Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: fuzz_inputsplitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7 100.%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 0 0.0%
All colors 7 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
6 0 EP call site: 00000 atheris.FuzzedDataProvider

Runtime coverage analysis

Covered functions
548
Functions that are reachable but not covered
7
Reachable functions
7
Percentage of reachable functions covered
0.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/ 1
...fuzz_inputsplitter 6

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
IPython.terminal.embed.InteractiveShellEmbed.__call__ IPython.terminal.embed 8 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 9 0 4 7 6 138 0 460 460
IPython.core.oinspect.Inspector._get_info IPython.core.oinspect 7 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 8 0 2 3 4 119 1 396 366
IPython.extensions.autoreload.AutoreloadMagics.autoreload IPython.extensions.autoreload 2 ['N/A', 'N/A'] 7 0 2 10 7 113 0 384 345
IPython.sphinxext.ipython_directive.IPythonDirective.run IPython.sphinxext.ipython_directive 1 ['N/A'] 5 0 9 6 5 85 0 282 249
IPython.core.completer.IPCompleter.dict_key_matches IPython.core.completer 2 ['N/A', 'N/A'] 6 0 2 13 8 90 1 316 244
IPython.core.page.page_file IPython.core.page 3 ['N/A', 'N/A', 'N/A'] 5 0 4 2 4 79 0 254 209
IPython.core.magics.execution.ExecutionMagics.run IPython.core.magics.execution 4 ['N/A', 'N/A', 'N/A', 'N/A'] 3 0 10 25 13 77 0 255 198

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
10.0%
201 / 1993
Cyclomatic complexity statically reachable by fuzzers
12.0%
825 / 7005

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
traitlets.config.application.Application.print_subcommands 520 150 28.84% ['fuzz_inputsplitter']
traitlets.config.configurable.Configurable.exit 258 61 23.64% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.__init__ 43 2 4.651% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.reset 35 0 0.0% []
IPython.core.interactiveshell.InteractiveShell._ofind 53 0 0.0% []
IPython.core.interactiveshell.InteractiveShell.run_cell_async.error_before_exec 69 0 0.0% []
IPython.core.interactiveshell.InteractiveShell.run_code 31 1 3.225% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.find_user_code 41 0 0.0% []
IPython.external.pickleshare.main 31 1 3.225% ['fuzz_inputsplitter']
value.lower 336 128 38.09% ['fuzz_inputsplitter']
traitlets.config.get_config 1736 230 13.24% ['fuzz_inputsplitter']
name.find 114 11 9.649% ['fuzz_inputsplitter']
IPython.utils.PyColorize.Parser.format2 42 0 0.0% []
IPython.core.logger.Logger.logstart 42 0 0.0% []
IPython.core.magics.logging.LoggingMagics.logstart 43 0 0.0% []
IPython.core.ultratb.ListTB._format_exception_only 52 0 0.0% []
IPython.core.ultratb.VerboseTB.format_record 52 0 0.0% []
IPython.core.ultratb.VerboseTB.get_records 40 0 0.0% []
IPython.core.history.extract_hist_ranges 31 0 0.0% []
IPython.core.magics.osm.OSMagics.rehashx 43 1 2.325% ['fuzz_inputsplitter']
IPython.core.magics.osm.OSMagics.cd 66 0 0.0% []
IPython.core.magics.osm.OSMagics.bookmark 31 0 0.0% []
var.strip 90 21 23.33% ['fuzz_inputsplitter']
