Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Project coverage
Per-fuzzer coverage

Table of contents

Project overview: hdf5
High level conclusions
Reachability and coverage overview
Fuzzers overview
Project functions overview
Fuzzer details
Fuzzer: h5_read_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Fuzzer: h5_extended_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Analyses and suggestions
Optimal target analysis
Remaining optimal interesting functions
All functions overview
Fuzz engine guidance
/src/h5_read_fuzzer.c
Dictionary
Fuzzer function priority
/src/h5_extended_fuzzer.c
Dictionary
Fuzzer function priority
Runtime coverage analysis
Complex functions with low coverage
Files and Directories in report
Files in report
Directories in report
Metadata section
Report generation date: 2025-11-03

Project overview: hdf5

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
25.0%
1313 / 5307
Cyclomatic complexity statically reachable by fuzzers
49.0%
45597 / 92551
Runtime code coverage of functions
13.0%
713 / 5307

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
h5_read_fuzzer /src/h5_read_fuzzer.c 1341 4015 111 127 113214 45537 h5_read_fuzzer.c
h5_extended_fuzzer /src/h5_extended_fuzzer.c 1358 4055 111 131 113564 45691 h5_extended_fuzzer.c

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: h5_read_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7399 100.%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 0 0.0%
All colors 7399 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
7398 0 EP call site: 00000 H5Fopen

Runtime coverage analysis

Covered functions
0
Functions that are reachable but not covered
1341
Reachable functions
1341
Percentage of reachable functions covered
0.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/h5_read_fuzzer.c 1
H5F.c 4
H5.c 7
H5Eint.c 16
H5CX.c 19
H5Iint.c 23
H5FL.c 39
H5Pint.c 31
H5MM.c 5
H5SL.c 23
H5checksum.c 3
H5ESint.c 1
H5Lint.c 4
H5Aint.c 5
H5Dint.c 8
H5Gint.c 7
H5M.c 4
H5S.c 7
H5T.c 38
H5Tdbg.c 1
H5Tinit_float.c 7
H5Oint.c 27
H5Gname.c 3
H5Omessage.c 32
H5Tnative.c 2
H5Tcomplex.c 1
H5VLint.c 31
H5Tfields.c 3
H5Tvlen.c 4
H5VLcallback.c 17
H5Tref.c 2
H5Fquery.c 24
H5Rint.c 5
H5Sselect.c 3
H5RS.c 2
H5Tarray.c 1
H5Tconv_integer.c 154
H5Tbit.c 9
H5Tconv.c 5
H5WB.c 3
H5Tconv_complex.c 52
H5Tconv_float.c 51
H5Tconv_string.c 1
H5Tconv_bitfield.c 1
H5Tconv_compound.c 4
H5FO.c 8
H5AC.c 29
H5Ctag.c 9
H5C.c 7
H5Centry.c 29
H5Cimage.c 20
H5Fio.c 2
H5Fint.c 18
H5PB.c 11
H5Faccum.c 6
H5VMprivate.h 3
H5FDint.c 8
H5FD.c 9
H5FDcore.c 2
H5FDfamily.c 2
H5FDlog.c 2
H5FDmulti_int.c 2
H5FDonion.c 2
H5FDsec2.c 2
H5FDsplitter.c 2
H5FDstdio_int.c 2
H5Cint.c 14
H5MF.c 24
H5MFsection.c 2
H5FS.c 15
H5Clog.c 19
H5FSsection.c 26
H5Cquery.c 3
H5Fspace.c 3
H5FDspace.c 6
H5Fsuper.c 8
H5ACproxy_entry.c 6
H5timer.c 1
H5MFaggr.c 9
H5Ochunk.c 7
H5SM.c 19
H5B2.c 9
H5B2hdr.c 12
H5B2int.c 13
H5B2internal.c 6
H5B2leaf.c 7
H5HF.c 8
H5HFhdr.c 20
H5HFdtable.c 6
H5Z.c 9
H5Opline.c 1
H5HFiter.c 9
H5HFhuge.c 9
H5HFtiny.c 6
H5HFspace.c 8
H5HFiblock.c 15
H5HFdblock.c 6
H5SMmessage.c 2
H5HFman.c 4
H5HFbtree2.c 6
H5PLint.c 6
H5PLplugin_cache.c 5
H5PLpath.c 10
H5Oalloc.c 17
H5HFsection.c 27
H5Fmount.c 3
H5Tcommit.c 3
H5Tconv_enum.c 4
H5FSstat.c 1
H5Fefc.c 6
H5Fsfile.c 2
H5Groot.c 1
H5Gnode.c 1
H5UC.c 1
H5Tconv_vlen.c 2
H5Tconv_array.c 1
H5Tconv_reference.c 1
H5Oshared.c 1
H5system.c 1
H5Tcompound.c 4
H5VLnative.c 2
H5VLpassthru_int.c 2
H5VLdyn_ops.c 4
H5Lexternal.c 1
H5FSint.c 1
H5Pfapl.c 5
H5Ffake.c 2

