Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Report generation date: 2026-11-12

Project overview: libcoap

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
71.0%
722 / 1021
Cyclomatic complexity statically reachable by fuzzers
85.0%
8246 / 9694
Runtime code coverage of functions
55.0%
561 / 1021

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
oscore_cbor_fuzzer tests/oss-fuzz/oscore_cbor_target.c 33 1203 4 9 164 89 oscore_cbor_target.c
get_asn1_tag_fuzzer tests/oss-fuzz/get_asn1_tag_target.c 25 1216 7 6 140 85 get_asn1_tag_target.c
split_uri_fuzzer tests/oss-fuzz/split_uri_target.c 28 1208 5 7 351 154 split_uri_target.c
dtls_define_fuzzer tests/oss-fuzz/dtls_define_target.c 21 1215 4 4 209 78 dtls_define_target.c
oscore_conf_parse_fuzzer tests/oss-fuzz/oscore_conf_parse_target.c 61 1175 8 12 804 329 oscore_conf_parse_target.c
pdu_parse_ws_fuzzer tests/oss-fuzz/pdu_parse_ws_target.c 98 1138 7 15 2066 680 pdu_parse_ws_target.c
pdu_parse_tcp_fuzzer tests/oss-fuzz/pdu_parse_tcp_target.c 98 1138 7 15 2066 680 pdu_parse_tcp_target.c
pdu_parse_udp_fuzzer tests/oss-fuzz/pdu_parse_udp_target.c 98 1138 7 15 2066 680 pdu_parse_udp_target.c
persist_fuzzer tests/oss-fuzz/persist_target.c 835 407 44 39 22610 7878 persist_target.c
oscore_decrypt_fuzzer tests/oss-fuzz/oscore_decrypt_target.c 811 425 44 39 22583 7826 oscore_decrypt_target.c
block_check_fuzzer tests/oss-fuzz/block_check_target.c 813 427 44 40 22275 7721 block_check_target.c
ws_frame_fuzzer tests/oss-fuzz/ws_frame_target.c 815 431 44 40 22605 7853 ws_frame_target.c
uri_extended_fuzzer tests/oss-fuzz/uri_extended_target.c 82 1154 6 14 1255 465 uri_extended_target.c
cache_key_fuzzer tests/oss-fuzz/cache_key_target.c 801 435 44 39 22124 7647 cache_key_target.c
observe_fuzzer tests/oss-fuzz/observe_target.c 809 434 44 41 22199 7695 observe_target.c
network_message_fuzzer tests/oss-fuzz/network_message_target.c 823 419 44 39 22233 7748 network_message_target.c
proxy_fuzzer tests/oss-fuzz/proxy_target.c 807 435 44 40 22186 7690 proxy_target.c
block_fuzzer tests/oss-fuzz/block_target.c 815 428 44 41 22267 7716 block_target.c
async_fuzzer tests/oss-fuzz/async_target.c 820 423 44 41 22341 7747 async_target.c

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: oscore_cbor_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 5 10.0%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 45 90.0%
All colors 50 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
2 16 coap_cleanup call site: 00016 ENGINE_finish
1 11 coap_dtls_startup call site: 00011 OPENSSL_init_crypto
1 14 LLVMFuzzerTestOneInput call site: 00014 coap_cleanup
1 20 coap_cleanup call site: 00020 coap_free_type

Runtime coverage analysis

Covered functions
30
Functions that are reachable but not covered
4
Reachable functions
33
Percentage of reachable functions covered
87.88%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/oscore_cbor_target.c 1
src/coap_net.c 2
src/coap_time.c 3
src/coap_prng.c 2
src/coap_mem.c 3
src/coap_openssl.c 3
src/coap_debug.c 2
src/coap_uri.c 1
src/oscore/oscore_cbor.c 12

Fuzzer: get_asn1_tag_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 17 53.1%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 15 46.8%
All colors 32 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
17 9 coap_new_string call site: 00009 coap_log_impl

Runtime coverage analysis

Covered functions
10
Functions that are reachable but not covered
15
Reachable functions
25
Percentage of reachable functions covered
40.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/get_asn1_tag_target.c 1
src/coap_asn1.c 4
src/coap_str.c 3
src/coap_mem.c 2
src/coap_debug.c 4
src/coap_time.c 3

Fuzzer: split_uri_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 22 32.3%
gold [1:9] 13 19.1%
yellow [10:29] 2 2.94%
greenyellow [30:49] 4 5.88%
lawngreen 50+ 27 39.7%
All colors 68 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
4 28 coap_dtls_is_supported call site: 00028 coap_log_impl
4 40 coap_tls_is_supported call site: 00040 coap_log_impl
4 50 coap_wss_is_supported call site: 00050 coap_log_impl
2 25 coap_dtls_is_supported call site: 00025 coap_log_impl
2 33 coap_split_uri_sub call site: 00033 coap_log_impl
2 37 coap_tls_is_supported call site: 00037 coap_log_impl
2 46 coap_ws_is_supported call site: 00046 coap_log_impl
1 6 coap_split_uri_sub call site: 00006 vsnprintf
1 17 coap_log_impl call site: 00017 snprintf

Runtime coverage analysis

Covered functions
15
Functions that are reachable but not covered
13
Reachable functions
28
Percentage of reachable functions covered
53.57%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/split_uri_target.c 1
src/coap_uri.c 2
src/coap_debug.c 4
src/coap_time.c 3
src/coap_openssl.c 2
src/coap_strm_posix.c 1
src/coap_ws.c 2

Fuzzer: dtls_define_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 15 25.0%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 45 75.0%
All colors 60 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
15 10 coap_dtls_define_issue call site: 00010 print_timestamp

Runtime coverage analysis

Covered functions
5
Functions that are reachable but not covered
16
Reachable functions
21
Percentage of reachable functions covered
23.81%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/dtls_define_target.c 1
src/coap_debug.c 5
src/coap_dtls.c 3
src/coap_time.c 3

Fuzzer: oscore_conf_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 30 17.2%
gold [1:9] 20 11.4%
yellow [10:29] 10 5.74%
greenyellow [30:49] 4 2.29%
lawngreen 50+ 110 63.2%
All colors 174 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
16 41 coap_new_string call site: 00041 coap_log_impl
4 94 coap_delete_bin_const call site: 00094 coap_log_impl
4 126 coap_parse_oscore_rcp_conf_mem call site: 00126 coap_log_impl
2 16 coap_cleanup call site: 00016 ENGINE_finish
1 11 coap_dtls_startup call site: 00011 OPENSSL_init_crypto
1 14 LLVMFuzzerTestOneInput call site: 00014 coap_cleanup
1 20 coap_cleanup call site: 00020 coap_free_type
1 148 coap_parse_oscore_conf_mem call site: 00148 __assert_fail

