Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Project coverage
Per-fuzzer coverage

Table of contents

Project overview: inchi
High level conclusions
Reachability and coverage overview
Fuzzers overview
Project functions overview
Fuzzer details
Fuzzer: inchi_input_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Analyses and suggestions
Optimal target analysis
Remaining optimal interesting functions
All functions overview
Runtime coverage analysis
Complex functions with low coverage
Files and Directories in report
Files in report
Directories in report
Metadata section
Function call coverage
Function in each files in report
Report generation date: 2023-03-26

Project overview: inchi

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
82.3%
908/1103
Cyclomatic complexity statically reachable by fuzzers
87.4%
25734/29415
Runtime code coverage of functions
49.0%
541 / 1103

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
inchi_input_fuzzer /src/inchi_input_fuzzer.c 945 205 24 45 71179 25809 inchi_input_fuzzer.c

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: inchi_input_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 3652 65.6%
gold [1:9] 401 7.20%
yellow [10:29] 126 2.26%
greenyellow [30:49] 97 1.74%
lawngreen 50+ 1291 23.1%
All colors 5567 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
3145 7444 10 :

['OutputAUXINFO_IsotopicInfo', 'OutputAUXINFO_Stereo', 'OutputAUXINFO_PolymerInfo', 'OutputAUXINFO_TautomericGroupsEquivalence', 'OutputAUXINFO_HeaderAndNormalization_type', 'OutputAUXINFO_OriginalNumbersAndEquivalenceClasses', 'OutputAUXINFO_ReversibilityInfo', 'OutputINChI1', 'inchi_strbuf_reset', 'OutputAUXINFO_ChargesRadicalsAndUnusualValences']

3145 7760 OutputINChI1 call site: 04992 /src/INCHI-1-SRC/INCHI_BASE/src/ichiprt1.c:1884
2460 2460 2 :

['bExistsAltPath', 'abs']

2460 2536 HardRemoveAcidicProtons call site: 01683 /src/INCHI-1-SRC/INCHI_BASE/src/ichi_bns.c:4465
1506 1530 5 :

['nGetEndpointInfo_KET', 'FindAccessibleEndPoints', 'AddAtom2num', 'AddAtom2DA', 'is_centerpoint_elem_KET']

8482 10582 MarkTautomerGroups call site: 01758 /src/INCHI-1-SRC/INCHI_BASE/src/ichitaut.c:4143
1377 1377 1 :

['nGet15TautInAltPath']

6969 8767 MarkTautomerGroups call site: 01768 /src/INCHI-1-SRC/INCHI_BASE/src/ichitaut.c:4359
1338 1338 1 :

['HardRemoveHplusNP']

1338 5012 RemoveNPProtonsAndAcidCharges call site: 01556 /src/INCHI-1-SRC/INCHI_BASE/src/ichi_bns.c:5183
881 947 4 :

['str_IsoStereoAbsInv', 'MakeDelim', 'str_IsoSp3', 'str_IsoSp2']

1230 2208 OutputINCHI_IsotopicLayer call site: 04881 /src/INCHI-1-SRC/INCHI_BASE/src/ichiprt1.c:3558
847 1143 8 :

['str_Sp2', 'MakeDelim', 'str_Sp3', 'str_LineEnd', 'INChI_SegmentAction', 'inchi_strbuf_reset', 'str_StereoAbsInv', 'szGetTag']

847 1647 OutputINCHI_StereoLayer call site: 04761 /src/INCHI-1-SRC/INCHI_BASE/src/ichiprt1.c:3357
686 1478 8 :

['RemoveForbiddenEdgeMask', 'SetForbiddenEdgeMask', 'RunBnsRestoreOnce', 'GetPlusMinusVertex', 'CopyBnsToAtom', 'AddToEdgeList', 'bIsMetalSalt', 'RunBnsTestOnce']

686 1491 SaltBondsToCoordBonds call site: 03335 /src/INCHI-1-SRC/INCHI_BASE/src/ichirvr4.c:2405
605 783 16 :

['nGetInChISegment', 'free', 'inchi_memicmp', 'AddAuxSegmentCoord', 'memcmp', 'ParseAuxSegmentReverseXYZ', 'ParseAuxSegmentSp3Inv', 'ParseAuxSegmentReverseCRV', 'ParseAuxSegmentVersion', 'getInChIChar', 'ParseAuxSegmentSp3InvNumbers', 'ParseAuxSegmentReverseAtoms', 'ParseAuxSegmentReverseBonds', 'ParseAuxSegmentGroupEqu', 'ParseAuxSegmentNumbers', 'ParseAuxSegmentAtomEqu']

