Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: hb-gpu-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 998 31.3%
gold [1:9] 165 5.17%
yellow [10:29] 13 0.40%
greenyellow [30:49] 29 0.91%
lawngreen 50+ 1981 62.1%
All colors 3186 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
35 456 hb_ot_face_t::init0(hb_face_t*) call site: 00456
35 1654 hb_lazy_loader_t ::get_unconst() const call site: 01654 hypotf
29 2471 hb_atomic_t ::operator hb_face_t::plan_node_t* () const call site: 02471 hb_shape_plan_destroy
26 1049 bool hb_sanitize_context_t::check_array (OT::VarRegionAxis const*, unsigned int) const call site: 01049 _ZN21hb_sanitize_context_t8dispatchIN2OT8OffsetToINS1_7VarDataENS1_7NumTypeILb1EjLj4EEEvLb1EEEJPKNS1_18ItemVariationStoreEEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOSC_
21 2903 hb_lazy_loader_t , hb_face_t, 24u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*) call site: 02903 hb_free
18 2996 hb_lazy_loader_t , hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*) call site: 02996 hb_free
17 1184 OT::avar::map_coords_16_16(int*, unsigned int) const call site: 01184
17 2290 hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*) call site: 02290 hb_map_get
16 1713 hb_draw_funcs_t::start_path(void*, hb_draw_state_t&) call site: 01713
15 650 hb_iter_t , OT::Tag OT::TableRecord::*, (hb_function_sortedness_t)0, (void*)0>, OT::Tag const&>::operator*() call site: 00650 _ZNK4$_18clIRMN2OT11TableRecordENS1_3TagERKS2_EEDTcl4implclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_Ecv11hb_priorityILj16EE_EEEOS8_OS9_
15 1014 OT::NumType ::operator unsigned int() const call site: 01014
14 37 hb_blob_t::try_make_writable() call site: 00037 sysconf

Runtime coverage analysis

Covered functions
4380
Functions that are reachable but not covered
823
Reachable functions
4040
Percentage of reachable functions covered
79.63%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc 1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh 5
../../src/harfbuzz/src/hb-blob.cc 13
../../src/harfbuzz/src/hb-null.hh 135
../../src/harfbuzz/src/hb-object.hh 97
../../src/harfbuzz/src/hb-common.cc 4
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-blob.hh 58
../../src/harfbuzz/src/hb-atomic.hh 141
../../src/harfbuzz/src/hb-debug.hh 2
../../src/harfbuzz/src/hb-algs.hh 85
../../src/harfbuzz/src/hb-vector.hh 297
../../src/harfbuzz/src/hb-mutex.hh 3
../../src/harfbuzz/src/hb-face.cc 13
../../src/harfbuzz/src/hb-sanitize.hh 55
../../src/harfbuzz/src/hb-dispatch.hh 1
../../src/harfbuzz/src/hb-open-file.hh 25
../../src/harfbuzz/src/hb-open-type.hh 90
../../src/harfbuzz/src/hb-machinery.hh 518
../../src/harfbuzz/src/hb-face.hh 5
../../src/harfbuzz/src/hb-shaper.hh 6
../../src/harfbuzz/src/hb-shaper-list.hh 12
../../src/harfbuzz/src/hb-ot-face.hh 1
../../src/harfbuzz/src/hb-ot-face.cc 2
../../src/harfbuzz/src/hb-array.hh 61
../../src/harfbuzz/src/hb-iter.hh 56
../../src/harfbuzz/src/hb-meta.hh 6
../../src/harfbuzz/src/hb-font.cc 17
../../src/harfbuzz/src/hb-font.hh 6
../../src/harfbuzz/src/hb-static.cc 3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh 13
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh 2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 12
../../src/harfbuzz/src/hb-ot-var.cc 4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh 4
../../src/harfbuzz/src/hb-ot-layout-common.hh 27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 2
../../src/harfbuzz/src/hb-ot-shape.cc 3
../../src/harfbuzz/src/hb-fallback-shape.cc 2
../../src/harfbuzz/src/hb-gpu-draw.cc 43
../../src/harfbuzz/src/hb-gpu-draw.hh 6
../../src/harfbuzz/src/hb-gpu-paint.cc 50
../../src/harfbuzz/src/hb-gpu-paint.hh 6
../../src/harfbuzz/src/hb-geometry.hh 2
../../src/harfbuzz/src/hb-draw.cc 17
../../src/harfbuzz/src/hb-draw.hh 11
../../src/harfbuzz/src/hb-gpu-cu2qu.hh 5
../../src/harfbuzz/src/hb-outline.hh 4
../../src/harfbuzz/src/hb-outline.cc 14
../../src/harfbuzz/src/hb-paint.cc 31
../../src/harfbuzz/src/hb-paint.hh 5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh 2
../../src/harfbuzz/src/hb-map.cc 3
../../src/harfbuzz/src/hb-map.hh 13
../../src/harfbuzz/src/hb-shape-plan.cc 2
../../src/harfbuzz/src/hb-shape-plan.hh 2
../../src/harfbuzz/src/hb-ot-shape.hh 3
../../src/harfbuzz/src/hb-ot-map.hh 2
../../src/harfbuzz/src/hb-aat-map.hh 1
../../src/harfbuzz/src/hb-ot-cmap-table.hh 2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh 2
../../src/harfbuzz/src/hb-ot-dual.hh 11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh 6
../../src/harfbuzz/src/hb-ot-post-table.hh 2
../../src/harfbuzz/src/OT/name/name.hh 2
../../src/harfbuzz/src/hb-ot-meta-table.hh 2
../../src/harfbuzz/src/OT/glyf/glyf.hh 1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh 4
../../src/harfbuzz/src/hb-subset-plan.hh 1
../../src/harfbuzz/src/hb-ot-cff1-table.hh 8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh 7
../../src/harfbuzz/src/hb-cff-interp-common.hh 5
../../src/harfbuzz/src/hb-ot-cff2-table.hh 8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh 3
../../src/harfbuzz/src/hb-ot-kern-table.hh 2
../../src/harfbuzz/src/hb-aat-layout-common.hh 1
../../src/harfbuzz/src/hb-bit-set.hh 2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh 3
../../src/harfbuzz/src/hb-paint-extents.hh 1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh 1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh 2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh 2
../../src/harfbuzz/src/OT/Color/svg/svg.hh 3

Fuzzer: hb-vector-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1191 24.8%
gold [1:9] 383 7.97%
yellow [10:29] 43 0.89%
greenyellow [30:49] 69 1.43%
lawngreen 50+ 3116 64.8%
All colors 4802 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
35 456 hb_ot_face_t::init0(hb_face_t*) call site: 00456
35 1798 hb_lazy_loader_t ::get_unconst() const call site: 01798 hypotf
29 4105 hb_atomic_t ::operator hb_face_t::plan_node_t* () const call site: 04105 hb_shape_plan_destroy
26 1049 bool hb_sanitize_context_t::check_array (OT::VarRegionAxis const*, unsigned int) const call site: 01049 _ZN21hb_sanitize_context_t8dispatchIN2OT8OffsetToINS1_7VarDataENS1_7NumTypeILb1EjLj4EEEvLb1EEEJPKNS1_18ItemVariationStoreEEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOSC_
20 3782 hb_vector_draw_render_svg(hb_vector_draw_t*) call site: 03782
19 3959 hb_vector_paint_render_svg(hb_vector_paint_t*) call site: 03959
18 35 void hb_object_trace (hb_blob_t const*, char const*) call site: 00035 hb_malloc
18 3360 hb_vector_paint_funcs_lazy_loader_t::create() call site: 03360
18 4037 hb_vector_paint_render_pdf(hb_vector_paint_t*) call site: 04037
18 4618 hb_lazy_loader_t , hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*) call site: 04618 hb_free
17 1184 OT::avar::map_coords_16_16(int*, unsigned int) const call site: 01184
16 3887 hb_vector_draw_render_pdf(hb_vector_draw_t*) call site: 03887

Runtime coverage analysis

Covered functions
4686
Functions that are reachable but not covered
893
Reachable functions
4800
Percentage of reachable functions covered
81.4%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc 2
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh 5
../../src/harfbuzz/src/hb-blob.cc 14
../../src/harfbuzz/src/hb-null.hh 141
../../src/harfbuzz/src/hb-object.hh 113
../../src/harfbuzz/src/hb-common.cc 4
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-blob.hh 54
../../src/harfbuzz/src/hb-atomic.hh 145
../../src/harfbuzz/src/hb-debug.hh 2
../../src/harfbuzz/src/hb-algs.hh 100
../../src/harfbuzz/src/hb-vector.hh 333
../../src/harfbuzz/src/hb-mutex.hh 4
../../src/harfbuzz/src/hb-face.cc 13
../../src/harfbuzz/src/hb-sanitize.hh 55
../../src/harfbuzz/src/hb-dispatch.hh 1
../../src/harfbuzz/src/hb-open-file.hh 25
../../src/harfbuzz/src/hb-open-type.hh 90
../../src/harfbuzz/src/hb-machinery.hh 600
../../src/harfbuzz/src/hb-face.hh 5
../../src/harfbuzz/src/hb-shaper.hh 6
../../src/harfbuzz/src/hb-shaper-list.hh 12
../../src/harfbuzz/src/hb-ot-face.hh 1
../../src/harfbuzz/src/hb-ot-face.cc 2
../../src/harfbuzz/src/hb-array.hh 76
../../src/harfbuzz/src/hb-iter.hh 56
../../src/harfbuzz/src/hb-meta.hh 6
../../src/harfbuzz/src/hb-font.cc 19
../../src/harfbuzz/src/hb-font.hh 8
../../src/harfbuzz/src/hb-static.cc 3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh 13
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh 2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 12
../../src/harfbuzz/src/hb-ot-var.cc 4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh 4
../../src/harfbuzz/src/hb-ot-layout-common.hh 27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 4
../../src/harfbuzz/src/hb-ot-shape.cc 3
../../src/harfbuzz/src/hb-fallback-shape.cc 2
../../src/harfbuzz/src/hb-vector-draw.cc 28
../../src/harfbuzz/src/hb-vector-draw.hh 14
../../src/harfbuzz/src/hb-geometry.hh 12
../../src/harfbuzz/src/hb-vector-buf.hh 18
../../src/harfbuzz/src/hb-vector-paint.cc 11
../../src/harfbuzz/src/hb-vector-paint.hh 13
../../src/harfbuzz/src/hb-map.hh 11
../../src/harfbuzz/src/hb-set.cc 7
../../src/harfbuzz/src/hb-set.hh 9
../../src/harfbuzz/src/hb-bit-set-invertible.hh 7
../../src/harfbuzz/src/hb-bit-set.hh 13
../../src/harfbuzz/src/hb-vector-paint-pdf.cc 58
../../src/harfbuzz/src/hb-paint-extents.hh 12
../../src/harfbuzz/src/hb-paint-extents.cc 26
../../src/harfbuzz/src/hb-paint.cc 36
../../src/harfbuzz/src/hb-paint.hh 7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh 5
../../src/harfbuzz/src/hb-draw.cc 22
../../src/harfbuzz/src/hb-draw.hh 9
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh 4
../../src/harfbuzz/src/hb-outline.hh 4
../../src/harfbuzz/src/hb-outline.cc 14
../../src/harfbuzz/src/hb-vector-internal.hh 7
../../src/harfbuzz/src/hb-vector.cc 5
../../src/harfbuzz/src/hb-vector-path.cc 18
../../src/harfbuzz/src/hb-vector-path.hh 2
../../src/harfbuzz/src/hb-vector-paint-svg.cc 36
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-set.hh 3
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set-invertible.hh 1
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-page.hh 3
../../src/harfbuzz/src/hb-bit-page.hh 9
../../src/harfbuzz/src/hb-shape-plan.cc 2
../../src/harfbuzz/src/hb-shape-plan.hh 2
../../src/harfbuzz/src/hb-ot-shape.hh 3
../../src/harfbuzz/src/hb-ot-map.hh 2
../../src/harfbuzz/src/hb-aat-map.hh 1
../../src/harfbuzz/src/hb-ot-cmap-table.hh 2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh 2
../../src/harfbuzz/src/hb-ot-dual.hh 11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh 6
../../src/harfbuzz/src/hb-ot-post-table.hh 2
../../src/harfbuzz/src/OT/name/name.hh 2
../../src/harfbuzz/src/hb-ot-meta-table.hh 2
../../src/harfbuzz/src/OT/glyf/glyf.hh 1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh 4
../../src/harfbuzz/src/hb-subset-plan.hh 1
../../src/harfbuzz/src/hb-ot-cff1-table.hh 8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh 7
../../src/harfbuzz/src/hb-cff-interp-common.hh 5
../../src/harfbuzz/src/hb-ot-cff2-table.hh 8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh 3
../../src/harfbuzz/src/hb-ot-kern-table.hh 2
../../src/harfbuzz/src/hb-aat-layout-common.hh 1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh 3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh 1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh 2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh 2
../../src/harfbuzz/src/OT/Color/svg/svg.hh 3