Fuzzer: h5_extended_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 5776 77.0%
gold [1:9] 1343 17.9%
yellow [10:29] 202 2.69%
greenyellow [30:49] 28 0.37%
lawngreen 50+ 146 1.94%
All colors 7495 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
382 3968 H5F_addr_encode call site: 03968 H5B2_insert
326 3641 H5O__alloc_msgs call site: 03641 H5O__chunk_unprotect
314 4451 H5MF_free_aggrs call site: 04451 H5MF__open_fstype
278 3230 H5O_msg_reset call site: 03230 H5HF__hdr_protect
249 198 H5E__init_package call site: 00198 H5I_register
246 2440 H5FL_seq_free call site: 02440 H5MF_alloc
207 2997 H5FL_fac_term call site: 02997 H5MF_alloc
116 3524 H5PL__create_path_table call site: 03524 H5_user_cb_prepare
108 4789 H5MF__close_shrink_eoa call site: 04789 H5F__super_ext_write_msg
105 7389 H5E_dump_api_stack call site: 07389 H5Dopen2
98 85 H5I__register call site: 00085 H5I_register
98 6524 H5F__dest call site: 06524 H5F__efc_release_real

Runtime coverage analysis

Covered functions
715
Functions that are reachable but not covered
814
Reachable functions
1358
Percentage of reachable functions covered
40.06%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/h5_extended_fuzzer.c 1
H5F.c 4
H5.c 7
H5Eint.c 16
H5CX.c 19
H5Iint.c 25
H5FL.c 39
H5Pint.c 31
H5MM.c 5
H5SL.c 23
H5checksum.c 3
H5ESint.c 1
H5Lint.c 4
H5Aint.c 5
H5Dint.c 8
H5Gint.c 7
H5M.c 4
H5S.c 7
H5T.c 38
H5Tdbg.c 1
H5Tinit_float.c 7
H5Oint.c 27
H5Gname.c 3
H5Omessage.c 32
H5Tnative.c 2
H5Tcomplex.c 1
H5VLint.c 32
H5Tfields.c 3
H5Tvlen.c 4
H5VLcallback.c 25
H5Tref.c 2
H5Fquery.c 24
H5Rint.c 5
H5Sselect.c 3
H5RS.c 2
H5Tarray.c 1
H5Tconv_integer.c 154
H5Tbit.c 9
H5Tconv.c 5
H5WB.c 3
H5Tconv_complex.c 52
H5Tconv_float.c 51
H5Tconv_string.c 1
H5Tconv_bitfield.c 1
H5Tconv_compound.c 4
H5FO.c 8
H5AC.c 29
H5Ctag.c 9
H5C.c 7
H5Centry.c 29
H5Cimage.c 20
H5Fio.c 2
H5Fint.c 18
H5PB.c 11
H5Faccum.c 6
H5VMprivate.h 3
H5FDint.c 8
H5FD.c 9
H5FDcore.c 2
H5FDfamily.c 2
H5FDlog.c 2
H5FDmulti_int.c 2
H5FDonion.c 2
H5FDsec2.c 2
H5FDsplitter.c 2
H5FDstdio_int.c 2
H5Cint.c 14
H5MF.c 24
H5MFsection.c 2
H5FS.c 15
H5Clog.c 19
H5FSsection.c 26
H5Cquery.c 3
H5Fspace.c 3
H5FDspace.c 6
H5Fsuper.c 8
H5ACproxy_entry.c 6
H5timer.c 1
H5MFaggr.c 9
H5Ochunk.c 7
H5SM.c 19
H5B2.c 9
H5B2hdr.c 12
H5B2int.c 13
H5B2internal.c 6
H5B2leaf.c 7
H5HF.c 8
H5HFhdr.c 20
H5HFdtable.c 6
H5Z.c 9
H5Opline.c 1
H5HFiter.c 9
H5HFhuge.c 9
H5HFtiny.c 6
H5HFspace.c 8
H5HFiblock.c 15
H5HFdblock.c 6
H5SMmessage.c 2
H5HFman.c 4
H5HFbtree2.c 6
H5PLint.c 6
H5PLplugin_cache.c 5
H5PLpath.c 10
H5Oalloc.c 17
H5HFsection.c 27
H5Fmount.c 3
H5Tcommit.c 3
H5Tconv_enum.c 4
H5FSstat.c 1
H5Fefc.c 6
H5Fsfile.c 2
H5Groot.c 1
H5Gnode.c 1
H5UC.c 1
H5Tconv_vlen.c 2
H5Tconv_array.c 1
H5Tconv_reference.c 1
H5Oshared.c 1
H5system.c 1
H5Tcompound.c 4
H5VLnative.c 2
H5VLpassthru_int.c 2
H5VLdyn_ops.c 4
H5Lexternal.c 1
H5FSint.c 1
H5Pfapl.c 5
H5Ffake.c 2
H5D.c 3
H5VLquery.c 1
H5Adeprec.c 1
H5A.c 1

