Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzzer details

Fuzzer: libass_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 2056 55.7%
gold [1:9] 284 7.70%
yellow [10:29] 289 7.84%
greenyellow [30:49] 201 5.45%
lawngreen 50+ 855 23.2%
All colors 3685 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
7525 7639 2 :

['hb_buffer_t::verify(hb_buffer_t*, hb_font_t*, hb_feature_t const*, unsigned int, char const* const*)', 'hb_buffer_destroy']

7525 7643 hb_shape_full call site: 03325 /work/build/../../src/harfbuzz/src/hb-shape.cc:155
1316 1316 1 :

['hb_aat_layout_position(hb_ot_shape_plan_t const*, hb_font_t*, hb_buffer_t*)']

2189 3356 hb_ot_shape_plan_t::position(hb_font_t*,hb_buffer_t*)const call site: 00000 /work/build/../../src/harfbuzz/src/hb-ot-shape.cc:263
166 166 1 :

['ass_update_embedded_fonts']

166 268 ass_start_frame call site: 00560 /src/libass/libass/ass_render.c:3105
91 91 1 :

['load_fonts_from_dir']

253 253 ass_embedded_fonts_add_provider call site: 00107 /src/libass/libass/ass_fontselect.c:1034
84 428 2 :

['hb_buffer_append', 'hb_buffer_create']

7609 20550 hb_shape_full call site: 01588 /work/build/../../src/harfbuzz/src/hb-shape.cc:137
69 69 1 :

['ass_gaussian_blur']

75 88 ass_synth_blur call site: 00000 /src/libass/libass/ass_bitmap.c:75
56 314 5 :

['rasterizer_fill_level', 'polyline_split_vert', 'check_capacity', 'polyline_split_horz', 'ilog2']

56 314 rasterizer_fill_level call site: 00000 /src/libass/libass/ass_rasterizer.c:658
52 52 1 :

['void hb_lockable_set_t ::remove (hb_user_data_key_t*, hb_mutex_t&)']

52 133 hb_user_data_array_t::set(hb_user_data_key_t*,void*,void(*)(void*),int) call site: 00000 /work/build/../../src/harfbuzz/src/hb-object.hh:188
52 52 1 :

['render_glyph_i']

52 52 render_glyph call site: 03617 /src/libass/libass/ass_render.c:415
50 50 1 :

['ass_outline_transform_3d']

50 266 ass_bitmap_construct call site: 00000 /src/libass/libass/ass_render.c:1562
49 76 2 :

['OT::GSUBGPOS::get_feature_variations() const', 'OT::FeatureVariations::find_substitute(unsigned int, unsigned int) const']

49 128 OT::GSUBGPOS::get_feature_variation(unsignedint,unsignedint)const call site: 00000 /work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh:4357
49 64 2 :

['hb_sanitize_context_t::start_processing()', 'hb_blob_get_data_writable']

49 999 hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) call site: 00000 /work/build/../../src/harfbuzz/src/hb-sanitize.hh:364

