High level conclusions

Fuzzers reach 63.33% of cyclomatic complexity.

Fuzzers reach 55.05% of all functions.

Fuzzer libfwsi_item_list_fuzzer is blocked:

The runtime code coverage of libfwsi_item_list_fuzzer covers 8.988% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfvde_volume_fuzzer is blocked:

The runtime code coverage of libfvde_volume_fuzzer covers 27.79% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libmsiecf_item_fuzzer is blocked:

The runtime code coverage of libmsiecf_item_fuzzer covers 23.07% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer libfwsi_item_fuzzer is blocked:

The runtime code coverage of libfwsi_item_fuzzer covers 11.49% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

4243 / 7707

Cyclomatic complexity statically reachable by fuzzers

50540 / 79795

Runtime code coverage of functions

3099 / 7707

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: libfmos_lzfse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	72	46.1%
gold	[1:9]	10	6.41%
yellow	[10:29]	20	12.8%
greenyellow	[30:49]	8	5.12%
lawngreen	50+	46	29.4%
All colors	156	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	68	2 : View List ['libcerror_error_set', 'libfmos_lzfse_bit_stream_free']	0	68	libfmos_lzfse_read_block	call site: 00128	/src/libfmos/libfmos/libfmos_lzfse.c:1154
0	32	1 : View List ['libcerror_error_set']	0	32	libfmos_lzfse_read_block_v1_header	call site: 00029	/src/libfmos/libfmos/libfmos_lzfse.c:410
0	32	1 : View List ['libcerror_error_set']	0	32	libfmos_lzfse_read_compressed_frequency_table	call site: 00045	/src/libfmos/libfmos/libfmos_lzfse.c:943
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfmos_lzfse_bit_stream_initialize	call site: 00082	/src/libfmos/libfmos/libfmos_lzfse_bit_stream.c:101
0	32	1 : View List ['libcerror_error_set']	0	32	libfmos_lzfse_bit_stream_free	call site: 00099	/src/libfmos/libfmos/libfmos_lzfse_bit_stream.c:141
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfmos_lzfse_decoder_initialize	call site: 00021	/src/libfmos/libfmos/libfmos_lzfse_decoder.c:78
0	32	1 : View List ['libcerror_error_set']	0	32	libfmos_lzfse_decoder_free	call site: 00132	/src/libfmos/libfmos/libfmos_lzfse_decoder.c:114
0	0	None	0	68	libfmos_lzfse_read_block	call site: 00077	/src/libfmos/libfmos/libfmos_lzfse.c:1064
0	0	None	0	68	libfmos_lzfse_read_block	call site: 00099	/src/libfmos/libfmos/libfmos_lzfse.c:1094
0	0	None	0	68	libfmos_lzfse_read_block	call site: 00103	/src/libfmos/libfmos/libfmos_lzfse.c:1121
0	0	None	0	68	libfmos_lzfse_decompress	call site: 00013	/src/libfmos/libfmos/libfmos_lzfse.c:1783

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

5

Reachable functions

22

Percentage of reachable functions covered

77.27%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmos/ossfuzz/lzfse_fuzzer.cc	1
libfmos/libfmos/libfmos_lzfse.c	9
libfmos/libcerror/libcerror_error.c	3
libfmos/libfmos/libfmos_lzfse_decoder.c	2
libfmos/libfmos/libfmos_lzfse_bit_stream.c	3
libfmos/libfmos/libfmos_lzvn.c	1

Fuzzer: libfwnt_security_descriptor_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	79	60.3%
gold	[1:9]	3	2.29%
yellow	[10:29]	5	3.81%
greenyellow	[30:49]	4	3.05%
lawngreen	50+	40	30.5%
All colors	131	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00065	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00103	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_set_entry_by_index	call site: 00094	/src/libfwnt/libcdata/libcdata_array.c:1367
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_access_control_entry_initialize	call site: 00071	/src/libfwnt/libfwnt/libfwnt_access_control_entry.c:85
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_internal_access_control_entry_free	call site: 00099	/src/libfwnt/libfwnt/libfwnt_access_control_entry.c:164
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_access_control_list_initialize	call site: 00049	/src/libfwnt/libfwnt/libfwnt_access_control_list.c:81
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_internal_access_control_list_free	call site: 00117	/src/libfwnt/libfwnt/libfwnt_access_control_list.c:160
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_security_descriptor_initialize	call site: 00011	/src/libfwnt/libfwnt/libfwnt_security_descriptor.c:86
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_security_descriptor_free	call site: 00129	/src/libfwnt/libfwnt/libfwnt_security_descriptor.c:190
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_security_identifier_initialize	call site: 00027	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:79
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_internal_security_identifier_free	call site: 00088	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:162

Runtime coverage analysis

Covered functions

18

Functions that are reachable but not covered

5

Reachable functions

23

Percentage of reachable functions covered

78.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/security_descriptor_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_security_descriptor.c	3
libfwnt/libcerror/libcerror_error.c	3
libfwnt/libfwnt/libfwnt_security_identifier.c	3
libfwnt/libfwnt/libfwnt_access_control_list.c	3
libfwnt/libcdata/libcdata_array.c	4
libfwnt/libfwnt/libfwnt_access_control_entry.c	3

Fuzzer: libvsbsdl_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	390	85.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	14	3.05%
greenyellow	[30:49]	1	0.21%
lawngreen	50+	53	11.5%
All colors	458	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00210	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00416	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
2	2	1 : View List ['realloc']	2	98	libcdata_internal_array_resize	call site: 00380	/src/libfwnt/libcdata/libcdata_array.c:753
0	189	1 : View List ['libvsbsdl_volume_close']	0	388	libvsbsdl_volume_free	call site: 00447	/src/libvsbsdl/libvsbsdl/libvsbsdl_volume.c:169
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	386	libvsbsdl_volume_close	call site: 00431	/src/libvsbsdl/libvsbsdl/libvsbsdl_volume.c:857
0	87	2 : View List ['libcerror_error_set', 'libvsbsdl_disklabel_free']	0	87	libvsbsdl_internal_volume_open_read	call site: 00396	/src/libvsbsdl/libvsbsdl/libvsbsdl_volume.c:1016
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00347	/src/libvsbsdl/libbfio/libbfio_handle.c:1164
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00383	/src/libfwnt/libcdata/libcdata_array.c:823

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

42

Reachable functions

92

Percentage of reachable functions covered

54.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsbsdl/ossfuzz/volume_fuzzer.cc	1
libvsbsdl/libbfio/libbfio_memory_range.c	2
libvsbsdl/libcerror/libcerror_error.c	3
libvsbsdl/libbfio/libbfio_memory_range_io_handle.c	12
libvsbsdl/libbfio/libbfio_handle.c	9
libvsbsdl/libcdata/libcdata_range_list.c	15
libvsbsdl/libcdata/libcdata_list_element.c	10
libvsbsdl/libcdata/libcdata_range_list_value.c	3
libvsbsdl/libvsbsdl/libvsbsdl_volume.c	5
libvsbsdl/libvsbsdl/libvsbsdl_io_handle.c	3
libvsbsdl/libcthreads/libcthreads_read_write_lock.c	4
libvsbsdl/libcerror/libcerror_system.c	2
libvsbsdl/libvsbsdl/libvsbsdl_disklabel.c	5
libvsbsdl/libcdata/libcdata_array.c	6
libvsbsdl/libvsbsdl/libvsbsdl_partition_entry.c	3

Fuzzer: libvsgpt_partition_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	578	76.6%
gold	[1:9]	4	0.53%
yellow	[10:29]	2	0.26%
greenyellow	[30:49]	2	0.26%
lawngreen	50+	168	22.2%
All colors	754	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00214	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00706	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00536	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00514	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00676	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	186	1 : View List ['libvsgpt_volume_close']	0	463	libvsgpt_volume_free	call site: 00744	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:196
0	154	1 : View List ['libvsgpt_partition_free']	0	154	libvsgpt_volume_get_partition_by_index	call site: 00691	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:2439
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00559	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	123	3 : View List ['libvsgpt_partition_table_header_free', 'libcerror_error_set', 'libvsgpt_boot_record_free']	0	123	libvsgpt_internal_volume_open_read	call site: 00501	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:1117
0	123	3 : View List ['libcerror_error_set', 'libvsgpt_boot_record_free', 'libvsgpt_partition_values_free']	0	123	libvsgpt_internal_volume_read_mbr_partition_entries	call site: 00489	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:2054

