High level conclusions

Fuzzers reach 86.88% of cyclomatic complexity.

Fuzzers reach 86.62% of all functions.

Fuzzers reach 90.87% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

33159 / 38279

Cyclomatic complexity statically reachable by fuzzers

97086 / 111746

Runtime code coverage of functions

34785 / 38279

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: hb-raster-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1056	31.6%
gold	[1:9]	249	7.45%
yellow	[10:29]	114	3.41%
greenyellow	[30:49]	50	1.49%
lawngreen	50+	1872	56.0%
All colors	3341	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1606	hb_lazy_loader_t ::get_unconst() const	call site: 01606	hypotf
27	2701	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02701	hb_shape_plan_destroy
24	1560	CrapHelper ::get_crap()	call site: 01560	hb_draw_funcs_set_line_to_func
21	3081	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 03081	hb_free
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3169	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 03169	hb_free
17	2609	hb_raster_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)	call site: 02609	hb_map_get
16	1665	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01665
16	2564	hb_raster_paint_radial_gradient(hb_paint_funcs_t*, void*, hb_color_line_t*, float, float, float, float, float, float, void*)	call site: 02564	_ZNK3$_3clIRfffEEDTclL_ZL6hb_minEclL_ZL6hb_maxEclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_EEclsr3stdE7forwardIT1_Efp1_EEEOS2_OS3_OS4_
15	2471	hb_raster_paint_image(hb_paint_funcs_t*, void*, hb_blob_t*, unsigned int, unsigned int, unsigned int, float, hb_glyph_extents_t*, void*)	call site: 02471	hb_blob_get_data
14	90	CrapHelper ::get_crap()	call site: 00090	hb_free

Runtime coverage analysis

Covered functions

3727

Functions that are reachable but not covered

758

Reachable functions

4099

Percentage of reachable functions covered

81.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	12
../../src/harfbuzz/src/hb-null.hh	135
../../src/harfbuzz/src/hb-object.hh	105
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	33
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	96
../../src/harfbuzz/src/hb-vector.hh	339
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	475
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	62
../../src/harfbuzz/src/hb-iter.hh	68
../../src/harfbuzz/src/hb-meta.hh	7
../../src/harfbuzz/src/hb-font.cc	20
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-raster-draw.cc	27
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-raster-paint.cc	39
../../src/harfbuzz/src/hb-raster-paint.hh	21
../../src/harfbuzz/src/hb-raster-image.cc	32
../../src/harfbuzz/src/hb-raster-image.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	30
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-cplusplus.hh	7
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-gpu-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	871	29.1%
gold	[1:9]	145	4.84%
yellow	[10:29]	25	0.83%
greenyellow	[30:49]	9	0.30%
lawngreen	50+	1941	64.8%
All colors	2991	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1562	hb_lazy_loader_t ::get_unconst() const	call site: 01562	hypotf
27	2345	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02345	hb_shape_plan_destroy
25	1516	CrapHelper ::get_crap()	call site: 01516	hb_draw_funcs_set_line_to_func
21	2725	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 02725	hb_free
18	2813	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 02813	hb_free
17	2174	hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)	call site: 02174	hb_map_get
16	1621	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01621
14	37	hb_blob_t::try_make_writable()	call site: 00037	sysconf
14	90	CrapHelper ::get_crap()	call site: 00090	hb_free
12	2948	OT::SVG::accelerator_t::~accelerator_t()	call site: 02948	hb_blob_destroy
11	2779	hb_lazy_loader_t , hb_face_t, 27u, OT::GSUB_accelerator_t>::do_destroy(OT::GSUB_accelerator_t*)	call site: 02779	hb_free

