Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: fuzz_inputsplitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7 100.%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 0 0.0%
All colors 7 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
6 0 EP call site: 00000 atheris.FuzzedDataProvider

Runtime coverage analysis

Covered functions
621
Functions that are reachable but not covered
7
Reachable functions
7
Percentage of reachable functions covered
0.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/ 1
...fuzz_inputsplitter 6

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
IPython.terminal.embed.InteractiveShellEmbed.__call__ IPython.terminal.embed 8 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 11 0 4 7 6 190 0 624 624
IPython.extensions.autoreload.AutoreloadMagics.autoreload IPython.extensions.autoreload 2 ['N/A', 'N/A'] 6 0 2 10 7 119 0 402 369
IPython.core.oinspect.Inspector._get_info IPython.core.oinspect 7 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 10 0 2 3 4 119 1 396 327
IPython.sphinxext.ipython_directive.IPythonDirective.run IPython.sphinxext.ipython_directive 1 ['N/A'] 5 0 9 6 5 85 0 282 249
IPython.core.completer.IPCompleter.dict_key_matches IPython.core.completer 2 ['N/A', 'N/A'] 7 0 2 13 8 90 1 316 241
IPython.core.page.page_file IPython.core.page 3 ['N/A', 'N/A', 'N/A'] 6 0 4 2 4 79 0 254 203
IPython.core.magics.execution.ExecutionMagics.run IPython.core.magics.execution 4 ['N/A', 'N/A', 'N/A', 'N/A'] 3 0 10 25 13 77 0 255 195

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
11.0%
219 / 2000
Cyclomatic complexity statically reachable by fuzzers
13.0%
888 / 7031

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
traitlets.config.configurable.Configurable.exit 258 61 23.64% ['fuzz_inputsplitter']
traitlets.config.application.Application.print_subcommands 520 150 28.84% ['fuzz_inputsplitter']
traitlets.config.loader.Config 587 165 28.10% ['fuzz_inputsplitter']
traitlets.config.get_config 1736 230 13.24% ['fuzz_inputsplitter']
IPython.core.application.BaseIPythonApplication.init_profile_dir 37 0 0.0% []
name.find 114 11 9.649% ['fuzz_inputsplitter']
subprocess.check_call 243 67 27.57% ['fuzz_inputsplitter']
tokens.extend 148 50 33.78% ['fuzz_inputsplitter']
f.writelines 505 67 13.26% ['fuzz_inputsplitter']
IPython.utils._process_posix.ProcessHandler.system 37 1 2.702% ['fuzz_inputsplitter']
IPython.core.completer.rectify_completions 32 9 28.12% ['fuzz_inputsplitter']
IPython.core.completer.Completer._strip_code_before_operator 31 1 3.225% ['fuzz_inputsplitter']
IPython.core.completer.Completer._attr_matches 39 1 2.564% ['fuzz_inputsplitter']
IPython.core.completer.match_dict_keys.filter_prefix_tuple 60 1 1.666% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter.file_matcher 43 2 4.651% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter._jedi_matches 46 4 8.695% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter._is_in_string_or_comment 62 2 3.225% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter.python_func_kw_matches 56 2 3.571% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter.dict_key_matches 51 2 3.921% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter._completions.is_non_jedi_result 35 1 2.857% ['fuzz_inputsplitter']