IPython.core.oinspect.Inspector._make_info_unformatted.code_formatter 33 0 0.0% []
IPython.core.oinspect.Inspector.info 141 14 9.929% ['fuzz_inputsplitter']
IPython.core.guarded_eval.eval_node 95 0 0.0% []
IPython.core.guarded_eval._resolve_annotation 35 0 0.0% []
IPython.core.completer.Completer._attr_matches 42 0 0.0% []
IPython.core.completer.match_dict_keys.filter_prefix_tuple 69 0 0.0% []
IPython.core.completer.IPCompleter.file_matcher 34 0 0.0% []
IPython.core.completer.IPCompleter._jedi_matches 39 3 7.692% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter._is_in_string_or_comment 59 0 0.0% []
IPython.core.completer.IPCompleter.python_func_kw_matches 50 0 0.0% []
IPython.core.completer.IPCompleter.dict_key_matches 51 0 0.0% []
IPython.core.completer.IPCompleter._completions.is_non_jedi_result 38 0 0.0% []
IPython.core.completer.IPCompleter._complete 57 0 0.0% []
IPython.core.magic.Magics.parse_options 38 0 0.0% []
cmd.startswith 161 34 21.11% ['fuzz_inputsplitter']
subprocess.check_call 243 67 27.57% ['fuzz_inputsplitter']
out.append 189 48 25.39% ['fuzz_inputsplitter']
IPython.core.prefilter.AutoHandler.handle 38 3 7.894% ['fuzz_inputsplitter']
IPython.core.formatters.DisplayFormatter.format 34 0 0.0% []
IPython.core.display_functions.display 34 0 0.0% []
f.writelines 505 67 13.26% ['fuzz_inputsplitter']
IPython.core.magics.code.CodeMagics.save 36 2 5.555% ['fuzz_inputsplitter']
IPython.core.magics.code.CodeMagics.load 31 0 0.0% []
IPython.core.magics.code.CodeMagics._find_edit_target.make_filename 75 0 0.0% []
IPython.core.magics.code.CodeMagics.edit 47 0 0.0% []
IPython.core.page.pager_page 52 0 0.0% []
IPython.utils._process_posix.ProcessHandler.system 37 1 2.702% ['fuzz_inputsplitter']
tokens.extend 148 50 33.78% ['fuzz_inputsplitter']
IPython.core.display.Image.__init__ 55 0 0.0% []
prefix.startswith 64 23 35.93% ['fuzz_inputsplitter']
tokenize.open.readlines 428 72 16.82% ['fuzz_inputsplitter']
IPython.core.magics.namespace.NamespaceMagics.whos.type_name 48 0 0.0% []
IPython.core.magics.namespace.NamespaceMagics.reset 48 0 0.0% []
IPython.core.inputtransformer2.TransformerManager.check_complete 74 0 0.0% []
IPython.utils.tokenutil.token_at_cursor 50 0 0.0% []
names.pop 465 144 30.96% ['fuzz_inputsplitter']
IPython.core.magics.basic.BasicMagics.notebook 32 2 6.25% ['fuzz_inputsplitter']
param.lower 130 17 13.07% ['fuzz_inputsplitter']
parser.parse 111 31 27.92% ['fuzz_inputsplitter']
IPython.core.magics.history.HistoryMagics.history._format_lineno 60 0 0.0% []
IPython.core.magics.history.HistoryMagics.rerun 34 0 0.0% []
IPython.core.magics.config.ConfigMagics.config 34 0 0.0% []
IPython.core.magics.script.ScriptMagics.shebang._stream_communicate 70 1 1.428% ['fuzz_inputsplitter']
defaults.extend 31 8 25.80% ['fuzz_inputsplitter']
IPython.core.magics.execution.ExecutionMagics._run_with_profiler 43 0 0.0% []
IPython.core.magics.execution.ExecutionMagics.run 85 0 0.0% []
IPython.core.magics.execution.ExecutionMagics._run_with_debugger 50 0 0.0% []
IPython.core.magics.execution.ExecutionMagics.timeit 71 6 8.450% ['fuzz_inputsplitter']
IPython.core.magics.execution.ExecutionMagics.time.Args.__init__ 86 1 1.162% ['fuzz_inputsplitter']
