High level conclusions

Fuzzers reach 64.04% of cyclomatic complexity.

Fuzzers reach 55.72% of all functions.

Fuzzer libewf_handle_fuzzer is blocked:

The runtime code coverage of libewf_handle_fuzzer covers 29.16% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libevtx_file_fuzzer is blocked:

The runtime code coverage of libevtx_file_fuzzer covers 14.59% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libmsiecf_item_fuzzer is blocked:

The runtime code coverage of libmsiecf_item_fuzzer covers 23.37% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfwevt_xml_document_fuzzer is blocked:

The runtime code coverage of libfwevt_xml_document_fuzzer covers 22.83% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfvde_volume_fuzzer is blocked:

The runtime code coverage of libfvde_volume_fuzzer covers 27.79% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfwsi_item_list_fuzzer is blocked:

The runtime code coverage of libfwsi_item_list_fuzzer covers 10.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfwsi_item_fuzzer is blocked:

The runtime code coverage of libfwsi_item_fuzzer covers 12.82% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

4202 / 7541

Cyclomatic complexity statically reachable by fuzzers

49810 / 77768

Runtime code coverage of functions

3087 / 7541

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: libfcrypto_crypt_rc4_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	21	77.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	5	18.5%
lawngreen	50+	1	3.70%
All colors	27	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libfcrypto_rc4_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:77
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_rc4_context_free	call site: 00025	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:131
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_rc4_context_set_key	call site: 00015	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:192
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:41
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:52
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:66
0	0	None	0	32	libfcrypto_rc4_context_free	call site: 00024	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:115
0	0	None	0	32	libfcrypto_rc4_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:168
0	0	None	0	32	libfcrypto_rc4_context_set_key	call site: 00014	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:181
0	0	None	0	32	libfcrypto_rc4_crypt	call site: 00017	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:253
0	0	None	0	32	libfcrypto_rc4_crypt	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_rc4_context.c:266

Runtime coverage analysis

Covered functions

6

Functions that are reachable but not covered

5

Reachable functions

11

Percentage of reachable functions covered

54.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_rc4_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_rc4_context.c	4
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libfmos_adc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	15	65.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	17.3%
greenyellow	[30:49]	1	4.34%
lawngreen	50+	3	13.0%
All colors	23	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	0	None	0	32	libfmos_adc_decompress	call site: 00001	/src/libfmos/libfmos/libfmos_adc.c:54
0	0	None	0	32	libfmos_adc_decompress	call site: 00002	/src/libfmos/libfmos/libfmos_adc.c:65
0	0	None	0	32	libfmos_adc_decompress	call site: 00010	/src/libfmos/libfmos/libfmos_adc.c:76
0	0	None	0	32	libfmos_adc_decompress	call site: 00011	/src/libfmos/libfmos/libfmos_adc.c:87
0	0	None	0	32	libfmos_adc_decompress	call site: 00012	/src/libfmos/libfmos/libfmos_adc.c:100
0	0	None	0	32	libfmos_adc_decompress	call site: 00013	/src/libfmos/libfmos/libfmos_adc.c:117
0	0	None	0	32	libfmos_adc_decompress	call site: 00016	/src/libfmos/libfmos/libfmos_adc.c:170
0	0	None	0	32	libfmos_adc_decompress	call site: 00020	/src/libfmos/libfmos/libfmos_adc.c:237

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

5

Reachable functions

8

Percentage of reachable functions covered

37.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmos/ossfuzz/adc_fuzzer.cc	1
libfmos/libfmos/libfmos_adc.c	1
libfmos/libcerror/libcerror_error.c	3