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
H5D__virtual_write /src/hdf5/src/H5Dvirtual.c 2 ['N/A', 'N/A'] 120 0 364 69 29 1728 0 52446 7189
H5O__layout_copy_file /src/hdf5/src/H5Olayout.c 7 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 119 0 254 53 20 1610 0 49156 1897
H5Z__filter_scaleoffset /src/hdf5/src/H5Zscaleoffset.c 6 ['int', 'size_t', 'N/A', 'size_t', 'N/A', 'N/A'] 5 0 745 141 55 26 0 1175 1147

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
35.0%
1861 / 5307
Cyclomatic complexity statically reachable by fuzzers
60.0%
55792 / 92551

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/h5_read_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


/src/h5_extended_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name 

-focus_function=['H5F_addr_encode', 'H5O__alloc_msgs', 'H5MF_free_aggrs', 'H5O_msg_reset', 'H5E__init_package', 'H5FL_seq_free', 'H5FL_fac_term', 'H5PL__create_path_table', 'H5MF__close_shrink_eoa', 'H5E_dump_api_stack']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
H5__debug_mask 69 25 36.23% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5_check_version 93 26 27.95% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5AC_validate_config 34 17 50.0% ['h5_extended_fuzzer']
H5B__cache_deserialize 71 31 43.66% ['h5_extended_fuzzer']
H5C_set_cache_auto_resize_config 110 58 52.72% ['h5_extended_fuzzer']
H5C__generate_image 61 25 40.98% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5C__prep_image_for_file_close 64 23 35.93% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5C__make_space_in_cache 106 42 39.62% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5E__walk 79 29 36.70% ['h5_extended_fuzzer']
H5F__accum_read 90 26 28.88% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5F__accum_write 261 35 13.40% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5F_open 223 71 31.83% ['h5_extended_fuzzer']
H5F__dest 113 57 50.44% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5F__super_read 331 95 28.70% ['h5_extended_fuzzer']
H5F__cache_superblock_deserialize 129 69 53.48% ['h5_extended_fuzzer']
H5G_ent_encode 40 19 47.5% ['h5_extended_fuzzer']
H5G_mkroot 103 51 49.51% ['h5_extended_fuzzer']
H5G__stab_valid 45 23 51.11% ['h5_extended_fuzzer']
H5I__find_id 54 21 38.88% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5MF__close_aggrfs 81 27 33.33% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5MF__close_shrink_eoa 70 34 48.57% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5O__prefix_deserialize 120 41 34.16% ['h5_extended_fuzzer']
H5O__chunk_deserialize 238 120 50.42% ['h5_extended_fuzzer']
H5O__cache_notify 40 18 45.0% ['h5_extended_fuzzer']
H5O__efl_copy 35 16 45.71% ['h5_extended_fuzzer']
H5O__fill_copy 67 22 32.83% ['h5_extended_fuzzer']
H5O_protect 93 34 36.55% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5O__layout_copy 43 17 39.53% ['h5_extended_fuzzer']
H5O__pline_copy 51 17 33.33% ['h5_extended_fuzzer']
H5PB_read 163 26 15.95% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5PB_write 183 24 13.11% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5PL__path_table_iterate_process_path 55 19 34.54% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5P__facc_set_def_driver 58 12 20.68% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5P__file_driver_copy 37 14 37.83% ['h5_extended_fuzzer']
H5P__file_image_info_free 36 13 36.11% ['h5_extended_fuzzer']
H5P_copy_plist 129 64 49.61% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5P__cmp_class 73 12 16.43% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5SL_remove 42 15 35.71% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5SL_search 43 18 41.86% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__create 80 33 41.25% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T_close 40 9 22.5% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T_cmp 358 92 25.69% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T_set_loc 88 25 28.40% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__init_inf 106 58 54.71% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__register 148 50 33.78% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__complete_copy 129 31 24.03% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__path_find_init_new_path 122 32 26.22% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__ref_set_loc 90 34 37.77% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5T__vlen_set_loc 57 23 40.35% ['h5_extended_fuzzer', 'h5_read_fuzzer']