base.lower 251 86 34.26% ['fuzz_inputsplitter']
traitlets.config.loader.Config 587 165 28.10% ['fuzz_inputsplitter']
decorator.strip 280 72 25.71% ['fuzz_inputsplitter']
completion.get_signatures 396 55 13.88% ['fuzz_inputsplitter']
signature.defined_names 110 36 32.72% ['fuzz_inputsplitter']
interpreter.complete 35 19 54.28% ['fuzz_inputsplitter']
typing_extensions.TypedDict.get 1665 450 27.02% ['fuzz_inputsplitter']
IPython.core.doctb.DocTB.format_record 32 0 0.0% []
IPython.core.doctb.DocTB.get_records 32 0 0.0% []
IPython.core.debugger.Pdb.format_stack_entry 44 0 0.0% []
IPython.terminal.interactiveshell.TerminalInteractiveShell._merge_shortcuts 38 2 5.263% ['fuzz_inputsplitter']
IPython.terminal.shortcuts.auto_suggest.AppendAutoSuggestionInAnyLine.apply_transformation 55 8 14.54% ['fuzz_inputsplitter']
IPython.terminal.shortcuts.auto_suggest.accept_token 32 1 3.125% ['fuzz_inputsplitter']
prompt_toolkit.layout.processors.Transformation 402 110 27.36% ['fuzz_inputsplitter']
prompt_toolkit.patch_stdout.patch_stdout 124 38 30.64% ['fuzz_inputsplitter']
prompt_toolkit.history.InMemoryHistory 136 44 32.35% ['fuzz_inputsplitter']
prompt_toolkit.shortcuts.prompt.PromptSession 478 90 18.82% ['fuzz_inputsplitter']
IPython.terminal.embed.InteractiveShellEmbed.mainloop 32 0 0.0% []
IPython.terminal.embed.embed 32 0 0.0% []
IPython.core.application.BaseIPythonApplication.init_profile_dir 37 0 0.0% []
IPython.extensions.storemagic.StoreMagics.store 75 0 0.0% []
prompt_toolkit.application.current.get_app.current_buffer.document.text_before_cursor.replace 68 27 39.70% ['fuzz_inputsplitter']
buffer.auto_suggest.get_suggestion 824 144 17.47% ['fuzz_inputsplitter']
prompt_toolkit.key_binding.bindings.named_commands.backward_delete_char 281 125 44.48% ['fuzz_inputsplitter']
document.text.lstrip 531 122 22.97% ['fuzz_inputsplitter']
wcwidth.wcwidth 101 20 19.80% ['fuzz_inputsplitter']
IPython.core.debugger_backport.PdbClosureBackport.default 42 0 0.0% []
pytest.fixture 156 33 21.15% ['fuzz_inputsplitter']
stdout.strip 37 10 27.02% ['fuzz_inputsplitter']
module.__dict__.update 131 47 35.87% ['fuzz_inputsplitter']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
IPython.terminal.shortcuts.filters [] []
subprocess [] []
pexpect [] []
IPython.core.magics [] []
pprint [] []
jedi [] []
IPython.utils.syspathcontext [] []
html [] []
enum [] []
IPython.core.error [] []
sys [] []
IPython.core.doctb [] []
IPython.terminal.prompts [] []
IPython.utils.data [] []
IPython.extensions.storemagic [] []
atexit [] []
codeop [] []
IPython.testing.tools [] []
logging [] []
IPython.utils.generics [] []
IPython.utils.strdispatch [] []
runpy [] []
builtins [] []
gc [] []
IPython.extensions.deduperreload.deduperreload [] []
xml [] []
IPython.core.alias [] []
IPython.testing.globalipapp [] []
IPython.extensions.deduperreload [] []
io [] []
IPython.utils.sentinel [] []
stack_data [] []
IPython.core.getipython [] []
IPython.testing.plugin [] []
curses [] []
[] []
time [] []
win32clipboard [] []
pytest [] []
site [] []
IPython.utils.timing [] []
IPython.terminal.pt_inputhooks.glut [] []
datetime [] []