605 783 ReadInChICoord call site: 00832 /src/INCHI-1-SRC/INCHI_BASE/src/ichiread.c:4614
482 482 1 :

['FixLessHydrogenInFormula']

482 62141 NormalizeAndCompare call site: 03387 /src/INCHI-1-SRC/INCHI_BASE/src/ichirvr4.c:1374
359 359 13 :

['GetStereocenter0DParity', 'are_4at_in_one_plane', 'are_3_vect_in_one_plane', 'get_z_coord', 'copy3', 'diff3', 'triple_prod_and_min_abs_sine2', 'change_sign3', 'len3', 'add3', 'Get2DTetrahedralAmbiguity', 'len2', 'mult3']

359 359 set_stereo_atom_parity call site: 01912 /src/INCHI-1-SRC/INCHI_BASE/src/ichister.c:3812
349 522 6 :

['inchi_strbuf_reset', 'inchi_ios_print_nodisplay', 'str_AuxTautTrans', 'bin_AuxTautTrans', 'str_LineEnd', 'szGetTag']

349 522 OutputINCHI_IsotopicLayer call site: 04953 /src/INCHI-1-SRC/INCHI_BASE/src/ichiprt1.c:3697

Runtime coverage analysis

Covered functions
545
Functions that are reachable but not covered
403
Reachable functions
945
Percentage of reachable functions covered
57.35%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/inchi_input_fuzzer.c 1
INCHI_BASE/src/ikey_dll.c 1
INCHI_BASE/src/util.c 29
INCHI_BASE/src/sha2.c 5
INCHI_BASE/src/ikey_base26.c 7
INCHI_API/libinchi/src/inchi_dll.c 10
INCHI_BASE/src/ichi_io.c 16
INCHI_BASE/src/ichiparm.c 4
INCHI_BASE/src/ichiread.c 65
INCHI_BASE/src/ichiprt2.c 27
INCHI_BASE/src/ichicano.c 16
INCHI_BASE/src/mol_fmt4.c 11
INCHI_BASE/src/runichi3.c 33
INCHI_BASE/src/strutil.c 47
INCHI_BASE/src/ichirvr7.c 17
INCHI_BASE/src/mol2atom.c 7
INCHI_BASE/src/ichimake.c 25
INCHI_BASE/src/ichirvr4.c 20
INCHI_BASE/src/ichirvr2.c 29
INCHI_BASE/src/ichirvr1.c 51
INCHI_BASE/src/ichister.c 44
INCHI_BASE/src/ichitaut.c 33
INCHI_BASE/src/ichisort.c 20
INCHI_BASE/src/ichinorm.c 1
INCHI_BASE/src/ichi_bns.c 100
INCHI_BASE/src/ichican2.c 58
INCHI_BASE/src/ichiqueu.c 8
INCHI_BASE/src/ichiring.c 11
INCHI_BASE/src/ichiisot.c 2
INCHI_BASE/src/ichimap2.c 30
INCHI_BASE/src/ichicans.c 27
INCHI_BASE/src/ichimap1.c 27
INCHI_BASE/src/ichimap4.c 2
INCHI_BASE/src/ichimak2.c 11
INCHI_BASE/src/ichierr.c 3
INCHI_BASE/src/ichirvr5.c 3
INCHI_BASE/src/ichiprt1.c 36
INCHI_BASE/src/ichirvr3.c 3
INCHI_BASE/src/ichirvr6.c 1
INCHI_BASE/src/runichi.c 9
INCHI_BASE/src/runichi4.c 9
INCHI_BASE/src/runichi2.c 3
INCHI_BASE/src/mol_fmt2.c 1
INCHI_API/libinchi/src/inchi_dll_a2.c 2
INCHI_BASE/src/ichiprt3.c 26