Fuzzer: libfwnt_lznt1_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	20	58.8%
gold	[1:9]	3	8.82%
yellow	[10:29]	1	2.94%
greenyellow	[30:49]	3	8.82%
lawngreen	50+	7	20.5%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00014	/src/libfwnt/libfwnt/libfwnt_lznt1.c:57
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00015	/src/libfwnt/libfwnt/libfwnt_lznt1.c:68
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00016	/src/libfwnt/libfwnt/libfwnt_lznt1.c:79
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00018	/src/libfwnt/libfwnt/libfwnt_lznt1.c:103
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00020	/src/libfwnt/libfwnt/libfwnt_lznt1.c:125
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00021	/src/libfwnt/libfwnt/libfwnt_lznt1.c:136
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00024	/src/libfwnt/libfwnt/libfwnt_lznt1.c:267
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00028	/src/libfwnt/libfwnt/libfwnt_lznt1.c:333
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00001	/src/libfwnt/libfwnt/libfwnt_lznt1.c:374
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00002	/src/libfwnt/libfwnt/libfwnt_lznt1.c:385
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00010	/src/libfwnt/libfwnt/libfwnt_lznt1.c:396

Runtime coverage analysis

Covered functions

4

Functions that are reachable but not covered

5

Reachable functions

9

Percentage of reachable functions covered

44.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/lznt1_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_lznt1.c	2
libfwnt/libcerror/libcerror_error.c	3

Fuzzer: libfcrypto_crypt_serpent_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	33	78.5%
gold	[1:9]	1	2.38%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	2.38%
lawngreen	50+	7	16.6%
All colors	42	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
42	42	1 : View List ['libfcrypto_internal_serpent_context_decrypt_block']	42	74	libfcrypto_serpent_crypt_ecb	call site: 00022	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2672
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libfcrypto_serpent_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:609
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_free	call site: 00040	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:663
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_set_key	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:775
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:573
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:584
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:598
0	0	None	0	32	libfcrypto_serpent_context_free	call site: 00039	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:647
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:706
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00014	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:719
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00015	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:730

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_serpent_ecb_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_serpent_context.c	6
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libfmapi_entry_identifier_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	76.1%
gold	[1:9]	1	4.76%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	3	14.2%
lawngreen	50+	1	4.76%
All colors	21	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libfmapi_entry_identifier_initialize	call site: 00011	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:81
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_entry_identifier_free	call site: 00019	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:118
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00017	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:221
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00001	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:45
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00002	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:56
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00010	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:70
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00013	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:159
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00014	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:172
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00016	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:207

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmapi/ossfuzz/entry_identifier_fuzzer.cc	1
libfmapi/libfmapi/libfmapi_entry_identifier.c	3
libfmapi/libcerror/libcerror_error.c	3

Fuzzer: libfmos_lzvn_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	14	53.8%
gold	[1:9]	4	15.3%
yellow	[10:29]	4	15.3%
greenyellow	[30:49]	1	3.84%
lawngreen	50+	3	11.5%
All colors	26	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00001	/src/libfmos/libfmos/libfmos_lzvn.c:350
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00002	/src/libfmos/libfmos/libfmos_lzvn.c:361
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00010	/src/libfmos/libfmos/libfmos_lzvn.c:372
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00011	/src/libfmos/libfmos/libfmos_lzvn.c:383
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00012	/src/libfmos/libfmos/libfmos_lzvn.c:396
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00013	/src/libfmos/libfmos/libfmos_lzvn.c:413
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00022	/src/libfmos/libfmos/libfmos_lzvn.c:652

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

5

Reachable functions

8

Percentage of reachable functions covered

37.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmos/ossfuzz/lzvn_fuzzer.cc	1
libfmos/libfmos/libfmos_lzvn.c	1
libfmos/libcerror/libcerror_error.c	3