Runtime coverage analysis

Covered functions
2156
Functions that are reachable but not covered
6212
Reachable functions
8815
Percentage of reachable functions covered
29.53%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/libass/fuzz/fuzz.c 6
/src/libass/libass/ass_library.c 8
/src/libass/libass/ass_render.c 65
/src/libass/libass/ass_utils.c 10
/src/libass/libass/ass_bitmap_engine.c 1
/src/libass/libass/c/c_blend_bitmaps.c 1
/src/libass/libass/c/c_be_blur.c 2
/src/libass/libass/c/blur_template.h 2
/src/libass/libass/ass_rasterizer.c 2
/src/libass/libass/ass_cache.c 15
/src/libass/libass/ass_shaper.c 42
/work/build/../../src/harfbuzz/src/hb-common.cc 13
/src/libass/libass/ass_fontselect.c 21
/src/libass/libass/ass_render_api.c 4
/src/libass/libass/ass_filesystem.c 6
/src/libass/libass/ass.c 40
/src/libass/libass/ass_font.c 14
/src/libass/./libass/ass_utils.h 12
/src/libass/libass/ass_string.c 2
/src/libass/libass/ass_strtod.c 1
/src/libass/./libass/ass_string.h 2
/work/build/../../src/harfbuzz/src/hb-algs.hh 57
/work/build/../../src/harfbuzz/src/hb-atomic.hh 26
/work/build/../../src/harfbuzz/src/failing-alloc.c 5
/src/libass/libass/ass_parse.c 22
/work/build/../../src/harfbuzz/src/hb-unicode.cc 14
/work/build/../../src/harfbuzz/src/hb-ucd.cc 13
/work/build/../../src/harfbuzz/src/hb-machinery.hh 90
/work/build/../../src/harfbuzz/src/hb-null.hh 32
/work/build/../../src/harfbuzz/src/hb-unicode.hh 10
/work/build/../../src/harfbuzz/src/hb-object.hh 45
/work/build/../../src/harfbuzz/src/hb-debug.hh 5
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh 6
/work/build/../../src/harfbuzz/src/hb-buffer.cc 40
/work/build/../../src/harfbuzz/src/hb-buffer.hh 45
/work/build/../../src/harfbuzz/src/hb-face.cc 9
/work/build/../../src/harfbuzz/src/hb-face.hh 4
/work/build/../../src/harfbuzz/src/hb-shaper.hh 6
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh 1
/work/build/../../src/harfbuzz/src/hb-ot-face.hh 1
/work/build/../../src/harfbuzz/src/hb-ot-face.cc 2
/work/build/../../src/harfbuzz/src/hb-blob.cc 8
/work/build/../../src/harfbuzz/src/hb-blob.hh 17
/work/build/../../src/harfbuzz/src/hb-vector.hh 80
/work/build/../../src/harfbuzz/src/hb-mutex.hh 3
/work/build/../../src/harfbuzz/src/hb-font.cc 27
/work/build/../../src/harfbuzz/src/hb-font.hh 36
/work/build/../../src/harfbuzz/src/hb-static.cc 3
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh 1
/work/build/../../src/harfbuzz/src/hb-open-type.hh 38
/work/build/../../src/harfbuzz/src/hb-ot-font.cc 4
/work/build/../../src/harfbuzz/src/hb-array.hh 38
/work/build/../../src/harfbuzz/src/hb-cache.hh 2
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh 4
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh 7
/work/build/../../src/harfbuzz/src/hb-iter.hh 26
/work/build/../../src/harfbuzz/src/hb-ot-var.cc 2
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh 11
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh 5
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc 10
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh 3
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh 5
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc 35
/work/build/../../src/harfbuzz/src/hb-ot-map.hh 17
/work/build/../../src/harfbuzz/src/hb-utf.hh 3
/work/build/../../src/harfbuzz/src/hb-shape.cc 2
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc 31
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh 48
/work/build/../../src/harfbuzz/src/OT/Color/svg/../../../hb-open-type.hh 1
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh 25
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh 27
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh 34
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh 2
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc 10
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc 11
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh 9
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-common.hh 3
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh 2
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc 14
/work/build/../../src/harfbuzz/src/hb-aat-map.hh 5
/work/build/../../src/harfbuzz/src/hb-aat-map.cc 2
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh 5
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh 18
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh 1
/work/build/../../src/harfbuzz/src/hb-dispatch.hh 13
/work/build/../../src/harfbuzz/src/hb-sanitize.hh 11
/work/build/../../src/harfbuzz/src/hb-ot-maxp-table.hh 1
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh 27
/work/build/../../src/harfbuzz/src/hb-meta.hh 2
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh 23
/work/build/../../src/harfbuzz/src/hb-set-digest.hh 23
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh 2
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh 4
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh 1
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh 5
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh 1
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh 18
/work/build/../../src/harfbuzz/src/hb-kern.hh 4
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh 8
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-font.hh 2
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh 6
/work/build/../../src/harfbuzz/src/hb-shaper.cc 1
/work/build/../../src/harfbuzz/src/hb-ot-map.cc 6
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc 8
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh 1
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh 1
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc 1
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc 5
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc 3
/src/libass/libass/ass_outline.c 1