H5VL__set_def_conn 76 27 35.52% ['h5_extended_fuzzer', 'h5_read_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/hdf5/src/H5FDint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5HFdblock.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAcache.c [] []
/src/hdf5/src/H5Pdcpl.c [] []
/src/hdf5/src/H5Pdxpl.c [] []
/src/hdf5/src/H5Tnative.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5VLnative_token.c [] []
/src/hdf5/src/H5FDonion_index.c [] []
/src/hdf5/src/H5Omessage.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Zfletcher32.c [] []
/src/hdf5/src/H5Fefc.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5A.c ['h5_extended_fuzzer'] []
/src/hdf5/src/H5Ztrans.c [] []
/src/hdf5/src/H5Orefcount.c [] []
/src/hdf5/src/H5Goh.c [] []
/src/hdf5/src/H5VLnative_attr.c [] []
/src/hdf5/src/H5VLpassthru_int.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Fsuper.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5EA.c [] []
/src/hdf5/src/H5Tref.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Fquery.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FDcore.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Omtime.c [] []
/src/hdf5/src/H5VL.c [] []
/src/hdf5/src/H5FDmulti_int.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5SMmessage.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Pfapl.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5HLdblk.c [] []
/src/hdf5/src/H5Dbtree.c [] []
/src/hdf5/src/H5Pgcpl.c [] []
/src/hdf5/src/H5Tinit_float.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Fspace.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5VLpassthru.c [] []
/src/hdf5/src/H5HFhuge.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5FDmulti.c [] []
/src/hdf5/src/H5ESevent.c [] []
/src/hdf5/src/H5HGquery.c [] []
/src/hdf5/src/H5Adeprec.c ['h5_extended_fuzzer'] []
/src/hdf5/src/H5Odrvinfo.c [] []
/src/hdf5/src/H5Ocont.c [] []
/src/hdf5/src/H5Gcache.c [] []
/src/hdf5/src/H5PLplugin_cache.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Olinfo.c [] []
/src/hdf5/src/H5HFdtable.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5SMcache.c [] []
/src/hdf5/src/H5B2int.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Oattr.c [] []
/src/hdf5/src/H5Tconv_complex.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dearray.c [] []
/src/hdf5/src/H5HF.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAdblkpage.c [] []
/src/hdf5/src/H5Faccum.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FAstat.c [] []
/src/hdf5/src/H5Pfmpl.c [] []
/src/hdf5/src/H5Gdense.c [] []
/src/hdf5/src/H5HLcache.c [] []
/src/hdf5/src/H5Ocopy.c [] []
/src/hdf5/src/H5Tvisit.c [] []
/src/hdf5/src/H5MFsection.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Pmapl.c [] []
/src/hdf5/src/H5MFaggr.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tcompound.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Tconv_reference.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Cdbg.c [] []
/src/hdf5/src/H5FAhdr.c [] []
/src/hdf5/src/H5Fsfile.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Iint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Toh.c [] []
/src/hdf5/src/H5VLnative_blob.c [] []
/src/hdf5/src/H5Z.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Toffset.c [] []
/src/hdf5/src/H5Oshared.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5VLnative_object.c [] []
/src/hdf5/src/H5Fmount.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Osdspace.c [] []
/src/hdf5/src/H5Znbit.c [] []
/src/hdf5/src/H5timer.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5PLint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FSstat.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5FAdblkpage.c [] []
/src/hdf5/src/H5B2test.c [] []
/src/hdf5/src/H5Olayout.c [] []
/src/hdf5/src/H5Plcpl.c [] []
/src/hdf5/src/H5Shyper.c [] []
/src/hdf5/src/H5Plapl.c [] []
/src/hdf5/src/H5Gtraverse.c [] []
/src/hdf5/src/H5MF.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5HFspace.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5HFstat.c [] []
/src/hdf5/src/H5HFhdr.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Eint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5ESint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dcontig.c [] []
/src/hdf5/src/H5Ofill.c [] []
/src/hdf5/src/H5Tconv_compound.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAdblock.c [] []
/src/hdf5/src/H5HFman.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Glink.c [] []
/src/hdf5/src/H5HL.c [] []