Fuzzer: libfmapi_lzfu_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	17	58.6%
gold	[1:9]	2	6.89%
yellow	[10:29]	4	13.7%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	20.6%
All colors	29	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00020	/src/libfmapi/libfmapi/libfmapi_checksum.c:174
0	0	None	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00018	/src/libfmapi/libfmapi/libfmapi_checksum.c:152
0	0	None	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00019	/src/libfmapi/libfmapi/libfmapi_checksum.c:163
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00001	/src/libfmapi/libfmapi/libfmapi_lzfu.c:288
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00010	/src/libfmapi/libfmapi/libfmapi_lzfu.c:311
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00011	/src/libfmapi/libfmapi/libfmapi_lzfu.c:322
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00012	/src/libfmapi/libfmapi/libfmapi_lzfu.c:347
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00013	/src/libfmapi/libfmapi/libfmapi_lzfu.c:363
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00018	/src/libfmapi/libfmapi/libfmapi_lzfu.c:472
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00024	/src/libfmapi/libfmapi/libfmapi_lzfu.c:519

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmapi/ossfuzz/lzfu_fuzzer.cc	1
libfmapi/libfmapi/libfmapi_lzfu.c	1
libfmapi/libcerror/libcerror_error.c	3
libfmapi/libfmapi/libfmapi_checksum.c	2

Fuzzer: libfwnt_security_identifier_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	69.2%
gold	[1:9]	2	7.69%
yellow	[10:29]	1	3.84%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	5	19.2%
All colors	26	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libfwnt_security_identifier_initialize	call site: 00011	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:79
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_security_identifier_free	call site: 00023	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:134
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_internal_security_identifier_free	call site: 00023	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:162
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00001	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:43
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00002	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:54
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00010	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:68
0	0	None	0	32	libfwnt_security_identifier_free	call site: 00021	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:117
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00013	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:198
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00014	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:211
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00016	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:233
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00017	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:244

Runtime coverage analysis

Covered functions

6

Functions that are reachable but not covered

5

Reachable functions

11

Percentage of reachable functions covered

54.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/security_identifier_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_security_identifier.c	4
libfwnt/libcerror/libcerror_error.c	3

Fuzzer: libhmac_sha224_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libhmac_sha224_context_free', 'libcerror_error_set']	32	68	libhmac_sha224_calculate	call site: 00046	/src/libhmac/libhmac/libhmac_sha224.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_sha224_context.c:420
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_sha224_context.c:592
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_free	call site: 00046	/src/libhmac/libhmac/libhmac_sha224_context.c:631
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_sha224_context.c:987
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_finalize	call site: 00043	/src/libhmac/libhmac/libhmac_sha224_context.c:1340
0	0	None	192	274	libhmac_sha224_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_sha224_context.c:888
0	0	None	32	68	libhmac_sha224_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_sha224.c:153
0	0	None	32	68	libhmac_sha224_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_sha224.c:166
0	0	None	32	68	libhmac_sha224_calculate	call site: 00035	/src/libhmac/libhmac/libhmac_sha224.c:181
0	0	None	32	32	libhmac_sha224_context_transform	call site: 00022	/src/libhmac/libhmac/libhmac_sha224_context.c:248
0	0	None	32	32	libhmac_sha224_context_transform	call site: 00023	/src/libhmac/libhmac/libhmac_sha224_context.c:259

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha224_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha224.c	1
libhmac/libhmac/libhmac_sha224_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libcaes_crypt_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	39	81.2%
gold	[1:9]	2	4.16%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	2.08%
lawngreen	50+	6	12.5%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00019	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libcaes_context_initialize	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00033	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00020	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00022	/src/libcaes/libcaes/libcaes_context.c:1064
0	0	None	0	64	libcaes_crypt_ecb	call site: 00044	/src/libcaes/libcaes/libcaes_context.c:3019
0	0	None	0	64	libcaes_crypt_ecb	call site: 00044	/src/libcaes/libcaes/libcaes_context.c:3107
0	0	None	0	64	libcaes_crypt_ecb	call site: 00045	/src/libcaes/libcaes/libcaes_context.c:3121
0	0	None	0	32	libcaes_context_initialize	call site: 00001	/src/libcaes/libcaes/libcaes_context.c:275
0	0	None	0	32	libcaes_context_initialize	call site: 00002	/src/libcaes/libcaes/libcaes_context.c:286