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
22
Reachable functions
61
Percentage of reachable functions covered
63.93%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/oscore_conf_parse_target.c 1
src/coap_net.c 2
src/coap_time.c 4
src/coap_prng.c 2
src/coap_mem.c 3
src/coap_openssl.c 3
src/coap_debug.c 6
src/coap_uri.c 1
src/coap_oscore.c 10
src/coap_str.c 6
src/oscore/oscore_cose.c 4
src/oscore/oscore.c 1

Fuzzer: pdu_parse_ws_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 243 54.2%
gold [1:9] 17 3.79%
yellow [10:29] 14 3.12%
greenyellow [30:49] 4 0.89%
lawngreen 50+ 170 37.9%
All colors 448 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
159 247 coap_show_pdu call site: 00247 coap_option_next
17 31 coap_pdu_parse2 call site: 00031 coap_log_impl
13 416 coap_pdu_encode_header call site: 00416 coap_log_impl
5 407 LLVMFuzzerTestOneInput call site: 00407 coap_log_impl
4 53 coap_pdu_parse2 call site: 00053 coap_log_impl
4 103 coap_pdu_parse_opt call site: 00103 coap_log_impl
4 108 coap_pdu_parse_opt call site: 00108 coap_log_impl
4 194 coap_dtls_is_supported call site: 00194 coap_log_impl
4 214 coap_wss_is_supported call site: 00214 coap_log_impl
3 175 coap_get_uri_path call site: 00175 coap_new_string
2 50 coap_realloc_type call site: 00050 coap_log_impl
2 58 coap_pdu_parse_header call site: 00058 coap_log_impl

Runtime coverage analysis

Covered functions
68
Functions that are reachable but not covered
31
Reachable functions
98
Percentage of reachable functions covered
68.37%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/pdu_parse_ws_target.c 1
src/coap_net.c 2
src/coap_time.c 4
src/coap_prng.c 2
src/coap_mem.c 4
src/coap_openssl.c 5
src/coap_pdu.c 18
src/coap_debug.c 13
src/coap_option.c 12
src/coap_encode.c 3
src/coap_uri.c 9
src/coap_str.c 3
src/coap_strm_posix.c 1
src/coap_ws.c 2
src/coap_block.c 1

Fuzzer: pdu_parse_tcp_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 240 53.5%
gold [1:9] 17 3.79%
yellow [10:29] 16 3.57%
greenyellow [30:49] 2 0.44%
lawngreen 50+ 173 38.6%
All colors 448 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
159 247 coap_show_pdu call site: 00247 coap_option_next
17 31 coap_pdu_parse2 call site: 00031 coap_log_impl
5 407 LLVMFuzzerTestOneInput call site: 00407 coap_log_impl
4 103 coap_pdu_parse_opt call site: 00103 coap_log_impl
4 108 coap_pdu_parse_opt call site: 00108 coap_log_impl
4 194 coap_dtls_is_supported call site: 00194 coap_log_impl
4 214 coap_wss_is_supported call site: 00214 coap_log_impl
4 425 coap_pdu_encode_header call site: 00425 coap_log_impl
3 53 coap_pdu_parse2 call site: 00053 coap_log_impl
3 57 coap_pdu_parse_header call site: 00057 coap_log_impl
3 175 coap_get_uri_path call site: 00175 coap_new_string
2 50 coap_realloc_type call site: 00050 coap_log_impl

Runtime coverage analysis

Covered functions
68
Functions that are reachable but not covered
31
Reachable functions
98
Percentage of reachable functions covered
68.37%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/pdu_parse_tcp_target.c 1
src/coap_net.c 2
src/coap_time.c 4
src/coap_prng.c 2
src/coap_mem.c 4
src/coap_openssl.c 5
src/coap_pdu.c 18
src/coap_debug.c 13
src/coap_option.c 12
src/coap_encode.c 3
src/coap_uri.c 9
src/coap_str.c 3
src/coap_strm_posix.c 1
src/coap_ws.c 2
src/coap_block.c 1

Fuzzer: pdu_parse_udp_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 242 54.0%
gold [1:9] 19 4.24%
yellow [10:29] 16 3.57%
greenyellow [30:49] 2 0.44%
lawngreen 50+ 169 37.7%
All colors 448 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
159 247 coap_show_pdu call site: 00247 coap_option_next
19 410 coap_pdu_encode_header call site: 00410 coap_log_impl
17 31 coap_pdu_parse2 call site: 00031 coap_log_impl
4 56 coap_pdu_parse_header call site: 00056 coap_log_impl
4 103 coap_pdu_parse_opt call site: 00103 coap_log_impl
4 108 coap_pdu_parse_opt call site: 00108 coap_log_impl
4 194 coap_dtls_is_supported call site: 00194 coap_log_impl
4 214 coap_wss_is_supported call site: 00214 coap_log_impl
3 175 coap_get_uri_path call site: 00175 coap_new_string
2 50 coap_realloc_type call site: 00050 coap_log_impl
2 156 coap_new_string call site: 00156 coap_log_impl
2 185 coap_split_uri_sub call site: 00185 coap_log_impl

Runtime coverage analysis

Covered functions
68
Functions that are reachable but not covered
31
Reachable functions
98
Percentage of reachable functions covered
68.37%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/pdu_parse_udp_target.c 1
src/coap_net.c 2
src/coap_time.c 4
src/coap_prng.c 2
src/coap_mem.c 4
src/coap_openssl.c 5
src/coap_pdu.c 18
src/coap_debug.c 13
src/coap_option.c 12
src/coap_encode.c 3
src/coap_uri.c 9
src/coap_str.c 3
src/coap_strm_posix.c 1
src/coap_ws.c 2
src/coap_block.c 1