Runtime coverage analysis

Covered functions

91

Functions that are reachable but not covered

62

Reachable functions

153

Percentage of reachable functions covered

59.48%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsgpt/ossfuzz/partition_fuzzer.cc	1
libvsgpt/libbfio/libbfio_memory_range.c	2
libvsgpt/libcerror/libcerror_error.c	4
libvsgpt/libbfio/libbfio_memory_range_io_handle.c	12
libvsgpt/libbfio/libbfio_handle.c	9
libvsgpt/libcdata/libcdata_range_list.c	15
libvsgpt/libcdata/libcdata_list_element.c	10
libvsgpt/libcdata/libcdata_range_list_value.c	3
libvsgpt/libvsgpt/libvsgpt_volume.c	10
libvsgpt/libvsgpt/libvsgpt_io_handle.c	3
libvsgpt/libcdata/libcdata_array.c	9
libvsgpt/libcthreads/libcthreads_read_write_lock.c	6
libvsgpt/libcerror/libcerror_system.c	2
libvsgpt/libvsgpt/libvsgpt_partition_table_header.c	4
libvsgpt/libvsgpt/libvsgpt_checksum.c	2
libvsgpt/libvsgpt/libvsgpt_partition_entry.c	3
libvsgpt/libvsgpt/libvsgpt_partition_values.c	3
libvsgpt/libvsgpt/libvsgpt_boot_record.c	5
libvsgpt/libvsgpt/libvsgpt_mbr_partition_entry.c	3
libvsgpt/libvsgpt/libvsgpt_partition.c	2
libvsgpt/libfdata/libfdata_vector.c	4
libvsgpt/libfcache/libfcache_date_time.c	1
libvsgpt/libvsgpt/libvsgpt_sector_data.c	4
libvsgpt/libfdata/libfdata_segments_array.c	2
libvsgpt/libfdata/libfdata_range.c	4
libvsgpt/libfcache/libfcache_cache.c	3
libvsgpt/libcdata/libcdata_list.c	7
libvsgpt/libfcache/libfcache_cache_value.c	6
libvsgpt/libfdata/libfdata_mapped_range.c	3

Fuzzer: libcaes_crypt_cbc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	55	84.6%
gold	[1:9]	2	3.07%
yellow	[10:29]	1	1.53%
greenyellow	[30:49]	1	1.53%
lawngreen	50+	6	9.23%
All colors	65	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00019	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcaes_context_initialize	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00033	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00020	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00022	/src/libcaes/libcaes/libcaes_context.c:1064
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_crypt_cbc	call site: 00062	/src/libcaes/libcaes/libcaes_context.c:1969
0	0	None	0	260	libcaes_crypt_cbc	call site: 00048	/src/libcaes/libcaes/libcaes_context.c:1843
0	0	None	0	64	libcaes_crypt_ecb	call site: 00055	/src/libcaes/libcaes/libcaes_context.c:3019
0	0	None	0	64	libcaes_crypt_ecb	call site: 00055	/src/libcaes/libcaes/libcaes_context.c:3107
0	0	None	0	64	libcaes_crypt_ecb	call site: 00056	/src/libcaes/libcaes/libcaes_context.c:3121

Runtime coverage analysis

Covered functions

9

Functions that are reachable but not covered

6

Reachable functions

15

Percentage of reachable functions covered

60.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_cbc_fuzzer.cc	1
libcaes/libcaes/libcaes_context.c	8
libcaes/libcerror/libcerror_error.c	3

Fuzzer: libfwnt_lzxpress_huffman_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	59	68.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	8	9.30%
greenyellow	[30:49]	2	2.32%
lawngreen	50+	17	19.7%
All colors	86	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	72	2 : View List ['libcerror_error_set', 'libfwnt_bit_stream_read']	0	72	libfwnt_bit_stream_get_value	call site: 00060	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:268
0	70	2 : View List ['libcerror_error_set', 'libfwnt_huffman_tree_free']	0	70	libfwnt_lzxpress_huffman_decompress_chunk	call site: 00077	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:922
0	68	2 : View List ['libcerror_error_set', 'libfwnt_bit_stream_free']	0	68	libfwnt_lzxpress_huffman_decompress	call site: 00082	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:1015
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_bit_stream_initialize	call site: 00015	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:99
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_bit_stream_free	call site: 00082	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:138
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_bit_stream_read	call site: 00048	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:180
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_huffman_tree_initialize	call site: 00034	/src/libfwnt/libfwnt/libfwnt_huffman_tree.c:168
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_huffman_tree_free	call site: 00077	/src/libfwnt/libfwnt/libfwnt_huffman_tree.c:216
0	0	None	0	589	libfwnt_lzxpress_huffman_decompress_chunk	call site: 00050	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:590
0	0	None	0	114	libfwnt_huffman_tree_get_symbol_from_bit_stream	call site: 00056	/src/libfwnt/libfwnt/libfwnt_huffman_tree.c:528
0	0	None	0	70	libfwnt_lzxpress_huffman_decompress_chunk	call site: 00025	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:544

Runtime coverage analysis

Covered functions

12

Functions that are reachable but not covered

5

Reachable functions

17

Percentage of reachable functions covered

70.59%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/lzxpress_huffman_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_lzxpress.c	2
libfwnt/libcerror/libcerror_error.c	3
libfwnt/libfwnt/libfwnt_bit_stream.c	4
libfwnt/libfwnt/libfwnt_huffman_tree.c	4

Fuzzer: libvhdi_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	758	72.8%
gold	[1:9]	24	2.30%
yellow	[10:29]	46	4.41%
greenyellow	[30:49]	13	1.24%
lawngreen	50+	200	19.2%
All colors	1041	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 01021	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00981	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00945	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
38	38	1 : View List ['libcdata_array_set_entry_by_index']	38	74	libfdata_segments_array_append_segment	call site: 00946	/src/libvsbsdl/libfdata/libfdata_segments_array.c:642
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	353	5 : View List ['libvhdi_block_allocation_table_read_file_io_handle', 'libfcache_cache_initialize', 'libfdata_vector_append_segment', 'libvhdi_block_allocation_table_initialize', 'libfdata_vector_initialize']	0	645	libvhdi_internal_file_open_read_block_allocation_table	call site: 00777	/src/libvhdi/libvhdi/libvhdi_file.c:1968
0	285	1 : View List ['libvhdi_file_close']	0	484	libvhdi_file_free	call site: 01031	/src/libvhdi/libvhdi/libvhdi_file.c:198
0	154	2 : View List ['libcerror_error_set', 'libvhdi_region_table_free']	0	154	libvhdi_internal_file_open_read_region_table	call site: 00485	/src/libvhdi/libvhdi/libvhdi_file.c:1712
0	132	3 : View List ['libcerror_error_set', 'libvhdi_block_allocation_table_free', 'libfdata_vector_free']	0	132	libvhdi_internal_file_open_read_block_allocation_table	call site: 00953	/src/libvhdi/libvhdi/libvhdi_file.c:2074
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00791	/src/libvsbsdl/libfdata/libfdata_vector.c:180

Runtime coverage analysis

Covered functions

130

Functions that are reachable but not covered

78

Reachable functions

208

Percentage of reachable functions covered

62.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvhdi/ossfuzz/file_fuzzer.cc	1
libvhdi/libbfio/libbfio_memory_range.c	2
libvhdi/libcerror/libcerror_error.c	3
libvhdi/libbfio/libbfio_memory_range_io_handle.c	12
libvhdi/libbfio/libbfio_handle.c	9
libvhdi/libcdata/libcdata_range_list.c	15
libvhdi/libcdata/libcdata_list_element.c	10
libvhdi/libcdata/libcdata_range_list_value.c	3
libvhdi/libvhdi/libvhdi_file.c	10
libvhdi/libvhdi/libvhdi_io_handle.c	3
libvhdi/libvhdi/libvhdi_i18n.c	1
libvhdi/libcthreads/libcthreads_read_write_lock.c	4
libvhdi/libcerror/libcerror_system.c	2
libvhdi/libvhdi/libvhdi_file_information.c	4
libvhdi/libvhdi/libvhdi_file_footer.c	4
libvhdi/libvhdi/libvhdi_dynamic_disk_header.c	4
libvhdi/libvhdi/libvhdi_image_header.c	4
libvhdi/libvhdi/libvhdi_region_table.c	4
libvhdi/libcdata/libcdata_array.c	9
libvhdi/libvhdi/libvhdi_region_table_header.c	3
libvhdi/libvhdi/libvhdi_checksum.c	2
libvhdi/libvhdi/libvhdi_region_table_entry.c	3
libvhdi/libvhdi/libvhdi_metadata_values.c	6
libvhdi/libvhdi/libvhdi_metadata_table.c	5
libvhdi/libvhdi/libvhdi_metadata_table_header.c	3
libvhdi/libvhdi/libvhdi_metadata_table_entry.c	3
libvhdi/libvhdi/libvhdi_parent_locator.c	4
libvhdi/libvhdi/libvhdi_parent_locator_header.c	3
libvhdi/libvhdi/libvhdi_parent_locator_entry.c	6
libvhdi/libuna/libuna_utf8_string.c	3
libvhdi/libuna/libuna_unicode_character.c	5
libvhdi/libfguid/libfguid_identifier.c	5
libvhdi/libvhdi/libvhdi_block_allocation_table.c	4
libvhdi/libfdata/libfdata_vector.c	4
libvhdi/libfcache/libfcache_date_time.c	1
libvhdi/libvhdi/libvhdi_block_descriptor.c	6
libvhdi/libvhdi/libvhdi_sector_range_descriptor.c	2
libvhdi/libfdata/libfdata_segments_array.c	2
libvhdi/libfdata/libfdata_range.c	4
libvhdi/libfcache/libfcache_cache.c	3
libvhdi/libcdata/libcdata_list.c	7
libvhdi/libfcache/libfcache_cache_value.c	6
libvhdi/libfdata/libfdata_mapped_range.c	3