Runtime coverage analysis

Covered functions

4021

Functions that are reachable but not covered

702

Reachable functions

3773

Percentage of reachable functions covered

81.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	13
../../src/harfbuzz/src/hb-null.hh	126
../../src/harfbuzz/src/hb-object.hh	97
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	38
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	86
../../src/harfbuzz/src/hb-vector.hh	293
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	466
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	60
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	17
../../src/harfbuzz/src/hb-font.hh	6
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-gpu-draw.cc	40
../../src/harfbuzz/src/hb-gpu-draw.hh	4
../../src/harfbuzz/src/hb-gpu-paint.cc	46
../../src/harfbuzz/src/hb-gpu-paint.hh	4
../../src/harfbuzz/src/hb-geometry.hh	2
../../src/harfbuzz/src/hb-draw.cc	12
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-gpu-cu2qu.hh	5
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint.cc	28
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-vector-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1023	22.9%
gold	[1:9]	321	7.20%
yellow	[10:29]	84	1.88%
greenyellow	[30:49]	89	1.99%
lawngreen	50+	2939	65.9%
All colors	4456	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1709	hb_lazy_loader_t ::get_unconst() const	call site: 01709	hypotf
26	3830	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 03830	hb_shape_plan_destroy
25	1663	CrapHelper ::get_crap()	call site: 01663	hb_draw_funcs_set_line_to_func
21	3509	hb_vector_draw_render_svg(hb_vector_draw_t*)	call site: 03509
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3094	hb_vector_paint_funcs_lazy_loader_t::create()	call site: 03094
18	3762	hb_vector_paint_render_pdf(hb_vector_paint_t*)	call site: 03762
18	4284	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 04284	hb_free
17	3687	hb_vector_paint_render_svg(hb_vector_paint_t*)	call site: 03687
15	1768	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01768
15	3614	hb_vector_draw_render_pdf(hb_vector_draw_t*)	call site: 03614

Runtime coverage analysis

Covered functions

4457

Functions that are reachable but not covered

711

Reachable functions

4433

Percentage of reachable functions covered

83.96%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	2
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	14
../../src/harfbuzz/src/hb-null.hh	132
../../src/harfbuzz/src/hb-object.hh	113
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	34
../../src/harfbuzz/src/hb-atomic.hh	138
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	97
../../src/harfbuzz/src/hb-vector.hh	331
../../src/harfbuzz/src/hb-mutex.hh	4
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	518
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	75
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	19
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-vector-draw.cc	25
../../src/harfbuzz/src/hb-vector-draw.hh	11
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-vector-buf.hh	15
../../src/harfbuzz/src/hb-vector-paint.cc	11
../../src/harfbuzz/src/hb-vector-paint.hh	9
../../src/harfbuzz/src/hb-map.hh	11
../../src/harfbuzz/src/hb-set.cc	7
../../src/harfbuzz/src/hb-set.hh	12
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-bit-set.hh	15
../../src/harfbuzz/src/hb-vector-paint-pdf.cc	57
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	32
../../src/harfbuzz/src/hb-paint.hh	9
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-vector-internal.hh	7
../../src/harfbuzz/src/hb-vector.cc	5
../../src/harfbuzz/src/hb-vector-path.cc	17
../../src/harfbuzz/src/hb-vector-paint-svg.cc	35
../../src/harfbuzz/src/hb-bit-page.hh	12
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-repacker-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2283	43.3%
gold	[1:9]	39	0.73%
yellow	[10:29]	42	0.79%
greenyellow	[30:49]	23	0.43%
lawngreen	50+	2885	54.7%
All colors	5272	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	4015	hb_array_t ::qsort()	call site: 04015	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSB_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
102	3765	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 03765	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
86	1702	hb_serialize_context_t::check_success(bool, hb_serialize_error_t)	call site: 01702	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_10SmallTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage14clone_coverageERNSE_24gsubgpos_graph_context_tEjjjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
64	3142	CrapHelper >::get_crap()	call site: 03142	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
60	3207	OT::ArrayOf , OT::NumType >::operator[](int)	call site: 03207	_ZN2OT17ClassDefFormat2_4INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
55	4208	graph::graph_t::vertex_t::is_shared() const	call site: 04208	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph20LigatureSubstFormat16shrinkERNSB_24gsubgpos_graph_context_tEjj11hb_vector_tIjLb0EEjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSN_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSV_18is_sorted_iteratorEvE4typeELSN_0EEEbP22hb_serialize_context_tSV_
49	4158	hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t )#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &	call site: 04158	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSE_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
48	2174	hb_filter_iter_t ::item_t>, bool (hb_hashmap_t ::item_t::*)() const, $_19 const&, (void*)0>::__next__()	call site: 02174	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph14PairPosFormat16shrinkERNSB_24gsubgpos_graph_context_tEjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
47	3002	hb_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &	call site: 03002	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
47	3957	graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 03957	_ZN9hb_pair_tIRjjEcvS_IT_T0_EIjjTnPN12hb_enable_ifIXaasr3std14is_convertibleIS0_S2_EE5valuesr3std14is_convertibleIjS3_EE5valueEvE4typeELPv0EEEv
35	1839	hb_serialize_context_t::pop_pack(bool)	call site: 01839	_ZN12hb_hashmap_tIPKN22hb_serialize_context_t8object_tEjLb0EE6item_t13default_valueILb0ETnPN12hb_enable_ifIXeqT_Lb0EEvE4typeELPv0EEERKjv
34	2825	graph::PairPosFormat2::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 02825