Fuzzer: hb-raster-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1309 35.2%
gold [1:9] 238 6.41%
yellow [10:29] 30 0.80%
greenyellow [30:49] 16 0.43%
lawngreen 50+ 2119 57.0%
All colors 3712 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
52 2392 hb_vector_t ::alloc(unsigned int, bool) call site: 02392 _ZNK3$_2clIRlllEEDTclL_ZL6hb_minEclL_ZL6hb_maxEclsr3stdE7forwardIT_Efp_Eclsr3stdE7forwardIT0_Efp0_EEclsr3stdE7forwardIT1_Efp1_EEEOS2_OS3_OS4_
35 456 hb_ot_face_t::init0(hb_face_t*) call site: 00456
35 1716 hb_lazy_loader_t ::get_unconst() const call site: 01716 hypotf
29 3003 hb_atomic_t ::operator hb_face_t::plan_node_t* () const call site: 03003 hb_shape_plan_destroy
26 1049 bool hb_sanitize_context_t::check_array (OT::VarRegionAxis const*, unsigned int) const call site: 01049 _ZN21hb_sanitize_context_t8dispatchIN2OT8OffsetToINS1_7VarDataENS1_7NumTypeILb1EjLj4EEEvLb1EEEJPKNS1_18ItemVariationStoreEEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOSC_
21 3435 hb_lazy_loader_t , hb_face_t, 24u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*) call site: 03435 hb_free
19 2338 hb_vector_t , false>::alloc(unsigned int, bool) call site: 02338 _ZN11hb_vector_tIjLb0EE6extendIS0_TnPN12hb_enable_ifIXsr14hb_is_iterableIT_EE5valueEvE4typeELPv0EEEvRKS3_b
18 35 void hb_object_trace (hb_blob_t const*, char const*) call site: 00035 hb_malloc
18 3528 hb_lazy_loader_t , hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*) call site: 03528 hb_free
17 1184 OT::avar::map_coords_16_16(int*, unsigned int) const call site: 01184
17 2902 hb_raster_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*) call site: 02902 hb_map_get
16 1775 hb_draw_funcs_t::start_path(void*, hb_draw_state_t&) call site: 01775

Runtime coverage analysis

Covered functions
4468
Functions that are reachable but not covered
976
Reachable functions
4473
Percentage of reachable functions covered
78.18%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc 1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh 5
../../src/harfbuzz/src/hb-blob.cc 12
../../src/harfbuzz/src/hb-null.hh 144
../../src/harfbuzz/src/hb-object.hh 105
../../src/harfbuzz/src/hb-common.cc 4
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-blob.hh 53
../../src/harfbuzz/src/hb-atomic.hh 141
../../src/harfbuzz/src/hb-debug.hh 2
../../src/harfbuzz/src/hb-algs.hh 97
../../src/harfbuzz/src/hb-vector.hh 358
../../src/harfbuzz/src/hb-mutex.hh 3
../../src/harfbuzz/src/hb-face.cc 13
../../src/harfbuzz/src/hb-sanitize.hh 55
../../src/harfbuzz/src/hb-dispatch.hh 1
../../src/harfbuzz/src/hb-open-file.hh 25
../../src/harfbuzz/src/hb-open-type.hh 90
../../src/harfbuzz/src/hb-machinery.hh 542
../../src/harfbuzz/src/hb-face.hh 5
../../src/harfbuzz/src/hb-shaper.hh 6
../../src/harfbuzz/src/hb-shaper-list.hh 12
../../src/harfbuzz/src/hb-ot-face.hh 1
../../src/harfbuzz/src/hb-ot-face.cc 2
../../src/harfbuzz/src/hb-array.hh 63
../../src/harfbuzz/src/hb-iter.hh 68
../../src/harfbuzz/src/hb-meta.hh 7
../../src/harfbuzz/src/hb-font.cc 20
../../src/harfbuzz/src/hb-font.hh 8
../../src/harfbuzz/src/hb-static.cc 3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh 13
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh 2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 12
../../src/harfbuzz/src/hb-ot-var.cc 4
../../src/harfbuzz/src/hb-ot-var-avar-table.hh 4
../../src/harfbuzz/src/hb-ot-layout-common.hh 27
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 2
../../src/harfbuzz/src/hb-ot-shape.cc 3
../../src/harfbuzz/src/hb-fallback-shape.cc 2
../../src/harfbuzz/src/hb-raster-draw.cc 36
../../src/harfbuzz/src/hb-geometry.hh 12
../../src/harfbuzz/src/hb-raster-paint.cc 47
../../src/harfbuzz/src/hb-raster-paint.hh 25
../../src/harfbuzz/src/hb-raster-image.cc 32
../../src/harfbuzz/src/hb-raster-image.hh 2
../../src/harfbuzz/src/hb-map.cc 3
../../src/harfbuzz/src/hb-map.hh 13
../../src/harfbuzz/src/hb-draw.cc 24
../../src/harfbuzz/src/hb-draw.hh 11
../../src/harfbuzz/src/hb-outline.hh 4
../../src/harfbuzz/src/hb-outline.cc 14
../../src/harfbuzz/src/hb-paint-extents.hh 12
../../src/harfbuzz/src/hb-paint-extents.cc 26
../../src/harfbuzz/src/hb-paint.cc 34
../../src/harfbuzz/src/hb-paint.hh 5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh 5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh 4
../../src/harfbuzz/src/hb-cplusplus.hh 7
../../src/harfbuzz/src/hb-shape-plan.cc 2
../../src/harfbuzz/src/hb-shape-plan.hh 2
../../src/harfbuzz/src/hb-ot-shape.hh 3
../../src/harfbuzz/src/hb-ot-map.hh 2
../../src/harfbuzz/src/hb-aat-map.hh 1
../../src/harfbuzz/src/hb-ot-cmap-table.hh 2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh 2
../../src/harfbuzz/src/hb-ot-dual.hh 11
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh 6
../../src/harfbuzz/src/hb-ot-post-table.hh 2
../../src/harfbuzz/src/OT/name/name.hh 2
../../src/harfbuzz/src/hb-ot-meta-table.hh 2
../../src/harfbuzz/src/OT/glyf/glyf.hh 1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh 4
../../src/harfbuzz/src/hb-subset-plan.hh 1
../../src/harfbuzz/src/hb-ot-cff1-table.hh 8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh 7
../../src/harfbuzz/src/hb-cff-interp-common.hh 5
../../src/harfbuzz/src/hb-ot-cff2-table.hh 8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh 3
../../src/harfbuzz/src/hb-ot-kern-table.hh 2
../../src/harfbuzz/src/hb-aat-layout-common.hh 1
../../src/harfbuzz/src/hb-bit-set.hh 2
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 3
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 1
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh 3
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh 1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh 2
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh 2
../../src/harfbuzz/src/OT/Color/svg/svg.hh 3