Fuzzer: libwrc_mui_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	28	53.8%
gold	[1:9]	6	11.5%
yellow	[10:29]	1	1.92%
greenyellow	[30:49]	6	11.5%
lawngreen	50+	11	21.1%
All colors	52	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_mui_resource_initialize	call site: 00011	/src/libwrc/libwrc/libwrc_mui_resource.c:88
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_mui_resource_free	call site: 00050	/src/libwrc/libwrc/libwrc_mui_resource.c:125
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_mui_resource_read	call site: 00048	/src/libwrc/libwrc/libwrc_mui_resource.c:1223
0	0	None	0	32	libwrc_mui_resource_initialize	call site: 00001	/src/libwrc/libwrc/libwrc_mui_resource.c:52
0	0	None	0	32	libwrc_mui_resource_initialize	call site: 00002	/src/libwrc/libwrc/libwrc_mui_resource.c:63
0	0	None	0	32	libwrc_mui_resource_initialize	call site: 00010	/src/libwrc/libwrc/libwrc_mui_resource.c:77
0	0	None	0	32	libwrc_mui_resource_read	call site: 00013	/src/libwrc/libwrc/libwrc_mui_resource.c:190
0	0	None	0	32	libwrc_mui_resource_read	call site: 00014	/src/libwrc/libwrc/libwrc_mui_resource.c:203
0	0	None	0	32	libwrc_mui_resource_read	call site: 00015	/src/libwrc/libwrc/libwrc_mui_resource.c:214
0	0	None	0	32	libwrc_mui_resource_read	call site: 00016	/src/libwrc/libwrc/libwrc_mui_resource.c:225
0	0	None	0	32	libwrc_mui_resource_read	call site: 00017	/src/libwrc/libwrc/libwrc_mui_resource.c:236

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

6

Reachable functions

11

Percentage of reachable functions covered

45.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/mui_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_mui_resource.c	3
libwrc/libcerror/libcerror_error.c	3

Fuzzer: libregf_value_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	902	70.0%
gold	[1:9]	11	0.85%
yellow	[10:29]	27	2.09%
greenyellow	[30:49]	13	1.01%
lawngreen	50+	334	25.9%
All colors	1287	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
659	774	2 : View List ['libregf_value_item_read_data_block_list', 'libregf_hive_bins_list_get_index_at_offset']	659	942	libregf_value_item_read_value_data	call site: 01015	/src/libregf/libregf/libregf_value_item.c:704
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
115	226	3 : View List ['libcerror_error_set', 'libregf_value_item_free', 'libfdata_stream_clone']	115	226	libregf_value_item_clone	call site: 01208	/src/libregf/libregf/libregf_value_item.c:295
75	75	1 : View List ['libfdata_list_calculate_mapped_ranges']	75	551	libfdata_list_get_element_index_at_offset	call site: 00701	/src/libregf/libfdata/libfdata_list.c:3171
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00475	/src/libvsbsdl/libfcache/libfcache_cache.c:801
64	96	2 : View List ['libcerror_error_set', 'libfdata_stream_free']	64	96	libregf_value_item_free	call site: 01101	/src/libregf/libregf/libregf_value_item.c:162
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 01249	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00664	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	253	1 : View List ['libregf_file_close']	0	452	libregf_file_free	call site: 01282	/src/libregf/libregf/libregf_file.c:183
0	171	3 : View List ['libregf_key_item_free', 'libcerror_error_set', 'free']	0	171	libregf_key_initialize	call site: 01123	/src/libregf/libregf/libregf_key.c:155

Runtime coverage analysis

Covered functions

187

Functions that are reachable but not covered

87

Reachable functions

274

Percentage of reachable functions covered

68.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libregf/ossfuzz/value_fuzzer.cc	1
libregf/libbfio/libbfio_memory_range.c	2
libregf/libcerror/libcerror_error.c	3
libregf/libbfio/libbfio_memory_range_io_handle.c	12
libregf/libbfio/libbfio_handle.c	11
libregf/libcdata/libcdata_range_list.c	15
libregf/libcdata/libcdata_list_element.c	10
libregf/libcdata/libcdata_range_list_value.c	3
libregf/libregf/libregf_file.c	8
libregf/libregf/libregf_io_handle.c	3
libregf/libcthreads/libcthreads_read_write_lock.c	6
libregf/libcerror/libcerror_system.c	2
libregf/libregf/libregf_file_header.c	4
libregf/libregf/libregf_checksum.c	1
libregf/libregf/libregf_hive_bins_list.c	7
libregf/libfdata/libfdata_list.c	11
libregf/libcdata/libcdata_array.c	11
libregf/libregf/libregf_hive_bin_header.c	4
libregf/libregf/libregf_hive_bin.c	5
libregf/libregf/libregf_hive_bin_cell.c	2
libregf/libfdata/libfdata_list_element.c	9
libregf/libfdata/libfdata_range.c	5
libregf/libfcache/libfcache_cache.c	4
libregf/libcdata/libcdata_list.c	9
libregf/libfcache/libfcache_cache_value.c	8
libregf/libfdata/libfdata_mapped_range.c	5
libregf/libfcache/libfcache_date_time.c	1
libregf/libregf/libregf_dirty_vector.c	4
libregf/libregf/libregf_key.c	7
libregf/libregf/libregf_key_item.c	12
libregf/libregf/libregf_named_key.c	3
libregf/libuna/libuna_unicode_character.c	4
libregf/libuna/libuna_codepage_koi8_r.c	1
libregf/libuna/libuna_codepage_koi8_u.c	1
libregf/libuna/libuna_codepage_mac_arabic.c	1
libregf/libuna/libuna_codepage_mac_celtic.c	1
libregf/libuna/libuna_codepage_mac_centraleurroman.c	1
libregf/libuna/libuna_codepage_mac_croatian.c	1
libregf/libuna/libuna_codepage_mac_cyrillic.c	1
libregf/libuna/libuna_codepage_mac_dingbats.c	1
libregf/libuna/libuna_codepage_mac_farsi.c	1
libregf/libuna/libuna_codepage_mac_gaelic.c	1
libregf/libuna/libuna_codepage_mac_greek.c	1
libregf/libuna/libuna_codepage_mac_icelandic.c	1
libregf/libuna/libuna_codepage_mac_inuit.c	1
libregf/libuna/libuna_codepage_mac_roman.c	1
libregf/libuna/libuna_codepage_mac_romanian.c	1
libregf/libuna/libuna_codepage_mac_russian.c	1
libregf/libuna/libuna_codepage_mac_symbol.c	1
libregf/libuna/libuna_codepage_mac_thai.c	1
libregf/libuna/libuna_codepage_mac_turkish.c	1
libregf/libuna/libuna_codepage_mac_ukrainian.c	1
libregf/libuna/libuna_codepage_windows_874.c	1
libregf/libuna/libuna_codepage_windows_932.c	1
libregf/libuna/libuna_codepage_windows_936.c	1
libregf/libuna/libuna_codepage_windows_949.c	1
libregf/libuna/libuna_codepage_windows_950.c	1
libregf/libuna/libuna_codepage_windows_1250.c	1
libregf/libuna/libuna_codepage_windows_1251.c	1
libregf/libuna/libuna_codepage_windows_1252.c	1
libregf/libuna/libuna_codepage_windows_1253.c	1
libregf/libuna/libuna_codepage_windows_1254.c	1
libregf/libuna/libuna_codepage_windows_1255.c	1
libregf/libuna/libuna_codepage_windows_1256.c	1
libregf/libuna/libuna_codepage_windows_1257.c	1
libregf/libuna/libuna_codepage_windows_1258.c	1
libregf/libregf/libregf_security_key.c	3
libregf/libregf/libregf_sub_key_list.c	3
libregf/libregf/libregf_key_descriptor.c	2
libregf/libregf/libregf_value_item.c	8
libregf/libregf/libregf_value_key.c	5
libregf/libregf/libregf_data_block_key.c	3
libregf/libfdata/libfdata_stream.c	5
libregf/libregf/libregf_data_block_stream.c	2
libregf/libfdata/libfdata_segments_array.c	1
libregf/libuna/libuna_utf16_string.c	1
libregf/libregf/libregf_value.c	3

Fuzzer: libfsfat_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	510	72.4%
gold	[1:9]	22	3.12%
yellow	[10:29]	6	0.85%
greenyellow	[30:49]	2	0.28%
lawngreen	50+	164	23.2%
All colors	704	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00392	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00667	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	259	5 : View List ['libcerror_error_set', 'libfsfat_directory_entry_free', 'libfsfat_block_tree_free', 'libfsfat_directory_free', 'libcdata_array_free']	0	259	libfsfat_file_system_read_directory	call site: 00634	/src/libfsfat/libfsfat/libfsfat_file_system.c:1082
0	245	1 : View List ['libfsfat_volume_close']	0	444	libfsfat_volume_free	call site: 00697	/src/libfsfat/libfsfat/libfsfat_volume.c:175
0	227	3 : View List ['libfsfat_boot_record_free', 'libcerror_error_set', 'libfsfat_file_system_free']	0	227	libfsfat_internal_volume_open_read	call site: 00643	/src/libfsfat/libfsfat/libfsfat_volume.c:1101
0	190	4 : View List ['libcerror_error_set', 'libfsfat_directory_entry_free', 'libfsfat_directory_free', 'libcdata_array_free']	0	190	libfsfat_file_system_read_directory_by_range	call site: 00515	/src/libfsfat/libfsfat/libfsfat_file_system.c:1440
0	126	3 : View List ['libcerror_error_set', 'free', 'libfcache_cache_free']	0	126	libfsfat_file_system_initialize	call site: 00385	/src/libfsfat/libfsfat/libfsfat_file_system.c:154
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	490	libfsfat_volume_close	call site: 00681	/src/libfsfat/libfsfat/libfsfat_volume.c:864