Runtime coverage analysis

Covered functions

1758

Functions that are reachable but not covered

1579

Reachable functions

5387

Percentage of reachable functions covered

70.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	1
../../src/harfbuzz/src/hb-subset-serialize.cc	1
../../src/harfbuzz/src/hb-vector.hh	321
../../src/harfbuzz/src/hb-algs.hh	251
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-null.hh	127
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-serialize.hh	110
../../src/harfbuzz/src/hb-map.hh	176
../../src/harfbuzz/src/hb-object.hh	33
../../src/harfbuzz/src/hb-atomic.hh	20
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-set.hh	34
../../src/harfbuzz/src/hb-bit-set-invertible.hh	33
../../src/harfbuzz/src/hb-bit-set.hh	44
../../src/harfbuzz/src/hb-debug.hh	4
../../src/harfbuzz/src/hb-bit-page.hh	34
../../src/harfbuzz/src/hb-array.hh	127
../../src/harfbuzz/src/hb-iter.hh	944
../../src/harfbuzz/src/hb-meta.hh	116
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	9
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	4
../../src/harfbuzz/src/graph/../hb-object.hh	2
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	5
../../src/harfbuzz/src/hb-open-type.hh	90
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	1
../../src/harfbuzz/src/hb-machinery.hh	4
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	2
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	6
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	4
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	16
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	18
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/hb-ot-layout-common.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	1
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	12
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/hb-blob.cc	7
../../src/harfbuzz/src/hb-blob.hh	3

Fuzzer: hb-shape-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3186	20.4%
gold	[1:9]	294	1.89%
yellow	[10:29]	220	1.41%
greenyellow	[30:49]	87	0.55%
lawngreen	50+	11760	75.6%
All colors	15547	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	3509	hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)	call site: 03509	strncmp
114	14708	hb_ot_metrics_get_variation	call site: 14708	hb_ot_metrics_get_variation
60	11542	hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)	call site: 11542	hb_shape_full
41	14881	hb_lazy_loader_t , hb_face_t, 7u, OT::post_accelerator_t>::get() const	call site: 14881	hb_ot_metrics_get_variation
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
34	11176	hb_lazy_loader_t ::get_unconst() const	call site: 11176	hypotf
33	4806	hb_array_t ::qsort()	call site: 04806	_ZN10hb_array_tIN20hb_aat_map_builder_t15feature_event_tEE5qsortIZNS2_6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EESC_S6_
31	11137	CrapHelper ::get_crap()	call site: 11137	hb_draw_funcs_set_line_to_func
29	13723	OT::OffsetTo , void, true>::operator()(void const*) const	call site: 13723	_ZNK4$_20clIRZNK2OT8LigGlyph14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS1_18ItemVariationStoreEjPjPiEUlRKNS1_10CaretValueEE_SD_EEDTcl4implclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_Ecv11hb_priorityILj16EE_EEEOSG_OSH_
26	2586	OT::Device::sanitize(hb_sanitize_context_t*) const	call site: 02586	_ZN21hb_sanitize_context_t8dispatchIN2OT6DeviceEJEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOS5_
25	14681	NullHelper ::get_null()	call site: 14681	hb_ot_metrics_get_variation
23	13661	hb_iter_t , void, true> const>, OT::OffsetTo , void, true> const&>::operator+() const	call site: 13661	_ZorI13hb_map_iter_tIS0_I10hb_array_tIKN2OT8OffsetToINS2_10CaretValueENS2_7NumTypeILb1EtLj2EEEvLb1EEEE12hb_partial_tILj2EPK4$_40PKNS2_8LigGlyphEEL24hb_function_sortedness_t0ELPv0EEZNKSE_14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS2_18ItemVariationStoreEjPjPiEUlRKS4_E_LSI_0ELSJ_0EE9hb_sink_tIS1_IiEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS11_6item_tEEE5valueEvE4typeELSJ_0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardIS11_Efp_EEEOS11_OS16_

