harfbuzz/src/hb-shape-plan.cc	10
../../src/harfbuzz/src/hb-ot-shape.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	42
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	518
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	5
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	11
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	40
../../src/harfbuzz/src/hb-cache.hh	15
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-shaper.cc	5
../../src/harfbuzz/src/hb-shape-plan.hh	3
../../src/harfbuzz/src/hb-ot-map.hh	21
../../src/harfbuzz/src/hb-aat-map.hh	7
../../src/harfbuzz/src/hb-ot-map.cc	6
../../src/harfbuzz/src/hb-ot-tag.cc	11
../../src/harfbuzz/src/hb-ot-tag-table.hh	1
../../src/harfbuzz/src/hb-aat-layout.cc	18
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	149
../../src/harfbuzz/src/hb-aat-layout-common.hh	254
../../src/harfbuzz/src/hb-bit-set.hh	34
../../src/harfbuzz/src/hb-ot-shaper.hh	1
../../src/harfbuzz/src/hb-map.hh	20
../../src/harfbuzz/src/hb-aat-map.cc	2
../../src/harfbuzz/src/hb-aat-ltag-table.hh	3
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	118
../../src/harfbuzz/src/hb-bit-page.hh	20
../../src/harfbuzz/src/hb-ot-kern-table.hh	41
../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	11
../../src/harfbuzz/src/hb-ot-stat-table.hh	7
../../src/harfbuzz/src/hb-ot-layout.hh	49
../../src/harfbuzz/src/hb-unicode-emoji-table.hh	3
../../src/harfbuzz/src/hb-ot-shape-normalize.cc	10
../../src/harfbuzz/src/hb-ot-shape-normalize.hh	1
../../src/harfbuzz/src/hb-ot-shape-fallback.cc	11
../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	17
../../src/harfbuzz/src/hb-aat-layout.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	2
../../src/harfbuzz/src/hb-kern.hh	20
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-geometry.hh	13
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	21
../../src/harfbuzz/src/hb-paint.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	4
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	2
../../src/harfbuzz/src/hb-buffer-verify.cc	5
../../src/harfbuzz/src/hb-cplusplus.hh	5
../../src/harfbuzz/src/hb-buffer-serialize.cc	3
../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	1
../../src/harfbuzz/src/hb-set.cc	4
../../src/harfbuzz/src/hb-set.hh	10
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-ot-cmap-table.hh	53
../../src/harfbuzz/src/hb-ot-os2-table.hh	10
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-ot-color.cc	12
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	87
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	37
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	73
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/svg/svg.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	23
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	12
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	29
../../src/harfbuzz/src/hb-ot-math.cc	10
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/hb-ot-meta.cc	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	11
../../src/harfbuzz/src/hb-ot-metrics.cc	6
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-post-table.hh	7
../../src/harfbuzz/src/hb-ot-name.cc	7
../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	10
../../src/harfbuzz/src/OT/name/name.hh	19
../../src/harfbuzz/src/OT/name/../../hb-blob.hh	7
../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	8
../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	4
../../src/harfbuzz/src/hb-ot-name-language-static.hh	4
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3

Fuzzer: hb-subset-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	9285	20.2%
gold	[1:9]	457	0.99%
yellow	[10:29]	427	0.93%
greenyellow	[30:49]	319	0.69%
lawngreen	50+	35255	77.0%
All colors	45743	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
126	19637	hb_hashmap_t , false>::alloc(unsigned int)	call site: 19637
70	19901	_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)	call site: 19901	_ZorIN23hb_bit_set_invertible_t6iter_tE24hb_filter_iter_factory_tIZL15_get_table_tagsPK16hb_subset_plan_tjPjS6_E3$_2RK4$_22ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSD_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISD_Efp_EEEOSD_OSJ_
63	45408	hb_table_lazy_loader_t ::convert(hb_blob_t const*)	call site: 45408	hb_blob_copy_writable_or_fail
62	26026	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 26026	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
55	26089	hb_vector_t graph::actuate_subtable_split (graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)	call site: 26089	_ZorI13hb_zip_iter_tI14hb_iota_iter_tIjjEN2OT6Layout6Common8Coverage6iter_tEE24hb_filter_iter_factory_tIR8hb_set_tRK3$_6ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSH_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISH_Efp_EEEOSH_OSN_
41	44814	_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj	call site: 44814	_ZN2OT19CmapSubtableFormat49serializeI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEvP22hb_serialize_context_tSI_
40	428	hb_ot_face_t::init0(hb_face_t*)	call site: 00428
40	45644	hb_iter_t , OT::cmap::create_filled_cache(hb_blob_ptr_t )::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &	call site: 45644	hb_face_set_user_data
39	25422	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()	call site: 25422	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
36	21071	hb_vector_t ::resize_full(int, bool, bool)	call site: 21071	_ZL12rotate_arrayIbTnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEbRK10hb_array_tIKS1_EiR11hb_vector_tIS1_Lb0EE
35	25523	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, $_7, $_22 const&, (hb_function_sortedness_t)0>, $_6 const&, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})0, (hb_function_sortedness_t)0>::__next__()	call site: 25523	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_22LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
34	25254	hb_vector_t graph::actuate_subtable_split (graph::PairPosFormat2::split_context_t&, hb_vector_t const&)	call site: 25254	_ZorIN2OT6Layout6Common8Coverage6iter_tE21hb_map_iter_factory_tIZNK5graph14PairPosFormat211clone_rangeERNS7_15split_context_tEjjEUljE_L24hb_function_sortedness_t1EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSE_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISE_Efp_EEEOSE_OSK_