Runtime coverage analysis

Covered functions

84

Functions that are reachable but not covered

43

Reachable functions

127

Percentage of reachable functions covered

66.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsfat/ossfuzz/volume_fuzzer.cc	1
libfsfat/libbfio/libbfio_memory_range.c	2
libfsfat/libcerror/libcerror_error.c	3
libfsfat/libbfio/libbfio_memory_range_io_handle.c	12
libfsfat/libbfio/libbfio_handle.c	9
libfsfat/libcdata/libcdata_range_list.c	15
libfsfat/libcdata/libcdata_list_element.c	10
libfsfat/libcdata/libcdata_range_list_value.c	3
libfsfat/libfsfat/libfsfat_volume.c	5
libfsfat/libfsfat/libfsfat_io_handle.c	3
libfsfat/libcthreads/libcthreads_read_write_lock.c	4
libfsfat/libcerror/libcerror_system.c	2
libfsfat/libfsfat/libfsfat_boot_record.c	4
libfsfat/libfsfat/libfsfat_file_system.c	7
libfsfat/libfcache/libfcache_date_time.c	1
libfsfat/libfcache/libfcache_cache.c	2
libfsfat/libcdata/libcdata_array.c	8
libfsfat/libcdata/libcdata_list.c	3
libfsfat/libfcache/libfcache_cache_value.c	1
libfsfat/libfsfat/libfsfat_allocation_table.c	4
libfsfat/libfsfat/libfsfat_directory.c	2
libfsfat/libfsfat/libfsfat_directory_entry.c	5
libfsfat/libfsfat/libfsfat_block_tree.c	3
libfsfat/libfsfat/libfsfat_block_tree_node.c	6
libfsfat/libfsfat/libfsfat_block_descriptor.c	2

Fuzzer: libbde_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	773	70.0%
gold	[1:9]	31	2.81%
yellow	[10:29]	27	2.44%
greenyellow	[30:49]	21	1.90%
lawngreen	50+	251	22.7%
All colors	1103	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00222	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 01027	/src/libvsbsdl/libcdata/libcdata_list.c:238
102	843	8 : View List ['libcaes_context_free', 'libcerror_error_set', 'libbde_password_calculate_key', 'malloc', 'free', 'libcaes_context_initialize', 'libcaes_crypt_ccm', 'libcaes_context_set_key']	102	843	libbde_metadata_read_volume_master_key	call site: 00783	/src/libbde/libbde/libbde_metadata.c:1990
63	63	1 : View List ['libbde_diffuser_encrypt']	63	317	libbde_encryption_context_crypt	call site: 00927	/src/libbde/libbde/libbde_encryption_context.c:812
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01055	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	510	5 : View List ['libbde_sector_data_vector_free', 'libcerror_error_set', 'libbde_metadata_free', 'libbde_encryption_context_free', 'libbde_volume_header_free']	0	510	libbde_internal_volume_open_read	call site: 01012	/src/libbde/libbde/libbde_volume.c:1435
0	306	1 : View List ['libbde_volume_close']	0	578	libbde_volume_free	call site: 01094	/src/libbde/libbde/libbde_volume.c:206
0	260	4 : View List ['libcerror_error_set', 'free', 'libcaes_tweaked_context_free', 'libcaes_context_free']	0	260	libbde_encryption_context_initialize	call site: 00857	/src/libbde/libbde/libbde_encryption_context.c:195
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	109	4 : View List ['libcerror_error_set', 'libbde_password_keep_free', 'free', 'libbde_io_handle_free']	0	109	libbde_volume_initialize	call site: 00132	/src/libbde/libbde/libbde_volume.c:139

Runtime coverage analysis

Covered functions

121

Functions that are reachable but not covered

53

Reachable functions

174

Percentage of reachable functions covered

69.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libbde/ossfuzz/volume_fuzzer.cc	1
libbde/libbfio/libbfio_memory_range.c	2
libbde/libcerror/libcerror_error.c	3
libbde/libbfio/libbfio_memory_range_io_handle.c	12
libbde/libbfio/libbfio_handle.c	10
libbde/libcdata/libcdata_range_list.c	15
libbde/libcdata/libcdata_list_element.c	10
libbde/libcdata/libcdata_range_list_value.c	3
libbde/libbde/libbde_volume.c	8
libbde/libbde/libbde_io_handle.c	4
libbde/libbde/libbde_password_keep.c	2
libbde/libcthreads/libcthreads_read_write_lock.c	4
libbde/libcerror/libcerror_system.c	2
libbde/libbde/libbde_volume_header.c	4
libbde/libbde/libbde_metadata.c	7
libbde/libcdata/libcdata_array.c	6
libbde/libbde/libbde_metadata_entry.c	3
libbde/libbde/libbde_metadata_block_header.c	4
libbde/libbde/libbde_metadata_header.c	4
libbde/libbde/libbde_volume_master_key.c	3
libbde/libbde/libbde_key.c	3
libbde/libbde/libbde_stretch_key.c	3
libbde/libbde/libbde_aes_ccm_encrypted_key.c	3
libbde/libbde/libbde_external_key.c	3
libbde/libcaes/libcaes_context.c	9
libbde/libbde/libbde_password.c	1
libbde/libhmac/libhmac_sha256.c	1
libbde/libhmac/libhmac_sha256_context.c	5
libbde/libbde/libbde_encryption_context.c	4
libbde/libcaes/libcaes_tweaked_context.c	4
libbde/libbde/libbde_sector_data.c	3
libbde/libbde/libbde_diffuser.c	6
libbde/libbde/libbde_ntfs_volume_header.c	3
libbde/libbde/libbde_sector_data_vector.c	2
libbde/libfcache/libfcache_date_time.c	1
libbde/libfcache/libfcache_cache.c	2
libbde/libcdata/libcdata_list.c	3
libbde/libfcache/libfcache_cache_value.c	1

Fuzzer: libfsntfs_mft_metadata_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1501	82.7%
gold	[1:9]	27	1.48%
yellow	[10:29]	10	0.55%
greenyellow	[30:49]	4	0.22%
lawngreen	50+	271	14.9%
All colors	1813	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2617	2727	8 : View List ['libfsntfs_mft_entry_read_attribute_list', 'libfsntfs_mft_attribute_get_data_run_by_index', 'libfsntfs_mft_attribute_list_get_number_of_file_references', 'libfsntfs_mft_attribute_get_number_of_data_runs', 'libfsntfs_mft_entry_read_attribute_list_data_mft_entry_by_index', 'libfsntfs_mft_attribute_get_next_attribute', 'libfdata_vector_append_segment', 'libfsntfs_mft_attribute_list_get_file_reference_by_index']	2617	3489	libfsntfs_file_system_read_mft	call site: 00846	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:532
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00220	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
259	469	2 : View List ['libcdata_btree_node_split', 'libcdata_btree_node_get_sub_node_by_value']	259	653	libcdata_btree_insert_value	call site: 01625	/src/libfsntfs/libcdata/libcdata_btree.c:591
250	250	1 : View List ['libfsntfs_security_descriptor_index_free']	250	494	libfsntfs_file_system_free	call site: 01738	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:193
82	82	1 : View List ['libfsntfs_internal_attribute_free']	82	214	libfsntfs_mft_metadata_file_close	call site: 01803	/src/libfsntfs/libfsntfs/libfsntfs_mft_metadata_file.c:950
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
53	53	1 : View List ['libcdata_tree_node_get_sub_node_by_index']	89	385	libcdata_btree_node_get_sub_node_by_value	call site: 01527	/src/libfsntfs/libcdata/libcdata_btree_node.c:193
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01776	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfsntfs_mft_attribute_get_data_size']	2738	4750	libfsntfs_file_system_read_mft	call site: 00647	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:391
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	429	1 : View List ['libfsntfs_mft_metadata_file_close']	0	628	libfsntfs_mft_metadata_file_free	call site: 01807	/src/libfsntfs/libfsntfs/libfsntfs_mft_metadata_file.c:181
0	244	3 : View List ['libfsntfs_mft_entry_free', 'libcerror_error_set', 'libcdata_btree_free']	0	244	libfsntfs_file_system_read_mft	call site: 01477	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:723