Fuzzer: persist_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4623 88.2%
gold [1:9] 4 0.07%
yellow [10:29] 4 0.07%
greenyellow [30:49] 4 0.07%
lawngreen 50+ 602 11.4%
All colors 5237 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1028 3855 coap_pdu_parse_opt call site: 03855 coap_handle_event_lkd
502 2230 coap_make_str_const call site: 02230 coap_oscore_session_set_recipient_ctx
271 1360 coap_send_internal call site: 01360 coap_send_pdu
265 3539 coap_session_free call site: 03539 coap_dtls_handle_timeout
228 3102 coap_get_resource_from_uri_path_lkd call site: 03102 coap_session_max_pdu_size_lkd
227 1864 coap_find_lg_xmit_response call site: 01864 coap_handle_event_lkd
175 1073 coap_socket_connect_udp call site: 01073 coap_session_reestablished
158 744 coap_show_pdu call site: 00744 coap_send_test_extended_token
156 3373 coap_touch_observer call site: 03373 coap_delete_observer_request
150 2770 coap_pdu_release_lkd call site: 02770 coap_session_max_pdu_size_lkd
110 1249 coap_add_option call site: 01249 coap_send_internal
79 1636 coap_send_internal call site: 01636 coap_session_disconnected_lkd

Runtime coverage analysis

Covered functions
204
Functions that are reachable but not covered
641
Reachable functions
835
Percentage of reachable functions covered
23.23%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/persist_target.c 5
src/coap_subscribe.c 15
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 18
src/coap_io.c 10
src/coap_session.c 54
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 29
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 13
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4

Fuzzer: oscore_decrypt_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4621 89.7%
gold [1:9] 124 2.40%
yellow [10:29] 56 1.08%
greenyellow [30:49] 281 5.45%
lawngreen 50+ 66 1.28%
All colors 5148 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
724 2425 oscore_context_release_recipients call site: 02425 coap_oscore_session_set_recipient_ctx
720 4324 coap_oscore_decrypt_pdu call site: 04324 coap_delete_node_lkd
477 3150 coap_delete_str_const call site: 03150 coap_delete_observer_internal
382 3637 coap_session_free call site: 03637 coap_dtls_handle_timeout
302 1898 coap_session_connected call site: 01898 coap_handle_event_lkd
213 857 coap_show_pdu call site: 00857 coap_send_test_extended_token
175 1184 coap_socket_connect_udp call site: 01184 coap_session_reestablished
89 4233 coap_oscore_decrypt_pdu call site: 04233 coap_handle_event_lkd
82 568 coap_option_filter_get call site: 00568 coap_split_proxy_uri
71 1399 coap_add_data_after call site: 01399 coap_rebuild_pdu_for_proxy
70 85 coap_delete_bin_const call site: 00085 coap_parse_oscore_rcp_conf_mem
70 237 coap_dtls_new_context call site: 00237 coap_session_str

Runtime coverage analysis

Covered functions
197
Functions that are reachable but not covered
621
Reachable functions
811
Percentage of reachable functions covered
23.43%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/oscore_decrypt_target.c 1
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_oscore.c 28
src/coap_str.c 10
src/coap_io.c 10
src/coap_session.c 54
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 20
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3

Fuzzer: block_check_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4600 89.3%
gold [1:9] 11 0.21%
yellow [10:29] 380 7.38%
greenyellow [30:49] 47 0.91%
lawngreen 50+ 111 2.15%
All colors 5149 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1270 3650 coap_io_do_epoll_lkd call site: 03650 coap_read_endpoint
705 2220 coap_make_str_const call site: 02220 coap_oscore_session_set_recipient_ctx
394 1278 coap_add_data_after call site: 01278 coap_send_pdu
210 3092 coap_get_resource_from_uri_path_lkd call site: 03092 coap_session_max_pdu_size_lkd
175 1063 coap_socket_connect_udp call site: 01063 coap_session_reestablished
158 734 coap_show_pdu call site: 00734 coap_send_test_extended_token
146 3303 coap_add_block_b_data call site: 03303 coap_send_internal
94 1987 coap_add_block call site: 01987 coap_send_internal
86 1680 coap_block_delete_lg_xmit call site: 01680 coap_cancel_session_messages
70 109 coap_dtls_new_context call site: 00109 coap_session_str
68 455 coap_new_string call site: 00455 coap_split_proxy_uri
60 920 coap_block_release_lg_xmit_data call site: 00920 coap_send_internal

Runtime coverage analysis

Covered functions
189
Functions that are reachable but not covered
627
Reachable functions
813
Percentage of reachable functions covered
22.88%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/block_check_target.c 2
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_io.c 10
src/coap_session.c 55
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 5
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 63
src/coap_resource.c 23
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3
src/coap_event.c 1

Fuzzer: ws_frame_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4907 94.5%
gold [1:9] 54 1.04%
yellow [10:29] 26 0.50%
greenyellow [30:49] 194 3.73%
lawngreen 50+ 8 0.15%
All colors 5189 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1407 3519 coap_session_free call site: 03519 coap_dtls_handle_timeout
861 2170 coap_session_check_connect call site: 02170 coap_oscore_initiate
580 1053 coap_socket_connect_udp call site: 01053 coap_session_reestablished
477 3032 coap_delete_str_const call site: 03032 coap_delete_observer_internal
432 538 coap_session_free call site: 00538 coap_delete_proxy_subscriber
302 1769 coap_session_connected call site: 01769 coap_handle_event_lkd
135 385 coap_handle_event_lkd call site: 00385 coap_proxy_remove_association
87 1679 coap_session_disconnected_lkd call site: 01679 coap_delete_node_lkd
70 99 coap_dtls_new_context call site: 00099 coap_session_str
69 250 coap_dtls_free_context call site: 00250 coap_new_endpoint_lkd
46 327 coap_socket_dgrm_close call site: 00327 coap_netif_strm_listen
45 5021 coap_ws_rd_http_header_client call site: 05021 coap_ws_build_key_hash

Runtime coverage analysis

Covered functions
95
Functions that are reachable but not covered
726
Reachable functions
815
Percentage of reachable functions covered
10.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/ws_frame_target.c 4
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 68
src/coap_debug.c 16
src/coap_io.c 10
src/coap_session.c 53
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 15
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 34
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 20
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3
src/coap_event.c 1

Fuzzer: uri_extended_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 83 37.7%
gold [1:9] 5 2.27%
yellow [10:29] 0 0.0%
greenyellow [30:49] 14 6.36%
lawngreen 50+ 118 53.6%
All colors 220 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
15 188 coap_uri_into_optlist_abbrev call site: 00188 coap_new_optlist
14 20 coap_split_uri_sub call site: 00020 print_timestamp
12 93 coap_opt_parse call site: 00093 coap_log_impl
6 138 LLVMFuzzerTestOneInput call site: 00138 coap_path_into_optlist_abbrev
5 149 coap_new_optlist call site: 00149 coap_insert_optlist
4 41 coap_dtls_is_supported call site: 00041 coap_log_impl
4 53 coap_tls_is_supported call site: 00053 coap_log_impl
4 63 coap_wss_is_supported call site: 00063 coap_log_impl
4 122 coap_opt_setheader call site: 00122 coap_log_impl
2 38 coap_dtls_is_supported call site: 00038 coap_log_impl
2 46 coap_split_uri_sub call site: 00046 coap_log_impl
2 50 coap_tls_is_supported call site: 00050 coap_log_impl

