High level conclusions

Fuzzers reach 86.85% of cyclomatic complexity.

Fuzzers reach 86.62% of all functions.

Fuzzers reach 91.00% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

33160 / 38280

Cyclomatic complexity statically reachable by fuzzers

97098 / 111791

Runtime code coverage of functions

34838 / 38280

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: hb-gpu-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	873	29.1%
gold	[1:9]	145	4.84%
yellow	[10:29]	25	0.83%
greenyellow	[30:49]	9	0.30%
lawngreen	50+	1942	64.8%
All colors	2994	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1565	hb_lazy_loader_t ::get_unconst() const	call site: 01565	hypotf
27	2348	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02348	hb_shape_plan_destroy
25	1519	CrapHelper ::get_crap()	call site: 01519	hb_draw_funcs_set_line_to_func
21	2728	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 02728	hb_free
18	2816	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 02816	hb_free
17	2177	hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)	call site: 02177	hb_map_get
16	1624	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01624
14	37	hb_blob_t::try_make_writable()	call site: 00037	sysconf
14	90	CrapHelper ::get_crap()	call site: 00090	hb_free
12	2951	OT::SVG::accelerator_t::~accelerator_t()	call site: 02951	hb_blob_destroy
11	2782	hb_lazy_loader_t , hb_face_t, 27u, OT::GSUB_accelerator_t>::do_destroy(OT::GSUB_accelerator_t*)	call site: 02782	hb_free

Runtime coverage analysis

Covered functions

4015

Functions that are reachable but not covered

702

Reachable functions

3776

Percentage of reachable functions covered

81.41%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	13
../../src/harfbuzz/src/hb-null.hh	126
../../src/harfbuzz/src/hb-object.hh	97
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	38
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	88
../../src/harfbuzz/src/hb-vector.hh	293
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	466
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	60
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	17
../../src/harfbuzz/src/hb-font.hh	6
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-gpu-draw.cc	40
../../src/harfbuzz/src/hb-gpu-draw.hh	4
../../src/harfbuzz/src/hb-gpu-paint.cc	46
../../src/harfbuzz/src/hb-gpu-paint.hh	4
../../src/harfbuzz/src/hb-geometry.hh	2
../../src/harfbuzz/src/hb-draw.cc	12
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-gpu-cu2qu.hh	5
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint.cc	28
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-vector-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1024	22.9%
gold	[1:9]	321	7.20%
yellow	[10:29]	85	1.90%
greenyellow	[30:49]	89	1.99%
lawngreen	50+	2939	65.9%
All colors	4458	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1712	hb_lazy_loader_t ::get_unconst() const	call site: 01712	hypotf
26	3832	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 03832	hb_shape_plan_destroy
25	1666	CrapHelper ::get_crap()	call site: 01666	hb_draw_funcs_set_line_to_func
21	3511	hb_vector_draw_render_svg(hb_vector_draw_t*)	call site: 03511
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3096	hb_vector_paint_funcs_lazy_loader_t::create()	call site: 03096
18	3764	hb_vector_paint_render_pdf(hb_vector_paint_t*)	call site: 03764
18	4286	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 04286	hb_free
17	3689	hb_vector_paint_render_svg(hb_vector_paint_t*)	call site: 03689
15	1771	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01771
15	3616	hb_vector_draw_render_pdf(hb_vector_draw_t*)	call site: 03616

Runtime coverage analysis

Covered functions

4458

Functions that are reachable but not covered

708

Reachable functions

4434

Percentage of reachable functions covered

84.03%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	2
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	14
../../src/harfbuzz/src/hb-null.hh	132
../../src/harfbuzz/src/hb-object.hh	113
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	34
../../src/harfbuzz/src/hb-atomic.hh	138
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	98
../../src/harfbuzz/src/hb-vector.hh	331
../../src/harfbuzz/src/hb-mutex.hh	4
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	518
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	75
../../src/harfbuzz/src/hb-iter.hh	56
../../src/harfbuzz/src/hb-meta.hh	6
../../src/harfbuzz/src/hb-font.cc	19
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-vector-draw.cc	25
../../src/harfbuzz/src/hb-vector-draw.hh	11
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-vector-buf.hh	15
../../src/harfbuzz/src/hb-vector-paint.cc	11
../../src/harfbuzz/src/hb-vector-paint.hh	9
../../src/harfbuzz/src/hb-map.hh	11
../../src/harfbuzz/src/hb-set.cc	7
../../src/harfbuzz/src/hb-set.hh	12
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-bit-set.hh	15
../../src/harfbuzz/src/hb-vector-paint-pdf.cc	57
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	32
../../src/harfbuzz/src/hb-paint.hh	9
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-vector-internal.hh	7
../../src/harfbuzz/src/hb-vector.cc	5
../../src/harfbuzz/src/hb-vector-path.cc	17
../../src/harfbuzz/src/hb-vector-paint-svg.cc	35
../../src/harfbuzz/src/hb-bit-page.hh	12
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-raster-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1057	31.6%
gold	[1:9]	248	7.41%
yellow	[10:29]	116	3.46%
greenyellow	[30:49]	50	1.49%
lawngreen	50+	1872	55.9%
All colors	3343	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
35	1609	hb_lazy_loader_t ::get_unconst() const	call site: 01609	hypotf
27	2703	hb_atomic_t ::operator hb_face_t::plan_node_t* () const	call site: 02703	hb_shape_plan_destroy
24	1563	CrapHelper ::get_crap()	call site: 01563	hb_draw_funcs_set_line_to_func
21	3083	hb_lazy_loader_t , hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)	call site: 03083	hb_free
18	35	void hb_object_trace (hb_blob_t const*, char const*)	call site: 00035	hb_malloc
18	3171	hb_lazy_loader_t , hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)	call site: 03171	hb_free
17	2611	hb_raster_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)	call site: 02611	hb_map_get
16	1668	hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)	call site: 01668
16	2566	hb_raster_paint_radial_gradient(hb_paint_funcs_t*, void*, hb_color_line_t*, float, float, float, float, float, float, void*)	call site: 02566	_ZNK3$_3clIRfffEEDTclL_ZL6hb_minEclL_ZL6hb_maxEclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_EEclsr3stdE7forwardIT1_Efp1_EEEOS2_OS3_OS4_
15	2473	hb_raster_paint_image(hb_paint_funcs_t*, void*, hb_blob_t*, unsigned int, unsigned int, unsigned int, float, hb_glyph_extents_t*, void*)	call site: 02473	hb_blob_get_data
14	90	CrapHelper ::get_crap()	call site: 00090	hb_free