Runtime coverage analysis

Covered functions

166

Functions that are reachable but not covered

153

Reachable functions

319

Percentage of reachable functions covered

52.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsntfs/ossfuzz/mft_metadata_file_fuzzer.cc	1
libfsntfs/libbfio/libbfio_memory_range.c	2
libfsntfs/libcerror/libcerror_error.c	3
libfsntfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsntfs/libbfio/libbfio_handle.c	11
libfsntfs/libcdata/libcdata_range_list.c	15
libfsntfs/libcdata/libcdata_list_element.c	10
libfsntfs/libcdata/libcdata_range_list_value.c	3
libfsntfs/libfsntfs/libfsntfs_mft_metadata_file.c	5
libfsntfs/libfsntfs/libfsntfs_io_handle.c	3
libfsntfs/libcthreads/libcthreads_read_write_lock.c	4
libfsntfs/libcerror/libcerror_system.c	2
libfsntfs/libfsntfs/libfsntfs_file_system.c	3
libfsntfs/libfsntfs/libfsntfs_mft_entry.c	14
libfsntfs/libcdata/libcdata_array.c	11
libfsntfs/libfsntfs/libfsntfs_mft_entry_header.c	7
libfsntfs/libfsntfs/libfsntfs_fixup_values.c	1
libfsntfs/libfsntfs/libfsntfs_mft_attribute.c	20
libfsntfs/libfsntfs/libfsntfs_data_run.c	4
libfsntfs/libuna/libuna_utf8_string.c	4
libfsntfs/libuna/libuna_unicode_character.c	7
libfsntfs/libfsntfs/libfsntfs_name.c	1
libfsntfs/libfsntfs/libfsntfs_mft.c	3
libfsntfs/libfdata/libfdata_vector.c	8
libfsntfs/libfcache/libfcache_date_time.c	1
libfsntfs/libfdata/libfdata_segments_array.c	3
libfsntfs/libfdata/libfdata_range.c	5
libfsntfs/libfcache/libfcache_cache.c	4
libfsntfs/libcdata/libcdata_list.c	17
libfsntfs/libfcache/libfcache_cache_value.c	8
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list.c	11
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list_entry.c	4
libfsntfs/libfdata/libfdata_mapped_range.c	4
libfsntfs/libfsntfs/libfsntfs_cluster_block_stream.c	5
libfsntfs/libfsntfs/libfsntfs_buffer_data_handle.c	4
libfsntfs/libfdata/libfdata_stream.c	8
libfsntfs/libfsntfs/libfsntfs_compressed_block_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compressed_block_vector.c	2
libfsntfs/libfsntfs/libfsntfs_compression_unit_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compression_unit_descriptor.c	3
libfsntfs/libfsntfs/libfsntfs_cluster_block_data.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_block.c	2
libfsntfs/libfsntfs/libfsntfs_compression.c	1
libfsntfs/libfwnt/libfwnt_lznt1.c	2
libfsntfs/libfwnt/libfwnt_lzx.c	7
libfsntfs/libfwnt/libfwnt_bit_stream.c	4
libfsntfs/libcnotify/libcnotify_print.c	1
libfsntfs/libfwnt/libfwnt_huffman_tree.c	4
libfsntfs/libfwnt/libfwnt_lzxpress.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_data_handle.c	5
libfsntfs/libcdata/libcdata_btree.c	3
libfsntfs/libcdata/libcdata_tree_node.c	16
libfsntfs/libcdata/libcdata_btree_values_list.c	1
libfsntfs/libfsntfs/libfsntfs_path_hint.c	1
libfsntfs/libcdata/libcdata_btree_node.c	5
libfsntfs/libfsntfs/libfsntfs_security_descriptor_index.c	1
libfsntfs/libfsntfs/libfsntfs_index.c	1
libfsntfs/libfsntfs/libfsntfs_index_root_header.c	1
libfsntfs/libfsntfs/libfsntfs_index_node.c	1
libfsntfs/libfsntfs/libfsntfs_index_node_header.c	1
libfsntfs/libfsntfs/libfsntfs_index_value.c	1
libfsntfs/libfsntfs/libfsntfs_bitmap_values.c	1
libfsntfs/libfsntfs/libfsntfs_data_stream.c	1
libfsntfs/libfsntfs/libfsntfs_extent.c	1
libfsntfs/libfsntfs/libfsntfs_attribute.c	1

Fuzzer: libmsiecf_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	407	74.0%
gold	[1:9]	2	0.36%
yellow	[10:29]	18	3.27%
greenyellow	[30:49]	3	0.54%
lawngreen	50+	120	21.8%
All colors	550	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
172	172	1 : View List ['libcdata_internal_range_list_insert_range_merge']	172	288	libcdata_range_list_insert_range	call site: 00232	/src/libvsbsdl/libcdata/libcdata_range_list.c:2898
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00500	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
41	141	3 : View List ['libcerror_error_set', 'libcdata_range_list_value_check_range_overlap', 'libcdata_list_element_get_value']	41	141	libcdata_internal_range_list_check_range_overlap	call site: 00226	/src/libvsbsdl/libcdata/libcdata_range_list.c:1651
35	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	35	215	libcdata_internal_range_list_insert_range_before_element	call site: 00254	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	436	4 : View List ['libcerror_error_set', 'libcdata_list_element_get_value', 'libcdata_list_element_get_next_element', 'libcdata_list_element_get_previous_element']	0	436	libcdata_internal_range_list_insert_range_find_element	call site: 00208	/src/libvsbsdl/libcdata/libcdata_range_list.c:1453
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00194	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	205	1 : View List ['libmsiecf_file_close']	0	404	libmsiecf_file_free	call site: 00541	/src/libmsiecf/libmsiecf/libmsiecf_file.c:183
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	102	libcdata_internal_range_list_set_last_element	call site: 00260	/src/libvsbsdl/libcdata/libcdata_range_list.c:1002
0	99	1 : View List ['libbfio_handle_free']	0	726	libmsiecf_file_close	call site: 00515	/src/libmsiecf/libmsiecf/libmsiecf_file.c:876
0	74	2 : View List ['libcerror_error_set', 'libbfio_handle_close']	0	74	libmsiecf_file_open_file_io_handle	call site: 00499	/src/libmsiecf/libmsiecf/libmsiecf_file.c:761

Runtime coverage analysis

Covered functions

77

Functions that are reachable but not covered

26

Reachable functions

103

Percentage of reachable functions covered

74.76%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libmsiecf/ossfuzz/file_fuzzer.cc	1
libmsiecf/libbfio/libbfio_memory_range.c	2
libmsiecf/libcerror/libcerror_error.c	3
libmsiecf/libbfio/libbfio_memory_range_io_handle.c	12
libmsiecf/libbfio/libbfio_handle.c	9
libmsiecf/libcdata/libcdata_range_list.c	18
libmsiecf/libcdata/libcdata_list_element.c	10
libmsiecf/libcdata/libcdata_range_list_value.c	3
libmsiecf/libmsiecf/libmsiecf_file.c	5
libmsiecf/libmsiecf/libmsiecf_io_handle.c	5
libmsiecf/libcthreads/libcthreads_read_write_lock.c	4
libmsiecf/libcerror/libcerror_system.c	2
libmsiecf/libmsiecf/libmsiecf_file_header.c	4
libmsiecf/libmsiecf/libmsiecf_cache_directory_table.c	4
libmsiecf/libcdata/libcdata_array.c	5
libmsiecf/libmsiecf/libmsiecf_directory_descriptor.c	3
libmsiecf/libmsiecf/libmsiecf_allocation_table.c	1
libmsiecf/libmsiecf/libmsiecf_hash_table.c	1
libmsiecf/libmsiecf/libmsiecf_item_descriptor.c	2

Fuzzer: libesedb_table_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	801	66.9%
gold	[1:9]	39	3.26%
yellow	[10:29]	16	1.33%
greenyellow	[30:49]	21	1.75%
lawngreen	50+	319	26.6%
All colors	1196	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00189	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00508	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	36	1 : View List ['libesedb_root_page_header_free']	36	325	libesedb_page_tree_free	call site: 00647	/src/libesedb/libesedb/libesedb_page_tree.c:235
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	308	1 : View List ['libesedb_file_close']	0	408	libesedb_file_free	call site: 01191	/src/libesedb/libesedb/libesedb_file.c:179
0	268	4 : View List ['libesedb_block_tree_free', 'libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	268	libesedb_catalog_initialize	call site: 00883	/src/libesedb/libesedb/libesedb_catalog.c:158
0	199	3 : View List ['libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	199	libesedb_database_initialize	call site: 00644	/src/libesedb/libesedb/libesedb_database.c:140
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00593	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	136	3 : View List ['libcerror_error_set', 'libesedb_table_definition_free', 'libesedb_catalog_definition_free']	0	136	libesedb_catalog_read_value_data	call site: 00943	/src/libesedb/libesedb/libesedb_catalog.c:410
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00380	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