Runtime coverage analysis

Covered functions
58
Functions that are reachable but not covered
25
Reachable functions
82
Percentage of reachable functions covered
69.51%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/uri_extended_target.c 1
src/coap_net.c 2
src/coap_time.c 4
src/coap_prng.c 2
src/coap_mem.c 3
src/coap_openssl.c 5
src/coap_debug.c 7
src/coap_uri.c 26
src/coap_strm_posix.c 1
src/coap_ws.c 2
src/coap_option.c 7
src/coap_encode.c 1
src/coap_pdu.c 1
./include/coap3/coap_uri.h 1

Fuzzer: cache_key_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4713 93.4%
gold [1:9] 53 1.05%
yellow [10:29] 21 0.41%
greenyellow [30:49] 219 4.34%
lawngreen 50+ 37 0.73%
All colors 5043 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1030 3833 coap_pdu_parse_opt call site: 03833 coap_handle_event_lkd
713 1053 coap_socket_connect_udp call site: 01053 coap_session_reestablished
542 2170 coap_session_check_connect call site: 02170 coap_oscore_initiate
477 3032 coap_delete_str_const call site: 03032 coap_delete_observer_internal
305 2726 coap_cache_derive_key_w_ignore call site: 02726 coap_cancel_observe_lkd
267 615 coap_pdu_parse_opt_base call site: 00615 coap_add_data_large_request_app_lkd
265 3519 coap_session_free call site: 03519 coap_dtls_handle_timeout
244 1827 coap_digest_free call site: 01827 coap_handle_event_lkd
87 428 coap_option_next call site: 00428 coap_split_proxy_uri
87 883 coap_session_max_pdu_size_lkd call site: 00883 coap_send_internal
70 99 coap_dtls_new_context call site: 00099 coap_session_str
69 250 coap_dtls_free_context call site: 00250 coap_new_endpoint_lkd

Runtime coverage analysis

Covered functions
118
Functions that are reachable but not covered
686
Reachable functions
801
Percentage of reachable functions covered
14.36%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/cache_key_target.c 1
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 16
src/coap_io.c 10
src/coap_session.c 54
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 11
src/coap_block.c 56
src/coap_resource.c 20
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3

Fuzzer: observe_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4437 87.2%
gold [1:9] 59 1.16%
yellow [10:29] 272 5.34%
greenyellow [30:49] 17 0.33%
lawngreen 50+ 300 5.89%
All colors 5085 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
502 2219 coap_make_str_const call site: 02219 coap_oscore_session_set_recipient_ctx
360 3897 coap_dispatch call site: 03897 coap_send_ack_lkd
292 4313 coap_dispatch call site: 04313 coap_send_ack_lkd
271 1349 coap_send_internal call site: 01349 coap_send_pdu
256 3528 coap_session_free call site: 03528 coap_dtls_handle_timeout
242 4693 coap_handle_dgram call site: 04693 coap_handle_event_lkd
227 1853 coap_find_lg_xmit_response call site: 01853 coap_handle_event_lkd
190 3123 handle_request call site: 03123 coap_handle_request_put_block
175 1062 coap_socket_connect_udp call site: 01062 coap_session_reestablished
158 733 coap_show_pdu call site: 00733 coap_send_test_extended_token
77 3441 handle_request call site: 03441 coap_resource_release_lkd
71 2759 coap_pdu_release_lkd call site: 02759 coap_session_max_pdu_size_lkd

Runtime coverage analysis

Covered functions
205
Functions that are reachable but not covered
611
Reachable functions
809
Percentage of reachable functions covered
24.47%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/observe_target.c 3
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_io.c 10
src/coap_session.c 54
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 25
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3
src/coap_event.c 1
tests/oss-fuzz/coap_fuzz_helper.c 2

Fuzzer: network_message_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4349 85.2%
gold [1:9] 39 0.76%
yellow [10:29] 36 0.70%
greenyellow [30:49] 42 0.82%
lawngreen 50+ 638 12.5%
All colors 5104 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
347 2412 setup_pki_ssl call site: 02412 coap_session_release_lkd
329 3898 coap_dispatch call site: 03898 coap_send_ack_lkd
304 3098 handle_request call site: 03098 coap_session_max_pdu_size_lkd
302 1779 coap_session_connected call site: 01779 coap_handle_event_lkd
292 4314 coap_dispatch call site: 04314 coap_send_ack_lkd
256 3529 coap_session_free call site: 03529 coap_dtls_handle_timeout
235 1354 coap_send_internal call site: 01354 coap_send_pdu
227 2180 coap_session_check_connect call site: 02180 coap_oscore_initiate
174 1064 coap_socket_connect_udp call site: 01064 coap_session_reestablished
158 735 coap_show_pdu call site: 00735 coap_send_test_extended_token
151 2890 coap_new_error_response call site: 02890 coap_new_error_response
148 4788 coap_dtls_establish call site: 04788 coap_session_release_lkd

Runtime coverage analysis

Covered functions
226
Functions that are reachable but not covered
608
Reachable functions
823
Percentage of reachable functions covered
26.12%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/network_message_target.c 7
src/coap_net.c 78
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 67
src/coap_debug.c 19
src/coap_address.c 16
src/coap_io.c 10
src/coap_session.c 54
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 20
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3

Fuzzer: proxy_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4563 89.9%
gold [1:9] 127 2.50%
yellow [10:29] 74 1.45%
greenyellow [30:49] 242 4.76%
lawngreen 50+ 69 1.35%
All colors 5075 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1407 3529 coap_session_free call site: 03529 coap_dtls_handle_timeout
470 3049 coap_free_resource call site: 03049 coap_check_async
389 2324 coap_proxy_get_ongoing_session call site: 02324 coap_new_client_session_oscore_pki3_lkd
239 1350 coap_send_internal call site: 01350 coap_send_pdu
177 2819 coap_proxy_forward_request_lkd call site: 02819 coap_proxy_call_response_handler
158 734 coap_show_pdu call site: 00734 coap_send_test_extended_token
143 2180 coap_session_check_connect call site: 02180 coap_oscore_initiate
127 1819 coap_add_data_large_internal call site: 01819 coap_handle_event_lkd
105 1947 coap_add_data_large_internal call site: 01947 coap_add_data_large_request_lkd
70 109 coap_dtls_new_context call site: 00109 coap_session_str
69 260 coap_dtls_free_context call site: 00260 coap_new_endpoint_lkd
53 1652 coap_delete_node_lkd call site: 01652 coap_delete_observers