Runtime coverage analysis

Covered functions

3728

Functions that are reachable but not covered

757

Reachable functions

4100

Percentage of reachable functions covered

81.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	12
../../src/harfbuzz/src/hb-null.hh	135
../../src/harfbuzz/src/hb-object.hh	105
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	33
../../src/harfbuzz/src/hb-atomic.hh	134
../../src/harfbuzz/src/hb-debug.hh	2
../../src/harfbuzz/src/hb-algs.hh	97
../../src/harfbuzz/src/hb-vector.hh	339
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	13
../../src/harfbuzz/src/hb-sanitize.hh	55
../../src/harfbuzz/src/hb-dispatch.hh	1
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	89
../../src/harfbuzz/src/hb-machinery.hh	475
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	62
../../src/harfbuzz/src/hb-iter.hh	68
../../src/harfbuzz/src/hb-meta.hh	7
../../src/harfbuzz/src/hb-font.cc	20
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	12
../../src/harfbuzz/src/hb-ot-var.cc	4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/hb-ot-layout-common.hh	27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/hb-raster-draw.cc	27
../../src/harfbuzz/src/hb-geometry.hh	12
../../src/harfbuzz/src/hb-raster-paint.cc	39
../../src/harfbuzz/src/hb-raster-paint.hh	21
../../src/harfbuzz/src/hb-raster-image.cc	32
../../src/harfbuzz/src/hb-raster-image.hh	2
../../src/harfbuzz/src/hb-map.cc	3
../../src/harfbuzz/src/hb-map.hh	13
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	30
../../src/harfbuzz/src/hb-paint.hh	7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/hb-cplusplus.hh	7
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-ot-cmap-table.hh	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/hb-ot-post-table.hh	2
../../src/harfbuzz/src/OT/name/name.hh	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-bit-set.hh	2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	2
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3

Fuzzer: hb-repacker-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2283	43.3%
gold	[1:9]	39	0.73%
yellow	[10:29]	42	0.79%
greenyellow	[30:49]	23	0.43%
lawngreen	50+	2885	54.7%
All colors	5272	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	4015	hb_array_t ::qsort()	call site: 04015	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSB_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
102	3765	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 03765	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
86	1702	hb_serialize_context_t::check_success(bool, hb_serialize_error_t)	call site: 01702	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_10SmallTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage14clone_coverageERNSE_24gsubgpos_graph_context_tEjjjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
64	3142	CrapHelper >::get_crap()	call site: 03142	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
60	3207	OT::ArrayOf , OT::NumType >::operator[](int)	call site: 03207	_ZN2OT17ClassDefFormat2_4INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_19LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
55	4208	graph::graph_t::vertex_t::is_shared() const	call site: 04208	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph20LigatureSubstFormat16shrinkERNSB_24gsubgpos_graph_context_tEjj11hb_vector_tIjLb0EEjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSN_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSV_18is_sorted_iteratorEvE4typeELSN_0EEEbP22hb_serialize_context_tSV_
49	4158	hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t )#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &	call site: 04158	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSE_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
48	2174	hb_filter_iter_t ::item_t>, bool (hb_hashmap_t ::item_t::*)() const, $_19 const&, (void*)0>::__next__()	call site: 02174	_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph14PairPosFormat16shrinkERNSB_24gsubgpos_graph_context_tEjjEUl9hb_pair_tIjjEE_RK4$_19LPv0EERK3$_6L24hb_function_sortedness_t1ELSL_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrST_18is_sorted_iteratorEvE4typeELSL_0EEEbP22hb_serialize_context_tST_
47	3002	hb_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &	call site: 03002	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
47	3957	graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 03957	_ZN9hb_pair_tIRjjEcvS_IT_T0_EIjjTnPN12hb_enable_ifIXaasr3std14is_convertibleIS0_S2_EE5valuesr3std14is_convertibleIjS3_EE5valueEvE4typeELPv0EEEv
35	1839	hb_serialize_context_t::pop_pack(bool)	call site: 01839	_ZN12hb_hashmap_tIPKN22hb_serialize_context_t8object_tEjLb0EE6item_t13default_valueILb0ETnPN12hb_enable_ifIXeqT_Lb0EEvE4typeELPv0EEERKjv
34	2825	graph::PairPosFormat2::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)	call site: 02825