IPython.core.completer.IPCompleter._complete 65 2 3.076% ['fuzz_inputsplitter']
IPython.external.pickleshare.main 31 1 3.225% ['fuzz_inputsplitter']
IPython.core.guarded_eval.eval_node 106 1 0.943% ['fuzz_inputsplitter']
IPython.core.guarded_eval._resolve_annotation 43 1 2.325% ['fuzz_inputsplitter']
IPython.core.magics.code.CodeMagics.save 36 2 5.555% ['fuzz_inputsplitter']
IPython.core.magics.code.CodeMagics.load 31 0 0.0% []
IPython.core.magics.code.CodeMagics._find_edit_target.make_filename 75 0 0.0% []
IPython.core.magics.code.CodeMagics.edit 47 0 0.0% []
tokenize.open.readlines 428 72 16.82% ['fuzz_inputsplitter']
IPython.core.magic.Magics.parse_options 38 0 0.0% []
completion.get_signatures 396 55 13.88% ['fuzz_inputsplitter']
signature.defined_names 110 36 32.72% ['fuzz_inputsplitter']
typing_extensions.TypedDict.get 1669 477 28.57% ['fuzz_inputsplitter']
interpreter.complete 35 19 54.28% ['fuzz_inputsplitter']
IPython.core.oinspect.Inspector._make_info_unformatted.code_formatter 33 0 0.0% []
IPython.core.oinspect.Inspector.info 141 14 9.929% ['fuzz_inputsplitter']
cmd.replace 161 34 21.11% ['fuzz_inputsplitter']
names.pop 465 144 30.96% ['fuzz_inputsplitter']
IPython.core.inputtransformer2.TransformerManager.check_complete 74 0 0.0% []
IPython.core.magics.osm.OSMagics.rehashx 43 1 2.325% ['fuzz_inputsplitter']
IPython.core.magics.osm.OSMagics.cd 66 0 0.0% []
IPython.core.magics.osm.OSMagics.bookmark 31 0 0.0% []
IPython.utils.tokenutil.token_at_cursor 50 0 0.0% []
IPython.utils.PyColorize.Parser.format2 42 0 0.0% []
value._render_traceback_ 336 128 38.09% ['fuzz_inputsplitter']
IPython.core.history.extract_hist_ranges 31 0 0.0% []
decorator.strip 280 72 25.71% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.__init__ 43 2 4.651% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.reset 35 0 0.0% []
IPython.core.interactiveshell.InteractiveShell._ofind 53 0 0.0% []
IPython.core.interactiveshell.InteractiveShell.run_cell_async.error_before_exec 69 0 0.0% []
IPython.core.interactiveshell.InteractiveShell.run_code 31 1 3.225% ['fuzz_inputsplitter']
IPython.core.interactiveshell.InteractiveShell.find_user_code 41 0 0.0% []
IPython.core.logger.Logger.logstart 42 0 0.0% []
IPython.core.magics.logging.LoggingMagics.logstart 43 0 0.0% []
IPython.core.ultratb.ListTB._format_exception_only 49 0 0.0% []
IPython.core.ultratb.VerboseTB.format_record 52 0 0.0% []
IPython.core.ultratb.VerboseTB.get_records 40 0 0.0% []
var.strip 90 21 23.33% ['fuzz_inputsplitter']
out.append 189 48 25.39% ['fuzz_inputsplitter']
IPython.core.prefilter.AutoHandler.handle 38 3 7.894% ['fuzz_inputsplitter']
IPython.core.formatters.DisplayFormatter.format 34 0 0.0% []
IPython.core.display_functions.display 34 0 0.0% []
IPython.core.page.pager_page 52 0 0.0% []
IPython.core.display.Image.__init__ 55 0 0.0% []
prefix.startswith 64 23 35.93% ['fuzz_inputsplitter']
IPython.core.debugger.Pdb.format_stack_entry 44 0 0.0% []
IPython.core.debugger_backport.PdbClosureBackport.default 42 0 0.0% []
IPython.terminal.interactiveshell.TerminalInteractiveShell._merge_shortcuts 38 2 5.263% ['fuzz_inputsplitter']
IPython.terminal.shortcuts.auto_suggest.AppendAutoSuggestionInAnyLine.apply_transformation 55 8 14.54% ['fuzz_inputsplitter']