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

6

Reachable functions

14

Percentage of reachable functions covered

57.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_ecb_fuzzer.cc	1
libcaes/libcaes/libcaes_context.c	7
libcaes/libcerror/libcerror_error.c	3

Fuzzer: libwrc_version_information_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	35	50.0%
gold	[1:9]	8	11.4%
yellow	[10:29]	5	7.14%
greenyellow	[30:49]	1	1.42%
lawngreen	50+	21	30.0%
All colors	70	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libwrc_version_information_resource_initialize	call site: 00011	/src/libwrc/libwrc/libwrc_version_information_resource.c:87
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_version_information_resource_free	call site: 00068	/src/libwrc/libwrc/libwrc_version_information_resource.c:124
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_internal_version_information_resource_read_string	call site: 00044	/src/libwrc/libwrc/libwrc_version_information_resource.c:856
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00001	/src/libwrc/libwrc/libwrc_version_information_resource.c:51
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00002	/src/libwrc/libwrc/libwrc_version_information_resource.c:62
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00010	/src/libwrc/libwrc/libwrc_version_information_resource.c:76
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00022	/src/libwrc/libwrc/libwrc_version_information_resource.c:168
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00023	/src/libwrc/libwrc/libwrc_version_information_resource.c:179
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00024	/src/libwrc/libwrc/libwrc_version_information_resource.c:190
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_table	call site: 00030	/src/libwrc/libwrc/libwrc_version_information_resource.c:408
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_table	call site: 00031	/src/libwrc/libwrc/libwrc_version_information_resource.c:419

Runtime coverage analysis

Covered functions

10

Functions that are reachable but not covered

6

Reachable functions

16

Percentage of reachable functions covered

62.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/version_information_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_version_information_resource.c	8
libwrc/libcerror/libcerror_error.c	3

Fuzzer: libhmac_sha512_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libhmac_sha512_context_free', 'libcerror_error_set']	32	68	libhmac_sha512_calculate	call site: 00046	/src/libhmac/libhmac/libhmac_sha512.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_sha512_context.c:456
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_sha512_context.c:628
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_free	call site: 00046	/src/libhmac/libhmac/libhmac_sha512_context.c:667
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_sha512_context.c:1023
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_finalize	call site: 00043	/src/libhmac/libhmac/libhmac_sha512_context.c:1379
0	0	None	192	274	libhmac_sha512_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_sha512_context.c:924
0	0	None	32	68	libhmac_sha512_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_sha512.c:153
0	0	None	32	68	libhmac_sha512_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_sha512.c:166
0	0	None	32	68	libhmac_sha512_calculate	call site: 00035	/src/libhmac/libhmac/libhmac_sha512.c:181
0	0	None	32	32	libhmac_sha512_context_transform	call site: 00022	/src/libhmac/libhmac/libhmac_sha512_context.c:284
0	0	None	32	32	libhmac_sha512_context_transform	call site: 00023	/src/libhmac/libhmac/libhmac_sha512_context.c:295

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha512_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha512.c	1
libhmac/libhmac/libhmac_sha512_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libfcrypto_crypt_serpent_cbc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	46	83.6%
gold	[1:9]	1	1.81%
yellow	[10:29]	2	3.63%
greenyellow	[30:49]	1	1.81%
lawngreen	50+	5	9.09%
All colors	55	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libfcrypto_serpent_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:609
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_free	call site: 00053	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:663
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_set_key	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:775
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_serpent_context_encrypt_block	call site: 00038	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:1553
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_crypt_cbc	call site: 00050	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2609
0	0	None	42	244	libfcrypto_serpent_crypt_cbc	call site: 00032	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2485
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:573
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:584
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:598
0	0	None	0	32	libfcrypto_serpent_context_free	call site: 00052	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:647
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:706