Fuzzer: hb-repacker-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 3565 46.9%
gold [1:9] 544 7.16%
yellow [10:29] 62 0.81%
greenyellow [30:49] 112 1.47%
lawngreen 50+ 3314 43.6%
All colors 7597 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
125 4976 CrapHelper >::get_crap() call site: 04976 _ZN2OT17ClassDefFormat2_4INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_6LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_17LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
110 5912 hb_result_t , graph::graph_error_t>::~hb_result_t() call site: 05912 _ZorI13hb_zip_iter_tI14hb_iota_iter_tIjjEN2OT6Layout6Common8Coverage6iter_tEE24hb_filter_iter_factory_tIR8hb_set_tRK3$_7ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSH_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISH_Efp_EEEOSH_OSN_
96 6134 graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int) call site: 06134 _ZN11hb_result_tI11hb_vector_tIjLb0EEN5graph13graph_error_tEEC2IRS1_TnPN12hb_enable_ifIXsr3std16is_constructibleIS1_T_EE5valueEvE4typeELPv0EEEO14hb_result_ok_tIS8_E
93 4513 graph::PairPosFormat2::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int) call site: 04513 _ZorIN2OT6Layout6Common8Coverage6iter_tE21hb_map_iter_factory_tIZNK5graph14PairPosFormat211clone_rangeERNS7_15split_context_tEjjEUljE_L24hb_function_sortedness_t1EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSE_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISE_Efp_EEEOSE_OSK_
88 3187 hb_serialize_context_t::check_success(bool, hb_serialize_error_t) call site: 03187 _ZN2OT6Layout6Common17CoverageFormat2_4INS0_10SmallTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage14clone_coverageERNSE_24gsubgpos_graph_context_tEjjjjjEUl9hb_pair_tIjjEE_RK4$_17LPv0EERK3$_7L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
80 6490 hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t )#1}, $_17 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, ($_17 const&)0>, unsigned int>::operator++() & call site: 06490 _ZN2OT6Layout6Common17CoverageFormat2_4INS0_10SmallTypesEE9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS1_8Coverage6iter_tE15hb_range_iter_tIjjEEZN5graph8Coverage15filter_coverageERNSE_24gsubgpos_graph_context_tEjjjEUl9hb_pair_tIjjEE_RK4$_17LPv0EERK3$_7L24hb_function_sortedness_t1ELSO_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSO_0EEEbP22hb_serialize_context_tSW_
79 3517 hb_vector_t ::chunk_t*, false>::fini() call site: 03517 _ZN11hb_result_tIvN5graph13graph_error_tEEC2IOS1_TnPN12hb_enable_ifIXsr3std16is_constructibleIS1_T_EE5valueEvE4typeELPv0EEEO15hb_result_err_tIS6_E
76 5527 hb_result_t , graph::graph_error_t>::operator*() && call site: 05527 _ZN11hb_result_tI11hb_vector_tIjLb0EEN5graph13graph_error_tEEC2IOS3_TnPN12hb_enable_ifIXsr3std16is_constructibleIS3_T_EE5valueEvE4typeELPv0EEEO15hb_result_err_tIS8_E
74 6572 graph::graph_t::vertex_t::is_shared() const call site: 06572 _ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tI16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE15hb_range_iter_tIjjEEZN5graph20LigatureSubstFormat16shrinkERNSB_24gsubgpos_graph_context_tEjj11hb_vector_tIjLb0EEjEUl9hb_pair_tIjjEE_RK4$_17LPv0EERK3$_7L24hb_function_sortedness_t1ELSN_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSV_18is_sorted_iteratorEvE4typeELSN_0EEEbP22hb_serialize_context_tSV_
65 4908 CrapHelper >::get_crap() call site: 04908 _ZN2OT17ClassDefFormat1_3INS_6Layout11MediumTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_6LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_17LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_
61 6287 hb_result_t , graph::graph_error_t>::operator*() && call site: 06287 _ZN11hb_vector_tIN22hb_serialize_context_t8object_t6link_tELb0EE10copy_arrayIS2_TnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEEv10hb_array_tIKS2_E
60 4406 graph::class_def_size_estimator_t::add_class_def_size(unsigned int) call site: 04406 __assert_fail

Runtime coverage analysis

Covered functions
1913
Functions that are reachable but not covered
1872
Reachable functions
6077
Percentage of reachable functions covered
69.2%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc 6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 1
../../src/harfbuzz/src/hb-subset-serialize.cc 1
../../src/harfbuzz/src/hb-vector.hh 329
../../src/harfbuzz/src/hb-algs.hh 253
../../src/harfbuzz/src/hb-common.cc 4
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-null.hh 126
../../src/harfbuzz/src/hb-repacker.hh 10
../../src/harfbuzz/src/graph/graph.hh 139
../../src/harfbuzz/src/hb-debug.hh 4
../../src/harfbuzz/src/graph/../hb-result.hh 239
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 2
../../src/harfbuzz/src/hb-serialize.hh 112
../../src/harfbuzz/src/hb-map.hh 196
../../src/harfbuzz/src/hb-object.hh 33
../../src/harfbuzz/src/hb-atomic.hh 20
../../src/harfbuzz/src/hb-set.hh 34
../../src/harfbuzz/src/hb-bit-set-invertible.hh 36
../../src/harfbuzz/src/hb-bit-set.hh 47
../../src/harfbuzz/src/hb-mutex.hh 3
../../src/harfbuzz/src/hb-array.hh 136
../../src/harfbuzz/src/hb-bit-page.hh 34
../../src/harfbuzz/src/hb-iter.hh 936
../../src/harfbuzz/src/hb-meta.hh 116
../../src/harfbuzz/src/graph/graph-result.hh 1
../../src/harfbuzz/src/graph/../hb-priority-queue.hh 9
../../src/harfbuzz/src/graph/serialize.hh 13
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-set.hh 3
../../src/harfbuzz/src/graph/gsubgpos-context.cc 3
../../src/harfbuzz/src/graph/../hb-map.hh 8
../../src/harfbuzz/src/graph/../hb-object.hh 2
../../src/harfbuzz/src/graph/gsubgpos-graph.hh 29
../../src/harfbuzz/src/graph/../hb-atomic.hh 2
../../src/harfbuzz/src/hb-open-type.hh 91
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 1
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh 1
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh 1
../../src/harfbuzz/src/hb-machinery.hh 4
../../src/harfbuzz/src/graph/gsubgpos-context.hh 3
../../src/harfbuzz/src/graph/../hb-algs.hh 6
../../src/harfbuzz/src/graph/pairpos-graph.hh 32
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh 2
../../src/harfbuzz/src/graph/split-helpers.hh 4
../../src/harfbuzz/src/graph/coverage-graph.hh 19
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh 7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-atomic.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh 10
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh 12
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh 3
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh 5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh 28
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh 1
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh 2
../../src/harfbuzz/src/hb-free-pool.hh 5
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh 14
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh 14
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh 14
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh 2
../../src/harfbuzz/src/graph/classdef-graph.hh 20
../../src/harfbuzz/src/hb-ot-layout-common.hh 5
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh 1
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh 14
../../src/harfbuzz/src/graph/../OT/Layout/Common/RangeRecord.hh 1
../../src/harfbuzz/src/graph/markbasepos-graph.hh 21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh 1
../../src/harfbuzz/src/graph/ligature-graph.hh 22
../../src/harfbuzz/src/hb-blob.cc 7
../../src/harfbuzz/src/hb-blob.hh 3

Fuzzer: hb-shape-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4280 23.7%
gold [1:9] 333 1.84%
yellow [10:29] 224 1.24%
greenyellow [30:49] 101 0.56%
lawngreen 50+ 13075 72.5%
All colors 18013 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
145 17107 hb_ot_metrics_get_variation call site: 17107 hb_ot_metrics_get_variation
115 4375 hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*) call site: 04375 strncmp
60 13776 hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*) call site: 13776 hb_shape_full
59 2572 OT::ArrayOf , void, true>, OT::NumType >::sanitize_shallow(hb_sanitize_context_t*) const call site: 02572 _ZN21hb_sanitize_context_t8dispatchIN2OT24FeatureTableSubstitutionEJEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOS5_
54 2516 bool OT::GSUBGPOS::sanitize (hb_sanitize_context_t*) const call site: 02516 _ZN21hb_sanitize_context_t9_dispatchIN2OT17FeatureVariationsEJEEEDTcldtfp_8sanitizefpTspclsr3stdE7forwardIT0_Efp1_EEERKT_11hb_priorityILj1EEDpOS3_
54 17312 hb_lazy_loader_t , hb_face_t, 7u, OT::post_accelerator_t>::get() const call site: 17312 hb_ot_metrics_get_variation
52 2801 OT::Layout::GPOS_impl::ValueFormat::has_device() const call site: 02801 _ZN21hb_sanitize_context_t8dispatchIN2OT6DeviceEJEEEDTcl9_dispatchfp_cv11hb_priorityILj16EE_Espclsr3stdE7forwardIT0_Efp0_EEERKT_DpOS5_
39 2632 NullHelper > >::get_null() call site: 02632 _ZN21hb_sanitize_context_t9_dispatchIN2OT21LookupVariationRecordEJPKNS1_17FeatureVariationsEEEEDTcldtfp_8sanitizefpTspclsr3stdE7forwardIT0_Efp1_EEERKT_11hb_priorityILj1EEDpOS6_
35 456 hb_ot_face_t::init0(hb_face_t*) call site: 00456
34 13343 hb_lazy_loader_t ::get_unconst() const call site: 13343 hypotf
33 17072 NullHelper ::get_null() call site: 17072 hb_ot_metrics_get_variation
32 5649 hb_array_t ::qsort() call site: 05649 _ZN10hb_array_tIN20hb_aat_map_builder_t15feature_event_tEE5qsortIZNS2_6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EESC_S6_

