Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
fuzz_crc fuzz/fuzz_crc.c 12 0 1 2 26 30 fuzz_crc.c
fuzz_die_cu_e fuzz/fuzz_die_cu_e.c 338 506 17 36 7462 3131 fuzz_die_cu_e.c
fuzz_showsectgrp fuzz/fuzz_showsectgrp.c 245 599 11 28 4277 1720 fuzz_showsectgrp.c
fuzz_gdbindex fuzz/fuzz_gdbindex.c 224 641 11 27 3943 1569 fuzz_gdbindex.c
fuzz_simplereader_tu fuzz/fuzz_simplereader_tu.c 213 631 17 27 4775 2115 fuzz_simplereader_tu.c
fuzz_macro_dwarf4 fuzz/fuzz_macro_dwarf4.c 212 639 11 28 3868 1532 fuzz_macro_dwarf4.c
fuzz_tie fuzz/fuzz_tie.c 203 641 11 26 3638 1445 fuzz_tie.c
fuzz_srcfiles fuzz/fuzz_srcfiles.c 411 448 17 39 9557 3967 fuzz_srcfiles.c
fuzz_init_binary fuzz/fuzz_init_binary.c 202 642 11 26 3610 1435 fuzz_init_binary.c
fuzz_die_cu_e_print fuzz/fuzz_die_cu_e_print.c 341 503 17 37 7542 3163 fuzz_die_cu_e_print.c
fuzz_die_cu_print fuzz/fuzz_die_cu_print.c 342 502 17 37 7570 3173 fuzz_die_cu_print.c
fuzz_crc_32 fuzz/fuzz_crc_32.c 204 640 11 28 3654 1453 fuzz_crc_32.c
fuzz_dnames fuzz/fuzz_dnames.c 228 617 11 28 4374 1736 fuzz_dnames.c
fuzz_init_path fuzz/fuzz_init_path.c 241 603 11 28 4220 1695 fuzz_init_path.c
fuzz_init_b fuzz/fuzz_init_b.c 204 641 11 26 3615 1440 fuzz_init_b.c
fuzz_set_frame_all fuzz/fuzz_set_frame_all.c 285 572 11 32 5791 2300 fuzz_set_frame_all.c
fuzz_rng fuzz/fuzz_rng.c 213 631 11 27 4074 1607 fuzz_rng.c
fuzz_gnu_index fuzz/fuzz_gnu_index.c 228 617 11 27 4384 1735 fuzz_gnu_index.c
fuzz_die_cu_attrs_loclist fuzz/fuzz_die_cu_attrs_loclist.c 388 456 17 38 9725 3972 fuzz_die_cu_attrs_loclist.c
fuzz_aranges fuzz/fuzz_aranges.c 224 630 11 27 4304 1703 fuzz_aranges.c
fuzz_stack_frame_access fuzz/fuzz_stack_frame_access.c 353 491 17 38 8082 3351 fuzz_stack_frame_access.c
fuzz_debug_addr_access fuzz/fuzz_debug_addr_access.c 206 641 11 27 3790 1505 fuzz_debug_addr_access.c
fuzz_findfuncbypc fuzz/fuzz_findfuncbypc.c 445 415 18 41 10617 4332 fuzz_findfuncbypc.c
fuzz_die_cu fuzz/fuzz_die_cu.c 339 505 17 36 7490 3141 fuzz_die_cu.c
fuzz_globals fuzz/fuzz_globals.c 271 577 11 32 5613 2231 fuzz_globals.c
fuzz_xuindex fuzz/fuzz_xuindex.c 202 642 11 26 3613 1436 fuzz_xuindex.c
fuzz_die_cu_offset fuzz/fuzz_die_cu_offset.c 342 502 17 37 7528 3157 fuzz_die_cu_offset.c
fuzz_debuglink fuzz/fuzz_debuglink.c 225 619 11 26 3948 1578 fuzz_debuglink.c
fuzz_str_offsets fuzz/fuzz_str_offsets.c 217 629 11 27 3983 1585 fuzz_str_offsets.c
fuzz_die_cu_info1 fuzz/fuzz_die_cu_info1.c 339 505 17 36 7487 3140 fuzz_die_cu_info1.c
fuzz_debug_str fuzz/fuzz_debug_str.c 205 641 11 27 3656 1456 fuzz_debug_str.c
fuzz_macro_dwarf5 fuzz/fuzz_macro_dwarf5.c 391 454 17 39 9120 3786 fuzz_macro_dwarf5.c
fuzz_die_cu_attrs fuzz/fuzz_die_cu_attrs.c 372 472 17 37 8479 3563 fuzz_die_cu_attrs.c