Runtime coverage analysis

Covered functions

24853

Functions that are reachable but not covered

4301

Reachable functions

48693

Percentage of reachable functions covered

91.17%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/src/hb-blob.cc	15
../../src/harfbuzz/src/hb-null.hh	1012
../../src/harfbuzz/src/hb-object.hh	169
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	279
../../src/harfbuzz/src/hb-atomic.hh	159
../../src/harfbuzz/src/hb-debug.hh	79
../../src/harfbuzz/src/hb-algs.hh	2510
../../src/harfbuzz/src/hb-vector.hh	1598
../../src/harfbuzz/src/hb-mutex.hh	8
../../src/harfbuzz/src/hb-face.cc	19
../../src/harfbuzz/src/hb-sanitize.hh	670
../../src/harfbuzz/src/hb-dispatch.hh	100
../../src/harfbuzz/src/hb-open-file.hh	27
../../src/harfbuzz/src/hb-open-type.hh	1670
../../src/harfbuzz/src/hb-machinery.hh	852
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	1076
../../src/harfbuzz/src/hb-iter.hh	8909
../../src/harfbuzz/src/hb-meta.hh	1069
../../src/harfbuzz/src/hb-set.cc	12
../../src/harfbuzz/src/hb-set.hh	53
../../src/harfbuzz/src/hb-bit-set-invertible.hh	46
../../src/harfbuzz/src/hb-bit-set.hh	69
../../src/harfbuzz/src/hb-ot-cmap-table.hh	120
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	8
../../src/harfbuzz/src/hb-cache.hh	5
../../src/harfbuzz/src/hb-ot-os2-table.hh	15
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-bit-page.hh	44
../../src/harfbuzz/src/hb-subset-input.cc	12
../../src/harfbuzz/src/hb-map.hh	738
../../src/harfbuzz/src/hb-subset-input.hh	9
../../src/harfbuzz/src/hb-cplusplus.hh	28
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	28
../../src/harfbuzz/src/hb-ot-post-table.hh	8
../../src/harfbuzz/src/OT/name/name.hh	14
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	36
../../src/harfbuzz/src/hb-subset-plan.hh	85
../../src/harfbuzz/src/hb-ot-cff1-table.hh	93
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	39
../../src/harfbuzz/src/hb-cff-interp-common.hh	129
../../src/harfbuzz/src/hb-ot-cff2-table.hh	46
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	28
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	376
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	7
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	285
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	39
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	10
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3
../../src/harfbuzz/src/hb-ot-var.cc	5
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	26
../../src/harfbuzz/src/hb-subset-instancer-solver.hh	10
../../src/harfbuzz/src/hb-subset.cc	12
../../src/harfbuzz/src/hb-subset-plan.cc	33
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	16
../../src/harfbuzz/src/hb-face-builder.cc	10
../../src/harfbuzz/src/hb-serialize.hh	1374
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-subset-accelerator.hh	5
../../src/harfbuzz/src/hb-subset-plan-var.cc	8
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	18
../../src/harfbuzz/src/hb-ot-layout-common.hh	106
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	91
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	8
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	3
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-multimap.hh	6
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-cff-common.hh	59
../../src/harfbuzz/src/hb-number.cc	1
hb-number-parser.rl	2
../../src/harfbuzz/src/hb-subset-cff-common.hh	104
../../src/harfbuzz/src/hb-subset-plan-layout.cc	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	10
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	16
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	16
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	9
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	10
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	26
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	15
../../src/harfbuzz/src/hb-bimap.hh	19
../../src/harfbuzz/src/hb-ot-stat-table.hh	41
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	6
../../src/harfbuzz/src/OT/glyf/Glyph.hh	14
../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	26
../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	15
../../src/harfbuzz/src/OT/glyf/composite-iter.hh	8
../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.cc	9
../../src/harfbuzz/src/hb-cff1-interp-cs.hh	15
../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	229
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	31
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	42
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	42
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	3
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	49
../../src/harfbuzz/src/hb-font.cc	12
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-ot-cff2-table.cc	10
../../src/harfbuzz/src/hb-cff2-interp-cs.hh	46
../../src/harfbuzz/src/hb-subset-table.hh	93
../../src/harfbuzz/src/hb-subset-table-layout.cc	1
../../src/harfbuzz/src/hb-subset.hh	332
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	73
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	226
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	2
../../src/harfbuzz/src/hb-subset-instancer-solver.cc	7
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	4
../../src/harfbuzz/src/hb-subset-instancer-iup.cc	10
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	17
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	2
../../src/harfbuzz/src/graph/../hb-object.hh	1
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	45
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	2
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	10
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	3
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	12
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	7
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	3
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/hb-subset-table-var.cc	1
../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	24
../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	15
../../src/harfbuzz/src/hb-ot-var-common.hh	34
../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	7
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	6
../../src/harfbuzz/src/hb-subset-table-cff.cc	3
../../src/harfbuzz/src/hb-subset-cff1.cc	47
../../src/harfbuzz/src/hb-subset-cff-common.cc	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	1
../../src/harfbuzz/src/hb-subset-cff2.cc	33
../../src/harfbuzz/src/hb-cff-width-optimizer.hh	9
../../src/harfbuzz/src/hb-cff-specializer.hh	4
../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	2
../../src/harfbuzz/src/hb-ot-vorg-table.hh	4
../../src/harfbuzz/src/hb-subset-table-color.cc	1
../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	3
../../src/harfbuzz/src/hb-subset-table-other.cc	1
../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	4
../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	4
../../src/harfbuzz/src/hb-ot-hdmx-table.hh	9
../../src/harfbuzz/src/hb-utf.hh	1
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	2
../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	2
../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	3
../../src/harfbuzz/src/hb-string-array.hh	1
../../src/harfbuzz/src/hb-ot-head-table.hh	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
hb_ot_font_set_funcs	/work/build/../../src/harfbuzz/src/hb-ot-font.cc	1	['N/A']	62	0	32	6	3	7913	0	13059	3163