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
hb_ot_shape_glyphs_closure /work/build/../../src/harfbuzz/src/hb-ot-shape.cc 5 ['struct.hb_font_t.1554 *', 'struct.hb_buffer_t.1562 *', 'struct.ASS_Rect *', 'int ', 'struct.hb_set_t *'] 31 0 117 7 3 6116 0 9464 2496
collect_features_arabic(hb_ot_shape_planner_t*) /work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc 1 ['struct.hb_ot_shape_planner_t.4347 *'] 7 0 130 16 6 1819 0 2401 1054
boolOT::OffsetTo >,OT::IntType ,true>::sanitize<>(hb_sanitize_context_t*,voidconst*)const /work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh 3 ['struct.OT::OffsetTo.185 *', 'struct.hb_sanitize_context_t *', 'char *'] 8 0 62 11 5 651 0 996 841
hb_ot_layout_lookup_collect_glyphs /work/build/../../src/harfbuzz/src/hb-ot-layout.cc 7 ['struct.hb_face_t.1575 *', 'int ', 'int ', 'struct.hb_set_t *', 'struct.hb_set_t *', 'struct.hb_set_t *', 'struct.hb_set_t *'] 8 0 106 11 10 1570 0 1877 803
hb_lazy_loader_t ,hb_face_t,16u,OT::cff1_accelerator_t>::create(hb_face_t*) /work/build/../../src/harfbuzz/src/hb-machinery.hh 1 ['struct.hb_face_t.1090 *'] 10 0 37 6 3 740 0 1059 639

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
48.4%
6507/13440
Cyclomatic complexity statically reachable by fuzzers
51.3%
21520 / 41908