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
GetOneStructure /src/INCHI-1-SRC/INCHI_BASE/src/runichi2.c 11 ['struct.tagINCHI_CLOCK *', 'struct.tagStructData *', 'struct.tagInputParms *', 'char *', 'struct.tagOutputStream *', 'struct.tagOutputStream *', 'struct.tagOutputStream *', 'struct.tagOutputStream *', 'struct.tagOrigAtom *', 'size_t *', 'struct.tagStructFptrs *'] 5 0 705 113 38 157 0 2414 1830
GetINCHI /src/INCHI-1-SRC/INCHI_API/libinchi/src/inchi_dll.c 2 ['struct.tagINCHI_Input *', 'struct.tagINCHI_Output *'] 15 0 68 6 3 841 0 18668 1110
CanonOneStructureINChI /src/INCHI-1-SRC/INCHI_API/libinchi/src/inchi_dll_a2.c 5 ['struct.tagCANON_GLOBALS *', 'struct.tagINCHI_CLOCK *', 'struct.tagINCHIGEN_CONTROL *', 'int ', 'struct.tagOutputStream *'] 7 0 302 37 7 230 0 3949 272
NormOneStructureINChI /src/INCHI-1-SRC/INCHI_API/libinchi/src/inchi_dll_a2.c 6 ['struct.tagCANON_GLOBALS *', 'struct.tagINCHI_CLOCK *', 'struct.tagINCHIGEN_DATA *', 'struct.tagINCHIGEN_CONTROL *', 'int ', 'struct.tagOutputStream *'] 6 0 1120 140 38 336 0 6490 170

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
95.9%
1058/1103
Cyclomatic complexity statically reachable by fuzzers
98.9%
29104 / 29415