Runtime coverage analysis

Covered functions
13555
Functions that are reachable but not covered
1712
Reachable functions
19492
Percentage of reachable functions covered
91.22%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc 1
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 6
../../src/harfbuzz/test/fuzzing/hb-shape-input.hh 5
../../src/harfbuzz/src/hb-blob.cc 11
../../src/harfbuzz/src/hb-null.hh 662
../../src/harfbuzz/src/hb-object.hh 119
../../src/harfbuzz/src/hb-common.cc 17
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-blob.hh 142
../../src/harfbuzz/src/hb-atomic.hh 197
../../src/harfbuzz/src/hb-debug.hh 5
../../src/harfbuzz/src/hb-algs.hh 654
../../src/harfbuzz/src/hb-vector.hh 507
../../src/harfbuzz/src/hb-mutex.hh 3
../../src/harfbuzz/src/hb-face.cc 17
../../src/harfbuzz/src/hb-sanitize.hh 688
../../src/harfbuzz/src/hb-dispatch.hh 24
../../src/harfbuzz/src/hb-open-file.hh 25
../../src/harfbuzz/src/hb-open-type.hh 1045
../../src/harfbuzz/src/hb-machinery.hh 1064
../../src/harfbuzz/src/hb-face.hh 5
../../src/harfbuzz/src/hb-shaper.hh 6
../../src/harfbuzz/src/hb-shaper-list.hh 16
../../src/harfbuzz/src/hb-ot-face.hh 1
../../src/harfbuzz/src/hb-ot-face.cc 2
../../src/harfbuzz/src/hb-array.hh 530
../../src/harfbuzz/src/hb-iter.hh 1259
../../src/harfbuzz/src/hb-meta.hh 212
../../src/harfbuzz/src/hb-font.cc 28
../../src/harfbuzz/src/hb-font.hh 57
../../src/harfbuzz/src/hb-static.cc 3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh 13
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh 2
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 14
../../src/harfbuzz/src/hb-ot-var.cc 6
../../src/harfbuzz/src/hb-ot-var-avar-table.hh 4
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh 69
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh 136
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh 5
../../src/harfbuzz/src/hb-ot-layout-common.hh 148
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 2
../../src/harfbuzz/src/hb-ot-shape.cc 38
../../src/harfbuzz/src/hb-fallback-shape.cc 5
../../src/harfbuzz/src/hb-buffer.cc 45
../../src/harfbuzz/src/hb-buffer.hh 52
../../src/harfbuzz/src/hb-set-digest.hh 15
../../src/harfbuzz/src/hb-unicode.cc 19
../../src/harfbuzz/src/hb-ucd.cc 13
../../src/harfbuzz/src/hb-unicode.hh 11
../../src/harfbuzz/src/hb-ucd-table.hh 6
../../src/harfbuzz/src/hb-utf.hh 6
../../src/harfbuzz/src/hb-shape.cc 2
../../src/harfbuzz/src/hb-shape-plan.cc 11
../../src/harfbuzz/src/hb-shape-plan.hh 4
../../src/harfbuzz/src/hb-ot-shape.hh 9
../../src/harfbuzz/src/hb-ot-layout.cc 44
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 675
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh 8
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh 10
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh 10
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh 6
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh 13
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh 6
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh 6
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh 4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh 6
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh 4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh 14
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh 8
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh 6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh 2
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 8
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh 3
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh 11
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh 10
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh 10
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh 8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh 11
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh 10
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh 10
../../src/harfbuzz/src/OT/Layout/GPOS/LigatureArray.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh 8
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 43
../../src/harfbuzz/src/hb-cache.hh 13
../../src/harfbuzz/src/hb-set.hh 21
../../src/harfbuzz/src/hb-bit-set-invertible.hh 21
../../src/harfbuzz/src/hb-bit-set.hh 53
../../src/harfbuzz/src/hb-bit-page.hh 25
../../src/harfbuzz/src/hb-set.cc 6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set-invertible.hh 1
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set.hh 3
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-page.hh 6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh 5
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh 7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh 4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh 1
../../src/harfbuzz/src/hb-shaper.cc 5
../../src/harfbuzz/src/hb-ot-map.hh 21
../../src/harfbuzz/src/hb-aat-map.hh 7
../../src/harfbuzz/src/hb-ot-map.cc 6
../../src/harfbuzz/src/hb-ot-tag.cc 11
../../src/harfbuzz/src/hb-ot-tag-table.hh 1
../../src/harfbuzz/src/hb-aat-layout.cc 18
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 141
../../src/harfbuzz/src/hb-aat-layout-common.hh 254
../../src/harfbuzz/src/hb-ot-shaper.hh 1
../../src/harfbuzz/src/hb-map.hh 21
../../src/harfbuzz/src/hb-aat-map.cc 2
../../src/harfbuzz/src/hb-aat-ltag-table.hh 3
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 114
../../src/harfbuzz/src/hb-ot-kern-table.hh 41
../../src/harfbuzz/src/hb-aat-layout-trak-table.hh 11
../../src/harfbuzz/src/hb-ot-stat-table.hh 7
../../src/harfbuzz/src/hb-ot-layout.hh 50
../../src/harfbuzz/src/hb-unicode-emoji-table.hh 3
../../src/harfbuzz/src/hb-ot-shape-normalize.cc 10
../../src/harfbuzz/src/hb-ot-shape-normalize.hh 1
../../src/harfbuzz/src/hb-ot-shape-fallback.cc 11
../../src/harfbuzz/src/hb-aat-layout-feat-table.hh 17
../../src/harfbuzz/src/hb-aat-layout.hh 1
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-atomic.hh 2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh 2
../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh 2
../../src/harfbuzz/src/hb-kern.hh 20
../../src/harfbuzz/src/hb-paint-extents.hh 12
../../src/harfbuzz/src/hb-geometry.hh 13
../../src/harfbuzz/src/hb-paint-extents.cc 26
../../src/harfbuzz/src/hb-paint.cc 24
../../src/harfbuzz/src/hb-paint.hh 4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh 4
../../src/harfbuzz/src/hb-draw.cc 20
../../src/harfbuzz/src/hb-draw.hh 9
../../src/harfbuzz/src/hb-outline.hh 4
../../src/harfbuzz/src/hb-outline.cc 14
../../src/harfbuzz/src/hb-buffer-verify.cc 5
../../src/harfbuzz/src/hb-cplusplus.hh 5
../../src/harfbuzz/src/hb-buffer-serialize.cc 3
../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c 1
../../src/harfbuzz/src/hb-ot-cmap-table.hh 66
../../src/harfbuzz/src/hb-ot-os2-table.hh 10
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh 3
../../src/harfbuzz/src/hb-ot-color.cc 12
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh 102
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh 13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh 37
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh 74
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh 1
../../src/harfbuzz/src/OT/Color/svg/svg.hh 13
../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh 1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh 23
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh 12
../../src/harfbuzz/src/hb-map.cc 4
../../src/harfbuzz/src/hb-ot-layout-base-table.hh 31
../../src/harfbuzz/src/hb-ot-math.cc 10
../../src/harfbuzz/src/hb-ot-math-table.hh 45
../../src/harfbuzz/src/hb-ot-meta.cc 2
../../src/harfbuzz/src/hb-ot-meta-table.hh 11
../../src/harfbuzz/src/hb-ot-metrics.cc 6
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh 3
../../src/harfbuzz/src/hb-ot-hhea-table.hh 6
../../src/harfbuzz/src/hb-ot-dual.hh 25
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh 6
../../src/harfbuzz/src/hb-ot-post-table.hh 7
../../src/harfbuzz/src/hb-ot-name.cc 7
../../src/harfbuzz/src/OT/name/../../hb-machinery.hh 12
../../src/harfbuzz/src/OT/name/name.hh 19
../../src/harfbuzz/src/OT/name/../../hb-blob.hh 7
../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh 8
../../src/harfbuzz/src/OT/name/../../hb-open-type.hh 4
../../src/harfbuzz/src/hb-ot-name-language-static.hh 4
../../src/harfbuzz/src/OT/name/../../hb-utf.hh 8
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh 6
../../src/harfbuzz/src/OT/glyf/glyf.hh 1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh 4
../../src/harfbuzz/src/hb-subset-plan.hh 1
../../src/harfbuzz/src/hb-ot-cff1-table.hh 8
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh 7
../../src/harfbuzz/src/hb-cff-interp-common.hh 5
../../src/harfbuzz/src/hb-ot-cff2-table.hh 8
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh 3

Fuzzer: hb-subset-fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 14766 26.5%
gold [1:9] 1440 2.59%
yellow [10:29] 1480 2.66%
greenyellow [30:49] 908 1.63%
lawngreen 50+ 36923 66.5%
All colors 55517 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
145 22875 hb_hashmap_t , false>::alloc(unsigned int) call site: 22875
70 23164 _get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*) call site: 23164 _ZorI10hb_array_tIjE24hb_filter_iter_factory_tIZL15_get_table_tagsPK16hb_subset_plan_tjPjS6_E3$_0RK4$_20ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSD_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISD_Efp_EEEOSD_OSJ_
68 45742 hb_vector_t ::alloc_exact(unsigned int) call site: 45742 _ZN11hb_vector_tIN2OT19avar2_offset_knot_tELb0EE10copy_arrayIS1_TnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEEv10hb_array_tIKS1_E
65 31576 hb_result_t , graph::graph_error_t> graph::actuate_subtable_split (graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&) call site: 31576 _ZorI13hb_zip_iter_tI14hb_iota_iter_tIjjEN2OT6Layout6Common8Coverage6iter_tEE24hb_filter_iter_factory_tIR8hb_set_tRK3$_7ETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSH_6item_tEEE5valueEvE4typeELPv0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISH_Efp_EEEOSH_OSN_
62 24298 hb_iter_t ::operator++() & call site: 24298 _ZL12rotate_arrayIbTnPN12hb_enable_ifIXsr3std21is_trivially_copyableIT_EE5valueEvE4typeELPv0EEbRK10hb_array_tIKS1_EiR11hb_vector_tIS1_Lb0EE
50 8740 bool OT::GSUBGPOS::sanitize (hb_sanitize_context_t*) const call site: 08740 _ZN21hb_sanitize_context_t9_dispatchIN2OT17FeatureVariationsEJEEEDTcldtfp_8sanitizefpTspclsr3stdE7forwardIT0_Efp1_EEERKT_11hb_priorityILj1EEDpOS3_
46 41427 hb_iter_t >, OT::NumType , void, true> const> >, hb_pair_t >, OT::NumType , void, true> const&> >::operator*() const call site: 41427 _ZorI13hb_map_iter_tI16hb_filter_iter_tI15hb_range_iter_tIjjEZNK2OT6Layout9GPOS_impl13LigatureArrayINS5_11MediumTypesEE6subsetINS5_6Common8Coverage6iter_tETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSF_6item_tEEE5valueEvE4typeELPv0EEEbP19hb_subset_context_tSF_jPK8hb_map_tR11hb_vector_tIjLb1EEEUljE_RK4$_17LSK_0EEZNKSA_ISD_TnSJ_LSK_0EEEbSM_SF_jSP_SS_EUljE0_L24hb_function_sortedness_t0ELSK_0EERK4$_35TnSJ_LSK_0EEDTclclsr3stdE7forwardIT0_Efp0_Eclsr3stdE7forwardISF_Efp_EEEOSF_OS14_
45 44052 OT::gvar_GVAR * hb_serialize_context_t::allocate_min >() call site: 44052 _ZNK2OT18glyph_variations_tINS_7NumTypeILb1EtLj2EEEE24serialize_glyph_var_dataI17hb_sorted_array_tIK9hb_pair_tIjjEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSB_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tSB_bjPc
43 31526 hb_result_t , graph::graph_error_t>::operator*() && call site: 31526 _ZN11hb_vector_tIN22hb_serialize_context_t8object_t6link_tELb0EE16remove_unorderedILb0ETnPN12hb_enable_ifIXntT_EvE4typeELPv0EEEvj
41 54554 _ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tbEUlS5_E_RK4$_17LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj call site: 54554 _ZN2OT19CmapSubtableFormat49serializeI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tbEUlS5_E_RK4$_17LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEvP22hb_serialize_context_tSI_
40 55419 hb_iter_t , OT::cmap::create_filled_cache(hb_blob_ptr_t )::{lambda(OT::EncodingRecord const&)#1}, $_20 const&, (void*)0>, OT::EncodingRecord const&>::operator++() & call site: 55419 hb_face_set_user_data
39 8791 NullHelper > >::get_null() call site: 08791 _ZN21hb_sanitize_context_t9_dispatchIN2OT21LookupVariationRecordEJPKNS1_17FeatureVariationsEEEEDTcldtfp_8sanitizefpTspclsr3stdE7forwardIT0_Efp1_EEERKT_11hb_priorityILj1EEDpOS6_