Runtime coverage analysis

Covered functions

1758

Functions that are reachable but not covered

1579

Reachable functions

5387

Percentage of reachable functions covered

70.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	1
../../src/harfbuzz/src/hb-subset-serialize.cc	1
../../src/harfbuzz/src/hb-vector.hh	321
../../src/harfbuzz/src/hb-algs.hh	251
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-null.hh	127
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-serialize.hh	110
../../src/harfbuzz/src/hb-map.hh	176
../../src/harfbuzz/src/hb-object.hh	33
../../src/harfbuzz/src/hb-atomic.hh	20
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-set.hh	34
../../src/harfbuzz/src/hb-bit-set-invertible.hh	33
../../src/harfbuzz/src/hb-bit-set.hh	44
../../src/harfbuzz/src/hb-debug.hh	4
../../src/harfbuzz/src/hb-bit-page.hh	34
../../src/harfbuzz/src/hb-array.hh	127
../../src/harfbuzz/src/hb-iter.hh	944
../../src/harfbuzz/src/hb-meta.hh	116
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	9
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	4
../../src/harfbuzz/src/graph/../hb-object.hh	2
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	5
../../src/harfbuzz/src/hb-open-type.hh	90
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	1
../../src/harfbuzz/src/hb-machinery.hh	4
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	2
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	6
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	4
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	16
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	18
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/hb-ot-layout-common.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	1
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	12
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/hb-blob.cc	7
../../src/harfbuzz/src/hb-blob.hh	3

Fuzzer: hb-shape-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3191	20.5%
gold	[1:9]	292	1.87%
yellow	[10:29]	217	1.39%
greenyellow	[30:49]	90	0.57%
lawngreen	50+	11756	75.6%
All colors	15546	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
115	3512	hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)	call site: 03512	strncmp
114	14707	hb_ot_metrics_get_variation	call site: 14707	hb_ot_metrics_get_variation
60	11545	hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)	call site: 11545	hb_shape_full
41	14880	hb_lazy_loader_t , hb_face_t, 7u, OT::post_accelerator_t>::get() const	call site: 14880	hb_ot_metrics_get_variation
40	430	hb_ot_face_t::init0(hb_face_t*)	call site: 00430
34	11179	hb_lazy_loader_t ::get_unconst() const	call site: 11179	hypotf
33	4809	hb_array_t ::qsort()	call site: 04809	_ZN10hb_array_tIN20hb_aat_map_builder_t15feature_event_tEE5qsortIZNS2_6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EESC_S6_
31	11140	CrapHelper ::get_crap()	call site: 11140	hb_draw_funcs_set_line_to_func
29	13722	OT::OffsetTo , void, true>::operator()(void const*) const	call site: 13722	_ZNK4$_20clIRZNK2OT8LigGlyph14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS1_18ItemVariationStoreEjPjPiEUlRKNS1_10CaretValueEE_SD_EEDTcl4implclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_Ecv11hb_priorityILj16EE_EEEOSG_OSH_
26	2589	OT::Device::sanitize(hb_sanitize_context_t*) const	call site: 02589	_ZN21hb_sanitize_context_t8dispatchIN2OT6DeviceEJEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOS5_
25	14680	NullHelper ::get_null()	call site: 14680	hb_ot_metrics_get_variation
23	13660	hb_iter_t , void, true> const>, OT::OffsetTo , void, true> const&>::operator+() const	call site: 13660	_ZorI13hb_map_iter_tIS0_I10hb_array_tIKN2OT8OffsetToINS2_10CaretValueENS2_7NumTypeILb1EtLj2EEEvLb1EEEE12hb_partial_tILj2EPK4$_40PKNS2_8LigGlyphEEL24hb_function_sortedness_t0ELPv0EEZNKSE_14get_lig_caretsEP9hb_font_t14hb_direction_tjRKNS2_18ItemVariationStoreEjPjPiEUlRKS4_E_LSI_0ELSJ_0EE9hb_sink_tIS1_IiEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS11_6item_tEEE5valueEvE4typeELSJ_0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardIS11_Efp_EEEOS11_OS16_