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: fuzz_crc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_e

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_showsectgrp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_gdbindex

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_simplereader_tu

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_macro_dwarf4

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_tie

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_srcfiles

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_init_binary

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_e_print

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_print

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_crc_32

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_dnames

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_init_path

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_init_b

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_set_frame_all

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_rng

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_gnu_index

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_attrs_loclist

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_aranges

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_stack_frame_access

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_debug_addr_access

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_findfuncbypc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_globals

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_xuindex

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_offset

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_debuglink

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_str_offsets

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_info1

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_debug_str

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_macro_dwarf5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Fuzzer: fuzz_die_cu_attrs

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The project has no code coverage. Will not display blockers as blockers depend on code coverage.

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
elf_relocations_nolibelf /src/libdwarf/src/lib/libdwarf/dwarf_elfread.c 4 ['N/A', 'size_t', 'N/A', 'N/A'] 3 0 129 17 8 5 0 89 89
dwarf_rnglists_get_rle_head /src/libdwarf/src/lib/libdwarf/dwarf_rnglists.c 7 ['N/A', 'short', 'size_t', 'N/A', 'N/A', 'N/A', 'N/A'] 48 0 428 87 33 189 0 2101 86
dwarf_language_version_string /src/libdwarf/src/lib/libdwarf/dwarf_query.c 3 ['size_t', 'N/A', 'N/A'] 1 0 297 63 3 1 0 54 54

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
82.0%
732 / 898
Cyclomatic complexity statically reachable by fuzzers
86.0%
7883 / 9206

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

fuzz/fuzz_crc.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_e.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_showsectgrp.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_gdbindex.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_simplereader_tu.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_macro_dwarf4.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_tie.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_srcfiles.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_init_binary.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_e_print.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_print.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_crc_32.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_dnames.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_init_path.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_init_b.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_set_frame_all.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_rng.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_gnu_index.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_attrs_loclist.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_aranges.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_stack_frame_access.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_debug_addr_access.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_findfuncbypc.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_globals.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_xuindex.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_offset.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_debuglink.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_str_offsets.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_info1.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_debug_str.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_macro_dwarf5.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