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
ass_process_force_style 80 7 8.75% ['libass_fuzzer']
process_info_line 44 11 25.0% ['libass_fuzzer']
process_style 94 51 54.25% ['libass_fuzzer']
ass_charmap_magic 31 14 45.16% ['libass_fuzzer']
ass_face_open 34 8 23.52% ['libass_fuzzer']
ass_get_glyph_outline 72 23 31.94% []
ass_font_provider_add_font 111 55 49.54% ['libass_fuzzer']
ass_parse_tags 596 238 39.93% ['libass_fuzzer']
ass_apply_transition_effects 69 19 27.53% ['libass_fuzzer']
ass_process_karaoke_effects 66 23 34.84% ['libass_fuzzer']
ass_get_next_char 36 19 52.77% ['libass_fuzzer']
rasterizer_fill_level 84 27 32.14% []
ass_outline_construct 83 45 54.21% []
handle_selective_style_overrides 67 32 47.76% ['libass_fuzzer']
blend_vector_clip 94 3 3.191% ['libass_fuzzer']
script_to_language 46 6 13.04% ['libass_fuzzer']
unsignedinthb_popcount (unsignedint) 33 4 12.12% []
unsignedinthb_bit_storage (unsignedint) 49 5 10.20% ['libass_fuzzer']
unsignedinthb_popcount (hb_glyph_flags_t) 33 4 12.12% ['libass_fuzzer']
hb_script_get_horizontal_direction 46 6 13.04% ['libass_fuzzer']
OT::GDEF::is_blocklisted(hb_blob_t*,hb_face_t*)const 43 8 18.60% []
voidhb_ot_map_t::apply (GSUBProxyconst&,hb_ot_shape_plan_tconst*,hb_font_t*,hb_buffer_t*)const 42 23 54.76% ['libass_fuzzer']
voidhb_ot_map_t::apply (GPOSProxyconst&,hb_ot_shape_plan_tconst*,hb_font_t*,hb_buffer_t*)const 42 23 54.76% ['libass_fuzzer']
_hb_ot_shape_normalize(hb_ot_shape_plan_tconst*,hb_buffer_t*,hb_font_t*) 131 57 43.51% ['libass_fuzzer']
decompose_current_character(hb_ot_shape_normalize_context_tconst*,bool) 43 15 34.88% ['libass_fuzzer']
decompose(hb_ot_shape_normalize_context_tconst*,bool,unsignedint) 33 7 21.21% ['libass_fuzzer']
hb_set_unicode_props(hb_buffer_t*) 34 16 47.05% ['libass_fuzzer']
hb_ensure_native_direction(hb_buffer_t*) 33 9 27.27% ['libass_fuzzer']
hb_ot_shape_setup_masks_fraction(hb_ot_shape_context_tconst*) 41 4 9.756% ['libass_fuzzer']
hb_ot_shaper_categorize(hb_ot_shape_planner_tconst*) 134 7 5.223% ['libass_fuzzer']
hb_ot_tags_from_complex_language(charconst*,charconst*,unsignedint*,unsignedint*) 1037 91 8.775% ['libass_fuzzer']
parse_private_use_subtag(charconst*,unsignedint*,unsignedint*,charconst*,unsignedchar(*)(unsignedchar)) 32 2 6.25% ['libass_fuzzer']
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 21 40.38% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 25 48.07% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 21 40.38% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 21 40.38% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 11 21.15% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 11 21.15% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 11 21.15% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 11 21.15% []
hb_blob_t*hb_sanitize_context_t::sanitize_blob (hb_blob_t*) 52 25 48.07% []
hb_shape_full 33 16 48.48% ['libass_fuzzer']
hb_shapers_lazy_loader_t::create() 32 4 12.5% ['libass_fuzzer']
hb_ucd_decompose(hb_unicode_funcs_t*,unsignedint,unsignedint*,unsignedint*,void*) 33 4 12.12% ['libass_fuzzer']
hb_vector_t ::alloc(unsignedint,bool) 41 22 53.65% ['libass_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/CPAL.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-algs.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/glyf/glyf.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat1.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-static.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/GDEF.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubstFormat1.hh [] []
/work/build/hb-ot-shaper-myanmar-machine.rl [] []
/work/build/../../src/harfbuzz/src/hb-paint.cc [] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-ankr-table.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/GSUB.hh ['libass_fuzzer'] []
/src/libass/libass/ass_outline.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-hmtx-table.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/CompositeGlyph.hh [] []
/work/build/../../src/harfbuzz/src/OT/name/../../hb-open-type.hh ['libass_fuzzer'] []
/src/libass/libass/c/c_be_blur.c ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-blob.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-outline.hh [] []
/work/build/../../src/harfbuzz/src/hb-buffer.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/failing-alloc.c ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-dict-common.hh [] []
/work/build/../../src/harfbuzz/src/hb-unicode.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPos.hh [] []
/work/build/../../src/harfbuzz/src/hb-face.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookup.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic.cc [] []
/work/build/../../src/harfbuzz/src/hb-kern.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-os2-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-face.cc ['libass_fuzzer'] []
/src/libass/libass/ass_render.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-var-common.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var-hvar-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-object.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff-common.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/Coverage.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorMatrix.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-gpos-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-mutex.hh ['libass_fuzzer'] []
/src/libass/libass/c/rasterizer_template.h [] []
/work/build/../../src/harfbuzz/src/hb-draw.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-myanmar.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-vorg-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-fvar-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Sequence.hh [] []
/src/libass/libass/ass_filesystem.c ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint-extents.cc [] []
/work/build/hb-ot-shaper-khmer-machine.rl [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-common.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-array.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubst.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff2-interp-cs.hh [] []
/src/libass/fuzz/fuzz.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/hb-ot-shaper-use-machine.rl [] []
/work/build/../../src/harfbuzz/src/hb-dispatch.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-ot-layout-common.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-kern-table.hh ['libass_fuzzer'] []
/src/libass/./libass/ass_cache_template.h [] []
/src/libass/./libass/ass_string.h ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-bit-page.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-gsub-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-open-type.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-vowel-constraints.cc [] []
/work/build/../../src/harfbuzz/src/hb-cff1-interp-cs.hh [] []
/work/build/../../src/harfbuzz/src/hb-font.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubstFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/loca.hh [] []
/src/libass/libass/ass_shaper.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/OT/glyf/composite-iter.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-ot-layout-gsubgpos.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-var.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-set.hh [] []
/work/build/../../src/harfbuzz/src/hb-ucd-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shaper.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/CBDT.hh [] []
/work/build/hb-buffer-deserialize-text-glyphs.rl [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubst.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-null.hh ['libass_fuzzer'] []
/work/build/hb-buffer-deserialize-json.rl [] []
/src/libass/libass/ass.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hangul.cc [] []
/src/libass/libass/c/c_blend_bitmaps.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/hb-buffer-deserialize-text-unicode.rl [] []
/work/build/../../src/harfbuzz/src/hb-ot-font.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-common.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cache.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shaper.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-shape-fallback.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePos.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-tag.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cplusplus.hh [] []
/work/build/../../src/harfbuzz/src/hb-shaper-list.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPos.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPosFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat3.hh [] []
/src/libass/libass/c/c_blur.c [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/Ligature.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PosLookupSubTable.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/ValueFormat.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkMarkPos.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairPosFormat2.hh [] []