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

34038 / 38272

Cyclomatic complexity statically reachable by fuzzers

100043 / 111538

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_blob_t::try_make_writable()', 'CrapHelper::get_crap()']

../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'composite_pixel(unsigned int, unsigned int, hb_paint_composite_mode_t)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_raster_paint_funcs_lazy_loader_t::create()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_raster_clip_t::update_bounds_from_rect()']

../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_vector_draw_render_svg(hb_vector_draw_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_vector_paint_funcs_lazy_loader_t::create()', 'hb_vector_paint_render_pdf(hb_vector_paint_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_vector_paint_render_svg(hb_vector_paint_t*)']

../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_array_t::qsort()', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_serialize_context_t::check_success(bool, hb_serialize_error_t)', 'CrapHelper >::get_crap()', 'OT::ArrayOf, OT::NumType >::operator[](int)', 'graph::graph_t::vertex_t::is_shared() const', 'hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t)#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &', 'hb_filter_iter_t::item_t>, bool (hb_hashmap_t::item_t::*)() const, $_19 const&, (void*)0>::__next__()', 'hb_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &', 'graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)']

../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)', 'hb_ot_metrics_get_variation', 'hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)', 'hb_lazy_loader_t, hb_face_t, 7u, OT::post_accelerator_t>::get() const', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_array_t::qsort()', 'CrapHelper::get_crap()', 'OT::OffsetTo, void, true>::operator()(void const*) const', 'OT::Device::sanitize(hb_sanitize_context_t*) const']