fuzz/fuzz_die_cu_attrs.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/libdwarf/src/lib/libdwarf/dwarf_leb.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_dnames', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_object_detector.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_seekr.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_elfread.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_xu_index.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_machoread.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_die_cu_attrs_loclist.c ['fuzz_die_cu_attrs_loclist'] []
/src/libdwarf/src/lib/libdwarf/dwarf_print_lines.c ['fuzz_srcfiles'] []
/src/libdwarf/src/lib/libdwarf/dwarf_gdbindex.c ['fuzz_gdbindex'] []
/src/libdwarf/src/lib/libdwarf/dwarf_macro.c ['fuzz_macro_dwarf4'] []
/src/libdwarf/fuzz/fuzz_debuglink.c ['fuzz_debuglink'] []
/src/libdwarf/src/lib/libdwarf/dwarf_find_sigref.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_debugaddr.c ['fuzz_debug_addr_access'] []
/src/libdwarf/fuzz/fuzz_stack_frame_access.c ['fuzz_stack_frame_access'] []
/src/libdwarf/fuzz/fuzz_macro_dwarf4.c ['fuzz_macro_dwarf4'] []
/src/libdwarf/src/lib/libdwarf/dwarf_alloc.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_names.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_set_frame_all', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_macro5.c ['fuzz_macro_dwarf5'] []
/src/libdwarf/src/lib/libdwarf/dwarf_debuglink.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_arange.c ['fuzz_aranges'] []
/src/libdwarf/src/lib/libdwarf/dwarf_loclists.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_line_table_reader_common.h ['fuzz_srcfiles', 'fuzz_findfuncbypc', 'fuzz_macro_dwarf5'] []
/src/libdwarf/src/lib/libdwarf/dwarf_global.c ['fuzz_simplereader_tu', 'fuzz_globals', 'fuzz_die_cu_offset'] []
/src/libdwarf/fuzz/fuzz_aranges.c ['fuzz_aranges'] []
/src/libdwarf/src/lib/libdwarf/dwarf_util.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_gnu_index.c ['fuzz_gnu_index'] []
/src/libdwarf/src/lib/libdwarf/dwarf_groups.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_die_cu_e.c ['fuzz_die_cu_e'] []
/src/libdwarf/fuzz/fuzz_die_cu_info1.c ['fuzz_die_cu_info1'] []
/src/libdwarf/fuzz/fuzz_findfuncbypc.c ['fuzz_findfuncbypc'] []
/src/libdwarf/src/lib/libdwarf/dwarf_elf_load_headers.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_query.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_simplereader_tu.c ['fuzz_simplereader_tu'] []
/src/libdwarf/fuzz/fuzz_set_frame_all.c ['fuzz_set_frame_all'] []
/src/libdwarf/src/lib/libdwarf/dwarf_string.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_xuindex.c ['fuzz_xuindex'] []
/src/libdwarf/src/lib/libdwarf/dwarf_str_offsets.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_frame2.c ['fuzz_set_frame_all', 'fuzz_stack_frame_access'] []
/src/libdwarf/fuzz/fuzz_gdbindex.c ['fuzz_gdbindex'] []
/src/libdwarf/src/lib/libdwarf/dwarf_fill_in_attr_form.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_tsearchhash.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_rnglists.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_macro_dwarf5.c ['fuzz_macro_dwarf5'] []
/src/libdwarf/src/lib/libdwarf/dwarf_line.c ['fuzz_srcfiles', 'fuzz_findfuncbypc', 'fuzz_macro_dwarf5'] []
/src/libdwarf/src/lib/libdwarf/dwarf_abbrev.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_str_offsets.c ['fuzz_str_offsets'] []
/src/libdwarf/src/lib/libdwarf/dwarf_error.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_die_cu_e_print.c ['fuzz_die_cu_e_print'] []
/src/libdwarf/fuzz/fuzz_srcfiles.c ['fuzz_srcfiles'] []
/src/libdwarf/src/lib/libdwarf/dwarf_frame.c ['fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_set_frame_all', 'fuzz_stack_frame_access'] []