Runtime coverage analysis

Covered functions

11913

Functions that are reachable but not covered

1443

Reachable functions

16646

Percentage of reachable functions covered

91.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	11
../../src/harfbuzz/src/hb-null.hh	609
../../src/harfbuzz/src/hb-object.hh	119
../../src/harfbuzz/src/hb-common.cc	17
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	108
../../src/harfbuzz/src/hb-atomic.hh	188
../../src/harfbuzz/src/hb-debug.hh	5
../../src/harfbuzz/src/hb-algs.hh	476
../../src/harfbuzz/src/hb-vector.hh	478
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	17
../../src/harfbuzz/src/hb-sanitize.hh	611
../../src/harfbuzz/src/hb-dispatch.hh	24
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	922
../../src/harfbuzz/src/hb-machinery.hh	919
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	16
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	442
../../src/harfbuzz/src/hb-iter.hh	855
../../src/harfbuzz/src/hb-meta.hh	133
../../src/harfbuzz/src/hb-font.cc	28
../../src/harfbuzz/src/hb-font.hh	57
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	14
../../src/harfbuzz/src/hb-ot-var.cc	6
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	69
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	136
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	5
../../src/harfbuzz/src/hb-ot-layout-common.hh	126
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	39
../../src/harfbuzz/src/hb-fallback-shape.cc	5
../../src/harfbuzz/src/hb-buffer.cc	44
../../src/harfbuzz/src/hb-buffer.hh	53
../../src/harfbuzz/src/hb-set-digest.hh	15
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	11
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-utf.hh	6
../../src/harfbuzz/src/hb-shape.cc	2
../../src/harfbuzz/src/hb-shape-plan.cc	10
../../src/harfbuzz/src/hb-ot-shape.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	42
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	518
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	5
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	11
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	40
../../src/harfbuzz/src/hb-cache.hh	15
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-shaper.cc	5
../../src/harfbuzz/src/hb-shape-plan.hh	3
../../src/harfbuzz/src/hb-ot-map.hh	21
../../src/harfbuzz/src/hb-aat-map.hh	7
../../src/harfbuzz/src/hb-ot-map.cc	6
../../src/harfbuzz/src/hb-ot-tag.cc	11
../../src/harfbuzz/src/hb-ot-tag-table.hh	1
../../src/harfbuzz/src/hb-aat-layout.cc	18
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	149
../../src/harfbuzz/src/hb-aat-layout-common.hh	254
../../src/harfbuzz/src/hb-bit-set.hh	34
../../src/harfbuzz/src/hb-ot-shaper.hh	1
../../src/harfbuzz/src/hb-map.hh	20
../../src/harfbuzz/src/hb-aat-map.cc	2
../../src/harfbuzz/src/hb-aat-ltag-table.hh	3
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	118
../../src/harfbuzz/src/hb-bit-page.hh	20
../../src/harfbuzz/src/hb-ot-kern-table.hh	41
../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	11
../../src/harfbuzz/src/hb-ot-stat-table.hh	7
../../src/harfbuzz/src/hb-ot-layout.hh	49
../../src/harfbuzz/src/hb-unicode-emoji-table.hh	3
../../src/harfbuzz/src/hb-ot-shape-normalize.cc	10
../../src/harfbuzz/src/hb-ot-shape-normalize.hh	1
../../src/harfbuzz/src/hb-ot-shape-fallback.cc	11
../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	17
../../src/harfbuzz/src/hb-aat-layout.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	2
../../src/harfbuzz/src/hb-kern.hh	20
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-geometry.hh	13
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	21
../../src/harfbuzz/src/hb-paint.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	4
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	2
../../src/harfbuzz/src/hb-buffer-verify.cc	5
../../src/harfbuzz/src/hb-cplusplus.hh	5
../../src/harfbuzz/src/hb-buffer-serialize.cc	3
../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	1
../../src/harfbuzz/src/hb-set.cc	4
../../src/harfbuzz/src/hb-set.hh	10
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-ot-cmap-table.hh	53
../../src/harfbuzz/src/hb-ot-os2-table.hh	10
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-ot-color.cc	12
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	87
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	37
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	73
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/svg/svg.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	23
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	12
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	29
../../src/harfbuzz/src/hb-ot-math.cc	10
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/hb-ot-meta.cc	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	11
../../src/harfbuzz/src/hb-ot-metrics.cc	6
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-post-table.hh	7
../../src/harfbuzz/src/hb-ot-name.cc	7
../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	10
../../src/harfbuzz/src/OT/name/name.hh	19
../../src/harfbuzz/src/OT/name/../../hb-blob.hh	7
../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	8
../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	4
../../src/harfbuzz/src/hb-ot-name-language-static.hh	4
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3