171

Functions that are reachable but not covered

70

Reachable functions

241

Percentage of reachable functions covered

70.95%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libesedb/ossfuzz/table_fuzzer.cc	1
libesedb/libbfio/libbfio_memory_range.c	2
libesedb/libcerror/libcerror_error.c	4
libesedb/libbfio/libbfio_memory_range_io_handle.c	12
libesedb/libbfio/libbfio_handle.c	9
libesedb/libcdata/libcdata_range_list.c	15
libesedb/libcdata/libcdata_list_element.c	10
libesedb/libcdata/libcdata_range_list_value.c	3
libesedb/libesedb/libesedb_file.c	7
libesedb/libesedb/libesedb_io_handle.c	5
libesedb/libesedb/libesedb_i18n.c	1
libesedb/libesedb/libesedb_file_header.c	4
libesedb/libesedb/libesedb_checksum.c	2
libesedb/libfdata/libfdata_vector.c	5
libesedb/libcdata/libcdata_array.c	10
libesedb/libfcache/libfcache_date_time.c	1
libesedb/libesedb/libesedb_page.c	13
libesedb/libesedb/libesedb_page_header.c	6
libesedb/libcnotify/libcnotify_print.c	1
libesedb/libesedb/libesedb_page_value.c	2
libesedb/libfdata/libfdata_segments_array.c	2
libesedb/libfdata/libfdata_range.c	4
libesedb/libfcache/libfcache_cache.c	4
libesedb/libcdata/libcdata_list.c	9
libesedb/libfcache/libfcache_cache_value.c	8
libesedb/libfdata/libfdata_mapped_range.c	3
libesedb/libesedb/libesedb_database.c	4
libesedb/libesedb/libesedb_page_tree.c	5
libesedb/libesedb/libesedb_block_tree.c	3
libesedb/libesedb/libesedb_block_tree_node.c	6
libesedb/libcdata/libcdata_btree.c	2
libesedb/libcdata/libcdata_tree_node.c	6
libesedb/libesedb/libesedb_block_descriptor.c	2
libesedb/libesedb/libesedb_root_page_header.c	1
libesedb/libcdata/libcdata_btree_values_list.c	1
libesedb/libesedb/libesedb_leaf_page_descriptor.c	1
libesedb/libesedb/libesedb_page_tree_value.c	3
libesedb/libesedb/libesedb_catalog.c	8
libesedb/libesedb/libesedb_catalog_definition.c	4
libesedb/libesedb/libesedb_table_definition.c	6
libesedb/libuna/libuna_utf8_string.c	1
libesedb/libuna/libuna_unicode_character.c	2
libesedb/libuna/libuna_codepage_koi8_r.c	1
libesedb/libuna/libuna_codepage_koi8_u.c	1
libesedb/libuna/libuna_codepage_mac_arabic.c	1
libesedb/libuna/libuna_codepage_mac_celtic.c	1
libesedb/libuna/libuna_codepage_mac_centraleurroman.c	1
libesedb/libuna/libuna_codepage_mac_croatian.c	1
libesedb/libuna/libuna_codepage_mac_cyrillic.c	1
libesedb/libuna/libuna_codepage_mac_dingbats.c	1
libesedb/libuna/libuna_codepage_mac_farsi.c	1
libesedb/libuna/libuna_codepage_mac_gaelic.c	1
libesedb/libuna/libuna_codepage_mac_greek.c	1
libesedb/libuna/libuna_codepage_mac_icelandic.c	1
libesedb/libuna/libuna_codepage_mac_inuit.c	1
libesedb/libuna/libuna_codepage_mac_roman.c	1
libesedb/libuna/libuna_codepage_mac_romanian.c	1
libesedb/libuna/libuna_codepage_mac_russian.c	1
libesedb/libuna/libuna_codepage_mac_symbol.c	1
libesedb/libuna/libuna_codepage_mac_thai.c	1
libesedb/libuna/libuna_codepage_mac_turkish.c	1
libesedb/libuna/libuna_codepage_mac_ukrainian.c	1
libesedb/libuna/libuna_codepage_windows_874.c	1
libesedb/libuna/libuna_codepage_windows_932.c	1
libesedb/libuna/libuna_codepage_windows_936.c	1
libesedb/libuna/libuna_codepage_windows_949.c	1
libesedb/libuna/libuna_codepage_windows_950.c	1
libesedb/libuna/libuna_codepage_windows_1250.c	1
libesedb/libuna/libuna_codepage_windows_1251.c	1
libesedb/libuna/libuna_codepage_windows_1252.c	1
libesedb/libuna/libuna_codepage_windows_1253.c	1
libesedb/libuna/libuna_codepage_windows_1254.c	1
libesedb/libuna/libuna_codepage_windows_1255.c	1
libesedb/libuna/libuna_codepage_windows_1256.c	1
libesedb/libuna/libuna_codepage_windows_1257.c	1
libesedb/libuna/libuna_codepage_windows_1258.c	1
libesedb/libesedb/libesedb_table.c	2

Fuzzer: libcreg_value_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	630	63.0%
gold	[1:9]	16	1.60%
yellow	[10:29]	7	0.70%
greenyellow	[30:49]	7	0.70%
lawngreen	50+	339	33.9%
All colors	999	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00659	/src/libvsbsdl/libfcache/libfcache_cache.c:801
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00767	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00195	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	255	1 : View List ['libcreg_file_close']	0	454	libcreg_file_free	call site: 00992	/src/libcreg/libcreg/libcreg_file.c:176
0	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	0	215	libcdata_internal_range_list_insert_range_before_element	call site: 00255	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
0	190	3 : View List ['libcerror_error_set', 'libfdata_area_free', 'libfcache_cache_free']	0	190	libcreg_key_navigation_read_file_io_handle	call site: 00519	/src/libcreg/libcreg/libcreg_key_navigation.c:446
0	165	3 : View List ['libcerror_error_set', 'libcreg_data_block_free', 'libfdata_list_free']	0	165	libcreg_key_navigation_read_data_blocks	call site: 00731	/src/libcreg/libcreg/libcreg_key_navigation.c:680
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element	call site: 00722	/src/libregf/libfdata/libfdata_list.c:1489
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00510	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	140	3 : View List ['libcerror_error_set', 'free', 'libcreg_key_item_free']	0	140	libcreg_key_initialize	call site: 00908	/src/libcreg/libcreg/libcreg_key.c:143
0	137	4 : View List ['libcerror_error_set', 'libcdata_list_element_set_elements', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	137	libcdata_list_remove_element	call site: 00861	/src/libvsbsdl/libcdata/libcdata_list.c:2812

Runtime coverage analysis

Covered functions

171

Functions that are reachable but not covered

19

Reachable functions

190

Percentage of reachable functions covered

90.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcreg/ossfuzz/value_fuzzer.cc	1
libcreg/libbfio/libbfio_memory_range.c	2
libcreg/libcerror/libcerror_error.c	3
libcreg/libbfio/libbfio_memory_range_io_handle.c	12
libcreg/libbfio/libbfio_handle.c	10
libcreg/libcdata/libcdata_range_list.c	16
libcreg/libcdata/libcdata_list_element.c	10
libcreg/libcdata/libcdata_range_list_value.c	3
libcreg/libcreg/libcreg_file.c	6
libcreg/libcreg/libcreg_io_handle.c	5
libcreg/libcthreads/libcthreads_read_write_lock.c	4
libcreg/libcerror/libcerror_system.c	2
libcreg/libcreg/libcreg_key_navigation.c	8
libcreg/libfdata/libfdata_area.c	5
libcreg/libcdata/libcdata_array.c	9
libcreg/libfcache/libfcache_date_time.c	1
libcreg/libcreg/libcreg_key_hierarchy_entry.c	3
libcreg/libfdata/libfdata_segments_array.c	2
libcreg/libfdata/libfdata_range.c	5
libcreg/libfcache/libfcache_cache.c	7
libcreg/libfcache/libfcache_cache_value.c	8
libcreg/libcdata/libcdata_list.c	9
libcreg/libfdata/libfdata_mapped_range.c	3
libcreg/libfdata/libfdata_list.c	7
libcreg/libcreg/libcreg_data_block.c	5
libcreg/libcreg/libcreg_key_name_entry.c	6
libcreg/libcreg/libcreg_value_entry.c	3
libcreg/libfdata/libfdata_list_element.c	7
libcreg/libcreg/libcreg_key.c	6
libcreg/libcreg/libcreg_key_item.c	7
libcreg/libcreg/libcreg_key_descriptor.c	2
libcreg/libcreg/libcreg_value.c	3

Fuzzer: libfmos_lzvn_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	14	53.8%
gold	[1:9]	4	15.3%
yellow	[10:29]	5	19.2%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	3	11.5%
All colors	26	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00001	/src/libfmos/libfmos/libfmos_lzvn.c:350
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00002	/src/libfmos/libfmos/libfmos_lzvn.c:361
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00010	/src/libfmos/libfmos/libfmos_lzvn.c:372
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00011	/src/libfmos/libfmos/libfmos_lzvn.c:383
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00012	/src/libfmos/libfmos/libfmos_lzvn.c:396
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00013	/src/libfmos/libfmos/libfmos_lzvn.c:413
0	0	None	0	32	libfmos_lzvn_decompress	call site: 00022	/src/libfmos/libfmos/libfmos_lzvn.c:652

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

5

Reachable functions

8

Percentage of reachable functions covered

37.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmos/ossfuzz/lzvn_fuzzer.cc	1
libfmos/libfmos/libfmos_lzvn.c	1
libfmos/libcerror/libcerror_error.c	3

Fuzzer: libvsapm_partition_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	538	82.7%
gold	[1:9]	1	0.15%
yellow	[10:29]	4	0.61%
greenyellow	[30:49]	52	8.0%
lawngreen	50+	55	8.46%
All colors	650	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00205	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00599	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00411	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00388	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00565	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	181	1 : View List ['libvsapm_volume_close']	0	458	libvsapm_volume_free	call site: 00640	/src/libvsapm/libvsapm/libvsapm_volume.c:190
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00440	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	375	libvsapm_volume_close	call site: 00623	/src/libvsapm/libvsapm/libvsapm_volume.c:892
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfcache_cache_initialize	call site: 00576	/src/libvsbsdl/libfcache/libfcache_cache.c:123