Runtime coverage analysis

Covered functions
26255
Functions that are reachable but not covered
7883
Reachable functions
56788
Percentage of reachable functions covered
86.12%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc 6
../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh 6
../../src/harfbuzz/src/hb-blob.cc 15
../../src/harfbuzz/src/hb-null.hh 1178
../../src/harfbuzz/src/hb-object.hh 177
../../src/harfbuzz/src/hb-common.cc 4
../../src/harfbuzz/src/failing-alloc.c 5
../../src/harfbuzz/src/hb-blob.hh 366
../../src/harfbuzz/src/hb-atomic.hh 167
../../src/harfbuzz/src/hb-debug.hh 87
../../src/harfbuzz/src/hb-algs.hh 2875
../../src/harfbuzz/src/hb-vector.hh 1894
../../src/harfbuzz/src/hb-mutex.hh 8
../../src/harfbuzz/src/hb-face.cc 19
../../src/harfbuzz/src/hb-sanitize.hh 793
../../src/harfbuzz/src/hb-dispatch.hh 100
../../src/harfbuzz/src/hb-open-file.hh 28
../../src/harfbuzz/src/hb-open-type.hh 1930
../../src/harfbuzz/src/hb-machinery.hh 953
../../src/harfbuzz/src/hb-face.hh 5
../../src/harfbuzz/src/hb-shaper.hh 6
../../src/harfbuzz/src/hb-shaper-list.hh 12
../../src/harfbuzz/src/hb-ot-face.hh 1
../../src/harfbuzz/src/hb-ot-face.cc 2
../../src/harfbuzz/src/hb-array.hh 1249
../../src/harfbuzz/src/hb-iter.hh 10187
../../src/harfbuzz/src/hb-meta.hh 1182
../../src/harfbuzz/src/hb-set.cc 12
../../src/harfbuzz/src/hb-set.hh 52
../../src/harfbuzz/src/hb-bit-set-invertible.hh 49
../../src/harfbuzz/src/hb-bit-set.hh 73
../../src/harfbuzz/src/hb-ot-cmap-table.hh 164
../../src/harfbuzz/src/hb-static.cc 3
../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh 20
../../src/harfbuzz/src/hb-cache.hh 4
../../src/harfbuzz/src/hb-ot-os2-table.hh 15
../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh 3
../../src/harfbuzz/src/hb-bit-page.hh 46
../../src/harfbuzz/src/hb-subset-input.cc 12
../../src/harfbuzz/src/hb-map.hh 908
../../src/harfbuzz/src/hb-subset-input.hh 9
../../src/harfbuzz/src/hb-cplusplus.hh 28
../../src/harfbuzz/src/hb-shape-plan.cc 2
../../src/harfbuzz/src/hb-shape-plan.hh 2
../../src/harfbuzz/src/hb-ot-shape.hh 3
../../src/harfbuzz/src/hb-ot-shape.cc 3
../../src/harfbuzz/src/hb-ot-map.hh 2
../../src/harfbuzz/src/hb-aat-map.hh 1
../../src/harfbuzz/src/hb-fallback-shape.cc 2
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh 10
../../src/harfbuzz/src/hb-ot-dual.hh 16
../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh 64
../../src/harfbuzz/src/hb-ot-post-table.hh 8
../../src/harfbuzz/src/OT/name/name.hh 14
../../src/harfbuzz/src/hb-ot-meta-table.hh 2
../../src/harfbuzz/src/OT/glyf/glyf.hh 13
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh 35
../../src/harfbuzz/src/hb-subset-plan.hh 100
../../src/harfbuzz/src/hb-ot-cff1-table.hh 93
../../src/harfbuzz/src/hb-cff-interp-dict-common.hh 41
../../src/harfbuzz/src/hb-cff-interp-common.hh 130
../../src/harfbuzz/src/hb-ot-cff2-table.hh 46
../../src/harfbuzz/src/OT/Var/VARC/VARC.hh 10
../../src/harfbuzz/src/hb-ot-kern-table.hh 2
../../src/harfbuzz/src/hb-aat-layout-common.hh 1
../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 4
../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 29
../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 427
../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 7
../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 6
../../src/harfbuzz/src/OT/Color/COLR/COLR.hh 290
../../src/harfbuzz/src/hb-paint-extents.hh 1
../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh 1
../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh 39
../../src/harfbuzz/src/OT/Color/sbix/sbix.hh 10
../../src/harfbuzz/src/OT/Color/svg/svg.hh 3
../../src/harfbuzz/src/hb-ot-var.cc 5
../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 27
../../src/harfbuzz/src/hb-subset-instancer-solver.hh 10
../../src/harfbuzz/src/hb-subset.cc 12
../../src/harfbuzz/src/hb-subset-plan.cc 32
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh 18
../../src/harfbuzz/src/hb-face-builder.cc 10
../../src/harfbuzz/src/hb-serialize.hh 1611
../../src/harfbuzz/src/hb-free-pool.hh 5
../../src/harfbuzz/src/hb-map.cc 4
../../src/harfbuzz/src/hb-subset-accelerator.hh 5
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh 2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh 2
../../src/harfbuzz/src/hb-ot-layout-common.hh 151
../../src/harfbuzz/src/hb-subset-plan-var.cc 13
../../src/harfbuzz/src/hb-ot-var-avar-table.hh 33
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh 110
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh 6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh 30
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh 4
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-set.hh 3
../../src/harfbuzz/src/hb-unicode.cc 19
../../src/harfbuzz/src/hb-ucd.cc 13
../../src/harfbuzz/src/hb-unicode.hh 3
../../src/harfbuzz/src/hb-ucd-table.hh 6
../../src/harfbuzz/src/hb-multimap.hh 6
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh 48
../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh 2
../../src/harfbuzz/src/OT/glyf/loca.hh 1
../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh 3
../../src/harfbuzz/src/hb-ot-cff-common.hh 59
../../src/harfbuzz/src/hb-number.cc 1
../../src/harfbuzz/src/hb-number-parser.hh 2
../../src/harfbuzz/src/hb-subset-cff-common.hh 108
../../src/harfbuzz/src/hb-ot-math-table.hh 45
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh 7
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-atomic.hh 2
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh 10
../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh 12
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh 50
../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh 12
../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh 5
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh 10
../../src/harfbuzz/src/hb-subset-plan-layout.cc 14
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh 11
../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh 14
../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh 12
../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh 10
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh 4
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh 4
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh 14
../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh 10
../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh 6
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh 5
../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh 10
../../src/harfbuzz/src/hb-ot-layout.cc 17
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh 7
../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh 8
../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh 9
../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh 8
../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh 10
../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh 8
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh 14
../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh 1
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh 2
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh 6
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GPOS/LigatureArray.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh 4
../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh 12
../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh 37
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh 11
../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh 2
../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh 1
../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh 16
../../src/harfbuzz/src/hb-bimap.hh 19
../../src/harfbuzz/src/OT/Var/VARC/VARC.cc 2
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh 1
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-meta.hh 1
../../src/harfbuzz/src/hb-ot-stat-table.hh 41
../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh 6
../../src/harfbuzz/src/OT/glyf/Glyph.hh 15
../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh 26
../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh 15
../../src/harfbuzz/src/OT/glyf/composite-iter.hh 8
../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh 1
../../src/harfbuzz/src/hb-ot-cff1-table.cc 10
../../src/harfbuzz/src/hb-cff1-interp-cs.hh 15
../../src/harfbuzz/src/hb-cff-interp-cs-common.hh 262
../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh 2
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/RangeRecord.hh 1
../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh 3
../../src/harfbuzz/src/hb-ot-layout-base-table.hh 52
../../src/harfbuzz/src/hb-font.cc 13
../../src/harfbuzz/src/hb-font.hh 8
../../src/harfbuzz/src/hb-ot-cff2-table.cc 10
../../src/harfbuzz/src/hb-cff2-interp-cs.hh 51
../../src/harfbuzz/src/hb-subset-table.hh 114
../../src/harfbuzz/src/hb-subset-table-layout.cc 1
../../src/harfbuzz/src/hb-subset.hh 364
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh 20
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh 105
../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh 257
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh 2
../../src/harfbuzz/src/hb-subset-instancer-solver.cc 7
../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh 4
../../src/harfbuzz/src/hb-subset-instancer-iup.cc 10
../../src/harfbuzz/src/graph/../hb-priority-queue.hh 17
../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh 34
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh 46
../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh 46
../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/Common/RangeRecord.hh 2
../../src/harfbuzz/src/hb-repacker.hh 10
../../src/harfbuzz/src/graph/graph.hh 139
../../src/harfbuzz/src/graph/../hb-result.hh 239
../../src/harfbuzz/src/graph/graph-result.hh 1
../../src/harfbuzz/src/graph/serialize.hh 13
../../src/harfbuzz/src/graph/gsubgpos-context.cc 3
../../src/harfbuzz/src/graph/../hb-map.hh 6
../../src/harfbuzz/src/graph/../hb-object.hh 1
../../src/harfbuzz/src/graph/gsubgpos-graph.hh 29
../../src/harfbuzz/src/graph/../hb-atomic.hh 2
../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh 57
../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh 2
../../src/harfbuzz/src/graph/gsubgpos-context.hh 3
../../src/harfbuzz/src/graph/../hb-algs.hh 6
../../src/harfbuzz/src/graph/pairpos-graph.hh 32
../../src/harfbuzz/src/graph/split-helpers.hh 4
../../src/harfbuzz/src/graph/coverage-graph.hh 19
../../src/harfbuzz/src/graph/classdef-graph.hh 20
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh 11
../../src/harfbuzz/src/graph/markbasepos-graph.hh 21
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh 5
../../src/harfbuzz/src/graph/ligature-graph.hh 22
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh 17
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh 14
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh 12
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh 6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh 4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh 4
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh 6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh 6
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh 10
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh 16
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh 12
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh 24
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh 6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh 8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh 4
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh 10
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh 6
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh 8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh 2
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh 8
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh 1
../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh 6
../../src/harfbuzz/src/hb-subset-table-var.cc 1
../../src/harfbuzz/src/hb-ot-var-hvar-table.hh 24
../../src/harfbuzz/src/hb-ot-var-gvar-table.hh 32
../../src/harfbuzz/src/hb-ot-var-common.hh 33
../../src/harfbuzz/src/OT/Var/VARC/VARC-subset.hh 14
../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-layout-common.hh 2
../../src/harfbuzz/src/hb-ot-var-cvar-table.hh 7
../../src/harfbuzz/src/hb-ot-var-mvar-table.hh 6
../../src/harfbuzz/src/hb-subset-table-cff.cc 3
../../src/harfbuzz/src/hb-subset-cff1.cc 47
../../src/harfbuzz/src/hb-subset-cff-common.cc 4
../../src/harfbuzz/src/hb-subset-cff2.cc 57
../../src/harfbuzz/src/hb-cff-width-optimizer.hh 9
../../src/harfbuzz/src/hb-cff-specializer.hh 4
../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh 2
../../src/harfbuzz/src/hb-ot-vorg-table.hh 10
../../src/harfbuzz/src/hb-subset-table-color.cc 1
../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh 3
../../src/harfbuzz/src/hb-subset-table-other.cc 1
../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh 8
../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh 4
../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh 4
../../src/harfbuzz/src/hb-ot-hdmx-table.hh 9
../../src/harfbuzz/src/hb-utf.hh 1
../../src/harfbuzz/src/OT/name/../../hb-utf.hh 2
../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh 2
../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh 3
../../src/harfbuzz/src/hb-string-array.hh 1
../../src/harfbuzz/src/hb-ot-head-table.hh 2