Runtime coverage analysis

Covered functions

11912

Functions that are reachable but not covered

1443

Reachable functions

16647

Percentage of reachable functions covered

91.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	5
../../src/harfbuzz/src/hb-blob.cc	11
../../src/harfbuzz/src/hb-null.hh	609
../../src/harfbuzz/src/hb-object.hh	119
../../src/harfbuzz/src/hb-common.cc	17
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	108
../../src/harfbuzz/src/hb-atomic.hh	188
../../src/harfbuzz/src/hb-debug.hh	5
../../src/harfbuzz/src/hb-algs.hh	477
../../src/harfbuzz/src/hb-vector.hh	478
../../src/harfbuzz/src/hb-mutex.hh	3
../../src/harfbuzz/src/hb-face.cc	17
../../src/harfbuzz/src/hb-sanitize.hh	611
../../src/harfbuzz/src/hb-dispatch.hh	24
../../src/harfbuzz/src/hb-open-file.hh	24
../../src/harfbuzz/src/hb-open-type.hh	922
../../src/harfbuzz/src/hb-machinery.hh	919
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	16
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	442
../../src/harfbuzz/src/hb-iter.hh	855
../../src/harfbuzz/src/hb-meta.hh	133
../../src/harfbuzz/src/hb-font.cc	28
../../src/harfbuzz/src/hb-font.hh	57
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	14
../../src/harfbuzz/src/hb-ot-var.cc	6
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	4
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	69
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	136
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	5
../../src/harfbuzz/src/hb-ot-layout-common.hh	126
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	2
../../src/harfbuzz/src/hb-ot-shape.cc	39
../../src/harfbuzz/src/hb-fallback-shape.cc	5
../../src/harfbuzz/src/hb-buffer.cc	44
../../src/harfbuzz/src/hb-buffer.hh	53
../../src/harfbuzz/src/hb-set-digest.hh	15
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	11
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-utf.hh	6
../../src/harfbuzz/src/hb-shape.cc	2
../../src/harfbuzz/src/hb-shape-plan.cc	10
../../src/harfbuzz/src/hb-ot-shape.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	42
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	518
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	5
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	8
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	2
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	11
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	3
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	40
../../src/harfbuzz/src/hb-cache.hh	15
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-shaper.cc	5
../../src/harfbuzz/src/hb-shape-plan.hh	3
../../src/harfbuzz/src/hb-ot-map.hh	21
../../src/harfbuzz/src/hb-aat-map.hh	7
../../src/harfbuzz/src/hb-ot-map.cc	6
../../src/harfbuzz/src/hb-ot-tag.cc	11
../../src/harfbuzz/src/hb-ot-tag-table.hh	1
../../src/harfbuzz/src/hb-aat-layout.cc	18
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	149
../../src/harfbuzz/src/hb-aat-layout-common.hh	254
../../src/harfbuzz/src/hb-bit-set.hh	34
../../src/harfbuzz/src/hb-ot-shaper.hh	1
../../src/harfbuzz/src/hb-map.hh	20
../../src/harfbuzz/src/hb-aat-map.cc	2
../../src/harfbuzz/src/hb-aat-ltag-table.hh	3
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	118
../../src/harfbuzz/src/hb-bit-page.hh	20
../../src/harfbuzz/src/hb-ot-kern-table.hh	41
../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	11
../../src/harfbuzz/src/hb-ot-stat-table.hh	7
../../src/harfbuzz/src/hb-ot-layout.hh	49
../../src/harfbuzz/src/hb-unicode-emoji-table.hh	3
../../src/harfbuzz/src/hb-ot-shape-normalize.cc	10
../../src/harfbuzz/src/hb-ot-shape-normalize.hh	1
../../src/harfbuzz/src/hb-ot-shape-fallback.cc	11
../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	17
../../src/harfbuzz/src/hb-aat-layout.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	2
../../src/harfbuzz/src/hb-kern.hh	20
../../src/harfbuzz/src/hb-paint-extents.hh	11
../../src/harfbuzz/src/hb-geometry.hh	13
../../src/harfbuzz/src/hb-paint-extents.cc	15
../../src/harfbuzz/src/hb-paint.cc	21
../../src/harfbuzz/src/hb-paint.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	4
../../src/harfbuzz/src/hb-draw.cc	19
../../src/harfbuzz/src/hb-draw.hh	8
../../src/harfbuzz/src/hb-outline.hh	4
../../src/harfbuzz/src/hb-outline.cc	13
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	2
../../src/harfbuzz/src/hb-buffer-verify.cc	5
../../src/harfbuzz/src/hb-cplusplus.hh	5
../../src/harfbuzz/src/hb-buffer-serialize.cc	3
../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	1
../../src/harfbuzz/src/hb-set.cc	4
../../src/harfbuzz/src/hb-set.hh	10
../../src/harfbuzz/src/hb-bit-set-invertible.hh	8
../../src/harfbuzz/src/hb-ot-cmap-table.hh	53
../../src/harfbuzz/src/hb-ot-os2-table.hh	10
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-ot-color.cc	12
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	87
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	37
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	73
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/svg/svg.hh	13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	23
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	12
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	29
../../src/harfbuzz/src/hb-ot-math.cc	10
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/hb-ot-meta.cc	2
../../src/harfbuzz/src/hb-ot-meta-table.hh	11
../../src/harfbuzz/src/hb-ot-metrics.cc	6
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-post-table.hh	7
../../src/harfbuzz/src/hb-ot-name.cc	7
../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	10
../../src/harfbuzz/src/OT/name/name.hh	19
../../src/harfbuzz/src/OT/name/../../hb-blob.hh	7
../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	8
../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	4
../../src/harfbuzz/src/hb-ot-name-language-static.hh	4
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	4
../../src/harfbuzz/src/OT/glyf/glyf.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	5
../../src/harfbuzz/src/hb-subset-plan.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.hh	8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	7
../../src/harfbuzz/src/hb-cff-interp-common.hh	5
../../src/harfbuzz/src/hb-ot-cff2-table.hh	8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3

Fuzzer: hb-subset-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	9149	19.9%
gold	[1:9]	514	1.12%
yellow	[10:29]	413	0.90%
greenyellow	[30:49]	256	0.55%
lawngreen	50+	35433	77.4%
All colors	45765	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
126	19654	hb_hashmap_t , false>::alloc(unsigned int)	call site: 19654
70	19918	_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)	call site: 19918	_ZorIN23hb_bit_set_invertible_t6iter_tE24hb_filter_iter_factory_tIZL15_get_table_tagsPK16hb_subset_plan_tjPjS6_E3$_2RK4$_22ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSD_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISD_Efp_EEEOSD_OSJ_
64	45429	hb_table_lazy_loader_t ::convert(hb_blob_t const*)	call site: 45429	hb_blob_copy_writable_or_fail
62	26049	hb_iter_t , OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &	call site: 26049	_ZN2OT6Layout6Common17CoverageFormat2_4INS0_11MediumTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tI14hb_iota_iter_tIjjENS1_8Coverage6iter_tEER8hb_set_tRK3$_6LPv0EERK3$_7L24hb_function_sortedness_t1ELSJ_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSR_18is_sorted_iteratorEvE4typeELSJ_0EEEbP22hb_serialize_context_tSR_
55	26112	hb_vector_t graph::actuate_subtable_split (graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)	call site: 26112	_ZorI13hb_zip_iter_tI14hb_iota_iter_tIjjEN2OT6Layout6Common8Coverage6iter_tEE24hb_filter_iter_factory_tIR8hb_set_tRK3$_6ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSH_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISH_Efp_EEEOSH_OSN_
41	44834	_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj	call site: 44834	_ZN2OT19CmapSubtableFormat49serializeI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEvP22hb_serialize_context_tSI_
40	428	hb_ot_face_t::init0(hb_face_t*)	call site: 00428
40	45666	hb_iter_t , OT::cmap::create_filled_cache(hb_blob_ptr_t )::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &	call site: 45666	hb_face_set_user_data
39	25445	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()	call site: 25445	_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_7LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_
36	21089	hb_vector_t ::resize_full(int, bool, bool)	call site: 21089	_ZL12rotate_arrayIbTnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEbRK10hb_array_tIKS1_EiR11hb_vector_tIS1_Lb0EE
35	25546	hb_map_iter_t , graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t )#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, $_7, $_22 const&, (hb_function_sortedness_t)0>, $_6 const&, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})0, (hb_function_sortedness_t)0>::__next__()	call site: 25546	_ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_7LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_22LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
34	25277	hb_vector_t graph::actuate_subtable_split (graph::PairPosFormat2::split_context_t&, hb_vector_t const&)	call site: 25277	_ZorIN2OT6Layout6Common8Coverage6iter_tE21hb_map_iter_factory_tIZNK5graph14PairPosFormat211clone_rangeERNS7_15split_context_tEjjEUljE_L24hb_function_sortedness_t1EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSE_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISE_Efp_EEEOSE_OSK_