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
InpAtom0DToInchiAtom 155 59 38.06% ['inchi_input_fuzzer']
SetInChIExtInputByExtOrigAtData 204 50 24.50% ['inchi_input_fuzzer']
AddOrRemoveExplOrImplH 108 16 14.81% ['inchi_input_fuzzer']
bNeedToTestTheFlow 73 9 12.32% ['inchi_input_fuzzer']
BnsAdjustFlowBondsRad 81 33 40.74% ['inchi_input_fuzzer']
BnsTestAndMarkAltBonds 141 64 45.39% ['inchi_input_fuzzer']
SetForbiddenEdges 75 21 28.00% ['inchi_input_fuzzer']
fix_special_bonds 429 67 15.61% ['inchi_input_fuzzer']
GetAtomChargeType 469 150 31.98% ['inchi_input_fuzzer']
SimpleRemoveAcidicProtons 54 20 37.03% ['inchi_input_fuzzer']
HardRemoveAcidicProtons 138 43 31.15% ['inchi_input_fuzzer']
HardAddAcidicProtons 139 51 36.69% ['inchi_input_fuzzer']
RemoveNPProtonsAndAcidCharges 114 51 44.73% ['inchi_input_fuzzer']
bSetFlowToCheckOneBond 178 39 21.91% ['inchi_input_fuzzer']
RegisterRadEndpoint 114 50 43.85% ['inchi_input_fuzzer']
RemoveRadEndpoints 83 42 50.60% ['inchi_input_fuzzer']
AddCGroups2BnStruct 108 5 4.629% ['inchi_input_fuzzer']
MarkRingSystemsAltBns 153 63 41.17% ['inchi_input_fuzzer']
MarkNonStereoAltBns 70 30 42.85% ['inchi_input_fuzzer']
AddRemoveProtonsRestr 227 37 16.29% ['inchi_input_fuzzer']
inchi_ios_print 67 35 52.23% ['inchi_input_fuzzer']
GetMaxPrintfLength 186 72 38.70% ['inchi_input_fuzzer']
inchi_strbuf_update 34 8 23.52% ['inchi_input_fuzzer']
CtPartCompare 251 116 46.21% ['inchi_input_fuzzer']
InchiTimeMsecDiff 61 15 24.59% ['inchi_input_fuzzer']
bInchiTimeIsOver 57 9 15.78% ['inchi_input_fuzzer']
Canon_INChI3 852 195 22.88% ['inchi_input_fuzzer']
AddErrorMessage 43 21 48.83% ['inchi_input_fuzzer']
MarkAmbiguousStereo 71 12 16.90% ['inchi_input_fuzzer']
UnmarkAllUndefinedUnknownStereo 47 8 17.02% ['inchi_input_fuzzer']
CompINChITautVsNonTaut 119 11 9.243% ['inchi_input_fuzzer']
CompINChILayers 703 268 38.12% ['inchi_input_fuzzer']
CompareInchiStereo 66 13 19.69% ['inchi_input_fuzzer']
CompINChI2 204 69 33.82% ['inchi_input_fuzzer']
CompareReversedStereoINChI 57 14 24.56% ['inchi_input_fuzzer']
CompareReversedStereoINChI2 299 16 5.351% ['inchi_input_fuzzer']
CompareReversedINChI 196 42 21.42% ['inchi_input_fuzzer']
CompareReversedINChI2 383 181 47.25% ['inchi_input_fuzzer']
CompareDfsDescendants4CT 31 14 45.16% ['inchi_input_fuzzer']
set_common_options_by_parg 334 51 15.26% ['inchi_input_fuzzer']
ReadCommandLineParms 1073 288 26.84% ['inchi_input_fuzzer']
PrintInputParms 376 84 22.34% ['inchi_input_fuzzer']
((INCHI_basic_or_INCHI_reconnected==INCHI_BAS)?FLAG_SORT_PRINT_NO_NFIX_H_BAS 90 6 6.666%
szGetTag 63 19 30.15% ['inchi_input_fuzzer']
OrigStruct_FillOut 91 49 53.84% ['inchi_input_fuzzer']
WriteOrigAtoms 139 64 46.04% ['inchi_input_fuzzer']
WriteOrigBonds 272 94 34.55% ['inchi_input_fuzzer']
OutputINCHI_StereoLayer 111 16 14.41% ['inchi_input_fuzzer']
OutputINCHI_IsotopicLayer 192 41 21.35% ['inchi_input_fuzzer']
(*INCHI_basic_or_INCHI_reconnected==INCHI_BAS)?FLAG_SORT_PRINT_NO_IFIX_H_BAS 82 10 12.19%
OutputINCHI_PolymerLayer 153 24 15.68% ['inchi_input_fuzzer']
MakeCtStringNew 119 55 46.21% ['inchi_input_fuzzer']
MakeHString 226 51 22.56% ['inchi_input_fuzzer']
str_Charge2 156 66 42.30% ['inchi_input_fuzzer']
str_IsoAtoms 185 69 37.29% ['inchi_input_fuzzer']
CountStereoTypes 62 19 30.64% ['inchi_input_fuzzer']
InChILine2Data 1037 472 45.51% ['inchi_input_fuzzer']
ReadInChICoord 294 40 13.60% ['inchi_input_fuzzer']
SetProtonsAndXchgIsoH 144 75 52.08% ['inchi_input_fuzzer']
ParseSegmentConnections 558 299 53.58% ['inchi_input_fuzzer']
ParseSegmentProtons 51 8 15.68% ['inchi_input_fuzzer']
ParseSegmentSp2 464 142 30.60% ['inchi_input_fuzzer']
ParseSegmentSp3 200 101 50.5% ['inchi_input_fuzzer']
SegmentSp3CreateEmpty 50 26 52.0% ['inchi_input_fuzzer']
SegmentSp3StoreStereoCenters 66 29 43.93% ['inchi_input_fuzzer']
ParseSegmentSp3m 185 84 45.40% ['inchi_input_fuzzer']
ParseSegmentSp3s 88 37 42.04% ['inchi_input_fuzzer']
ParseSegmentIsoAtoms 375 186 49.6% ['inchi_input_fuzzer']
ParseSegmentIsoExchgH 101 8 7.920% ['inchi_input_fuzzer']
ParseSegmentPerm 111 11 9.909% ['inchi_input_fuzzer']
CopySegment 241 68 28.21% ['inchi_input_fuzzer']
bMayBeACationInMobileHLayer 47 12 25.53% ['inchi_input_fuzzer']
BondFlowMaxcapMinorder 74 30 40.54% ['inchi_input_fuzzer']
nCountBnsSizes 278 150 53.95% ['inchi_input_fuzzer']