Runtime coverage analysis

Covered functions
192
Functions that are reachable but not covered
622
Reachable functions
807
Percentage of reachable functions covered
22.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/proxy_target.c 4
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_io.c 10
src/coap_session.c 54
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 23
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 23
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3
src/coap_event.c 1

Fuzzer: block_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4296 84.1%
gold [1:9] 205 4.01%
yellow [10:29] 43 0.84%
greenyellow [30:49] 83 1.62%
lawngreen 50+ 478 9.36%
All colors 5105 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
502 2219 coap_make_str_const call site: 02219 coap_oscore_session_set_recipient_ctx
271 1349 coap_send_internal call site: 01349 coap_send_pdu
260 3897 coap_dispatch call site: 03897 coap_send_ack_lkd
256 3528 coap_session_free call site: 03528 coap_dtls_handle_timeout
242 4693 coap_handle_dgram call site: 04693 coap_handle_event_lkd
175 1062 coap_socket_connect_udp call site: 01062 coap_session_reestablished
158 733 coap_show_pdu call site: 00733 coap_send_test_extended_token
152 4453 coap_handle_response_get_block call site: 04453 coap_send_rst_lkd
124 3249 coap_handle_request_send_block call site: 03249 coap_send_internal
98 4353 coap_find_lg_xmit call site: 04353 coap_send_q_blocks
86 1994 blocks_add_entry call site: 01994 coap_send_internal
77 3441 handle_request call site: 03441 coap_resource_release_lkd

Runtime coverage analysis

Covered functions
240
Functions that are reachable but not covered
587
Reachable functions
815
Percentage of reachable functions covered
27.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/block_target.c 3
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_io.c 10
src/coap_session.c 55
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 61
src/coap_resource.c 25
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 4
src/coap_subscribe.c 3
src/coap_event.c 1
tests/oss-fuzz/coap_fuzz_helper.c 2

Fuzzer: async_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4537 88.3%
gold [1:9] 86 1.67%
yellow [10:29] 376 7.32%
greenyellow [30:49] 13 0.25%
lawngreen 50+ 123 2.39%
All colors 5135 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
539 2219 coap_make_str_const call site: 02219 coap_oscore_session_set_recipient_ctx
329 3897 coap_dispatch call site: 03897 coap_send_ack_lkd
302 1778 coap_session_connected call site: 01778 coap_handle_event_lkd
292 4313 coap_dispatch call site: 04313 coap_send_ack_lkd
271 1349 coap_send_internal call site: 01349 coap_send_pdu
256 3528 coap_session_free call site: 03528 coap_dtls_handle_timeout
254 3122 handle_request call site: 03122 coap_handle_request_put_block
242 4693 coap_handle_dgram call site: 04693 coap_handle_event_lkd
175 1062 coap_socket_connect_udp call site: 01062 coap_session_reestablished
158 733 coap_show_pdu call site: 00733 coap_send_test_extended_token
71 2759 coap_pdu_release_lkd call site: 02759 coap_session_max_pdu_size_lkd
70 108 coap_dtls_new_context call site: 00108 coap_session_str

Runtime coverage analysis

Covered functions
202
Functions that are reachable but not covered
625
Reachable functions
820
Percentage of reachable functions covered
23.78%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
tests/oss-fuzz/async_target.c 3
src/coap_net.c 63
src/coap_time.c 5
src/coap_prng.c 2
src/coap_mem.c 5
src/coap_openssl.c 66
src/coap_debug.c 19
src/coap_io.c 10
src/coap_session.c 55
src/coap_address.c 16
src/coap_netif.c 11
src/coap_strm_posix.c 6
src/coap_ws.c 2
src/coap_dgrm_posix.c 5
src/coap_io_posix.c 4
src/coap_proxy.c 22
src/coap_uri.c 20
src/coap_option.c 21
src/coap_encode.c 6
src/coap_str.c 10
src/coap_pdu.c 35
src/coap_cache.c 5
src/coap_block.c 56
src/coap_resource.c 24
src/coap_oscore.c 19
./include/coap3/coap_uri.h 1
src/oscore/oscore_cose.c 19
src/oscore/oscore_context.c 27
src/oscore/oscore.c 8
src/oscore/oscore_cbor.c 11
./include/coap3/coap_block_internal.h 6
src/oscore/oscore_crypto.c 4
/usr/include/openssl/ssl.h 3
src/coap_dtls.c 5
/usr/include/openssl/x509v3.h 3
./include/coap3/coap_pdu_internal.h 1
./include/coap3/coap_resource_internal.h 1
src/coap_async.c 15
src/coap_subscribe.c 3
src/coap_event.c 1
tests/oss-fuzz/coap_fuzz_helper.c 2

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
hnd_get_wellknown_lkd /src/libcoap/src/coap_net.c 5 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 64 0 304 50 16 699 0 7283 121
coap_netif_dgrm_write /src/libcoap/src/coap_netif.c 3 ['N/A', 'N/A', 'size_t'] 6 0 179 33 10 67 0 336 72
coap_tls_engine_configure /src/libcoap/src/coap_openssl.c 1 ['N/A'] 6 0 575 124 34 32 0 121 52
coap_endpoint_join_mcast_group_intf /src/libcoap/src/coap_net.c 3 ['N/A', 'N/A', 'N/A'] 6 0 52 9 4 37 0 133 42
coap_op_resource_deleted /src/libcoap/src/coap_subscribe.c 3 ['N/A', 'N/A', 'N/A'] 6 0 252 40 16 37 0 129 40
coap_session_set_type_server /src/libcoap/src/coap_session.c 1 ['N/A'] 70 0 18 3 2 695 0 7198 36

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
73.0%
743 / 1021
Cyclomatic complexity statically reachable by fuzzers
89.0%
8601 / 9694