Runtime coverage analysis

Covered functions

24976

Functions that are reachable but not covered

4163

Reachable functions

48707

Percentage of reachable functions covered

91.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	6
../../src/harfbuzz/src/hb-blob.cc	15
../../src/harfbuzz/src/hb-null.hh	1012
../../src/harfbuzz/src/hb-object.hh	169
../../src/harfbuzz/src/hb-common.cc	4
../../src/harfbuzz/src/failing-alloc.c	5
../../src/harfbuzz/src/hb-blob.hh	279
../../src/harfbuzz/src/hb-atomic.hh	159
../../src/harfbuzz/src/hb-debug.hh	79
../../src/harfbuzz/src/hb-algs.hh	2516
../../src/harfbuzz/src/hb-vector.hh	1598
../../src/harfbuzz/src/hb-mutex.hh	8
../../src/harfbuzz/src/hb-face.cc	19
../../src/harfbuzz/src/hb-sanitize.hh	670
../../src/harfbuzz/src/hb-dispatch.hh	100
../../src/harfbuzz/src/hb-open-file.hh	27
../../src/harfbuzz/src/hb-open-type.hh	1671
../../src/harfbuzz/src/hb-machinery.hh	852
../../src/harfbuzz/src/hb-face.hh	5
../../src/harfbuzz/src/hb-shaper.hh	6
../../src/harfbuzz/src/hb-shaper-list.hh	12
../../src/harfbuzz/src/hb-ot-face.hh	1
../../src/harfbuzz/src/hb-ot-face.cc	2
../../src/harfbuzz/src/hb-array.hh	1075
../../src/harfbuzz/src/hb-iter.hh	8909
../../src/harfbuzz/src/hb-meta.hh	1069
../../src/harfbuzz/src/hb-set.cc	12
../../src/harfbuzz/src/hb-set.hh	53
../../src/harfbuzz/src/hb-bit-set-invertible.hh	46
../../src/harfbuzz/src/hb-bit-set.hh	69
../../src/harfbuzz/src/hb-ot-cmap-table.hh	120
../../src/harfbuzz/src/hb-static.cc	4
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	2
../../src/harfbuzz/src/OT/glyf/loca.hh	1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	8
../../src/harfbuzz/src/hb-cache.hh	5
../../src/harfbuzz/src/hb-ot-os2-table.hh	15
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	3
../../src/harfbuzz/src/hb-bit-page.hh	44
../../src/harfbuzz/src/hb-subset-input.cc	12
../../src/harfbuzz/src/hb-map.hh	738
../../src/harfbuzz/src/hb-subset-input.hh	9
../../src/harfbuzz/src/hb-cplusplus.hh	28
../../src/harfbuzz/src/hb-shape-plan.cc	1
../../src/harfbuzz/src/hb-shape-plan.hh	2
../../src/harfbuzz/src/hb-ot-shape.hh	1
../../src/harfbuzz/src/hb-ot-shape.cc	3
../../src/harfbuzz/src/hb-ot-map.hh	2
../../src/harfbuzz/src/hb-aat-map.hh	1
../../src/harfbuzz/src/hb-fallback-shape.cc	2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	28
../../src/harfbuzz/src/hb-ot-post-table.hh	8
../../src/harfbuzz/src/OT/name/name.hh	14
../../src/harfbuzz/src/hb-ot-meta-table.hh	2
../../src/harfbuzz/src/OT/glyf/glyf.hh	11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	36
../../src/harfbuzz/src/hb-subset-plan.hh	85
../../src/harfbuzz/src/hb-ot-cff1-table.hh	93
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	39
../../src/harfbuzz/src/hb-cff-interp-common.hh	130
../../src/harfbuzz/src/hb-ot-cff2-table.hh	46
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	3
../../src/harfbuzz/src/hb-ot-kern-table.hh	2
../../src/harfbuzz/src/hb-aat-layout-common.hh	1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	28
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	6
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	376
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	7
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	285
../../src/harfbuzz/src/hb-paint-extents.hh	1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	39
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	10
../../src/harfbuzz/src/OT/Color/svg/svg.hh	3
../../src/harfbuzz/src/hb-ot-var.cc	5
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	26
../../src/harfbuzz/src/hb-subset-instancer-solver.hh	10
../../src/harfbuzz/src/hb-subset.cc	12
../../src/harfbuzz/src/hb-subset-plan.cc	33
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	16
../../src/harfbuzz/src/hb-face-builder.cc	10
../../src/harfbuzz/src/hb-serialize.hh	1374
../../src/harfbuzz/src/hb-free-pool.hh	5
../../src/harfbuzz/src/hb-map.cc	4
../../src/harfbuzz/src/hb-subset-accelerator.hh	5
../../src/harfbuzz/src/hb-subset-plan-var.cc	8
../../src/harfbuzz/src/hb-ot-var-avar-table.hh	18
../../src/harfbuzz/src/hb-ot-layout-common.hh	106
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	91
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	8
../../src/harfbuzz/src/hb-unicode.cc	19
../../src/harfbuzz/src/hb-ucd.cc	13
../../src/harfbuzz/src/hb-unicode.hh	3
../../src/harfbuzz/src/hb-ucd-table.hh	6
../../src/harfbuzz/src/hb-multimap.hh	6
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	2
../../src/harfbuzz/src/hb-ot-cff-common.hh	59
../../src/harfbuzz/src/hb-number.cc	1
hb-number-parser.rl	2
../../src/harfbuzz/src/hb-subset-cff-common.hh	104
../../src/harfbuzz/src/hb-subset-plan-layout.cc	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	2
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	10
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	16
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	18
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	14
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	10
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	5
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	5
../../src/harfbuzz/src/hb-ot-layout.cc	16
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	9
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	10
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	7
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	12
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	26
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	1
../../src/harfbuzz/src/hb-ot-math-table.hh	45