AddTGroups2TCGBnStruct 106 8 7.547% ['inchi_input_fuzzer']
ConnectMetalFlower 120 21 17.5% ['inchi_input_fuzzer']
ConnectDisconnectedH 84 17 20.23% ['inchi_input_fuzzer']
DisconnectedConnectedH 57 13 22.80% ['inchi_input_fuzzer']
RestoreAtomConnectionsSetStereo 524 86 16.41% ['inchi_input_fuzzer']
SetStereoBondTypesFrom0DStereo 113 21 18.58% ['inchi_input_fuzzer']
CopyBnsToAtom 172 57 33.13% ['inchi_input_fuzzer']
RearrangePlusMinusEdgesFlow 100 26 26.0% ['inchi_input_fuzzer']
IncrementZeroOrderBondsToHeteroat 176 31 17.61% ['inchi_input_fuzzer']
MovePlusFromS2DiaminoCarbon 119 37 31.09% ['inchi_input_fuzzer']
EliminateChargeSeparationOnHeteroatoms 213 48 22.53% ['inchi_input_fuzzer']
RestoreCyanoGroup 81 41 50.61% ['inchi_input_fuzzer']
RestoreIsoCyanoGroup 223 94 42.15% ['inchi_input_fuzzer']
FixMetal_Nminus_Ominus 132 48 36.36% ['inchi_input_fuzzer']
RestoreNNNgroup 586 146 24.91% ['inchi_input_fuzzer']
EliminateNitrogen5Val3Bonds 200 51 25.5% ['inchi_input_fuzzer']
Convert_SIV_to_SVI 156 58 37.17% ['inchi_input_fuzzer']
PlusFromDB_N_DB_O_to_Metal 128 55 42.96% ['inchi_input_fuzzer']
MoveMobileHToAvoidFixedBonds 56 11 19.64% ['inchi_input_fuzzer']
RemoveRadFromMobileHEndpoint 344 25 7.267% ['inchi_input_fuzzer']
RemoveRadFromMobileHEndpointFixH 555 34 6.126% ['inchi_input_fuzzer']
MoveChargeToMakeCenerpoints 194 32 16.49% ['inchi_input_fuzzer']
FixFixedHRestoredStructure 5066 665 13.12% ['inchi_input_fuzzer']
FixMoreHydrogenInFormula 115 42 36.52% ['inchi_input_fuzzer']
FixRemoveExtraTautEndpoints 132 38 28.78% ['inchi_input_fuzzer']
FillOutCMP2MHINCHI 206 95 46.11% ['inchi_input_fuzzer']
NormalizeAndCompare 285 135 47.36% ['inchi_input_fuzzer']
CheckAndRefixStereobonds 150 32 21.33% ['inchi_input_fuzzer']
MoveChargeToRemoveCenerpoints 289 43 14.87% ['inchi_input_fuzzer']
MakeSingleBondsMetal2ChargedHeteroat 141 45 31.91% ['inchi_input_fuzzer']
SaltBondsToCoordBonds 209 26 12.44% ['inchi_input_fuzzer']
RunBnsRestore1 263 131 49.80% ['inchi_input_fuzzer']
AddRemIsoProtonsInRestrStruct 98 21 21.42% ['inchi_input_fuzzer']
FixMobileHRestoredStructure 991 121 12.20% ['inchi_input_fuzzer']
FixRestoredStructureStereo 1171 77 6.575% ['inchi_input_fuzzer']
MarkDisconectedIdenticalToReconnected 69 12 17.39% ['inchi_input_fuzzer']
CompareAllDisconnectedOrigInchiToRevInChI 428 23 5.373% ['inchi_input_fuzzer']
CompareReversedStereoINChI3 269 16 5.947% ['inchi_input_fuzzer']
CompareReversedINChI3 373 161 43.16% ['inchi_input_fuzzer']
AddOneMsg 32 17 53.12% ['inchi_input_fuzzer']
can_be_a_stereo_bond_with_isotopic_H 226 16 7.079% ['inchi_input_fuzzer']
set_stereo_atom_parity 381 42 11.02% ['inchi_input_fuzzer']
set_stereo_bonds_parity 451 25 5.543% ['inchi_input_fuzzer']
AddAtom2DA 62 34 54.83% ['inchi_input_fuzzer']
nGetEndpointInfo 84 40 47.61% ['inchi_input_fuzzer']
RegisterEndPoints 380 123 32.36% ['inchi_input_fuzzer']
bCanBeACPoint 97 36 37.11% ['inchi_input_fuzzer']
MarkChargeGroups 120 32 26.66% ['inchi_input_fuzzer']
GetSaltChargeType 75 30 40.0% ['inchi_input_fuzzer']
GetOtherSaltType 50 15 30.0% ['inchi_input_fuzzer']
MarkSaltChargeGroups2 417 60 14.38% ['inchi_input_fuzzer']
MarkSaltChargeGroups 186 66 35.48% ['inchi_input_fuzzer']
MarkTautomerGroups 751 120 15.97% ['inchi_input_fuzzer']
FreeExtOrigAtData 65 7 10.76% ['inchi_input_fuzzer']
CreateOneStructureINChI 403 151 37.46% ['inchi_input_fuzzer']
PrepareSaveOptBits 38 3 7.894% ['inchi_input_fuzzer']
OrigAtData_Duplicate 240 63 26.25% ['inchi_input_fuzzer']
PreprocessOneStructure 241 61 25.31% ['inchi_input_fuzzer']
OAD_Polymer_FindRingSystems 53 27 50.94% ['inchi_input_fuzzer']
OAD_Polymer_SetAtProps 134 57 42.53% ['inchi_input_fuzzer']
OAD_Polymer_SmartReopenCyclizedUnits 46 24 52.17% ['inchi_input_fuzzer']
GetProcessingWarningsOneInChI 37 17 45.94% ['inchi_input_fuzzer']
the_only_doublet_neigh 35 12 34.28% ['inchi_input_fuzzer']
fix_non_uniform_drawn_oxoanions 96 33 34.37% ['inchi_input_fuzzer']
fix_non_uniform_drawn_amidiniums 87 23 26.43% ['inchi_input_fuzzer']
fix_odd_things 254 84 33.07% ['inchi_input_fuzzer']
remove_ion_pairs 838 136 16.22% ['inchi_input_fuzzer']
bIsAmmoniumSalt 80 19 23.75% ['inchi_input_fuzzer']
bIsMetalSalt 83 12 14.45% ['inchi_input_fuzzer']
DisconnectSalts 34 18 52.94% ['inchi_input_fuzzer']
remove_terminal_HDT 208 55 26.44% ['inchi_input_fuzzer']
get_num_H 98 50 51.02% ['inchi_input_fuzzer']