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'bool hb_sanitize_context_t::check_array(OT::VarRegionAxis const*, unsigned int) const', 'hb_lazy_loader_t, hb_face_t, 24u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'hb_lazy_loader_t, hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'OT::avar::map_coords_16_16(int*, unsigned int) const', 'hb_gpu_paint_custom_palette_color(hb_paint_funcs_t*, void*, unsigned int, unsigned int*, void*)', 'hb_draw_funcs_t::start_path(void*, hb_draw_state_t&)', 'hb_iter_t, OT::Tag OT::TableRecord::*, (hb_function_sortedness_t)0, (void*)0>, OT::Tag const&>::operator*()']

../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'bool hb_sanitize_context_t::check_array(OT::VarRegionAxis const*, unsigned int) const', 'hb_vector_draw_render_svg(hb_vector_draw_t*)', 'hb_vector_paint_render_svg(hb_vector_paint_t*)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_vector_paint_funcs_lazy_loader_t::create()', 'hb_vector_paint_render_pdf(hb_vector_paint_t*)', 'hb_lazy_loader_t, hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)']

../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_vector_t::alloc(unsigned int, bool)', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const', 'hb_atomic_t::operator hb_face_t::plan_node_t*() const', 'bool hb_sanitize_context_t::check_array(OT::VarRegionAxis const*, unsigned int) const', 'hb_lazy_loader_t, hb_face_t, 24u, OT::kern_accelerator_t>::do_destroy(OT::kern_accelerator_t*)', 'hb_vector_t, false>::alloc(unsigned int, bool)', 'void hb_object_trace(hb_blob_t const*, char const*)', 'hb_lazy_loader_t, hb_face_t, 29u, AAT::morx_accelerator_t>::do_destroy(AAT::morx_accelerator_t*)', 'OT::avar::map_coords_16_16(int*, unsigned int) const']

../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['CrapHelper >::get_crap()', 'hb_result_t, graph::graph_error_t>::~hb_result_t()', 'graph::LigatureSubstFormat1::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)', 'graph::PairPosFormat2::split_subtables(graph::gsubgpos_graph_context_t&, unsigned int)', 'hb_serialize_context_t::check_success(bool, hb_serialize_error_t)', 'hb_iter_t >, graph::Coverage::filter_coverage(graph::gsubgpos_graph_context_t&, unsigned int, unsigned int, unsigned int)::{lambda(hb_pair_t)#1}, $_17 const&, (void*)0>, $_7 const&, (hb_function_sortedness_t)1, ($_17 const&)0>, unsigned int>::operator++() &', 'hb_vector_t::chunk_t*, false>::fini()', 'hb_result_t, graph::graph_error_t>::operator*() &&', 'graph::graph_t::vertex_t::is_shared() const', 'CrapHelper >::get_crap()']

../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_ot_metrics_get_variation', 'hb_ot_tags_from_complex_language(char const*, char const*, unsigned int*, unsigned int*)', 'hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)', 'OT::ArrayOf, void, true>, OT::NumType >::sanitize_shallow(hb_sanitize_context_t*) const', 'bool OT::GSUBGPOS::sanitize(hb_sanitize_context_t*) const', 'hb_lazy_loader_t, hb_face_t, 7u, OT::post_accelerator_t>::get() const', 'OT::Layout::GPOS_impl::ValueFormat::has_device() const', 'NullHelper > >::get_null()', 'hb_ot_face_t::init0(hb_face_t*)', 'hb_lazy_loader_t::get_unconst() const']