Fuzzer: hb-subset-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	9284	20.2%
gold	[1:9]	459	1.00%
yellow	[10:29]	374	0.81%
greenyellow	[30:49]	361	0.78%
lawngreen	50+	35280	77.1%
All colors	45758	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
126	19647	hb_hashmap_t , false>::alloc(unsigned int)	call site: 19647
70	19911	_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)	call site: 19911	_ZorIN23hb_bit_set_invertible_t6iter_tE24hb_filter_iter_factory_tIZL15_get_table_tagsPK16hb_subset_plan_tjPjS6_E3$_2RK4$_22ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSD_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISD_Efp_EEEOSD_OSJ_
64	45423	hb_table_lazy_loader_t ::convert(hb_blob_t const*)	call site: 45423	hb_blob_copy_writable_or_fail
62	26041	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 26041	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
55	26104	hb_vector_t graph::actuate_subtable_split (graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)	call site: 26104	_ZorI13hb_zip_iter_tI14hb_iota_iter_tIjjEN2OT6Layout6Common8Coverage6iter_tEE24hb_filter_iter_factory_tIR8hb_set_tRK3$_6ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSH_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISH_Efp_EEEOSH_OSN_
41	44828	_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj	call site: 44828	_ZN2OT19CmapSubtableFormat49serializeI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEvP22hb_serialize_context_tSI_
40	428	hb_ot_face_t::init0(hb_face_t*)	call site: 00428
40	45660	hb_iter_t , OT::cmap::create_filled_cache(hb_blob_ptr_t )::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &	call site: 45660	hb_face_set_user_data
39	25437	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()	call site: 25437	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
36	21082	hb_vector_t ::resize_full(int, bool, bool)	call site: 21082	_ZL12rotate_arrayIbTnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEbRK10hb_array_tIKS1_EiR11hb_vector_tIS1_Lb0EE
35	25538	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, $_7, $_22 const&, (hb_function_sortedness_t)0>, $_6 const&, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})0, (hb_function_sortedness_t)0>::__next__()	call site: 25538	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_22LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
34	25269	hb_vector_t graph::actuate_subtable_split (graph::PairPosFormat2::split_context_t&, hb_vector_t const&)	call site: 25269	_ZorIN2OT6Layout6Common8Coverage6iter_tE21hb_map_iter_factory_tIZNK5graph14PairPosFormat211clone_rangeERNS7_15split_context_tEjjEUljE_L24hb_function_sortedness_t1EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSE_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISE_Efp_EEEOSE_OSK_