IPython.terminal.shortcuts.auto_suggest.accept_token 32 1 3.125% ['fuzz_inputsplitter']
prompt_toolkit.layout.processors.Transformation 402 110 27.36% ['fuzz_inputsplitter']
prompt_toolkit.patch_stdout.patch_stdout 124 38 30.64% ['fuzz_inputsplitter']
IPython.core.magics.config.ConfigMagics.config 34 0 0.0% []
prompt_toolkit.history.InMemoryHistory 136 44 32.35% ['fuzz_inputsplitter']
prompt_toolkit.shortcuts.prompt.PromptSession 478 90 18.82% ['fuzz_inputsplitter']
document.text.lstrip 531 122 22.97% ['fuzz_inputsplitter']
wcwidth.wcwidth 101 20 19.80% ['fuzz_inputsplitter']
IPython.terminal.embed.InteractiveShellEmbed.mainloop 32 0 0.0% []
IPython.terminal.embed.embed 32 0 0.0% []
IPython.core.doctb.DocTB.format_record 32 0 0.0% []
IPython.core.doctb.DocTB.get_records 32 0 0.0% []
parser.parse 111 31 27.92% ['fuzz_inputsplitter']
prompt_toolkit.application.current.get_app.current_buffer.document.text_before_cursor.replace 68 27 39.70% ['fuzz_inputsplitter']
buffer.auto_suggest.get_suggestion 824 144 17.47% ['fuzz_inputsplitter']
prompt_toolkit.key_binding.bindings.named_commands.backward_delete_char 281 125 44.48% ['fuzz_inputsplitter']
IPython.core.magics.namespace.NamespaceMagics.whos.type_name 48 0 0.0% []
IPython.core.magics.namespace.NamespaceMagics.reset 48 0 0.0% []
base.lower 251 86 34.26% ['fuzz_inputsplitter']
IPython.core.magics.script.ScriptMagics.shebang._stream_communicate 74 1 1.351% ['fuzz_inputsplitter']
defaults.extend 31 8 25.80% ['fuzz_inputsplitter']
IPython.core.magics.history.HistoryMagics.history._format_lineno 60 0 0.0% []
IPython.core.magics.history.HistoryMagics.rerun 34 0 0.0% []
IPython.core.magics.basic.BasicMagics.notebook 33 0 0.0% []
param.lower 130 17 13.07% ['fuzz_inputsplitter']
IPython.core.magics.execution.ExecutionMagics._run_with_profiler 43 0 0.0% []
IPython.core.magics.execution.ExecutionMagics.run 85 0 0.0% []
IPython.core.magics.execution.ExecutionMagics._run_with_debugger 50 0 0.0% []
IPython.core.magics.execution.ExecutionMagics.timeit 71 6 8.450% ['fuzz_inputsplitter']
IPython.core.magics.execution.ExecutionMagics.time.Args.__init__ 86 1 1.162% ['fuzz_inputsplitter']
IPython.extensions.storemagic.StoreMagics.store 75 0 0.0% []
pytest.fixture 156 33 21.15% ['fuzz_inputsplitter']
stdout.strip 37 10 27.02% ['fuzz_inputsplitter']
module.__dict__.update 131 47 35.87% ['fuzz_inputsplitter']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
textwrap [] []
IPython.core.magics.namespace [] []
weakref [] []
pathlib2 [] []
uuid [] []
IPython.utils.capture [] []
IPython.core.payload [] []
IPython.core.profiledir [] []
IPython.lib [] []
IPython.utils.docs [] []
binascii [] []
IPython.external [] []
IPython.terminal.ptutils [] []
[] []
IPython.core.extensions [] []
asyncio [] []
IPython.terminal.pt_inputhooks.glut [] []
IPython.core.magics.packaging [] []
IPython.core.getipython [] []
IPython.terminal.pt_inputhooks.asyncio [] []
IPython.testing.skipdoctest [] []
jupyter_ai [] []
IPython.testing.plugin.setup [] []
runpy [] []
IPython.core.tbtools [] []
IPython.testing.plugin.ipdoctest [] []
IPython.terminal.pt_inputhooks.tk [] []
sqlite3 [] []
matplotlib_inline [] []
numpy [] []
linecache [] []