../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_hashmap_t, false>::alloc(unsigned int)', '_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)', 'hb_table_lazy_loader_t::convert(hb_blob_t const*)', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_vector_t graph::actuate_subtable_split(graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)', '_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_iter_t, OT::cmap::create_filled_cache(hb_blob_ptr_t)::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &', 'hb_map_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()', 'hb_vector_t::resize_full(int, bool, bool)']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
hb_font_t::draw_glyph_or_fail(unsignedint,hb_draw_funcs_t*,void*,bool)	42	13	30.95%	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-raster-fuzzer']
composite_pixel(unsignedint,unsignedint,hb_paint_composite_mode_t)	81	12	14.81%	['hb-raster-fuzzer']
hb_raster_paint_push_clip_rectangle(hb_paint_funcs_t*,void*,float,float,float,float,void*)	189	45	23.80%	['hb-raster-fuzzer']
hb_raster_paint_image(hb_paint_funcs_t*,void*,hb_blob_t*,unsignedint,unsignedint,unsignedint,float,hb_glyph_extents_t*,void*)	118	15	12.71%	['hb-raster-fuzzer']
hb_raster_paint_linear_gradient(hb_paint_funcs_t*,void*,hb_color_line_t*,float,float,float,float,float,float,void*)	125	65	52.0%	['hb-raster-fuzzer']
hb_raster_paint_radial_gradient(hb_paint_funcs_t*,void*,hb_color_line_t*,float,float,float,float,float,float,void*)	234	46	19.65%	['hb-raster-fuzzer']
unsignedinthb_bit_storage (unsignedint)	49	5	10.20%	['hb-subset-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer']
unsignedinthb_ctz (unsignedlonglong)	48	8	16.66%	['hb-subset-fuzzer', 'hb-repacker-fuzzer']
unsignedinthb_popcount (unsignedlonglong)	35	7	20.0%	['hb-subset-fuzzer', 'hb-repacker-fuzzer']
unsignedinthb_bit_storage (unsignedlonglong)	49	8	16.32%	['hb-subset-fuzzer', 'hb-repacker-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf16_xe_t >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf32_xe_t >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
hb_aat_map_builder_t::compile(hb_aat_map_t&)	67	6	8.955%	['hb-shape-fuzzer']
unsignedinthb_ctz (unsignedint)	48	5	10.41%	['hb-shape-fuzzer']
unsignedinthb_popcount (hb_glyph_flags_t)	35	4	11.42%	['hb-shape-fuzzer']
_ZL13hb_qsort_loopIN11hb_ot_map_t13feature_map_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-shape-fuzzer']
_hb_ot_metrics_get_position_common(hb_font_t*,hb_ot_metrics_tag_t,int*)	34	15	44.11%	['hb-shape-fuzzer']
hb_ot_metrics_get_position	84	12	14.28%	['hb-shape-fuzzer']
hb_ensure_native_direction(hb_buffer_t*)	33	8	24.24%	['hb-shape-fuzzer']
apply_stch(hb_ot_shape_plan_tconst*,hb_buffer_t*,hb_font_t*)	160	3	1.875%	['hb-shape-fuzzer']
hb_ot_tags_from_complex_language(charconst*,charconst*,unsignedint*,unsignedint*)	1210	67	5.537%	['hb-shape-fuzzer']
hb_ot_tags_from_script_and_language	45	24	53.33%	['hb-shape-fuzzer']
parse_private_use_subtag(charconst*,unsignedint*,unsignedint*,charconst*,unsignedchar(*)(unsignedchar))	32	2	6.25%	['hb-shape-fuzzer']
hb_ot_tags_from_language(charconst*,charconst*,unsignedint*,unsignedint*)	100	26	26.0%	['hb-shape-fuzzer']
hb_shapers_lazy_loader_t::create()	32	4	12.5%	['hb-shape-fuzzer']
hb_utf8_t::next(unsignedcharconst*,unsignedcharconst*,unsignedint*,unsignedint)	56	6	10.71%	['hb-subset-fuzzer', 'hb-shape-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::collect_variation_indices(OT::hb_collect_variation_indices_context_t*)const	41	2	4.878%	['hb-subset-fuzzer']
OT::NameRecord::copy(hb_serialize_context_t*,voidconst*,hb_hashmap_t ,false>const*)const	52	16	30.76%	['hb-subset-fuzzer']
voidhb_qsort_loop (unsignedint*,unsignedlong,_hb_face_builder_get_table_tags(hb_face_tconst*,unsignedint,unsignedint*,unsignedint*,void*)::$_0)	37	3	8.108%	['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT20delta_row_encoding_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT12AxisValueMapEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,hb_vector_t ,false>::set_with_hash const*const&,hb_vector_t >(hb_vector_t const*const&,unsignedint,hb_vector_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,unsignedint,false>::set_with_hash const*const&,int>(hb_vector_t const*const&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedintconst&,unsignedint,hb_pair_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,14u>,false>const*,unsignedint,false>::set_with_hash ,14u>,false>*,int>(hb_vector_t ,14u>,false>*&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKS5_IKhEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSB_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tSB_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS9_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS9_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS8_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS8_jj	75	30	40.0%	['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const	83	17	20.48%	['hb-subset-fuzzer']
OT::tuple_delta_t::calc_inferred_deltas(contour_point_vector_tconst&,hb_vector_t &)	77	42	54.54%	['hb-subset-fuzzer']
boolOT::HVARVVAR::_subset (hb_subset_context_t*)const	44	23	52.27%	['hb-subset-fuzzer']
_iup_contour_optimize(hb_array_t ,hb_array_t ,hb_array_t ,hb_array_t ,double,iup_scratch_t&)	135	25	18.51%	['hb-subset-fuzzer']
_create_old_gid_to_new_gid_map(hb_face_tconst*,bool,hb_set_tconst*,hb_map_tconst*,hb_map_t*,hb_map_t*,hb_vector_t ,true>*,unsignedint*)	73	36	49.31%	['hb-subset-fuzzer']
hb_vector_t const*,false>const&)::delta_size_t,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,14u>,false>::alloc(unsignedint,bool)	41	9	21.95%	['hb-subset-fuzzer']
hb_vector_t const*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,void,true>*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t >,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer', 'hb-repacker-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	20	48.78%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/work/build/../../src/harfbuzz/src/hb-multimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.cc	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-iter.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/composite-iter.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-cff.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-hdmx-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-meta.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff1.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-object.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-metrics.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-iup.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-use-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hangul.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-static.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.cc	['hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-sanitize.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/classdef-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-font.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set-invertible.