../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	15
../../src/harfbuzz/src/hb-bimap.hh	19
../../src/harfbuzz/src/hb-ot-stat-table.hh	41
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	6
../../src/harfbuzz/src/OT/glyf/Glyph.hh	14
../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	26
../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	15
../../src/harfbuzz/src/OT/glyf/composite-iter.hh	8
../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	1
../../src/harfbuzz/src/hb-ot-cff1-table.cc	9
../../src/harfbuzz/src/hb-cff1-interp-cs.hh	15
../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	229
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	31
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	42
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	42
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	3
../../src/harfbuzz/src/hb-ot-layout-base-table.hh	49
../../src/harfbuzz/src/hb-font.cc	12
../../src/harfbuzz/src/hb-font.hh	8
../../src/harfbuzz/src/hb-ot-cff2-table.cc	10
../../src/harfbuzz/src/hb-cff2-interp-cs.hh	46
../../src/harfbuzz/src/hb-subset-table.hh	93
../../src/harfbuzz/src/hb-subset-table-layout.cc	1
../../src/harfbuzz/src/hb-subset.hh	332
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	73
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	226
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	2
../../src/harfbuzz/src/hb-subset-instancer-solver.cc	7
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	4
../../src/harfbuzz/src/hb-subset-instancer-iup.cc	10
../../src/harfbuzz/src/graph/../hb-priority-queue.hh	17
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	2
../../src/harfbuzz/src/hb-repacker.hh	8
../../src/harfbuzz/src/graph/graph.hh	100
../../src/harfbuzz/src/graph/serialize.hh	13
../../src/harfbuzz/src/graph/gsubgpos-context.cc	2
../../src/harfbuzz/src/graph/../hb-map.hh	2
../../src/harfbuzz/src/graph/../hb-object.hh	1
../../src/harfbuzz/src/graph/gsubgpos-graph.hh	29
../../src/harfbuzz/src/graph/../hb-atomic.hh	2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	45
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	2
../../src/harfbuzz/src/graph/pairpos-graph.hh	32
../../src/harfbuzz/src/graph/split-helpers.hh	4
../../src/harfbuzz/src/graph/gsubgpos-context.hh	2
../../src/harfbuzz/src/graph/coverage-graph.hh	17
../../src/harfbuzz/src/graph/classdef-graph.hh	13
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	10
../../src/harfbuzz/src/graph/markbasepos-graph.hh	21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	3
../../src/harfbuzz/src/graph/ligature-graph.hh	22
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	17
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	14
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	12
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	7
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	3
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	6
../../src/harfbuzz/src/hb-subset-table-var.cc	1
../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	24
../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	15
../../src/harfbuzz/src/hb-ot-var-common.hh	34
../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	7
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	6
../../src/harfbuzz/src/hb-subset-table-cff.cc	3
../../src/harfbuzz/src/hb-subset-cff1.cc	47
../../src/harfbuzz/src/hb-subset-cff-common.cc	4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	1
../../src/harfbuzz/src/hb-subset-cff2.cc	33
../../src/harfbuzz/src/hb-cff-width-optimizer.hh	9
../../src/harfbuzz/src/hb-cff-specializer.hh	4
../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	2
../../src/harfbuzz/src/hb-ot-vorg-table.hh	4
../../src/harfbuzz/src/hb-subset-table-color.cc	1
../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	3
../../src/harfbuzz/src/hb-subset-table-other.cc	1
../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	8
../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	4
../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	4
../../src/harfbuzz/src/hb-ot-hdmx-table.hh	9
../../src/harfbuzz/src/hb-utf.hh	1
../../src/harfbuzz/src/OT/name/../../hb-utf.hh	2
../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	2
../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	3
../../src/harfbuzz/src/hb-string-array.hh	1
../../src/harfbuzz/src/hb-ot-head-table.hh	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
hb_ot_font_set_funcs	/work/build/../../src/harfbuzz/src/hb-ot-font.cc	1	['N/A']	62	0	32	6	3	7933	0	13116	3199

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

34046 / 38280

Cyclomatic complexity statically reachable by fuzzers

100295 / 111791

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_blob_t::try_make_writable()', 'CrapHelper::get_crap()']

../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_vector_draw_render_svg(hb_vector_draw_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_vector_paint_funcs_lazy_loader_t::create()', 'hb_vector_paint_render_pdf(hb_vector_paint_t*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_vector_paint_render_svg(hb_vector_paint_t*)']

../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'CrapHelper::get_crap()', 'hb_lazy_loader_t, hb_face_t, 25u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_lazy_loader_t, hb_face_t, 30u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'hb_raster_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_raster_paint_radial_gradient(hb_paint_funcs_t*, void*, hb_color_line_t*, float, float, float, float, float, float, void*)']