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

tests/oss-fuzz/oscore_cbor_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_cleanup', 'coap_dtls_startup', 'LLVMFuzzerTestOneInput']

tests/oss-fuzz/get_asn1_tag_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_new_string']

tests/oss-fuzz/split_uri_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_dtls_is_supported', 'coap_tls_is_supported', 'coap_wss_is_supported', 'coap_split_uri_sub', 'coap_ws_is_supported', 'coap_log_impl']

tests/oss-fuzz/dtls_define_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_dtls_define_issue']

tests/oss-fuzz/oscore_conf_parse_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_new_string', 'coap_delete_bin_const', 'coap_parse_oscore_rcp_conf_mem', 'coap_cleanup', 'coap_dtls_startup', 'LLVMFuzzerTestOneInput', 'coap_parse_oscore_conf_mem']

tests/oss-fuzz/pdu_parse_ws_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_show_pdu', 'coap_pdu_parse2', 'coap_pdu_encode_header', 'LLVMFuzzerTestOneInput', 'coap_pdu_parse_opt', 'coap_dtls_is_supported', 'coap_wss_is_supported', 'coap_get_uri_path']

tests/oss-fuzz/pdu_parse_tcp_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_show_pdu', 'coap_pdu_parse2', 'LLVMFuzzerTestOneInput', 'coap_pdu_parse_opt', 'coap_dtls_is_supported', 'coap_wss_is_supported', 'coap_pdu_encode_header', 'coap_pdu_parse_header']

tests/oss-fuzz/pdu_parse_udp_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_show_pdu', 'coap_pdu_encode_header', 'coap_pdu_parse2', 'coap_pdu_parse_header', 'coap_pdu_parse_opt', 'coap_dtls_is_supported', 'coap_wss_is_supported', 'coap_get_uri_path', 'coap_realloc_type']

tests/oss-fuzz/persist_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_pdu_parse_opt', 'coap_make_str_const', 'coap_send_internal', 'coap_session_free', 'coap_get_resource_from_uri_path_lkd', 'coap_find_lg_xmit_response', 'coap_socket_connect_udp', 'coap_show_pdu', 'coap_touch_observer', 'coap_pdu_release_lkd']

tests/oss-fuzz/oscore_decrypt_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['oscore_context_release_recipients', 'coap_oscore_decrypt_pdu', 'coap_delete_str_const', 'coap_session_free', 'coap_session_connected', 'coap_show_pdu', 'coap_socket_connect_udp', 'coap_option_filter_get', 'coap_add_data_after']

tests/oss-fuzz/block_check_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_io_do_epoll_lkd', 'coap_make_str_const', 'coap_add_data_after', 'coap_get_resource_from_uri_path_lkd', 'coap_socket_connect_udp', 'coap_show_pdu', 'coap_add_block_b_data', 'coap_add_block', 'coap_block_delete_lg_xmit', 'coap_dtls_new_context']

tests/oss-fuzz/ws_frame_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_session_free', 'coap_session_check_connect', 'coap_socket_connect_udp', 'coap_delete_str_const', 'coap_session_connected', 'coap_handle_event_lkd', 'coap_session_disconnected_lkd', 'coap_dtls_new_context', 'coap_dtls_free_context']

tests/oss-fuzz/uri_extended_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_uri_into_optlist_abbrev', 'coap_split_uri_sub', 'coap_opt_parse', 'LLVMFuzzerTestOneInput', 'coap_new_optlist', 'coap_dtls_is_supported', 'coap_tls_is_supported', 'coap_wss_is_supported', 'coap_opt_setheader']

tests/oss-fuzz/cache_key_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_pdu_parse_opt', 'coap_socket_connect_udp', 'coap_session_check_connect', 'coap_delete_str_const', 'coap_cache_derive_key_w_ignore', 'coap_pdu_parse_opt_base', 'coap_session_free', 'coap_digest_free', 'coap_option_next', 'coap_session_max_pdu_size_lkd']

tests/oss-fuzz/observe_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_make_str_const', 'coap_dispatch', 'coap_send_internal', 'coap_session_free', 'coap_handle_dgram', 'coap_find_lg_xmit_response', 'handle_request', 'coap_socket_connect_udp', 'coap_show_pdu']

tests/oss-fuzz/network_message_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['setup_pki_ssl', 'coap_dispatch', 'handle_request', 'coap_session_connected', 'coap_session_free', 'coap_send_internal', 'coap_session_check_connect', 'coap_socket_connect_udp', 'coap_show_pdu']

tests/oss-fuzz/proxy_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_session_free', 'coap_free_resource', 'coap_proxy_get_ongoing_session', 'coap_send_internal', 'coap_proxy_forward_request_lkd', 'coap_show_pdu', 'coap_session_check_connect', 'coap_add_data_large_internal', 'coap_dtls_new_context']

tests/oss-fuzz/block_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_make_str_const', 'coap_send_internal', 'coap_dispatch', 'coap_session_free', 'coap_handle_dgram', 'coap_socket_connect_udp', 'coap_show_pdu', 'coap_handle_response_get_block', 'coap_handle_request_send_block', 'coap_find_lg_xmit']