IPython.core.debugger [] []
yapf [] []
IPython.utils.data [] []
IPython.sphinxext.ipython_directive [] []
IPython.testing.plugin.simple [] []
IPython.paths [] []
os [] []
IPython.utils._process_cli [] []
IPython.extensions.deduperreload.deduperreload_patching [] []
IPython.utils._process_common [] []
curses [] []
pprint [] []
IPython.core.macro [] []
types [] []
IPython.core.magics.basic [] []
IPython [] []
mimetypes [] []
string [] []
IPython.lib.deepreload [] []
IPython.terminal.pt_inputhooks.gtk [] []
IPython.utils.sysinfo [] []
IPython.utils.module_paths [] []
black [] []
IPython.core.ultratb [] []
IPython.core.magics.display [] []
IPython.core.error [] []
IPython.testing.plugin.test_ipdoctest [] []
IPython.utils.decorators [] []
shlex [] []
IPython.core.debugger_backport [] []
wcwidth [] []
threading [] []
System [] []
sip [] []
hashlib [] []
codeop [] []
IPython.terminal.shortcuts.filters [] []
IPython.utils.openpy [] []
IPython.extensions.deduperreload.deduperreload [] []
IPython.testing [] []
IPython.core.magics.extension [] []
IPython.testing.plugin.test_refs [] []
atheris [] []
platform [] []
html [] []
jedi [] []
IPython.core.autocall [] []
IPython.utils.io [] []
IPython.terminal.magics [] []
IPython.utils.encoding [] []
msvcrt [] []
IPython.core.magic_arguments [] []
IPython.lib.demo [] []
pstats [] []
IPython.lib.pretty [] []
getopt [] []
setuptools [] []
IPython.utils._process_posix [] []
IPython.core.page [] []
sphinx [] []
IPython.terminal.embed [] []
keyword [] []
IPython.core.magics.code [] []
IPython.utils.sentinel [] []
site [] []
wx [] []
IPython.terminal.interactiveshell [] []
IPython.core.tips [] []
IPython.core.prefilter [] []
IPython.utils.py3compat [] []
IPython.core.release [] []
IPython.core.events [] []
argparse [] []
IPython.terminal.shortcuts.auto_match [] []
IPython.testing.decorators [] []
IPython.lib.backgroundjobs [] []
typing [] []
IPython.core.guarded_eval [] []
logging [] []
IPython.terminal.debugger [] []
IPython.utils._sysinfo [] []
IPython.core.historyapp [] []
warnings [] []
IPython.core.profileapp [] []
traitlets [] []
gi [] []
math [] []
IPython.terminal.pt_inputhooks.gtk4 [] []
shutil [] []
ast [] []
operator [] []
pytest [] []
_pytest [] []
IPython.core.interactiveshell [] []
IPython.utils.ipstruct [] []
...fuzz_inputsplitter ['fuzz_inputsplitter'] []
IPython.terminal.prompts [] []
IPython.core.compilerop [] []
codecs [] []
IPython.display [] []
ipython_pygments_lexers [] []
tokenize [] []
IPython.core.splitinput [] []
IPython.extensions.autoreload [] []
IPython.utils.tempdir [] []
IPython.utils.PyColorize [] []
IPython.terminal.shortcuts.auto_suggest [] []
IPython.testing.plugin [] []
IPython.core.application [] []
IPython.core.builtin_trap [] []
IPython.core.magics.script [] []
IPython.core.crashhandler [] []
IPython.core.magics.pylab [] []
doctest [] []
locale [] []
ctypes [] []
IPython.core [] []
IPython.utils._process_win32_controller [] []
IPython.utils.coloransi [] []
docrepr [] []
IPython.core.display_trap [] []
functools [] []
IPython.utils._process_emscripten [] []
reprlib [] []
random [] []
IPython.core.display_functions [] []
IPython.utils.frame [] []
prompt_toolkit [] []
IPython.extensions.storemagic [] []
win32clipboard [] []