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_serpent_cbc_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_serpent_context.c	6
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libhmac_sha1_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libhmac_sha1_context_free', 'libcerror_error_set']	32	68	libhmac_sha1_calculate	call site: 00046	/src/libhmac/libhmac/libhmac_sha1.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_sha1_context.c:461
32	32	2 : View List ['free', 'libcerror_error_set']	32	32	libhmac_sha1_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_sha1_context.c:633
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_free	call site: 00046	/src/libhmac/libhmac/libhmac_sha1_context.c:672
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_sha1_context.c:1028
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_finalize	call site: 00043	/src/libhmac/libhmac/libhmac_sha1_context.c:1372
0	0	None	192	274	libhmac_sha1_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_sha1_context.c:929
0	0	None	32	68	libhmac_sha1_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_sha1.c:153
0	0	None	32	68	libhmac_sha1_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_sha1.c:166
0	0	None	32	68	libhmac_sha1_calculate	call site: 00035	/src/libhmac/libhmac/libhmac_sha1.c:181
0	0	None	32	32	libhmac_sha1_context_transform	call site: 00022	/src/libhmac/libhmac/libhmac_sha1_context.c:287
0	0	None	32	32	libhmac_sha1_context_transform	call site: 00023	/src/libhmac/libhmac/libhmac_sha1_context.c:298

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha1_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha1.c	1
libhmac/libhmac/libhmac_sha1_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libcaes_crypt_ccm_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	54	83.0%
gold	[1:9]	2	3.07%
yellow	[10:29]	1	1.53%
greenyellow	[30:49]	2	3.07%
lawngreen	50+	6	9.23%
All colors	65	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00019	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['strlen', 'free', 'libcerror_error_initialize', 'realloc', 'libcerror_error_resize']	16	16	libcerror_error_set	call site: 00002	/src/libfcrypto/libcerror/libcerror_error.c:328
0	32	2 : View List ['free', 'libcerror_error_set']	0	32	libcaes_context_initialize	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00033	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00020	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00022	/src/libcaes/libcaes/libcaes_context.c:1064
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_crypt_ccm	call site: 00062	/src/libcaes/libcaes/libcaes_context.c:2249
0	0	None	0	64	libcaes_crypt_ecb	call site: 00056	/src/libcaes/libcaes/libcaes_context.c:3019
0	0	None	0	64	libcaes_crypt_ecb	call site: 00056	/src/libcaes/libcaes/libcaes_context.c:3107
0	0	None	0	64	libcaes_crypt_ecb	call site: 00057	/src/libcaes/libcaes/libcaes_context.c:3121
0	0	None	0	32	libcaes_context_initialize	call site: 00001	/src/libcaes/libcaes/libcaes_context.c:275

Runtime coverage analysis

Covered functions

9

Functions that are reachable but not covered

6

Reachable functions

15

Percentage of reachable functions covered

60.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_ccm_fuzzer.cc	1
libcaes/libcaes/libcaes_context.c	8
libcaes/libcerror/libcerror_error.c	3

Fuzzer: libhmac_md5_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	41	83.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.3%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libhmac_md5_context_free', 'libcerror_error_set']	32	68	libhmac_md5_calculate	call site: 00045	/src/libhmac/libhmac/libhmac_md5.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_md5_context.c:388
32	32	2 : View List ['free', 'libcerror_error_set']	32	32	libhmac_md5_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_md5_context.c:560
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_free	call site: 00045	/src/libhmac/libhmac/libhmac_md5_context.c:599
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_md5_context.c:955
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_finalize	call site: 00042	/src/libhmac/libhmac/libhmac_md5_context.c:1284
0	0	None	192	274	libhmac_md5_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_md5_context.c:856
0	0	None	32	68	libhmac_md5_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_md5.c:153
0	0	None	32	68	libhmac_md5_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_md5.c:166
0	0	None	32	68	libhmac_md5_calculate	call site: 00035