/src/hdf5/src/H5FDfamily.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5SL.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tcommit.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dchunk.c [] []
/src/hdf5/src/H5Obtreek.c [] []
/src/hdf5/src/H5Cquery.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Clog.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Fint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5D.c ['h5_extended_fuzzer'] []
/src/hdf5/src/H5B2leaf.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Ocache.c [] []
/src/hdf5/src/H5VLnative_introspect.c [] []
/src/hdf5/src/H5Dint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/h5_read_fuzzer.c ['h5_read_fuzzer'] []
/src/hdf5/src/H5UC.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5trace.c [] []
/src/hdf5/src/H5Edeprec.c [] []
/src/hdf5/src/H5Gname.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Gnode.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Odtype.c [] []
/src/hdf5/src/H5Bdbg.c [] []
/src/hdf5/src/H5VMprivate.h ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5HFcache.c [] []
/src/hdf5/src/H5O.c [] []
/src/hdf5/src/H5Oefl.c [] []
/src/hdf5/src/H5Sdbg.c [] []
/src/hdf5/src/H5Pmcpl.c [] []
/src/hdf5/src/H5FSsection.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Tfields.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5VLnative.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5B2.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Snone.c [] []
/src/hdf5/src/H5Aint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FA.c [] []
/src/hdf5/src/H5FD.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5EAint.c [] []
/src/hdf5/src/H5FDonion_header.c [] []
/src/hdf5/src/H5Zshuffle.c [] []
/src/hdf5/src/H5Dscatgath.c [] []
/src/hdf5/src/H5VLquery.c ['h5_extended_fuzzer'] []
/src/hdf5/src/H5Gobj.c [] []
/src/hdf5/src/H5Tarray.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Pint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dfarray.c [] []
/src/h5_extended_fuzzer.c ['h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Opline.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Sall.c [] []
/src/hdf5/src/H5Oint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5PB.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Gloc.c [] []
/src/hdf5/src/H5SMbtree2.c [] []
/src/hdf5/src/H5Oginfo.c [] []
/src/hdf5/src/H5Tfixed.c [] []
/src/hdf5/src/H5VLint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Lexternal.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Ffake.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Centry.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tconv.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dlayout.c [] []
/src/hdf5/src/H5SM.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5B2internal.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAhdr.c [] []
/src/hdf5/src/H5FDstdio.c [] []
/src/hdf5/src/H5Gbtree2.c [] []
/src/hdf5/src/H5Odbg.c [] []
/src/hdf5/src/H5Ofsinfo.c [] []
/src/hdf5/src/H5Cimage.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Doh.c [] []
/src/hdf5/src/H5Dvirtual.c [] []
/src/hdf5/src/H5Dio.c [] []
/src/hdf5/src/H5Oainfo.c [] []
/src/hdf5/src/H5Dnone.c [] []
/src/hdf5/src/H5M.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5VLcallback.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5AC.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Oname.c [] []
/src/hdf5/src/H5EAstat.c [] []
/src/hdf5/src/H5HG.c [] []
/src/hdf5/src/H5RT.c [] []
/src/hdf5/src/H5Tconv_vlen.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5VLnative_file.c [] []
/src/hdf5/src/H5FSint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tvlen.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Olink.c [] []
/src/hdf5/src/H5Pfcpl.c [] []
/src/hdf5/src/H5FAdblock.c [] []
/src/hdf5/src/H5Fcwfs.c [] []
/src/hdf5/src/H5HFtiny.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Abtree2.c [] []
/src/hdf5/src/H5FS.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Ochunk.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAtest.c [] []
/src/hdf5/src/H5Oshmesg.c [] []
/src/hdf5/src/H5Rint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Gstab.c [] []
/src/hdf5/src/H5Tconv_array.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5FL.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FScache.c [] []
/src/hdf5/src/H5Ounknown.c [] []
/src/hdf5/src/H5HLprfx.c [] []
/src/hdf5/src/H5VLnative_datatype.c [] []