/src/libdwarf/fuzz/fuzz_die_cu_offset.c ['fuzz_die_cu_offset'] []
/src/libdwarf/fuzz/fuzz_init_binary.c ['fuzz_init_binary'] []
/src/libdwarf/src/lib/libdwarf/dwarf_form.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_debugnames.c ['fuzz_dnames', 'fuzz_globals'] []
/src/libdwarf/src/lib/libdwarf/dwarf_dsc.c ['fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_die_cu_attrs.c ['fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_init_path.c ['fuzz_init_path'] []
/src/libdwarf/src/lib/libdwarf/dwarf_crc.c ['fuzz_crc', 'fuzz_showsectgrp', 'fuzz_crc_32', 'fuzz_init_path', 'fuzz_findfuncbypc'] []
/src/libdwarf/fuzz/fuzz_globals.c ['fuzz_globals'] []
/src/libdwarf/fuzz/fuzz_crc_32.c ['fuzz_crc_32'] []
/src/libdwarf/fuzz/fuzz_showsectgrp.c ['fuzz_showsectgrp'] []
/src/libdwarf/src/lib/libdwarf/dwarf_elf_rel_detector.c [] []
/src/libdwarf/src/lib/libdwarf/dwarf_stringsection.c ['fuzz_debug_str'] []
/src/libdwarf/src/lib/libdwarf/dwarf_crc32.c ['fuzz_showsectgrp', 'fuzz_crc_32', 'fuzz_init_path', 'fuzz_findfuncbypc'] []
/src/libdwarf/src/lib/libdwarf/dwarf_locationop_read.c ['fuzz_die_cu_attrs_loclist'] []
/src/libdwarf/src/lib/libdwarf/dwarf_ranges.c ['fuzz_findfuncbypc'] []
/src/libdwarf/fuzz/fuzz_init_b.c ['fuzz_init_b'] []
/src/libdwarf/fuzz/fuzz_rng.c ['fuzz_rng'] []
/src/libdwarf/src/lib/libdwarf/dwarf_generic_init.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_safe_arithmetic.c ['fuzz_set_frame_all'] []
/src/libdwarf/src/lib/libdwarf/dwarf_tied.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_harmless.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_die_deliv.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_set_frame_all', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_init_finish.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_memcpy_swap.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_dnames.c ['fuzz_dnames'] []
/src/libdwarf/fuzz/fuzz_die_cu.c ['fuzz_die_cu'] []
/src/libdwarf/src/lib/libdwarf/dwarf_safe_strcpy.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_simplereader_tu', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_crc.c ['fuzz_crc'] []
/src/libdwarf/src/lib/libdwarf/dwarf_fission_to_cu.c ['fuzz_die_cu_e', 'fuzz_simplereader_tu', 'fuzz_srcfiles', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_die_cu_attrs_loclist', 'fuzz_stack_frame_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_die_cu_offset', 'fuzz_die_cu_info1', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_loc.c ['fuzz_die_cu_attrs_loclist'] []
/src/libdwarf/fuzz/fuzz_tie.c ['fuzz_tie'] []
/src/libdwarf/fuzz/fuzz_die_cu_print.c ['fuzz_die_cu_print'] []
/src/libdwarf/src/lib/libdwarf/dwarf_peread.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_debug_addr_access.c ['fuzz_debug_addr_access'] []
/src/libdwarf/src/lib/libdwarf/dwarf_object_read_common.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/fuzz/fuzz_gnu_index.c ['fuzz_gnu_index'] []
/src/libdwarf/fuzz/fuzz_debug_str.c ['fuzz_debug_str'] []
/src/libdwarf/src/lib/libdwarf/dwarf_secname_ck.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []
/src/libdwarf/src/lib/libdwarf/dwarf_setup_sections.c ['fuzz_die_cu_e', 'fuzz_showsectgrp', 'fuzz_gdbindex', 'fuzz_macro_dwarf4', 'fuzz_tie', 'fuzz_srcfiles', 'fuzz_init_binary', 'fuzz_die_cu_e_print', 'fuzz_die_cu_print', 'fuzz_crc_32', 'fuzz_dnames', 'fuzz_init_path', 'fuzz_init_b', 'fuzz_set_frame_all', 'fuzz_rng', 'fuzz_gnu_index', 'fuzz_die_cu_attrs_loclist', 'fuzz_aranges', 'fuzz_stack_frame_access', 'fuzz_debug_addr_access', 'fuzz_findfuncbypc', 'fuzz_die_cu', 'fuzz_globals', 'fuzz_xuindex', 'fuzz_die_cu_offset', 'fuzz_debuglink', 'fuzz_str_offsets', 'fuzz_die_cu_info1', 'fuzz_debug_str', 'fuzz_macro_dwarf5', 'fuzz_die_cu_attrs'] []