tests/oss-fuzz/async_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['coap_make_str_const', 'coap_dispatch', 'coap_session_connected', 'coap_send_internal', 'coap_session_free', 'handle_request', 'coap_handle_dgram', 'coap_socket_connect_udp', 'coap_show_pdu']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
coap_show_pdu 327 20 6.116% ['pdu_parse_udp_fuzzer', 'persist_fuzzer', 'network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_debug_send_packet 42 22 52.38% ['network_message_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_debug_set_packet_common 41 15 36.58% ['network_message_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_socket_bind_udp 75 29 38.66% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_socket_connect_udp 165 74 44.84% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_socket_send 118 16 13.55% ['network_message_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_test_cid_tuple_change 31 4 12.90% ['network_message_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_new_context 69 37 53.62% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_send_internal 164 75 45.73% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_pdu_duplicate_lkd 74 30 40.54% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_add_resource_lkd 38 20 52.63% ['block_fuzzer', 'block_check_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_add_observer 145 63 43.44% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_delete_observer_internal 40 18 45.0% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_session_connected 58 11 18.96% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_new_endpoint_lkd 97 34 35.05% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_persist_observe_add_lkd 202 30 14.85% ['persist_fuzzer']
coap_cancel_session_messages 32 5 15.62% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_oscore_decrypt_pdu 721 209 28.98% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
oscore_validate_sender_seq 53 23 43.39% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
oscore_cbor_put_unsigned 42 9 21.42% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
oscore_find_context 106 30 28.30% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
oscore_log_context 39 4 10.25% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_add_data_blocked_response 101 51 50.49% ['block_check_fuzzer']
coap_cancel_observe_lkd 78 13 16.66% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_block_check_lg_xmit_timeouts 41 22 53.65% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_block_check_lg_crcv_timeouts 57 19 33.33% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_block_check_lg_srcv_timeouts 81 20 24.69% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_block_check_q_block1_xmit 54 12 22.22% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_block_check_q_block2_xmit 52 14 26.92% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
setup_block_b 35 18 51.42% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_io_prepare_io_lkd 336 74 22.02% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_client_delay_first 47 5 10.63% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_io_do_epoll_lkd 69 10 14.49% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_handle_event_lkd 72 24 33.33% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_proxy_check_timeouts 44 7 15.90% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_ws_write 71 35 49.29% ['ws_frame_fuzzer']
coap_ws_read 176 94 53.40% ['ws_frame_fuzzer']
coap_ws_rd_http_header_server 79 36 45.56% ['ws_frame_fuzzer']
coap_ws_rd_http_header_client 64 12 18.75% ['ws_frame_fuzzer']
coap_call_response_handler 43 17 39.53% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_dispatch 413 179 43.34% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_is_session_proxy 58 10 17.24% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_remove_from_queue_token 45 4 8.888% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
handle_request 535 291 54.39% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
handle_response 109 26 23.85% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_remove_option 78 13 16.66% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_remove_from_queue 38 6 15.78% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
handle_signaling 79 33 41.77% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_dtls_send 41 18 43.90% ['network_message_fuzzer']
coap_dtls_info_callback 65 25 38.46% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_dgram_ctrl 61 31 50.81% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
setup_pki_ssl 291 13 4.467% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_delete_proxy_subscriber 39 5 12.82% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_session_delay_pdu 38 17 44.73% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_socket_connect_tcp1 102 36 35.29% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_resolve_address_info_lkd 132 71 53.78% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
get_coap_addr_info 55 16 29.09% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
update_coap_addr_port 39 8 20.51% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_send_lkd 300 32 10.66% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_proxy_log_entry 32 3 9.375% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_proxy_del_req 34 10 29.41% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_verify_proxy_scheme_supported 45 7 15.55% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_proxy_forward_request_lkd 244 117 47.95% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_proxy_get_ongoing_session 162 63 38.88% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_get_uri_proxy_scheme_info 51 16 31.37% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_resource_proxy_uri_init2 37 16 43.24% ['proxy_fuzzer']
coap_find_lg_xmit 57 10 17.54% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_find_lg_crcv 31 10 32.25% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_handle_request_send_block 268 21 7.835% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_handle_request_put_block 505 217 42.97% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_handle_response_send_block 252 11 4.365% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_handle_response_get_block 602 29 4.817% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
blocks_add_entry 50 15 30.0% ['network_message_fuzzer', 'ws_frame_fuzzer', 'oscore_decrypt_fuzzer', 'block_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'persist_fuzzer', 'async_fuzzer', 'observe_fuzzer', 'proxy_fuzzer']
coap_print_wellknown_lkd 143 75 52.44% ['block_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/libcoap/src/coap_event.c ['block_check_fuzzer', 'ws_frame_fuzzer', 'observe_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['block_check_fuzzer', 'ws_frame_fuzzer', 'observe_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/oscore/oscore.c ['oscore_conf_parse_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_conf_parse_fuzzer', 'oscore_decrypt_fuzzer']
/src/libcoap/src/coap_net.c ['oscore_cbor_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_oscore.c ['oscore_conf_parse_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_conf_parse_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_uri.c ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/oscore/oscore_context.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/observe_target.c ['observe_fuzzer'] ['observe_fuzzer']
/src/libcoap/./include/coap3/coap_block_internal.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/src/oscore/oscore_crypto.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_decrypt_fuzzer']
/src/libcoap/src/coap_async.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_dtls.c ['dtls_define_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['dtls_define_fuzzer', 'network_message_fuzzer']
/src/libcoap/src/coap_io.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'block_check_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_io_posix.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_asn1.c ['get_asn1_tag_fuzzer'] ['get_asn1_tag_fuzzer']
/src/libcoap/src/coap_ws.c ['split_uri_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['split_uri_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer']
/src/libcoap/src/coap_subscribe.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/get_asn1_tag_target.c ['get_asn1_tag_fuzzer'] ['get_asn1_tag_fuzzer']
/src/libcoap/tests/oss-fuzz/block_target.c ['block_fuzzer'] ['block_fuzzer']
/src/libcoap/src/coap_dgrm_posix.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/uri_extended_target.c ['uri_extended_fuzzer'] ['uri_extended_fuzzer']
/src/libcoap/./include/coap3/coap_pdu_internal.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/src/coap_netif.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/oscore/oscore_cose.c ['oscore_conf_parse_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_conf_parse_fuzzer', 'oscore_decrypt_fuzzer']
/src/libcoap/tests/oss-fuzz/ws_frame_target.c ['ws_frame_fuzzer'] ['ws_frame_fuzzer']
/src/libcoap/src/coap_debug.c ['oscore_cbor_fuzzer', 'get_asn1_tag_fuzzer', 'split_uri_fuzzer', 'dtls_define_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'dtls_define_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_pdu.c ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_str.c ['get_asn1_tag_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['get_asn1_tag_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/network_message_target.c ['network_message_fuzzer'] ['network_message_fuzzer']
/src/libcoap/tests/oss-fuzz/dtls_define_target.c ['dtls_define_fuzzer'] ['dtls_define_fuzzer']
/src/libcoap/src/coap_time.c ['oscore_cbor_fuzzer', 'get_asn1_tag_fuzzer', 'split_uri_fuzzer', 'dtls_define_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/oscore_cbor_target.c ['oscore_cbor_fuzzer'] ['oscore_cbor_fuzzer']
/src/libcoap/src/coap_strm_posix.c ['split_uri_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['split_uri_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'uri_extended_fuzzer', 'network_message_fuzzer']
/src/libcoap/./include/coap3/coap_uri.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/tests/oss-fuzz/pdu_parse_tcp_target.c ['pdu_parse_tcp_fuzzer'] ['pdu_parse_tcp_fuzzer']
/src/libcoap/src/coap_address.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/split_uri_target.c ['split_uri_fuzzer'] ['split_uri_fuzzer']
/src/libcoap/tests/oss-fuzz/block_check_target.c ['block_check_fuzzer'] ['block_check_fuzzer']
/src/libcoap/tests/oss-fuzz/persist_target.c ['persist_fuzzer'] ['persist_fuzzer']
/src/libcoap/src/coap_encode.c ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/coap_fuzz_helper.c ['observe_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['observe_fuzzer', 'block_fuzzer', 'async_fuzzer']
/usr/include/openssl/x509v3.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/src/coap_resource.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_block.c ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'block_check_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/./include/coap3/coap_resource_internal.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/src/coap_cache.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'block_check_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'proxy_fuzzer', 'block_fuzzer']
/src/libcoap/src/coap_proxy.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_mem.c ['oscore_cbor_fuzzer', 'get_asn1_tag_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'get_asn1_tag_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/oscore/oscore_cbor.c ['oscore_cbor_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'oscore_decrypt_fuzzer']
/usr/include/openssl/ssl.h ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] []
/src/libcoap/tests/oss-fuzz/proxy_target.c ['proxy_fuzzer'] ['proxy_fuzzer']
/src/libcoap/tests/oss-fuzz/async_target.c ['async_fuzzer'] ['async_fuzzer']
/src/libcoap/./include/coap3/coap_address.h [] []
/src/libcoap/src/coap_prng.c ['oscore_cbor_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_openssl.c ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['oscore_cbor_fuzzer', 'split_uri_fuzzer', 'oscore_conf_parse_fuzzer', 'pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/src/coap_option.c ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['pdu_parse_ws_fuzzer', 'pdu_parse_tcp_fuzzer', 'pdu_parse_udp_fuzzer', 'persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'uri_extended_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/pdu_parse_ws_target.c ['pdu_parse_ws_fuzzer'] ['pdu_parse_ws_fuzzer']
/src/libcoap/tests/oss-fuzz/cache_key_target.c ['cache_key_fuzzer'] ['cache_key_fuzzer']
/src/libcoap/tests/oss-fuzz/oscore_conf_parse_target.c ['oscore_conf_parse_fuzzer'] ['oscore_conf_parse_fuzzer']
/src/libcoap/src/coap_session.c ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer'] ['persist_fuzzer', 'oscore_decrypt_fuzzer', 'block_check_fuzzer', 'ws_frame_fuzzer', 'cache_key_fuzzer', 'observe_fuzzer', 'network_message_fuzzer', 'proxy_fuzzer', 'block_fuzzer', 'async_fuzzer']
/src/libcoap/tests/oss-fuzz/pdu_parse_udp_target.c ['pdu_parse_udp_fuzzer'] ['pdu_parse_udp_fuzzer']
/src/libcoap/tests/oss-fuzz/oscore_decrypt_target.c ['oscore_decrypt_fuzzer'] ['oscore_decrypt_fuzzer']