../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['hb_hashmap_t, false>::alloc(unsigned int)', '_get_table_tags(hb_subset_plan_t const*, unsigned int, unsigned int*, unsigned int*)', 'hb_vector_t::alloc_exact(unsigned int)', 'hb_result_t, graph::graph_error_t> graph::actuate_subtable_split(graph::MarkBasePosFormat1::split_context_t&, hb_vector_t const&)', 'hb_iter_t::operator++() &', 'bool OT::GSUBGPOS::sanitize(hb_sanitize_context_t*) const', 'hb_iter_t >, OT::NumType, void, true> const> >, hb_pair_t >, OT::NumType, void, true> const&> >::operator*() const', 'OT::gvar_GVAR* hb_serialize_context_t::allocate_min >()', 'hb_result_t, graph::graph_error_t>::operator*() &&', '_ZNK2OT14EncodingRecord4copyI16hb_filter_iter_tI17hb_sorted_array_tIK9hb_pair_tIjjEEZNKS_4cmap6subsetEP19hb_subset_context_tbEUlS5_E_RK4$_17LPv0EETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSI_6item_tEEE5valueEvE4typeELSF_0EEEPS0_P22hb_serialize_context_tSI_jPKvPK16hb_subset_plan_tPj']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
hb_font_t::draw_glyph_or_fail(unsignedint,hb_draw_funcs_t*,void*,bool) 43 13 30.23% ['hb-shape-fuzzer', 'hb-vector-fuzzer', 'hb-gpu-fuzzer', 'hb-raster-fuzzer']
hb_raster_draw_render 131 29 22.13% ['hb-raster-fuzzer']
hb_raster_paint_solid(hb_raster_paint_t*,hb_raster_image_t*,unsignedint,hb_raster_image_t*) 80 36 45.0% ['hb-raster-fuzzer']
hb_raster_paint_finalize_path_clip(hb_raster_paint_t*,hb_raster_draw_t*,hb_raster_image_t*,unsignedint,unsignedint) 117 47 40.17% ['hb-raster-fuzzer']
hb_raster_paint_image(hb_paint_funcs_t*,void*,hb_blob_t*,unsignedint,unsignedint,unsignedint,float,hb_glyph_extents_t*,void*) 128 16 12.5% ['hb-raster-fuzzer']
graph::MarkBasePosFormat1::split_subtables(graph::gsubgpos_graph_context_t&,unsignedint) 48 9 18.75% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
graph::MarkBasePosFormat1::get_class_info(graph::gsubgpos_graph_context_t&,unsignedint) 33 11 33.33% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
graph::print_overflows(graph::graph_t&,hb_vector_t const&) 31 2 6.451% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_bit_storage (unsignedint) 49 5 10.20% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_ctz (unsignedlong) 48 8 16.66% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_ctz (unsignedlonglong) 48 8 16.66% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_popcount (unsignedlonglong) 35 7 20.0% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
unsignedinthb_bit_storage (unsignedlonglong) 49 8 16.32% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_bit_set_invertible_t::next_bits(unsignedint*,unsignedlong*)const 37 3 8.108% ['hb-shape-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedint&&,unsignedint,hb_vector_t &&,bool) 51 28 54.90% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_hashmap_t ::alloc(unsignedint) 42 23 54.76% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,unsignedint&&,bool) 51 28 54.90% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (graph::overflow_record_t&&,unsignedint,bool&&,bool) 51 28 54.90% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedintconst&,unsignedint,unsignedintconst&,bool) 51 28 54.90% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,graph::Lookup*&&,bool) 51 28 54.90% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 20 48.78% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const 107 51 47.66% ['hb-shape-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::apply(OT::hb_ot_apply_context_t*,void*)const 107 51 47.66% ['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Ligature ::apply(OT::hb_ot_apply_context_t*)const 69 34 49.27% ['hb-shape-fuzzer']
OT::Layout::GSUB_impl::LigatureSet ::apply(OT::hb_ot_apply_context_t*,hb_set_digest_tconst*)const 59 11 18.64% ['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const 75 31 41.33% ['hb-shape-fuzzer']
OT::Layout::GSUB_impl::Sequence ::apply(OT::hb_ot_apply_context_t*)const 75 31 41.33% ['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf16_xe_t >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*) 31 16 51.61% ['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf16_xe_t ::codepoint_t*) 31 16 51.61% ['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >,hb_utf32_xe_t >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*) 31 16 51.61% ['hb-shape-fuzzer']
unsignedintOT::hb_ot_name_convert_utf >(hb_array_t ,unsignedint*,hb_utf32_xe_t ::codepoint_t*) 31 16 51.61% ['hb-shape-fuzzer']
hb_aat_map_builder_t::compile(hb_aat_map_t&) 67 6 8.955% ['hb-shape-fuzzer']
unsignedinthb_ctz (unsignedint) 48 5 10.41% ['hb-shape-fuzzer']
unsignedinthb_popcount (hb_glyph_flags_t) 35 4 11.42% ['hb-shape-fuzzer']
_ZL13hb_qsort_loopIN11hb_ot_map_t13feature_map_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_ 37 3 8.108% ['hb-shape-fuzzer']
OT::ChainRuleSetOf >::apply(OT::hb_ot_apply_context_t*,OT::ChainContextApplyLookupContextconst&,OT::hb_ot_layout_ruleset_digest_tconst*)const 125 16 12.8% ['hb-shape-fuzzer']
OT::GDEF::is_blocklisted(hb_blob_t*,hb_face_t*)const 49 8 16.32% ['hb-shape-fuzzer']
_hb_ot_metrics_get_position_common(hb_font_t*,hb_ot_metrics_tag_t,int*) 39 15 38.46% ['hb-shape-fuzzer']
hb_ot_metrics_get_position 93 12 12.90% ['hb-shape-fuzzer']
hb_ensure_native_direction(hb_buffer_t*) 33 8 24.24% ['hb-shape-fuzzer']
arabic_fallback_plan_init_win1256(arabic_fallback_plan_t*,hb_ot_shape_plan_tconst*,hb_font_t*) 31 9 29.03% ['hb-shape-fuzzer']
hb_ot_tags_from_complex_language(charconst*,charconst*,unsignedint*,unsignedint*) 1216 67 5.509% ['hb-shape-fuzzer']
hb_ot_tags_from_script_and_language 45 24 53.33% ['hb-shape-fuzzer']
parse_private_use_subtag(charconst*,unsignedint*,unsignedint*,charconst*,unsignedchar(*)(unsignedchar)) 32 2 6.25% ['hb-shape-fuzzer']
hb_ot_tags_from_language(charconst*,charconst*,unsignedint*,unsignedint*) 100 26 26.0% ['hb-shape-fuzzer']
hb_shapers_lazy_loader_t::create() 32 4 12.5% ['hb-shape-fuzzer']
hb_utf8_t::next(unsignedcharconst*,unsignedcharconst*,unsignedint*,unsignedint) 56 6 10.71% ['hb-shape-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-shape-fuzzer']
OT::COLR::subset_varstore(hb_subset_context_t*,OT::COLR*)const 52 19 36.53% ['hb-subset-fuzzer']
_ZN2OT6Layout6Common8Coverage9serializeI13hb_map_iter_tIS4_I16hb_filter_iter_tI13hb_zip_iter_tINS2_6iter_tE10hb_array_tIKNS0_9GPOS_impl15EntryExitRecordINS0_11MediumTypesEEEEERK8hb_set_tRK3$_7LPv0EEZNKS9_19CursivePosFormat1_2ISB_E6subsetEP19hb_subset_context_tEUl9hb_pair_tIjRSD_EE_L24hb_function_sortedness_t1ELSM_0EESL_LSW_1ELSM_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrS10_18is_sorted_iteratorEvE4typeELSM_0EEEbP22hb_serialize_context_tS10_ 37 18 48.64% ['hb-subset-fuzzer']
OT::Layout::GPOS_impl::PairPosFormat2_4 ::collect_variation_indices(OT::hb_collect_variation_indices_context_t*)const 41 2 4.878% ['hb-subset-fuzzer']
OT::NameRecord::copy(hb_serialize_context_t*,voidconst*,hb_hashmap_t ,false>const*)const 52 16 30.76% ['hb-subset-fuzzer']
hb_result_t graph::ClassDef::make_class_def ,graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(unsignedint)#2},$_6const&,(hb_function_sortedness_t)0>,graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(hb_pair_t )#1},(graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(unsignedint)#1})1,(hb_function_sortedness_t)0>>(graph::gsubgpos_graph_context_t&,hb_map_iter_t ,graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(unsignedint)#2},$_6const&,(hb_function_sortedness_t)0>,graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(hb_pair_t )#1},(graph::PairPosFormat2::clone_range(graph::PairPosFormat2::split_context_t&,unsignedint,unsignedint)const::{lambda(unsignedint)#1})1,(hb_function_sortedness_t)0>,unsignedint,unsignedint) 31 17 54.83% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_result_t graph::ClassDef::make_class_def ,graph::PairPosFormat2::shrink(graph::PairPosFormat2::split_context_t&,unsignedint)::{lambda(unsignedint)#2},$_6const&,(hb_function_sortedness_t)0>>(graph::gsubgpos_graph_context_t&,hb_filter_iter_t ,graph::PairPosFormat2::shrink(graph::PairPosFormat2::split_context_t&,unsignedint)::{lambda(unsignedint)#2},$_6const&,(hb_function_sortedness_t)0>,unsignedint,unsignedint) 31 17 54.83% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
voidhb_qsort_loop ,OT::avarconst*,bool)::$_0>(double*,unsignedlong,_compute_avar2_reachable_ranges(hb_subset_plan_t*,hb_array_t ,OT::avarconst*,bool)::$_0) 37 3 8.108% ['hb-subset-fuzzer']
voidhb_qsort_loop >,OT::item_variations_t::instantiate_condition_values(hb_subset_plan_tconst*,OT::ItemVariationStoreconst&)::{lambda(hb_pair_t >const&,hb_pair_t >const&)#1}>(hb_pair_t >*,unsignedlong,OT::item_variations_t::instantiate_condition_values(hb_subset_plan_tconst*,OT::ItemVariationStoreconst&)::{lambda(hb_pair_t >const&,hb_pair_t >const&)#1}) 37 3 8.108% ['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT20delta_row_encoding_tEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_ 37 3 8.108% ['hb-subset-fuzzer']
_ZL13hb_qsort_loopIN2OT12AxisValueMapEZN10hb_array_tIS1_E6_qsortIS1_TnPN12hb_enable_ifIXsr3std18is_move_assignableIT_EE5valueEvE4typeELPv0EEE17hb_sorted_array_tIS1_E11hb_priorityILj1EEEUlRKS1_SG_E_EvPS6_mT0_ 37 3 8.108% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedintconst&,unsignedint,unsignedintconst&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,int&&,bool) 51 25 49.01% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,Triple&&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedlong&&,unsignedint,hb_pair_t &&,bool) 51 25 49.01% ['hb-subset-fuzzer']
hb_hashmap_t ,false>::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ,unsignedint,false>::set_with_hash const&,int>(hb::shared_ptr const&,unsignedint,int&&,bool) 51 25 49.01% ['hb-subset-fuzzer']
hb_hashmap_t ,unsignedint,false>::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash &>(unsignedintconst&,unsignedint,hb::shared_ptr &,bool) 51 25 49.01% ['hb-subset-fuzzer']
hb_hashmap_t ,false>::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
hb_hashmap_t ::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedlongconst&,unsignedint,hb_pair_t &&,bool) 51 25 49.01% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedlongconst&,unsignedint,hb_pair_t &&,bool) 51 25 49.01% ['hb-subset-fuzzer']
boolhb_hashmap_t const*,unsignedint,false>::set_with_hash const*,unsignedint>(hb_vector_t const*&&,unsignedint,unsignedint&&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t const>,unsignedint,false>::set_with_hash const>,unsignedint>(hb_array_t const>&&,unsignedint,unsignedint&&,bool) 51 27 52.94% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedint&&,unsignedint,hb_pair_t &&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,face_table_info_t&&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (hb_ot_name_record_ids_t&&,unsignedint,unsignedint&&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ,unsignedint,true>::set_with_hash const&,unsignedint&>(hb_array_t const&,unsignedint,unsignedint&,bool) 51 27 52.94% ['hb-subset-fuzzer']
boolhb_hashmap_t const*,unsignedint,false>::set_with_hash const*,unsignedint>(hb_vector_t const*&&,unsignedint,unsignedint&&,bool) 51 27 52.94% ['hb-subset-fuzzer']
boolhb_hashmap_t const*,hb_vector_t ,false>::set_with_hash const*,hb_vector_t >(hb_vector_t const*&&,unsignedint,hb_vector_t &&,bool) 51 27 52.94% ['hb-subset-fuzzer']
hb_hashmap_t ,false>::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedintconst&,unsignedint,hb_pair_t &&,bool) 51 25 49.01% ['hb-subset-fuzzer']
hb_hashmap_t ,false>::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedintconst&,unsignedint,double&&,bool) 51 25 49.01% ['hb-subset-fuzzer']
hb_hashmap_t ::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
hb_hashmap_t ::alloc(unsignedint) 42 23 54.76% ['hb-subset-fuzzer']
boolhb_hashmap_t ::set_with_hash (unsignedint&&,unsignedint,contour_point_vector_t&&,bool) 51 28 54.90% ['hb-subset-fuzzer']
boolhb_hashmap_t ,false>::set_with_hash >(unsignedint&&,unsignedint,hb_array_t &&,bool) 51 25 49.01% ['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EjLj4EEEE16serialize_headerI10hb_array_tIKS5_IKhEETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NSB_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tSB_jj 75 30 40.0% ['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIKjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS9_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS9_jj 75 41 54.66% ['hb-subset-fuzzer']
_ZN2OT8CFFIndexINS_7NumTypeILb1EtLj2EEEE16serialize_headerI10hb_array_tIjETnPN12hb_enable_ifIXsr17hb_is_iterator_ofIT_NS8_6item_tEEE5valueEvE4typeELPv0EEEbP22hb_serialize_context_tS8_jj 75 30 40.0% ['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const 83 17 20.48% ['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const 83 8 9.638% ['hb-subset-fuzzer']
OT::hmtxvmtx ::subset_update_header(hb_subset_context_t*,unsignedint,hb_hashmap_t ,false>const*,hb_vector_t const&)const 83 8 9.638% ['hb-subset-fuzzer']
OT::Condition::serialize(hb_serialize_context_t*,OT::Conditionconst*,hb_map_tconst&) 68 37 54.41%
OT::ClassDefFormat2_4 ::intersected_class_glyphs(hb_set_tconst*,unsignedint,hb_set_t*)const 42 10 23.80% ['hb-subset-fuzzer']
_ZN2OT8ClassDef9serializeI13hb_map_iter_tI16hb_filter_iter_tIS2_INS_6Layout6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNS9_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKS9_11clone_rangeESB_jjEUljE0_RK3$_6LSE_0EEZNKS9_11clone_rangeESB_jjEUl9hb_pair_tIjjEE_LSD_1ELSE_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSQ_18is_sorted_iteratorEvE4typeELSE_0EEEbP22hb_serialize_context_tSQ_ 65 14 21.53% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
_ZN2OT17ClassDefFormat2_4INS_6Layout10SmallTypesEE9serializeI16hb_filter_iter_tI13hb_map_iter_tIS5_IS6_INS1_6Common8Coverage6iter_tEZNK5graph14PairPosFormat211clone_rangeERNSB_15split_context_tEjjEUljE_L24hb_function_sortedness_t1ELPv0EEZNKSB_11clone_rangeESD_jjEUljE0_RK3$_6LSG_0EEZNKSB_11clone_rangeESD_jjEUl9hb_pair_tIjjEE_LSF_1ELSG_0EESL_RK4$_20LSG_0EETnPN12hb_enable_ifIXaasr15hb_is_source_ofIT_jEE5valuesrSW_18is_sorted_iteratorEvE4typeELSG_0EEEbP22hb_serialize_context_tSW_ 46 9 19.56% ['hb-subset-fuzzer']
OT::ChainContextFormat2_5 ::closure(OT::hb_closure_context_t*)const 33 3 9.090% ['hb-subset-fuzzer']
voidOT::context_closure_recurse_lookups >(OT::hb_closure_context_t*,unsignedint,OT::NumType const*,unsignedint,OT::LookupRecordconst*,unsignedint,OT::ContextFormat,voidconst*,void(*)(hb_set_tconst*,voidconst*,unsignedint,hb_set_t*,void*),void*) 54 5 9.259% ['hb-subset-fuzzer']
OT::avar::avar2_index_map_plan_t::init(hb_vector_t const&,hb_map_tconst&,unsignedint) 36 9 25.0% ['hb-subset-fuzzer']
OT::avar::_subset_avar2(hb_subset_context_t*,hb_vector_t ,false>const&)const 278 83 29.85% ['hb-subset-fuzzer']
OT::TupleVariationData >::cull_tuple_variations(hb_array_t ,unsignedint,hb_array_t ,14u>const>,hb_map_tconst*,hb_hashmap_t const&,hb_vector_t &,bool*)const 74 13 17.56% ['hb-subset-fuzzer']
OT::glyph_variations_t >::compile_shared_tuples(hb_map_tconst&,hb_map_tconst&) 37 8 21.62% ['hb-subset-fuzzer']
OT::glyph_variations_t >::compile_shared_tuples(hb_map_tconst&,hb_map_tconst&) 37 8 21.62% ['hb-subset-fuzzer']
boolOT::HVARVVAR::_subset (hb_subset_context_t*)const 50 27 54.0% ['hb-subset-fuzzer']
bool_collect_instanced_lookup_variations (hb_subset_plan_t*,OT::Layout::GSUBconst&,hb_hashmap_t ,false>*) 33 18 54.54% ['hb-subset-fuzzer']
bool_collect_instanced_lookup_variations (hb_subset_plan_t*,OT::Layout::GPOSconst&,hb_hashmap_t ,false>*) 33 18 54.54% ['hb-subset-fuzzer']
_create_old_gid_to_new_gid_map(hb_face_tconst*,bool,hb_set_tconst*,hb_map_tconst*,hb_map_t*,hb_map_t*,hb_vector_t ,true>*,unsignedint*) 73 36 49.31% ['hb-subset-fuzzer']
hb_vector_t const*,false>const&)::delta_size_t,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t >,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,void,true>*,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t >,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-repacker-fuzzer', 'hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t >::tuple_variations_t,false>::alloc(unsignedint,bool) 41 20 48.78% ['hb-subset-fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 20 48.78% ['hb-subset-fuzzer']
hb_vector_t ,false>::alloc(unsignedint,bool) 41 22 53.65% ['hb-subset-fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/failing-alloc.c ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-specializer.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-cff2.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-map.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-atomic.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-gpu-fuzzer.cc ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-input.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/RangeRecord.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-post-table-v2subset.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat2.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hhea-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.cc ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-algs.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hangul.cc [] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC-subset.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/../../hb-depend-data.hh [] []
/work/build/../../src/harfbuzz/src/hb-unicode.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-cs-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-common.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-math-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var-hvar-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-machinery.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubstFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shaper.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/svg/svg.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint-bounded.cc [] []
/work/build/../../src/harfbuzz/src/hb-raster-paint.cc ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ucd.cc ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/Coverage.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-sanitize.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-joining-list.hh [] []