Runtime coverage analysis

Covered functions

24859

Functions that are reachable but not covered

4301

Reachable functions

48705

Percentage of reachable functions covered

91.17%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/src/hb-blob.cc	15
../../src/harfbuzz/src/hb-null.hh	1012
../../src/harfbuzz/src/hb-object.hh	169
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	279
../../src/harfbuzz/src/hb-atomic.hh	159
../../src/harfbuzz/src/hb-debug.hh	79
../../src/harfbuzz/src/hb-algs.hh	2516
../../src/harfbuzz/src/hb-vector.hh	1598
../../src/harfbuzz/src/hb-mutex.hh	8
../../src/harfbuzz/src/hb-face.cc	19
../../src/harfbuzz/src/hb-sanitize.hh	670
../../src/harfbuzz/src/hb-dispatch.hh	100
../../src/harfbuzz/src/hb-open-file.hh	27
../../src/harfbuzz/src/hb-open-type.hh	1670
../../src/harfbuzz/src/hb-machinery.hh	852
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	1076
../../src/harfbuzz/src/hb-iter.hh	8909
../../src/harfbuzz/src/hb-meta.hh	1069
../../src/harfbuzz/src/hb-set.cc	12
../../src/harfbuzz/src/hb-set.hh	53
../../src/harfbuzz/src/hb-bit-set-invertible.hh	46
../../src/harfbuzz/src/hb-bit-set.hh	69
../../src/harfbuzz/src/hb-ot-cmap-table.hh	120
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	8
../../src/harfbuzz/src/hb-cache.hh	5
../../src/harfbuzz/src/hb-ot-os2-table.hh	15
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-bit-page.hh	44
../../src/harfbuzz/src/hb-subset-input.cc	12
../../src/harfbuzz/src/hb-map.hh	738
../../src/harfbuzz/src/hb-subset-input.hh	9
../../src/harfbuzz/src/hb-cplusplus.hh	28
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	28
../../src/harfbuzz/src/hb-ot-post-table.hh	8
../../src/harfbuzz/src/OT/name/name.hh	14
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	36
../../src/harfbuzz/src/hb-subset-plan.hh	85
../../src/harfbuzz/src/hb-ot-cff1-table.hh	93
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	39
../../src/harfbuzz/src/hb-cff-interp-common.hh	129
../../src/harfbuzz/src/hb-ot-cff2-table.hh	46
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	28
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	376
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	7
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	285
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	39
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	10
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3
../../src/harfbuzz/src/hb-ot-var.cc	5
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	26
../../src/harfbuzz/src/hb-subset-instancer-solver.hh	10
../../src/harfbuzz/src/hb-subset.cc	12
../../src/harfbuzz/src/hb-subset-plan.cc	33
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	16
../../src/harfbuzz/src/hb-face-builder.cc	10
../../src/harfbuzz/src/hb-serialize.hh	1374
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-subset-accelerator.hh	5
../../src/harfbuzz/src/hb-subset-plan-var.cc	8
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	18
../../src/harfbuzz/src/hb-ot-layout-common.hh	106
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	91
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	8
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	3
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-multimap.hh	6
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-cff-common.hh	59
../../src/harfbuzz/src/hb-number.cc	1
hb-number-parser.rl	2
../../src/harfbuzz/src/hb-subset-cff-common.hh	104
../../src/harfbuzz/src/hb-subset-plan-layout.cc	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	10
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	16
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	16
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	9
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	10
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	26
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	15
../../src/harfbuzz/src/hb-bimap.hh	19
../../src/harfbuzz/src/hb-ot-stat-table.hh	41
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	6
../../src/harfbuzz/src/OT/glyf/Glyph.hh	14
../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	26
../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	15
../../src/harfbuzz/src/OT/glyf/composite-iter.hh	8
../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.cc	9
../../src/harfbuzz/src/hb-cff1-interp-cs.hh	15
../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	229
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	31
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	42
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	42
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	3
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	49
../../src/harfbuzz/src/hb-font.cc	12
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-ot-cff2-table.cc	10
../../src/harfbuzz/src/hb-cff2-interp-cs.hh	46
../../src/harfbuzz/src/hb-subset-table.hh	93
../../src/harfbuzz/src/hb-subset-table-layout.cc	1
../../src/harfbuzz/src/hb-subset.hh	332
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	73
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	226
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	2
../../src/harfbuzz/src/hb-subset-instancer-solver.cc	7
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	4
../../src/harfbuzz/src/hb-subset-instancer-iup.cc	10
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	17
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	2
../../src/harfbuzz/src/graph/../hb-object.hh	1
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	45
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	2
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	10
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	3
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	12
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	7
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	3
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/hb-subset-table-var.cc	1
../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	24
../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	15
../../src/harfbuzz/src/hb-ot-var-common.hh	34
../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	7
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	6
../../src/harfbuzz/src/hb-subset-table-cff.cc	3
../../src/harfbuzz/src/hb-subset-cff1.cc	47
../../src/harfbuzz/src/hb-subset-cff-common.cc	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	1
../../src/harfbuzz/src/hb-subset-cff2.cc	33
../../src/harfbuzz/src/hb-cff-width-optimizer.hh	9
../../src/harfbuzz/src/hb-cff-specializer.hh	4
../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	2
../../src/harfbuzz/src/hb-ot-vorg-table.hh	4
../../src/harfbuzz/src/hb-subset-table-color.cc	1
../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	3
../../src/harfbuzz/src/hb-subset-table-other.cc	1
../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	4
../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	4
../../src/harfbuzz/src/hb-ot-hdmx-table.hh	9
../../src/harfbuzz/src/hb-utf.hh	1
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	2
../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	2
../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	3
../../src/harfbuzz/src/hb-string-array.hh	1
../../src/harfbuzz/src/hb-ot-head-table.hh	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
hb_ot_font_set_funcs	/work/build/../../src/harfbuzz/src/hb-ot-font.cc	1	['N/A']	62	0	32	6	3	7931	0	13078	3166

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

34045 / 38279

Cyclomatic complexity statically reachable by fuzzers

100250 / 111746

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_raster_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_raster_paint_radial_gradient(hb_paint_funcs_t*, void*, hb_color_line_t*, float, float, float, float, float, float, void*)']

../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_blob_t::try_make_writable()', 'CrapHelper::get_crap()']

../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_vector_draw_render_svg(hb_vector_draw_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_vector_paint_funcs_lazy_loader_t::create()', 'hb_vector_paint_render_pdf(hb_vector_paint_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_vector_paint_render_svg(hb_vector_paint_t*)']