/src/hdf5/src/H5FDsec2.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Cint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5VLnative_group.c [] []
/src/hdf5/src/H5HFiblock.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5checksum.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FAtest.c [] []
/src/hdf5/src/H5Bcache.c [] []
/src/hdf5/src/H5RS.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Tconv_bitfield.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5I.c [] []
/src/hdf5/src/H5Torder.c [] []
/src/hdf5/src/H5Zscaleoffset.c [] []
/src/hdf5/src/H5Tconv_integer.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tconv_string.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5MM.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Cprefetched.c [] []
/src/hdf5/src/H5FDstdio_int.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5EAiblock.c [] []
/src/hdf5/src/H5Tenum.c [] []
/src/hdf5/src/H5VLdyn_ops.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FDsplitter.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Oattribute.c [] []
/src/hdf5/src/H5FDspace.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5B2hdr.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Fio.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5RTpkg.h [] []
/src/hdf5/src/H5Adense.c [] []
/src/hdf5/src/H5B2stat.c [] []
/src/hdf5/src/H5Oflush.c [] []
/src/hdf5/src/H5ESlist.c [] []
/src/hdf5/src/H5Fsuper_cache.c [] []
/src/hdf5/src/H5Oalloc.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Pencdec.c [] []
/src/hdf5/src/H5S.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5PLpath.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tconv_float.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FDonion_history.c [] []
/src/hdf5/src/H5FO.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tprecis.c [] []
/src/hdf5/src/H5Pdapl.c [] []
/src/hdf5/src/H5FAint.c [] []
/src/hdf5/src/H5WB.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5EAsblock.c [] []
/src/hdf5/src/H5Dfill.c [] []
/src/hdf5/src/H5Groot.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Oshared.h [] []
/src/hdf5/src/H5ACproxy_entry.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5VLnative_dataset.c [] []
/src/hdf5/src/H5Lint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5FAcache.c [] []
/src/hdf5/src/H5HGcache.c [] []
/src/hdf5/src/H5Pstrcpl.c [] []
/src/hdf5/src/H5Clog_json.c [] []
/src/hdf5/src/H5VM.c [] []
/src/hdf5/src/H5FDlog.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tdbg.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5F.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Tconv_enum.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5B2cache.c [] []
/src/hdf5/src/H5Ocache_image.c [] []
/src/hdf5/src/H5Ctag.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5VLnative_link.c [] []
/src/hdf5/src/H5C.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Pocpypl.c [] []
/src/hdf5/src/H5Dbtree2.c [] []
/src/hdf5/src/H5HFsection.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Cepoch.c [] []
/src/hdf5/src/H5Clog_trace.c [] []
/src/hdf5/src/H5FDonion.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Pocpl.c [] []
/src/hdf5/src/H5HLint.c [] []
/src/hdf5/src/H5Tcomplex.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5P.c [] []
/src/hdf5/src/H5Defl.c [] []
/src/hdf5/src/H5system.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5CX.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Dcompact.c [] []
/src/hdf5/src/H5Spoint.c [] []
/src/hdf5/src/H5Tbit.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5HFbtree2.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5E.c [] []
/src/hdf5/src/H5HFiter.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Gcompact.c [] []
/src/hdf5/src/H5T.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5Gint.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] ['h5_extended_fuzzer']
/src/hdf5/src/H5B.c [] []
/src/hdf5/src/H5Ostab.c [] []
/src/hdf5/src/H5Gdeprec.c [] []
/src/hdf5/src/H5Dsingle.c [] []
/src/hdf5/src/H5Gent.c [] []
/src/hdf5/src/H5Ocopy_ref.c [] []
/src/hdf5/src/H5Sselect.c ['h5_read_fuzzer', 'h5_extended_fuzzer'] []
/src/hdf5/src/H5Dselect.c [] []

Directories in report

Directory
/src/hdf5/src/
/src/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
h5_read_fuzzer fuzzerLogFile-0-yV1Spewb7x.data fuzzerLogFile-0-yV1Spewb7x.data.yaml h5_read_fuzzer.covreport
h5_extended_fuzzer fuzzerLogFile-0-2jSnntyWTk.data fuzzerLogFile-0-2jSnntyWTk.data.yaml h5_extended_fuzzer.covreport