/work/build/../../src/harfbuzz/src/hb-set.cc ['hb-vector-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-face-builder.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/glyf-helpers.hh ['hb-subset-fuzzer'] []
/work/build/hb-buffer-deserialize-json.rl [] []
/work/build/../../src/harfbuzz/src/hb-kern.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkArray.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-metrics.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-dispatch.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat1.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-bit-set-invertible.hh ['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-blob.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-set.hh ['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-serialize.cc ['hb-repacker-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-instancer-iup.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-maxp-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-cache.hh [] []
/work/build/../../src/harfbuzz/src/hb-paint-extents.cc ['hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-utf.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh ['hb-shape-fuzzer'] []
/work/build/hb-ot-shaper-indic-machine.rl [] []
/work/build/../../src/harfbuzz/src/graph/../hb-map.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-raster-paint.hh ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-shape-fuzzer.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-os2-unicode-ranges.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-plan.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubstFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-raster-fuzzer.cc ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-decycler.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-layout-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-atomic.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-hdmx-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/loca.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-ot-cff-common.hh [] []
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-number-parser.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-machinery.hh [] []
/work/build/../../src/harfbuzz/src/hb-bit-page.hh ['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use.cc [] []
/work/build/../../src/harfbuzz/src/hb-map.cc ['hb-gpu-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-buffer.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-null.hh [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubst.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/serialize.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-machinery.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-debug.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/LigatureArray.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-fallback.hh [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSubst.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/glyf.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-open-file.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table-layout.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-object.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shaper.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairSet.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat2.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-iter.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-name-language-static.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSubst.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/graph-result.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkBasePosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-map.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/CPAL.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-hvar-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/ligature-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-myanmar.cc [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-post-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat2.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-hmtx-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-paint.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use-table.hh [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/MultipleSubstFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-meta.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-string-array.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/colrv1-closure.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-path.hh ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-machinery.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff1-interp-cs.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/Glyph.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-set.hh ['hb-vector-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-buf.hh ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-open-type.hh ['hb-subset-fuzzer'] []
/work/build/hb-ot-shaper-khmer-machine.rl [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-serialize.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubst.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/hb-buffer-deserialize-text-glyphs.rl [] []
/work/build/../../src/harfbuzz/src/graph/classdef-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-open-type.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-cff1.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairValueRecord.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/gsubgpos-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-gsubgpos.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table-other.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/VARC.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/RangeRecord.hh [] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set.hh ['hb-vector-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-mutex.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-name.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint-extents.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-multimap.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-open-type.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-free-pool.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-gpu-paint.hh ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-static.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-draw.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-array.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-base-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-ot-layout-common.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-vector-fuzzer.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-unicode.cc ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var-mvar-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-bit-set.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table-cff.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff2-interp-cs.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-object.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-gpu-paint.cc ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-vector.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-input.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-raster-draw.cc ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-meta.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cmap-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/glyf.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-ot-var-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint-bounded.hh [] []
/work/build/../../src/harfbuzz/src/hb-vector-paint-svg.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-plan-var.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-map.cc ['hb-shape-fuzzer'] []
/work/build/hb-ot-shaper-use-machine.rl [] []
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-width-optimizer.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-draw.hh ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/Coverage.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-outline.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-gpu-draw.cc ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/sbix/sbix.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-face.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-bounded.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PairPosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-priority-queue.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-algs.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-subset-instancer-iup.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/Coverage.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cplusplus.hh ['hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-font.cc [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-null.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-meta.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/RangeRecord.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-common.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-repacker-fuzzer.cc ['hb-repacker-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-repacker.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/GDEF.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-meta-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-blob.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-draw.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-instancer-solver.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-font.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-utf.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/Coverage.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-geometry.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-path.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-raster-image.hh ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat2.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/split-helpers.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-paint.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-cff2-to-cff1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-plan-layout.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-fuzzer.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/hb-subset-fuzzer.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/LigatureSet.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubst.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-map.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-font.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-blob.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-iter.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-sanitize.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-face.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat2.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-set-digest.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-blob.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-internal.hh ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorFormat3.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-face.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-page.hh ['hb-vector-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/test/fuzzing/../api/test-ot-face.c ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/CoverageFormat2.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/markbasepos-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-open-type.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-bit-set-invertible.hh ['hb-vector-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-gpu-draw.hh ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-blob.hh [] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-machinery.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-algs.hh ['hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-gpu-cu2qu.hh ['hb-gpu-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/RangeRecord.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/pairpos-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-vorg-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-iter.hh [] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-dict-common.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table-color.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/CoverageFormat1.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/path-builder.hh [] []
/work/build/../../src/harfbuzz/src/graph/coverage-graph.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkLigPos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-meta.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-paint.hh ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-cvar-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkRecord.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../hb-alloc-pool.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-draw.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-stat-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-number.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/LigatureArray.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-sanitize.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Sequence.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-thai.cc [] []
/work/build/../../src/harfbuzz/src/hb-geometry.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-dual.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/SubsetGlyph.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-plan.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hebrew.cc [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/ValueFormat.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/hb-buffer-deserialize-text-unicode.rl [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-gvar-table.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-table-var.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../hb-map.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-khmer.cc [] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shape.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SingleSubstFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/MarkMarkPos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/COLR.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-cff-common.cc ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic-table.cc [] []
/work/build/../../src/harfbuzz/src/OT/name/name.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/Ligature.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/CursivePos.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-syllabic.cc [] []
/work/build/../../src/harfbuzz/src/graph/../hb-debug.hh [] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/SinglePosFormat1.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-bimap.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-layout-common.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/AlternateSet.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/gsubgpos-context.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../hb-result.hh ['hb-repacker-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-color.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-common.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-vector-paint-pdf.cc ['hb-vector-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-vowel-constraints.cc [] []
/work/build/../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/PosLookupSubTable.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/SubstLookupSubTable.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/CoverageFormat2.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cache.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-raster-image.cc ['hb-raster-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-accelerator.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-null.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-hhea-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../hb-array.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-map.cc ['hb-shape-fuzzer'] []
/work/build/hb-ot-shaper-myanmar-machine.rl [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh ['hb-repacker-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/composite-iter.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-outline.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/Var/VARC/coord-setter.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-os2-table.hh ['hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-buffer.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/CoverageFormat2.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-face.cc ['hb-gpu-fuzzer', 'hb-vector-fuzzer', 'hb-raster-fuzzer', 'hb-shape-fuzzer', 'hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/Anchor.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-math.cc ['hb-shape-fuzzer'] []
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/AnchorMatrix.hh ['hb-subset-fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-subset-input.hh ['hb-subset-fuzzer'] []

Directories in report

Directory
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/
/work/build/../../src/harfbuzz/test/fuzzing/../api/
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/
/work/build/../../src/harfbuzz/src/graph/../
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/test/fuzzing/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/graph/
/work/build/../../src/harfbuzz/src/OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/glyf/../../
/work/build/../../src/harfbuzz/src/
/work/build/../../src/harfbuzz/src/OT/Color/svg/
/work/build/../../src/harfbuzz/src/OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../
/work/build/../../src/harfbuzz/src/OT/name/../../
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../
/work/build/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/
/work/build/../../src/harfbuzz/src/OT/Var/VARC/../../../OT/glyf/../../
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../CPAL/
/work/build/../../src/harfbuzz/src/graph/../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Color/sbix/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/name/