Runtime coverage analysis

Covered functions

73

Functions that are reachable but not covered

62

Reachable functions

135

Percentage of reachable functions covered

54.07%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsapm/ossfuzz/partition_fuzzer.cc	1
libvsapm/libbfio/libbfio_memory_range.c	2
libvsapm/libcerror/libcerror_error.c	3
libvsapm/libbfio/libbfio_memory_range_io_handle.c	12
libvsapm/libbfio/libbfio_handle.c	9
libvsapm/libcdata/libcdata_range_list.c	15
libvsapm/libcdata/libcdata_list_element.c	10
libvsapm/libcdata/libcdata_range_list_value.c	3
libvsapm/libvsapm/libvsapm_volume.c	7
libvsapm/libvsapm/libvsapm_io_handle.c	3
libvsapm/libcdata/libcdata_array.c	9
libvsapm/libcthreads/libcthreads_read_write_lock.c	6
libvsapm/libcerror/libcerror_system.c	2
libvsapm/libvsapm/libvsapm_partition_map_entry.c	6
libvsapm/libvsapm/libvsapm_partition.c	2
libvsapm/libfdata/libfdata_vector.c	4
libvsapm/libfcache/libfcache_date_time.c	1
libvsapm/libvsapm/libvsapm_sector_data.c	4
libvsapm/libfdata/libfdata_segments_array.c	2
libvsapm/libfdata/libfdata_range.c	4
libvsapm/libfcache/libfcache_cache.c	3
libvsapm/libcdata/libcdata_list.c	7
libvsapm/libfcache/libfcache_cache_value.c	6
libvsapm/libfdata/libfdata_mapped_range.c	3

Fuzzer: libesedb_column_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	814	66.8%
gold	[1:9]	41	3.36%
yellow	[10:29]	25	2.05%
greenyellow	[30:49]	17	1.39%
lawngreen	50+	321	26.3%
All colors	1218	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00189	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00508	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	36	1 : View List ['libesedb_root_page_header_free']	36	325	libesedb_page_tree_free	call site: 00647	/src/libesedb/libesedb/libesedb_page_tree.c:235
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	308	1 : View List ['libesedb_file_close']	0	408	libesedb_file_free	call site: 01213	/src/libesedb/libesedb/libesedb_file.c:179
0	268	4 : View List ['libesedb_block_tree_free', 'libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	268	libesedb_catalog_initialize	call site: 00883	/src/libesedb/libesedb/libesedb_catalog.c:158
0	199	3 : View List ['libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	199	libesedb_database_initialize	call site: 00644	/src/libesedb/libesedb/libesedb_database.c:140
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00593	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	136	3 : View List ['libcerror_error_set', 'libesedb_table_definition_free', 'libesedb_catalog_definition_free']	0	136	libesedb_catalog_read_value_data	call site: 00943	/src/libesedb/libesedb/libesedb_catalog.c:410
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00380	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

177

Functions that are reachable but not covered

70

Reachable functions

247

Percentage of reachable functions covered

71.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libesedb/ossfuzz/column_fuzzer.cc	1
libesedb/libbfio/libbfio_memory_range.c	2
libesedb/libcerror/libcerror_error.c	4
libesedb/libbfio/libbfio_memory_range_io_handle.c	12
libesedb/libbfio/libbfio_handle.c	9
libesedb/libcdata/libcdata_range_list.c	15
libesedb/libcdata/libcdata_list_element.c	10
libesedb/libcdata/libcdata_range_list_value.c	3
libesedb/libesedb/libesedb_file.c	7
libesedb/libesedb/libesedb_io_handle.c	5
libesedb/libesedb/libesedb_i18n.c	1
libesedb/libesedb/libesedb_file_header.c	4
libesedb/libesedb/libesedb_checksum.c	2
libesedb/libfdata/libfdata_vector.c	5
libesedb/libcdata/libcdata_array.c	10
libesedb/libfcache/libfcache_date_time.c	1
libesedb/libesedb/libesedb_page.c	13
libesedb/libesedb/libesedb_page_header.c	6
libesedb/libcnotify/libcnotify_print.c	1
libesedb/libesedb/libesedb_page_value.c	2
libesedb/libfdata/libfdata_segments_array.c	2
libesedb/libfdata/libfdata_range.c	4
libesedb/libfcache/libfcache_cache.c	4
libesedb/libcdata/libcdata_list.c	9
libesedb/libfcache/libfcache_cache_value.c	8
libesedb/libfdata/libfdata_mapped_range.c	3
libesedb/libesedb/libesedb_database.c	4
libesedb/libesedb/libesedb_page_tree.c	5
libesedb/libesedb/libesedb_block_tree.c	3
libesedb/libesedb/libesedb_block_tree_node.c	6
libesedb/libcdata/libcdata_btree.c	2
libesedb/libcdata/libcdata_tree_node.c	6
libesedb/libesedb/libesedb_block_descriptor.c	2
libesedb/libesedb/libesedb_root_page_header.c	1
libesedb/libcdata/libcdata_btree_values_list.c	1
libesedb/libesedb/libesedb_leaf_page_descriptor.c	1
libesedb/libesedb/libesedb_page_tree_value.c	3
libesedb/libesedb/libesedb_catalog.c	8
libesedb/libesedb/libesedb_catalog_definition.c	4
libesedb/libesedb/libesedb_table_definition.c	8
libesedb/libuna/libuna_utf8_string.c	1
libesedb/libuna/libuna_unicode_character.c	2
libesedb/libuna/libuna_codepage_koi8_r.c	1
libesedb/libuna/libuna_codepage_koi8_u.c	1
libesedb/libuna/libuna_codepage_mac_arabic.c	1
libesedb/libuna/libuna_codepage_mac_celtic.c	1
libesedb/libuna/libuna_codepage_mac_centraleurroman.c	1
libesedb/libuna/libuna_codepage_mac_croatian.c	1
libesedb/libuna/libuna_codepage_mac_cyrillic.c	1
libesedb/libuna/libuna_codepage_mac_dingbats.c	1
libesedb/libuna/libuna_codepage_mac_farsi.c	1
libesedb/libuna/libuna_codepage_mac_gaelic.c	1
libesedb/libuna/libuna_codepage_mac_greek.c	1
libesedb/libuna/libuna_codepage_mac_icelandic.c	1
libesedb/libuna/libuna_codepage_mac_inuit.c	1
libesedb/libuna/libuna_codepage_mac_roman.c	1
libesedb/libuna/libuna_codepage_mac_romanian.c	1
libesedb/libuna/libuna_codepage_mac_russian.c	1
libesedb/libuna/libuna_codepage_mac_symbol.c	1
libesedb/libuna/libuna_codepage_mac_thai.c	1
libesedb/libuna/libuna_codepage_mac_turkish.c	1
libesedb/libuna/libuna_codepage_mac_ukrainian.c	1
libesedb/libuna/libuna_codepage_windows_874.c	1
libesedb/libuna/libuna_codepage_windows_932.c	1
libesedb/libuna/libuna_codepage_windows_936.c	1
libesedb/libuna/libuna_codepage_windows_949.c	1
libesedb/libuna/libuna_codepage_windows_950.c	1
libesedb/libuna/libuna_codepage_windows_1250.c	1
libesedb/libuna/libuna_codepage_windows_1251.c	1
libesedb/libuna/libuna_codepage_windows_1252.c	1
libesedb/libuna/libuna_codepage_windows_1253.c	1
libesedb/libuna/libuna_codepage_windows_1254.c	1
libesedb/libuna/libuna_codepage_windows_1255.c	1
libesedb/libuna/libuna_codepage_windows_1256.c	1
libesedb/libuna/libuna_codepage_windows_1257.c	1
libesedb/libuna/libuna_codepage_windows_1258.c	1
libesedb/libesedb/libesedb_table.c	4
libesedb/libesedb/libesedb_column.c	2

Fuzzer: libfmapi_lzfu_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	17	58.6%
gold	[1:9]	3	10.3%
yellow	[10:29]	3	10.3%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	20.6%
All colors	29	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00020	/src/libfmapi/libfmapi/libfmapi_checksum.c:174
0	0	None	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00018	/src/libfmapi/libfmapi/libfmapi_checksum.c:152
0	0	None	0	32	libfmapi_checksum_calculate_weak_crc32	call site: 00019	/src/libfmapi/libfmapi/libfmapi_checksum.c:163
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00001	/src/libfmapi/libfmapi/libfmapi_lzfu.c:288
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00010	/src/libfmapi/libfmapi/libfmapi_lzfu.c:311
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00011	/src/libfmapi/libfmapi/libfmapi_lzfu.c:322
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00012	/src/libfmapi/libfmapi/libfmapi_lzfu.c:347
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00013	/src/libfmapi/libfmapi/libfmapi_lzfu.c:363
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00018	/src/libfmapi/libfmapi/libfmapi_lzfu.c:472
0	0	None	0	32	libfmapi_lzfu_decompress	call site: 00024	/src/libfmapi/libfmapi/libfmapi_lzfu.c:519

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmapi/ossfuzz/lzfu_fuzzer.cc	1
libfmapi/libfmapi/libfmapi_lzfu.c	1
libfmapi/libcerror/libcerror_error.c	3
libfmapi/libfmapi/libfmapi_checksum.c	2