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-cu2qu.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-svg.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic-table.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-thai.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/loca.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-meta.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-font.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-syllabic.cc	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.cc	['hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-iter.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-internal.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-priority-queue.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-base-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-accelerator.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/Glyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-debug.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-glyphs.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-cache.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face-builder.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-stat-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-buf.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-array.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff2-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-file.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-cff-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-vector-path.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.cc	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-khmer-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/failing-alloc.c	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/svg/svg.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-machinery.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-joining-list.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-serialize.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-buffer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-color.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/split-helpers.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name-language-static.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/pairpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-vowel-constraints.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-free-pool.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hebrew.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-khmer.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-algs.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-cff1-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-type.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/glyf.hh	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	['hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-atomic.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-vorg-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-algs.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/markbasepos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-geometry.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-string-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-object.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-unicode.rl	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/coord-setter.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-kern.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-other.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/ligature-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-draw.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-repacker.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/hb-number-parser.rl	['hb-subset-fuzzer']	['hb-subset-fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-shaper-myanmar.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.cc	['hb-shape-fuzzer']	[]
/work/build/hb-ot-shaper-myanmar-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-meta.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-null.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-cache.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-blob.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-pdf.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-map.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-hhea-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/coverage-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-json.rl	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set-digest.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-null.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-indic-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/name.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-color.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-common.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-blob.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-machinery.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-font.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-dispatch.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cplusplus.hh	['hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-width-optimizer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-common.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/path-builder.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-blob.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-specializer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-fallback.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-blob.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-page.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cmap-table.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-layout-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-mutex.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-number.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-paint.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-atomic.hh	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.cc	['hb-vector-fuzzer']	[]

Directories in report

Directory
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/glyf/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../
/work/build/../../src/harfbuzz/src/graph/
/work/build/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/name/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../
/work/build/../../src/harfbuzz/src/OT/Color/sbix/
/work/build/../../src/harfbuzz/src/OT/glyf/../../
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/graph/../
/work/build/../../src/harfbuzz/src/OT/Var/VARC/
/work/build/../../src/harfbuzz/src/OT/name/../../
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../
/work/build/../../src/harfbuzz/test/fuzzing/
/work/build/../../src/harfbuzz/src/OT/Color/svg/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/
/work/build/../../src/harfbuzz/test/fuzzing/../api/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/