../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_array_t::qsort()', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_serialize_context_t::check_success(bool, hb_serialize_error_t)', 'CrapHelper >::get_crap()', 'OT::ArrayOf, OT::NumType >::operator[](int)', 'graph::graph_t::vertex_t::is_shared() const', 'hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t)#1}, $_19 const&, (void*)0>, $_6 const&, (hb_function_sortedness_t)1, ($_19 const&)0>, unsigned int>::operator++() &', 'hb_filter_iter_t::item_t>, bool (hb_hashmap_t::item_t::*)() const, $_19 const&, (void*)0>::__next__()', 'hb_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>, hb_filter_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0> >::operator++() &', 'graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)']

../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)', 'hb_ot_metrics_get_variation', 'hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)', 'hb_lazy_loader_t, hb_face_t, 7u, OT::post_accelerator_t>::get() const', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_array_t::qsort()', 'CrapHelper::get_crap()', 'OT::OffsetTo, void, true>::operator()(void const*) const', 'OT::Device::sanitize(hb_sanitize_context_t*) const']

../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_hashmap_t, false>::alloc(unsigned int)', '_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)', 'hb_table_lazy_loader_t::convert(hb_blob_t const*)', 'hb_iter_t, OT::Layout::Common::Coverage::iter_t>, hb_set_t&, $_6 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, (void*)0>, unsigned int>::operator++() &', 'hb_vector_t graph::actuate_subtable_split(graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)', '_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tEUlS5_E_RK4$_19LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_iter_t, OT::cmap::create_filled_cache(hb_blob_ptr_t)::{lambda(OT::EncodingRecord const&)#1}, $_22 const&, (void*)0>, OT::EncodingRecord const&>::operator++() &', 'hb_map_iter_t, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#2}, $_7 const&, (hb_function_sortedness_t)0>, graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(hb_pair_t)#1}, (graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&, unsigned int, unsigned int) const::{lambda(unsigned int)#1})1, (hb_function_sortedness_t)0>::__next__()', 'hb_vector_t::resize_full(int, bool, bool)']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
hb_font_t::draw_glyph_or_fail(unsignedint,hb_draw_funcs_t*,void*,bool)	42	13	30.95%	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-vector-fuzzer', 'hb-shape-fuzzer']
hb_raster_paint_image(hb_paint_funcs_t*,void*,hb_blob_t*,unsignedint,unsignedint,unsignedint,float,hb_glyph_extents_t*,void*)	118	15	12.71%	['hb-raster-fuzzer']
hb_raster_paint_radial_gradient(hb_paint_funcs_t*,void*,hb_color_line_t*,float,float,float,float,float,float,void*)	234	107	45.72%	['hb-raster-fuzzer']
unsignedinthb_bit_storage (unsignedint)	49	5	10.20%	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_ctz (unsignedlonglong)	48	8	16.66%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_popcount (unsignedlonglong)	35	7	20.0%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_bit_storage (unsignedlonglong)	49	8	16.32%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const	107	51	47.66%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const	69	34	49.27%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const	75	31	41.33%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf16_xe_t >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf32_xe_t >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*)	31	16	51.61%	['hb-shape-fuzzer']
hb_aat_map_builder_t::compile(hb_aat_map_t&)	67	6	8.955%	['hb-shape-fuzzer']
unsignedinthb_ctz (unsignedint)	48	5	10.41%	['hb-shape-fuzzer']
unsignedinthb_popcount (hb_glyph_flags_t)	35	4	11.42%	['hb-shape-fuzzer']
_ZL13hb_qsort_loopIN11hb_ot_map_t13feature_map_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-shape-fuzzer']
_hb_ot_metrics_get_position_common(hb_font_t*,hb_ot_metrics_tag_t,int*)	34	15	44.11%	['hb-shape-fuzzer']
hb_ot_metrics_get_position	84	12	14.28%	['hb-shape-fuzzer']
hb_ensure_native_direction(hb_buffer_t*)	33	8	24.24%	['hb-shape-fuzzer']
apply_stch(hb_ot_shape_plan_tconst*,hb_buffer_t*,hb_font_t*)	160	3	1.875%	['hb-shape-fuzzer']
hb_ot_tags_from_complex_language(charconst*,charconst*,unsignedint*,unsignedint*)	1210	67	5.537%	['hb-shape-fuzzer']
hb_ot_tags_from_script_and_language	45	24	53.33%	['hb-shape-fuzzer']
parse_private_use_subtag(charconst*,unsignedint*,unsignedint*,charconst*,unsignedchar(*)(unsignedchar))	32	2	6.25%	['hb-shape-fuzzer']
hb_ot_tags_from_language(charconst*,charconst*,unsignedint*,unsignedint*)	100	26	26.0%	['hb-shape-fuzzer']
hb_shapers_lazy_loader_t::create()	32	4	12.5%	['hb-shape-fuzzer']
hb_utf8_t::next(unsignedcharconst*,unsignedcharconst*,unsignedint*,unsignedint)	56	6	10.71%	['hb-shape-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::collect_variation_indices(OT::hb_collect_variation_indices_context_t*)const	41	2	4.878%	['hb-subset-fuzzer']
OT::NameRecord::copy(hb_serialize_context_t*,voidconst*,hb_hashmap_t ,false>const*)const	52	16	30.76%	['hb-subset-fuzzer']
voidhb_qsort_loop (unsignedint*,unsignedlong,_hb_face_builder_get_table_tags(hb_face_tconst*,unsignedint,unsignedint*,unsignedint*,void*)::$_0)	37	3	8.108%	['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT12AxisValueMapEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_	37	3	8.108%	['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,hb_vector_t ,false>::set_with_hash const*const&,hb_vector_t >(hb_vector_t const*const&,unsignedint,hb_vector_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t const*,unsignedint,false>::set_with_hash const*const&,int>(hb_vector_t const*const&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedintconst&,unsignedint,hb_pair_t &&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,14u>,false>const*,unsignedint,false>::set_with_hash ,14u>,false>*,int>(hb_vector_t ,14u>,false>*&&,unsignedint,int&&,bool)	40	21	52.5%	['hb-subset-fuzzer']
boolhb_hashmap_t ,14u>,false>const*,unsignedint,false>::set_with_hash ,14u>,false>const*const&,unsignedint&>(hb_vector_t ,14u>,false>const*const&,unsignedint,unsignedint&,bool)	40	21	52.5%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKS5_IKhEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSB_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tSB_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS9_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS9_jj	75	41	54.66%	['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS8_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS8_jj	75	30	40.0%	['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const	83	17	20.48%	['hb-subset-fuzzer']
boolOT::HVARVVAR::_subset (hb_subset_context_t*)const	44	24	54.54%	['hb-subset-fuzzer']
_iup_contour_optimize(hb_array_t ,hb_array_t ,hb_array_t ,hb_array_t ,double,iup_scratch_t&)	135	34	25.18%	['hb-subset-fuzzer']
_create_old_gid_to_new_gid_map(hb_face_tconst*,bool,hb_set_tconst*,hb_map_tconst*,hb_map_t*,hb_map_t*,hb_vector_t ,true>*,unsignedint*)	73	36	49.31%	['hb-subset-fuzzer']
hb_vector_t const*,false>const&)::delta_size_t,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t const*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,void,true>*,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t >,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ,14u>,false>const*,unsignedint>,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	20	48.78%	['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool)	41	22	53.65%	['hb-subset-fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-blob.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-cff-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-algs.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../hb-map.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/svg/svg.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-svg.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cplusplus.hh	['hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-dispatch.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-color.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-null.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-mutex.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/composite-iter.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-null.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-page.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-repacker.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-path.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hangul.cc	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/markbasepos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/ligature-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-array.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-indic-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-glyphs.rl	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-number.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh	['hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-json.rl	[]	[]