IPython.sphinxext.custom_doctests [] []
IPython.terminal.pt_inputhooks.gtk3 [] []
pyglet [] []
subprocess [] []
IPython.utils.dir2 [] []
gtk [] []
winreg [] []
itertools [] []
zipimport [] []
wave [] []
ipykernel [] []
enum [] []
termios [] []
IPython.utils.log [] []
IPython.core.async_helpers [] []
IPython.terminal.pt_inputhooks.wx [] []
struct [] []
IPython.utils.timing [] []
docutils [] []
IPython.utils.terminal [] []
pexpect [] []
IPython.utils.syspathcontext [] []
IPython.core.alias [] []
IPython.lib.clipboard [] []
pickle [] []
gobject [] []
IPython.testing.plugin.dtexample [] []
IPython.extensions.deduperreload [] []
IPython.utils.generics [] []
IPython.testing.plugin.simplevars [] []
IPython.utils.jsonutil [] []
collections [] []
IPython.utils [] []
curio [] []
IPython.core.doctb [] []
IPython.lib.display [] []
importlib [] []
OpenGL [] []
IPython.core.inputtransformer2 [] []
dataclasses [] []
IPython.core.magics.auto [] []
gc [] []
array [] []
IPython.core.pylabtools [] []
resource [] []
IPython.external.qt_loaders [] []
IPython.lib.latextools [] []
IPython.terminal.shortcuts [] []
pdb [] []
IPython.terminal.ipapp [] []
IPython.core.completer [] []
IPython.testing.tools [] []
sys [] []
IPython.external.pickleshare [] []
IPython.extensions [] []
xml [] []
IPython.utils.strdispatch [] []
cPickle [] []
IPython.utils.eventful [] []
time [] []
IPython.core.logger [] []
IPython.core.latex_symbols [] []
re [] []
IPython.core.displayhook [] []
gzip [] []
IPython.terminal [] []
IPython.utils.text [] []
unittest [] []
io [] []
inspect [] []
pathlib [] []
IPython.core.oinspect [] []
stack_data [] []
IPython.core.magics.ast_mod [] []
IPython.core.completerlib [] []
IPython.testing.ipunittest [] []
tempfile [] []
IPython.core.magics.history [] []
matplotlib [] []
pydoc [] []
IPython.core.formatters [] []
IPython.core.magics.config [] []
contextlib [] []
IPython.core.display [] []
copy [] []
testpath [] []
IPython.terminal.pt_inputhooks.osx [] []
IPython.testing.globalipapp [] []
cProfile [] []
colorama [] []
IPython.lib.guisupport [] []
IPython.core.history [] []
typing_extensions [] []
atexit [] []
IPython.core.magics.execution [] []
IPython.sphinxext [] []
IPython.external.qt_for_kernel [] []
unicodedata [] []
IPython.lib.editorhooks [] []
IPython.utils.tokenutil [] []
IPython.terminal.pt_inputhooks [] []
IPython.core.magics.osm [] []
IPython.core.payloadpage [] []
IPython.utils.path [] []
IPython.utils.contexts [] []
IPython.terminal.pt_inputhooks.qt [] []
tkinter [] []
traceback [] []
IPython.__main__ [] []
builtins [] []
datetime [] []
base64 [] []
IPython.utils._process_win32 [] []
IPython.core.hooks [] []
IPython.core.displaypub [] []
json [] []
PyQt5 [] []
IPython.core.shellapp [] []
nbformat [] []
pygments [] []
concurrent [] []
IPython.core.usage [] []
IPython.core.magics [] []
IPython.sphinxext.ipython_console_highlighting [] []
signal [] []
urllib [] []
IPython.utils.wildcard [] []
IPython.utils.process [] []
IPython.utils.importstring [] []
glob [] []
IPython.testing.plugin.pytest_ipdoctest [] []
fnmatch [] []
trio [] []
IPython.terminal.pt_inputhooks.pyglet [] []
IPython.lib.lexers [] []
IPython.core.magics.logging [] []
IPython.core.magic [] []
timeit [] []

Directories in report

Directory