nNoMetalNumBonds 55 15 27.27% ['inchi_input_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr3.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/mol_fmt2.c ['inchi_input_fuzzer'] []
/src/INCHI-1-SRC/INCHI_BASE/src/ichiprt2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiread.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/sha2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichimake.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichister.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichitaut.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiparm.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichisort.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/runichi.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/mol_fmt1.c [] []
/src/INCHI-1-SRC/INCHI_BASE/src/ichierr.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/util.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ikey_base26.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr1.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr7.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiisot.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichi_bns.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/runichi4.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ikey_dll.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiprt1.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiqueu.c ['inchi_input_fuzzer'] []
/src/INCHI-1-SRC/INCHI_API/libinchi/src/inchi_dll.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichicans.c ['inchi_input_fuzzer'] []
/src/INCHI-1-SRC/INCHI_BASE/src/runichi2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichimak2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr4.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/mol_fmt3.c [] []
/src/INCHI-1-SRC/INCHI_BASE/src/ichimap2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichi_io.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichimap1.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichinorm.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/mol2atom.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/runichi3.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/strutil.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichimap4.c ['inchi_input_fuzzer'] []
/src/INCHI-1-SRC/INCHI_BASE/src/mol_fmt4.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_API/libinchi/src/inchi_dll_a2.c ['inchi_input_fuzzer'] []
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr6.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiprt3.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichicano.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichirvr5.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichiring.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/ichican2.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']
/src/INCHI-1-SRC/INCHI_BASE/src/readinch.c [] []
/src/inchi_input_fuzzer.c ['inchi_input_fuzzer'] ['inchi_input_fuzzer']

Directories in report

Directory
/src/
/src/INCHI-1-SRC/INCHI_BASE/src/
/src/INCHI-1-SRC/INCHI_API/libinchi/src/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
inchi_input_fuzzer fuzzerLogFile-0-kuGctKdMSZ.data fuzzerLogFile-0-kuGctKdMSZ.data.yaml inchi_input_fuzzer.covreport

Function call coverage

This section shows a chosen list of functions / methods calls and their relative coverage information. By static analysis of the target project code, all of these function call and their caller information, including the source file or class and line number that initiate the call are captured. Column 1 is the function name of that selected functions or methods. Column 2 of each row indicate if the target function covered by any fuzzer calltree information. Column 3 lists all fuzzers (or no fuzzers at all) that have coered that particular function call dynamically. Column 4 shows list of parent function for the specific function call, while column 5 shows possible blocker functions that make the fuzzers fail to reach the specific functions. Both column 4 and 5 will only show information if none of the fuzzers cover the target function calls.

Function in each files in report

Target sink Callsite location Reached by fuzzer Function call path Covered by fuzzer Possible branch blockers