Directories in report

Directory
/src/libcoap/src/
/src/libcoap/tests/oss-fuzz/
/src/libcoap/./include/coap3/
/usr/include/openssl/
/src/libcoap/src/oscore/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
oscore_cbor_fuzzer fuzzerLogFile-0-3QOwG6FnhM.data fuzzerLogFile-0-3QOwG6FnhM.data.yaml oscore_cbor_fuzzer.covreport
get_asn1_tag_fuzzer fuzzerLogFile-0-FL2OXvQqNO.data fuzzerLogFile-0-FL2OXvQqNO.data.yaml get_asn1_tag_fuzzer.covreport
split_uri_fuzzer fuzzerLogFile-0-5Yj2V2ViCv.data fuzzerLogFile-0-5Yj2V2ViCv.data.yaml split_uri_fuzzer.covreport
dtls_define_fuzzer fuzzerLogFile-0-zo3TjJtAyg.data fuzzerLogFile-0-zo3TjJtAyg.data.yaml dtls_define_fuzzer.covreport
oscore_conf_parse_fuzzer fuzzerLogFile-0-g9pjo5Ymuy.data fuzzerLogFile-0-g9pjo5Ymuy.data.yaml oscore_conf_parse_fuzzer.covreport
pdu_parse_ws_fuzzer fuzzerLogFile-0-oP6QHeYnlA.data fuzzerLogFile-0-oP6QHeYnlA.data.yaml pdu_parse_ws_fuzzer.covreport
pdu_parse_tcp_fuzzer fuzzerLogFile-0-DEVTZqOWGg.data fuzzerLogFile-0-DEVTZqOWGg.data.yaml pdu_parse_tcp_fuzzer.covreport
pdu_parse_udp_fuzzer fuzzerLogFile-0-g6Tkq9IT15.data fuzzerLogFile-0-g6Tkq9IT15.data.yaml pdu_parse_udp_fuzzer.covreport
persist_fuzzer fuzzerLogFile-0-7SdEAWrtFj.data fuzzerLogFile-0-7SdEAWrtFj.data.yaml persist_fuzzer.covreport
oscore_decrypt_fuzzer fuzzerLogFile-0-4A5K10QGVl.data fuzzerLogFile-0-4A5K10QGVl.data.yaml oscore_decrypt_fuzzer.covreport
block_check_fuzzer fuzzerLogFile-0-q2PfGE5fwA.data fuzzerLogFile-0-q2PfGE5fwA.data.yaml block_check_fuzzer.covreport
ws_frame_fuzzer fuzzerLogFile-0-2jC0Ctcm7A.data fuzzerLogFile-0-2jC0Ctcm7A.data.yaml ws_frame_fuzzer.covreport
uri_extended_fuzzer fuzzerLogFile-0-ldc5QmavFj.data fuzzerLogFile-0-ldc5QmavFj.data.yaml uri_extended_fuzzer.covreport
cache_key_fuzzer fuzzerLogFile-0-fVgFSkEgxa.data fuzzerLogFile-0-fVgFSkEgxa.data.yaml cache_key_fuzzer.covreport
observe_fuzzer fuzzerLogFile-0-h2I0D9QlDD.data fuzzerLogFile-0-h2I0D9QlDD.data.yaml observe_fuzzer.covreport
network_message_fuzzer fuzzerLogFile-0-wBFfGhCfLw.data fuzzerLogFile-0-wBFfGhCfLw.data.yaml network_message_fuzzer.covreport
proxy_fuzzer fuzzerLogFile-0-619sHtRTuh.data fuzzerLogFile-0-619sHtRTuh.data.yaml proxy_fuzzer.covreport
block_fuzzer fuzzerLogFile-0-qXzJjMcAld.data fuzzerLogFile-0-qXzJjMcAld.data.yaml block_fuzzer.covreport
async_fuzzer fuzzerLogFile-0-KHMTYutOZJ.data fuzzerLogFile-0-KHMTYutOZJ.data.yaml async_fuzzer.covreport