IPython.core.logger [] []
IPython.core.completer [] []
IPython.lib.clipboard [] []
winreg [] []
IPython.terminal.shortcuts.auto_match [] []
wcwidth [] []
IPython.core.builtin_trap [] []
wave [] []
IPython.core.displayhook [] []
numpy [] []
IPython.utils.capture [] []
IPython.utils._sysinfo [] []
matplotlib [] []
shlex [] []
cProfile [] []
pyglet [] []
IPython.core.formatters [] []
urllib [] []
IPython.core.splitinput [] []
IPython.core.payload [] []
IPython.lib.lexers [] []
prompt_toolkit [] []
IPython.terminal.pt_inputhooks.gtk3 [] []
termios [] []
IPython.core.magics.basic [] []
IPython.testing.plugin.simple [] []
IPython.terminal.embed [] []
IPython.terminal.pt_inputhooks.pyglet [] []
IPython.core.debugger [] []
IPython.sphinxext.ipython_console_highlighting [] []
IPython.utils.io [] []
IPython.terminal.shortcuts [] []
copy [] []
typing [] []
fnmatch [] []
resource [] []
locale [] []
IPython.utils.py3compat [] []
pygments [] []
asyncio [] []
IPython.core.displaypub [] []
testpath [] []
math [] []
IPython.core.magics.pylab [] []
IPython.core.shellapp [] []
IPython.extensions [] []
pdb [] []
collections [] []
unittest [] []
IPython.utils.text [] []
IPython.utils [] []
IPython.utils.decorators [] []
weakref [] []
IPython.testing.plugin.ipdoctest [] []
IPython.testing.ipunittest [] []
threading [] []
docrepr [] []
IPython.core.oinspect [] []
IPython.core.latex_symbols [] []
IPython.terminal.pt_inputhooks [] []
IPython.testing.plugin.pytest_ipdoctest [] []
IPython.utils.openpy [] []
IPython.testing.plugin.dtexample [] []
uuid [] []
IPython.testing.plugin.simplevars [] []
timeit [] []
IPython.terminal.magics [] []
IPython.core.extensions [] []
IPython.terminal.pt_inputhooks.wx [] []
pstats [] []
IPython.terminal [] []
hashlib [] []
concurrent [] []
ctypes [] []
random [] []
IPython.lib.display [] []
IPython.lib.latextools [] []
IPython.lib.editorhooks [] []
json [] []
IPython.extensions.deduperreload.deduperreload_patching [] []
IPython.core.magics.logging [] []
atheris [] []
IPython.core.async_helpers [] []
IPython.terminal.pt_inputhooks.asyncio [] []
ipykernel [] []
pathlib [] []
IPython.core.magic [] []
IPython.core.prefilter [] []
mimetypes [] []
IPython.core.profileapp [] []
gtk [] []
IPython.testing.plugin.test_refs [] []
IPython.core.display [] []
platform [] []
IPython.core.magics.auto [] []
IPython.testing.plugin.setup [] []
IPython.utils.PyColorize [] []
tkinter [] []
curio [] []
IPython.core.magics.code [] []
_pytest [] []
IPython.utils.importstring [] []
IPython.core.magic_arguments [] []
re [] []
unicodedata [] []
IPython.core.page [] []
IPython.utils._process_posix [] []
IPython.core.magics.display [] []
black [] []
IPython.external.qt_loaders [] []
binascii [] []
IPython.lib.pretty [] []
IPython.extensions.autoreload [] []
sphinx [] []
...fuzz_inputsplitter ['fuzz_inputsplitter'] []
gzip [] []
IPython.core.compilerop [] []
os [] []
IPython.core.ultratb [] []
traceback [] []
typing_extensions [] []
System [] []
warnings [] []
IPython.core.application [] []
zipimport [] []
docutils [] []
IPython.core.profiledir [] []
IPython.terminal.pt_inputhooks.tk [] []
IPython.core.macro [] []
IPython.core.tips [] []