/work/build/../../src/harfbuzz/src/hb-number.cc [] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-draw.hh [] []
/work/build/../../src/harfbuzz/src/hb-vector.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-shape-plan.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat2.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../hb-serialize.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairValueRecord.hh [] []
/work/build/../../src/harfbuzz/src/hb-blob.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/svg/../../../hb-blob.hh [] []
/work/build/../../src/harfbuzz/src/hb-buffer.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-hhea-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-thai.cc [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePos.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-tag-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkRecord.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/Anchor.hh [] []
/work/build/../../src/harfbuzz/src/hb-atomic.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSet.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout-base-table.hh [] []
/src/libass/./libass/ass_outline.h [] []
/work/build/../../src/harfbuzz/src/hb-aat-map.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-maxp-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-machinery.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-kerx-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/svg/../../../hb-open-type.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-common.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-post-table.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSubst.hh ['libass_fuzzer'] []
/src/libass/libass/ass_fontconfig.c [] []
/work/build/../../src/harfbuzz/src/hb-shape.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-set-digest.hh ['libass_fuzzer'] []
/src/libass/libass/ass_string.c ['libass_fuzzer'] ['libass_fuzzer']
/src/libass/libass/c/blur_template.h ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookupSubTable.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-pool.hh [] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-paint-extents.hh [] []
/src/libass/libass/ass_font.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-map.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-feat-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-cff1-table.cc [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../hb-font.hh ['libass_fuzzer'] []
/src/libass/libass/ass_parse.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-fallback.hh [] []
/work/build/../../src/harfbuzz/src/OT/name/name.hh [] []
/src/libass/libass/ass_blur.c [] []
/work/build/../../src/harfbuzz/src/hb-aat-map.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/GlyphHeader.hh [] []
/work/build/../../src/harfbuzz/src/hb-buffer-verify.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/GPOS.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-ltag-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-pua.hh [] []
/work/build/../../src/harfbuzz/src/hb-shape-plan.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-aat-layout.hh [] []
/src/libass/libass/ass_bitmap_engine.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubst.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-syllabic.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-arabic-joining-list.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-indic-table.cc [] []
/work/build/../../src/harfbuzz/src/hb-string-array.hh [] []
/src/libass/libass/ass_utils.c ['libass_fuzzer'] ['libass_fuzzer']
/src/libass/./libass/ass_utils.h ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-draw.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/Glyph.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-metrics.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-khmer.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-mvar-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-var-avar-table.hh ['libass_fuzzer'] []
/src/libass/./libass/wyhash.h [] []
/work/build/../../src/harfbuzz/src/OT/Color/sbix/sbix.hh [] []
/work/build/../../src/harfbuzz/src/hb-outline.cc [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/PairSet.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/RangeRecord.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shape-normalize.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkLigPosFormat1.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-hebrew.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-layout.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-utf.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-meta-table.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/SimpleGlyph.hh [] []
/work/build/../../src/harfbuzz/src/hb-ucd.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../hb-ot-layout-gsubgpos.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-map.hh [] []
/work/build/../../src/harfbuzz/src/hb-bit-set-invertible.hh [] []
/work/build/../../src/harfbuzz/src/hb-font.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-paint-extents.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/CursivePosFormat1.hh [] []
/src/libass/libass/ass_drawing.c [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/ReverseChainSingleSubstFormat1.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-face.cc ['libass_fuzzer'] []
/src/libass/libass/ass_render_api.c ['libass_fuzzer'] ['libass_fuzzer']
/src/libass/libass/ass_cache.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-common.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/AlternateSubstFormat1.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/Common/CoverageFormat2.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-iter.hh ['libass_fuzzer'] []
/src/libass/libass/ass_strtod.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-open-file.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-head-table.hh [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat1.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkBasePosFormat1.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-face.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-cs-common.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-cmap-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-fallback-shape.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePos.hh [] []
/work/build/../../src/harfbuzz/src/hb-unicode.cc ['libass_fuzzer'] []
/src/libass/libass/ass_fontselect.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-debug.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-cff-interp-common.hh [] []
/work/build/../../src/harfbuzz/src/hb-buffer-serialize.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/MultipleSubst.hh ['libass_fuzzer'] []
/work/build/hb-number-parser.rl [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/AnchorFormat1.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-color.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-head-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-shaper-use.cc [] []
/work/build/../../src/harfbuzz/src/hb-ot-shape.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/SinglePosFormat2.hh [] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../hb-ot-var-common.hh [] []
/work/build/../../src/harfbuzz/src/OT/Color/svg/../../../hb-paint.hh [] []
/work/build/../../src/harfbuzz/src/hb-paint.hh [] []
/work/build/../../src/harfbuzz/src/hb-aat-layout-trak-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-ot-map.hh ['libass_fuzzer'] []
/src/libass/libass/ass_bitmap.c [] []
/work/build/../../src/harfbuzz/src/hb-set.cc [] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SubstLookup.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/hb-meta.hh ['libass_fuzzer'] []
/src/libass/libass/ass_rasterizer.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-aat-layout-morx-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/MarkArray.hh [] []
/work/build/../../src/harfbuzz/src/OT/Color/svg/svg.hh [] []
/src/libass/libass/ass_library.c ['libass_fuzzer'] ['libass_fuzzer']
/work/build/../../src/harfbuzz/src/hb-ot-layout.cc ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/LigatureSet.hh [] []
/work/build/hb-ot-shaper-indic-machine.rl [] []
/work/build/../../src/harfbuzz/src/hb-unicode-emoji-table.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Color/COLR/COLR.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/path-builder.hh [] []
/work/build/../../src/harfbuzz/src/OT/glyf/../../hb-ot-var-gvar-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-ot-cff2-table.hh [] []
/work/build/../../src/harfbuzz/src/hb-bit-set.hh [] []
/work/build/../../src/harfbuzz/src/hb-sanitize.hh ['libass_fuzzer'] []
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/SingleSubstFormat2.hh [] []