../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_array_t::qsort()', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_serialize_context_t::check_success(bool, hb_serialize_error_t)', 'CrapHelper >::get_crap()', 'OT::ArrayOf, OT::NumType >::operator[](int)', 'graph::graph_t::vertex_t::is_shared() const', 'hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t)#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &', 'hb_filter_iter_t::item_t>, bool (hb_hashmap_t::item_t::*)() const, $_19 const&, (void*)0>::__next__()', 'hb_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &', 'graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)']

../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)', 'hb_ot_metrics_get_variation', 'hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)', 'hb_lazy_loader_t, hb_face_t, 7u, OT::post_accelerator_t>::get() const', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_array_t::qsort()', 'CrapHelper::get_crap()', 'OT::OffsetTo, void, true>::operator()(void const*) const', 'OT::Device::sanitize(hb_sanitize_context_t*) const']

../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_hashmap_t, false>::alloc(unsigned int)', '_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)', 'hb_table_lazy_loader_t::convert(hb_blob_t const*)', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_vector_t graph::actuate_subtable_split(graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)', '_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_iter_t, OT::cmap::create_filled_cache(hb_blob_ptr_t)::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &', 'hb_map_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()', 'hb_vector_t::resize_full(int, bool, bool)']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
hb_font_t::draw_glyph_or_fail(unsignedint,hb_draw_funcs_t*,void*,bool)	42	13	30.95%	['hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-gpu-fuzzer']
hb_raster_paint_image(hb_paint_funcs_t*,void*,hb_blob_t*,unsignedint,unsignedint,unsignedint,float,hb_glyph_extents_t*,void*)	118	15	12.71%	['hb-raster-fuzzer']
hb_raster_paint_radial_gradient(hb_paint_funcs_t*,void*,hb_color_line_t*,float,float,float,float,float,float,void*)	234	107	45.72%	['hb-raster-fuzzer']
unsignedinthb_bit_storage (unsignedint)	49	5	10.20%	['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_ctz (unsignedlonglong)	48	8	16.66%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_popcount (unsignedlonglong)	35	7	20.0%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_bit_storage (unsignedlonglong)	49	8	16.32%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf16_xe_t >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf32_xe_t >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
hb_aat_map_builder_t::compile(hb_aat_map_t&)	67	6	8.955%	['hb-shape-fuzzer']
unsignedinthb_ctz (unsignedint)	48	5	10.41%	['hb-shape-fuzzer']
unsignedinthb_popcount (hb_glyph_flags_t)	35	4	11.42%	['hb-shape-fuzzer']
_ZL13hb_qsort_loopIN11hb_ot_map_t13feature_map_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-shape-fuzzer']
_hb_ot_metrics_get_position_common(hb_font_t*,hb_ot_metrics_tag_t,int*)	34	15	44.11%	['hb-shape-fuzzer']
hb_ot_metrics_get_position	84	12	14.28%	['hb-shape-fuzzer']
hb_ensure_native_direction(hb_buffer_t*)	33	8	24.24%	['hb-shape-fuzzer']
apply_stch(hb_ot_shape_plan_tconst*,hb_buffer_t*,hb_font_t*)	160	3	1.875%	['hb-shape-fuzzer']
hb_ot_tags_from_complex_language(charconst*,charconst*,unsignedint*,unsignedint*)	1210	67	5.537%	['hb-shape-fuzzer']
hb_ot_tags_from_script_and_language	45	24	53.33%	['hb-shape-fuzzer']
parse_private_use_subtag(charconst*,unsignedint*,unsignedint*,charconst*,unsignedchar(*)(unsignedchar))	32	2	6.25%	['hb-shape-fuzzer']
hb_ot_tags_from_language(charconst*,charconst*,unsignedint*,unsignedint*)	100	26	26.0%	['hb-shape-fuzzer']
hb_shapers_lazy_loader_t::create()	32	4	12.5%	['hb-shape-fuzzer']
hb_utf8_t::next(unsignedcharconst*,unsignedcharconst*,unsignedint*,unsignedint)	56	6	10.71%	['hb-shape-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::collect_variation_indices(OT::hb_collect_variation_indices_context_t*)const	41	2	4.878%	['hb-subset-fuzzer']
OT::NameRecord::copy(hb_serialize_context_t*,voidconst*,hb_hashmap_t ,false>const*)const	52	16	30.76%	['hb-subset-fuzzer']
voidhb_qsort_loop (unsignedint*,unsignedlong,_hb_face_builder_get_table_tags(hb_face_tconst*,unsignedint,unsignedint*,unsignedint*,void*)::$_0)	37	3	8.108%	['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT20delta_row_encoding_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT12AxisValueMapEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,hb_vector_t ,false>::set_with_hash const*const&,hb_vector_t >(hb_vector_t const*const&,unsignedint,hb_vector_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,unsignedint,false>::set_with_hash const*const&,int>(hb_vector_t const*const&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedintconst&,unsignedint,hb_pair_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,14u>,false>const*,unsignedint,false>::set_with_hash ,14u>,false>*,int>(hb_vector_t ,14u>,false>*&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKS5_IKhEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSB_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tSB_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS9_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS9_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS8_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS8_jj	75	30	40.0%	['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const	83	17	20.48%	['hb-subset-fuzzer']
OT::tuple_delta_t::calc_inferred_deltas(contour_point_vector_tconst&,hb_vector_t &)	77	42	54.54%	['hb-subset-fuzzer']
boolOT::HVARVVAR::_subset (hb_subset_context_t*)const	44	23	52.27%	['hb-subset-fuzzer']
_iup_contour_optimize(hb_array_t ,hb_array_t ,hb_array_t ,hb_array_t ,double,iup_scratch_t&)	135	25	18.51%	['hb-subset-fuzzer']
_create_old_gid_to_new_gid_map(hb_face_tconst*,bool,hb_set_tconst*,hb_map_tconst*,hb_map_t*,hb_map_t*,hb_vector_t ,true>*,unsignedint*)	73	36	49.31%	['hb-subset-fuzzer']
hb_vector_t const*,false>const&)::delta_size_t,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,14u>,false>::alloc(unsignedint,bool)	41	9	21.95%	['hb-subset-fuzzer']