IPython.testing.plugin.test_ipdoctest [] []
IPython.core.hooks [] []
IPython.core.display_trap [] []
IPython.utils.jsonutil [] []
IPython.utils.module_paths [] []
types [] []
IPython.core.debugger_backport [] []
IPython.testing.skipdoctest [] []
argparse [] []
IPython.terminal.interactiveshell [] []
IPython.core.interactiveshell [] []
sqlite3 [] []
IPython.core.magics.ast_mod [] []
contextlib [] []
IPython.utils.process [] []
traitlets [] []
nbformat [] []
IPython.core.usage [] []
operator [] []
pickle [] []
IPython.utils.coloransi [] []
IPython.utils.tokenutil [] []
array [] []
IPython.utils.sysinfo [] []
IPython.display [] []
IPython.core.magics.osm [] []
IPython.sphinxext.custom_doctests [] []
IPython.utils._process_emscripten [] []
IPython.utils.encoding [] []
IPython.core.display_functions [] []
IPython.terminal.pt_inputhooks.qt [] []
IPython.core.magics.namespace [] []
functools [] []
IPython.core.magics.config [] []
struct [] []
IPython.external.pickleshare [] []
IPython.terminal.shortcuts.auto_suggest [] []
jupyter_ai [] []
IPython.utils.eventful [] []
importlib [] []
IPython.utils.path [] []
IPython.core.history [] []
IPython.testing.decorators [] []
IPython.core.events [] []
ast [] []
base64 [] []
textwrap [] []
IPython.utils.terminal [] []
IPython.utils._process_common [] []
codecs [] []
IPython.external.qt_for_kernel [] []
IPython.core.payloadpage [] []
ipython_pygments_lexers [] []
yapf [] []
inspect [] []
cPickle [] []
doctest [] []
IPython [] []
glob [] []
IPython.utils.dir2 [] []
IPython.core.magics.extension [] []
IPython.core [] []
IPython.terminal.pt_inputhooks.osx [] []
tempfile [] []
IPython.core.completerlib [] []
IPython.paths [] []
IPython.core.magics.history [] []
IPython.utils.ipstruct [] []
IPython.core.magics.packaging [] []
IPython.sphinxext [] []
tokenize [] []
IPython.core.magics.script [] []
IPython.utils.frame [] []
IPython.core.historyapp [] []
IPython.external [] []
gi [] []
IPython.lib.deepreload [] []
IPython.core.inputtransformer2 [] []
IPython.utils.tempdir [] []
string [] []
colorama [] []
IPython.terminal.pt_inputhooks.gtk [] []
gobject [] []
IPython.utils._process_win32_controller [] []
IPython.core.crashhandler [] []
IPython.utils._process_win32 [] []
IPython.lib.demo [] []
IPython.lib.guisupport [] []
setuptools [] []
matplotlib_inline [] []
IPython.core.autocall [] []
getopt [] []
trio [] []
reprlib [] []
pathlib2 [] []
IPython.testing [] []
IPython.core.guarded_eval [] []
IPython.core.tbtools [] []
dataclasses [] []
msvcrt [] []
IPython.terminal.ptutils [] []
pydoc [] []
IPython.core.magics.execution [] []
IPython.terminal.pt_inputhooks.gtk4 [] []
wx [] []
IPython.core.release [] []
IPython.terminal.debugger [] []
keyword [] []
IPython.terminal.ipapp [] []
IPython.core.pylabtools [] []
IPython.lib [] []
IPython.utils.wildcard [] []
shutil [] []
IPython.utils.docs [] []
IPython.utils.contexts [] []
OpenGL [] []
signal [] []
PyQt5 [] []
sip [] []
itertools [] []
linecache [] []
IPython.utils._process_cli [] []
IPython.sphinxext.ipython_directive [] []
IPython.utils.log [] []
IPython.lib.backgroundjobs [] []
IPython.__main__ [] []

Directories in report

Directory