Directories in report

Directory
/src/libdwarf/fuzz/
/src/libdwarf/src/lib/libdwarf/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
fuzz_crc fuzzerLogFile-0-JuZATUqeKY.data fuzzerLogFile-0-JuZATUqeKY.data.yaml
fuzz_die_cu_e fuzzerLogFile-0-473iqT7q1v.data fuzzerLogFile-0-473iqT7q1v.data.yaml
fuzz_showsectgrp fuzzerLogFile-0-claG8giFag.data fuzzerLogFile-0-claG8giFag.data.yaml
fuzz_gdbindex fuzzerLogFile-0-mfO3v3nMw6.data fuzzerLogFile-0-mfO3v3nMw6.data.yaml
fuzz_simplereader_tu fuzzerLogFile-0-nSfWI1oaq4.data fuzzerLogFile-0-nSfWI1oaq4.data.yaml
fuzz_macro_dwarf4 fuzzerLogFile-0-myMpTDvQXh.data fuzzerLogFile-0-myMpTDvQXh.data.yaml
fuzz_tie fuzzerLogFile-0-gsD8mT6okm.data fuzzerLogFile-0-gsD8mT6okm.data.yaml
fuzz_srcfiles fuzzerLogFile-0-mWFsX6cWDG.data fuzzerLogFile-0-mWFsX6cWDG.data.yaml
fuzz_init_binary fuzzerLogFile-0-SELKbgp2hV.data fuzzerLogFile-0-SELKbgp2hV.data.yaml
fuzz_die_cu_e_print fuzzerLogFile-0-tJEWfyp7Xy.data fuzzerLogFile-0-tJEWfyp7Xy.data.yaml
fuzz_die_cu_print fuzzerLogFile-0-QZSii2WqLk.data fuzzerLogFile-0-QZSii2WqLk.data.yaml
fuzz_crc_32 fuzzerLogFile-0-hyXWYi7mpD.data fuzzerLogFile-0-hyXWYi7mpD.data.yaml
fuzz_dnames fuzzerLogFile-0-x58uHHwjff.data fuzzerLogFile-0-x58uHHwjff.data.yaml
fuzz_init_path fuzzerLogFile-0-7y0uPDsSXZ.data fuzzerLogFile-0-7y0uPDsSXZ.data.yaml
fuzz_init_b fuzzerLogFile-0-05j6N7Urd2.data fuzzerLogFile-0-05j6N7Urd2.data.yaml
fuzz_set_frame_all fuzzerLogFile-0-r5Zoiw5HJy.data fuzzerLogFile-0-r5Zoiw5HJy.data.yaml
fuzz_rng fuzzerLogFile-0-bTi4CKNDl0.data fuzzerLogFile-0-bTi4CKNDl0.data.yaml
fuzz_gnu_index fuzzerLogFile-0-hqBuGB2J3g.data fuzzerLogFile-0-hqBuGB2J3g.data.yaml
fuzz_die_cu_attrs_loclist fuzzerLogFile-0-AUAvTPSvqQ.data fuzzerLogFile-0-AUAvTPSvqQ.data.yaml
fuzz_aranges fuzzerLogFile-0-u1cBOM1Io0.data fuzzerLogFile-0-u1cBOM1Io0.data.yaml
fuzz_stack_frame_access fuzzerLogFile-0-AZrmtG9k5B.data fuzzerLogFile-0-AZrmtG9k5B.data.yaml
fuzz_debug_addr_access fuzzerLogFile-0-z6yoFNWNs3.data fuzzerLogFile-0-z6yoFNWNs3.data.yaml
fuzz_findfuncbypc fuzzerLogFile-0-Vm4p1d8FEa.data fuzzerLogFile-0-Vm4p1d8FEa.data.yaml
fuzz_die_cu fuzzerLogFile-0-u7bd8wkxy4.data fuzzerLogFile-0-u7bd8wkxy4.data.yaml
fuzz_globals fuzzerLogFile-0-HDHqljtUj8.data fuzzerLogFile-0-HDHqljtUj8.data.yaml
fuzz_xuindex fuzzerLogFile-0-lEdApD3iUO.data fuzzerLogFile-0-lEdApD3iUO.data.yaml
fuzz_die_cu_offset fuzzerLogFile-0-nvfKZavAXC.data fuzzerLogFile-0-nvfKZavAXC.data.yaml
fuzz_debuglink fuzzerLogFile-0-27EbXglNi2.data fuzzerLogFile-0-27EbXglNi2.data.yaml
fuzz_str_offsets fuzzerLogFile-0-DyLq9t5Qo3.data fuzzerLogFile-0-DyLq9t5Qo3.data.yaml
fuzz_die_cu_info1 fuzzerLogFile-0-3FqmlfKzxi.data fuzzerLogFile-0-3FqmlfKzxi.data.yaml
fuzz_debug_str fuzzerLogFile-0-01qnkdUe7V.data fuzzerLogFile-0-01qnkdUe7V.data.yaml
fuzz_macro_dwarf5 fuzzerLogFile-0-CIZOjgyUu2.data fuzzerLogFile-0-CIZOjgyUu2.data.yaml
fuzz_die_cu_attrs fuzzerLogFile-0-NEwHW2UZJB.data fuzzerLogFile-0-NEwHW2UZJB.data.yaml