hb_vector_t const*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,void,true>*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t >,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	20	48.78%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-thai.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/composite-iter.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-width-optimizer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/markbasepos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-blob.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-buf.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-paint.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-cff2-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-layout-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic-table.cc	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-color.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-myanmar.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-mutex.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-specializer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/svg/svg.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/glyf.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-array.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/classdef-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-machinery.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-cu2qu.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-cff-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-hdmx-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-number-parser.rl	['hb-subset-fuzzer']	['hb-subset-fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-map.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face-builder.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-other.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-page.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-blob.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-iter.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-myanmar-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-cache.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-accelerator.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-null.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cache.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-color.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/loca.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff1-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-fallback.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-font.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/coverage-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-type.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-serialize.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-meta.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-atomic.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-svg.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.cc	['hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-vorg-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-repacker.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-kern.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-cff.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-algs.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-static.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-pdf.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-vowel-constraints.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../hb-object.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-blob.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-font.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-file.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-geometry.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-number.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.cc	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-json.rl	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-common.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-font.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/pairpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-stat-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-common.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-path.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-unicode.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-set-digest.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cmap-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/failing-alloc.c	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-priority-queue.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-base-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/ligature-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-meta.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hangul.cc	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-metrics.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-joining-list.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-syllabic.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name-language-static.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/Glyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-meta.hh	[]	[]
/work/build/hb-ot-shaper-use-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff1.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/path-builder.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-algs.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-hhea-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-khmer.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-free-pool.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-dispatch.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	['hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-null.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.hh	['hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-glyphs.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hebrew.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-khmer-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/coord-setter.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-machinery.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-sanitize.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-iup.cc	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-indic-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-iter.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cplusplus.hh	['hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-blob.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.cc	['hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-string-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.cc	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-atomic.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/split-helpers.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-debug.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-draw.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-multimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/name.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set-invertible.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-object.hh	['hb-raster-fuzzer', 'hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-internal.hh	['hb-vector-fuzzer']	[]

Directories in report

Directory
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/test/fuzzing/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/
/work/build/../../src/harfbuzz/src/OT/name/../../
/work/build/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../
/work/build/../../src/harfbuzz/test/fuzzing/../api/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/
/work/build/../../src/harfbuzz/src/OT/name/
/work/build/../../src/harfbuzz/src/OT/Color/svg/
/work/build/../../src/harfbuzz/src/OT/glyf/../../
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/sbix/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/
/work/build/../../src/harfbuzz/src/graph/
/work/build/../../src/harfbuzz/src/OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/
/work/build/../../src/harfbuzz/src/OT/glyf/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/graph/../