/work/build/../../src/harfbuzz/src/graph/../hb-iter.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cache.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-face.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-layout-common.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/split-helpers.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/sbix/sbix.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-sanitize.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-input.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-base-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-accelerator.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/glyf.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-hvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-internal.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-free-pool.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-number-parser.rl	['hb-subset-fuzzer']	['hb-subset-fuzzer']
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cmap-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/pairpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/coverage-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-thai.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/glyf.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh	['hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-myanmar-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/failing-alloc.c	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-myanmar.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-buffer.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-dict-common.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-buffer-deserialize-text-unicode.rl	[]	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-cff.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-meta.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-vorg-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-common.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-specializer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-machinery.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-width-optimizer.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint-pdf.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff2.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-common.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-font.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-static.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-map.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-layout.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/name.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/serialize.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-blob.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bit-set-invertible.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-serialize.cc	['hb-repacker-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat2.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-meta.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-utf.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-iter.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-stat-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-map.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-machinery.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-syllabic.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/hb-ot-shaper-khmer-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set-digest.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-instancer-iup.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-fallback.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/Coverage.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-cff1-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-draw.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.hh	['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-multimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-os2-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face-builder.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-atomic.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-algs.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-buffer.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/RangeRecord.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/coord-setter.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../hb-object.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-machinery.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff2-interp-cs.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ucd.cc	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-font.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-hhea-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff1.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-kern.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-font.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-priority-queue.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-name-language-static.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/loca.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../hb-meta.hh	[]	[]
/work/build/hb-ot-shaper-use-machine.rl	[]	[]
/work/build/../../src/harfbuzz/src/hb-vector-buf.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-string-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-blob.hh	[]	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-paint.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-map.cc	['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-mvar-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-paint.cc	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-draw.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-joining-list.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-hdmx-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh	['hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/Glyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan-var.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.hh	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-color.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-metrics.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh	['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table-other.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-cff-interp-cs-common.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-file.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-cvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-paint.hh	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-cache.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-face.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-bimap.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-cu2qu.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-math.cc	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-gpu-draw.hh	['hb-gpu-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-image.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/classdef-graph.hh	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-set.cc	['hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-raster-draw.cc	['hb-raster-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Color/COLR/COLR.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-atomic.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-outline.cc	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-open-type.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-vector-paint.cc	['hb-vector-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.cc	['hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hebrew.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-debug.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-bounded.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-object.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/path-builder.hh	[]	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-paint-extents.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.cc	['hb-repacker-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-plan.cc	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-table.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic-table.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-meta.hh	[]	[]
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh	['hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-vowel-constraints.cc	[]	[]
/work/build/../../src/harfbuzz/src/hb-geometry.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-input.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-shaper-khmer.cc	[]	[]
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh	['hb-shape-fuzzer', 'hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-ot-var-gvar-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/hb-subset-table.hh	['hb-subset-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh	['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer']	[]
/work/build/../../src/harfbuzz/src/OT/name/../../hb-blob.hh	['hb-shape-fuzzer']	[]

Directories in report

Directory
/work/build/../../src/harfbuzz/src/OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/OT/name/../../
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/
/work/build/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../
/work/build/../../src/harfbuzz/src/OT/glyf/../../
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/graph/../
/work/build/../../src/harfbuzz/test/fuzzing/../api/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/
/work/build/../../src/harfbuzz/src/graph/
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../
/work/build/../../src/harfbuzz/test/fuzzing/
/work/build/../../src/harfbuzz/src/OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../
/work/build/../../src/harfbuzz/src/OT/name/
/work/build/../../src/harfbuzz/src/OT/Color/svg/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../
/work/build/../../src/harfbuzz/src/OT/Color/sbix/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/