Directories in report

Directory
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/../../../
/work/build/../../src/harfbuzz/src/OT/Color/COLR/
/src/libass/libass/
/work/build/../../src/harfbuzz/src/OT/Color/svg/
/work/build/../../src/harfbuzz/src/OT/name/../../
/work/build/
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/
/work/build/../../src/harfbuzz/src/OT/Color/sbix/
/work/build/../../src/harfbuzz/src/OT/Color/CBDT/
/work/build/../../src/harfbuzz/src/OT/Color/svg/../../../
/work/build/../../src/harfbuzz/src/OT/glyf/../../
/work/build/../../src/harfbuzz/src/OT/Layout/GSUB/../../../
/src/libass/fuzz/
/work/build/../../src/harfbuzz/src/OT/name/
/src/libass/./libass/
/src/libass/libass/c/
/work/build/../../src/harfbuzz/src/OT/glyf/
/work/build/../../src/harfbuzz/src/OT/Layout/Common/
/work/build/../../src/harfbuzz/src/OT/Color/CPAL/
/work/build/../../src/harfbuzz/src/OT/Color/COLR/../../../
/work/build/../../src/harfbuzz/src/OT/Layout/GPOS/../../../
/work/build/../../src/harfbuzz/src/
/work/build/../../src/harfbuzz/src/OT/Layout/GDEF/