Fuzzer: libfwnt_lzxpress_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	13	54.1%
gold	[1:9]	2	8.33%
yellow	[10:29]	5	20.8%
greenyellow	[30:49]	1	4.16%
lawngreen	50+	3	12.5%
All colors	24	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00001	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:115
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00010	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:138
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00011	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:149
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00012	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:160
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00021	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:410
0	0	None	0	32	libfwnt_lzxpress_decompress	call site: 00022	/src/libfwnt/libfwnt/libfwnt_lzxpress.c:421

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

5

Reachable functions

8

Percentage of reachable functions covered

37.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/lzxpress_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_lzxpress.c	1
libfwnt/libcerror/libcerror_error.c	3

Fuzzer: libcaes_crypt_xts_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	75	80.6%
gold	[1:9]	2	2.15%
yellow	[10:29]	2	2.15%
greenyellow	[30:49]	2	2.15%
lawngreen	50+	12	12.9%
All colors	93	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00034	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	68	3 : View List ['libcerror_error_set', 'free', 'libcaes_context_free']	0	68	libcaes_tweaked_context_initialize	call site: 00022	/src/libbde/libcaes/libcaes_tweaked_context.c:155
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcaes_context_initialize	call site: 00018	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00024	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00035	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00018	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00037	/src/libcaes/libcaes/libcaes_context.c:1064
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_tweaked_context_free	call site: 00091	/src/libbde/libcaes/libcaes_tweaked_context.c:275
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_tweaked_context_set_keys	call site: 00053	/src/libbde/libcaes/libcaes_tweaked_context.c:435
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_crypt_xts	call site: 00085	/src/libbde/libcaes/libcaes_tweaked_context.c:1244
0	0	None	0	356	libcaes_crypt_xts	call site: 00076	/src/libbde/libcaes/libcaes_tweaked_context.c:981

Runtime coverage analysis

Covered functions

12

Functions that are reachable but not covered

6

Reachable functions

18

Percentage of reachable functions covered

66.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_xts_fuzzer.cc	1
libcaes/libcaes/libcaes_tweaked_context.c	4
libcaes/libcerror/libcerror_error.c	3
libcaes/libcaes/libcaes_context.c	7

Fuzzer: libhmac_md5_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	41	83.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.3%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libcerror_error_set', 'libhmac_md5_context_free']	32	68	libhmac_md5_calculate	call site: 00045	/src/libhmac/libhmac/libhmac_md5.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_md5_context.c:388
32	32	2 : View List ['libcerror_error_set', 'free']	32	32	libhmac_md5_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_md5_context.c:560
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_free	call site: 00045	/src/libhmac/libhmac/libhmac_md5_context.c:599
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_md5_context.c:955
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_md5_context_finalize	call site: 00042	/src/libhmac/libhmac/libhmac_md5_context.c:1274
0	0	None	192	274	libhmac_md5_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_md5_context.c:856
0	0	None	32	68	libhmac_md5_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_md5.c:153
0	0	None	32	68	libhmac_md5_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_md5.c:166
0	0	None	32	68	libhmac_md5_calculate	call site: 00035	/src/libhmac/libhmac/libhmac_md5.c:181
0	0	None	32	32	libhmac_md5_context_transform	call site: 00022	/src/libhmac/libhmac/libhmac_md5_context.c:235
0	0	None	32	32	libhmac_md5_context_transform	call site: 00023	/src/libhmac/libhmac/libhmac_md5_context.c:246

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/md5_context_fuzzer.cc	1
libhmac/libhmac/libhmac_md5.c	1
libhmac/libhmac/libhmac_md5_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libvsapm_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	371	83.9%
gold	[1:9]	11	2.48%
yellow	[10:29]	4	0.90%
greenyellow	[30:49]	1	0.22%
lawngreen	50+	55	12.4%
All colors	442	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00205	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00388	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	181	1 : View List ['libvsapm_volume_close']	0	458	libvsapm_volume_free	call site: 00425	/src/libvsapm/libvsapm/libvsapm_volume.c:190
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	375	libvsapm_volume_close	call site: 00403	/src/libvsapm/libvsapm/libvsapm_volume.c:892
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	68	3 : View List ['libcerror_error_set', 'libvsapm_io_handle_free', 'free']	0	68	libvsapm_volume_initialize	call site: 00136	/src/libvsapm/libvsapm/libvsapm_volume.c:131
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00343	/src/libvsbsdl/libbfio/libbfio_handle.c:1164
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00373	/src/libfwnt/libcdata/libcdata_array.c:823
0	32	1 : View List ['libcerror_error_set']	0	32	libbfio_handle_free	call site: 00409	/src/libvsbsdl/libbfio/libbfio_handle.c:307

Runtime coverage analysis

Covered functions

47

Functions that are reachable but not covered

41

Reachable functions

88

Percentage of reachable functions covered

53.41%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsapm/ossfuzz/volume_fuzzer.cc	1
libvsapm/libbfio/libbfio_memory_range.c	2
libvsapm/libcerror/libcerror_error.c	3
libvsapm/libbfio/libbfio_memory_range_io_handle.c	12
libvsapm/libbfio/libbfio_handle.c	9
libvsapm/libcdata/libcdata_range_list.c	15
libvsapm/libcdata/libcdata_list_element.c	10
libvsapm/libcdata/libcdata_range_list_value.c	3
libvsapm/libvsapm/libvsapm_volume.c	5
libvsapm/libvsapm/libvsapm_io_handle.c	3
libvsapm/libcdata/libcdata_array.c	6
libvsapm/libcthreads/libcthreads_read_write_lock.c	4
libvsapm/libcerror/libcerror_system.c	2
libvsapm/libvsapm/libvsapm_partition_map_entry.c	4

Fuzzer: libmdmp_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	394	81.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	0.82%
greenyellow	[30:49]	2	0.41%
lawngreen	50+	86	17.6%
All colors	486	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00186	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
39	39	1 : View List ['libfdata_range_get']	39	386	libfdata_segments_array_set_segment_by_index	call site: 00416	/src/libvsbsdl/libfdata/libfdata_segments_array.c:156
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	186	1 : View List ['libmdmp_file_close']	0	364	libmdmp_file_free	call site: 00478	/src/libmdmp/libmdmp/libmdmp_file.c:178
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	101	2 : View List ['libmdmp_stream_descriptor_free', 'libcerror_error_set']	0	101	libmdmp_io_handle_read_streams_directory	call site: 00446	/src/libmdmp/libmdmp/libmdmp_io_handle.c:388
0	99	1 : View List ['libbfio_handle_free']	0	352	libmdmp_file_close	call site: 00463	/src/libmdmp/libmdmp/libmdmp_file.c:765
0	96	3 : View List ['libcerror_error_set', 'free', 'libfdata_stream_free']	0	96	libmdmp_stream_descriptor_initialize	call site: 00374	/src/libmdmp/libmdmp/libmdmp_stream_descriptor.c:117
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfdata_stream_initialize	call site: 00357	/src/libregf/libfdata/libfdata_stream.c:179
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libmdmp_file_initialize	call site: 00131	/src/libmdmp/libmdmp/libmdmp_file.c:119
0	69	1 : View List ['libmdmp_stream_descriptor_free']	0	69	libmdmp_io_handle_read_streams_directory	call site: 00448	/src/libmdmp/libmdmp/libmdmp_io_handle.c:408

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

40

Reachable functions

97

Percentage of reachable functions covered

58.76%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libmdmp/ossfuzz/file_fuzzer.cc	1
libmdmp/libbfio/libbfio_memory_range.c	2
libmdmp/libcerror/libcerror_error.c	3
libmdmp/libbfio/libbfio_memory_range_io_handle.c	12
libmdmp/libbfio/libbfio_handle.c	10
libmdmp/libcdata/libcdata_range_list.c	15
libmdmp/libcdata/libcdata_list_element.c	10
libmdmp/libcdata/libcdata_range_list_value.c	3
libmdmp/libmdmp/libmdmp_file.c	5
libmdmp/libcdata/libcdata_array.c	8
libmdmp/libmdmp/libmdmp_io_handle.c	6
libmdmp/libmdmp/libmdmp_file_header.c	4
libmdmp/libmdmp/libmdmp_stream_descriptor.c	3
libmdmp/libfdata/libfdata_stream.c	4
libmdmp/libfdata/libfdata_range.c	4
libmdmp/libfdata/libfdata_mapped_range.c	2
libmdmp/libfdata/libfdata_segments_array.c	1

Fuzzer: libvslvm_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	757	70.9%
gold	[1:9]	25	2.34%
yellow	[10:29]	9	0.84%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	275	25.7%
All colors	1067	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00361	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00135	/src/libvsbsdl/libcdata/libcdata_list.c:238
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	208	libbfio_pool_append_handle	call site: 00978	/src/libvslvm/libbfio/libbfio_pool.c:1395
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	208	libbfio_pool_set_handle	call site: 00216	/src/libvslvm/libbfio/libbfio_pool.c:1591
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	170	libbfio_pool_remove_handle	call site: 00561	/src/libvslvm/libbfio/libbfio_pool.c:1753
129	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	129	516	libvslvm_handle_close	call site: 01028	/src/libvslvm/libvslvm/libvslvm_handle.c:1769
108	140	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_move_handle_to_front_of_last_used_list']	108	140	libbfio_internal_pool_get_open_handle	call site: 00329	/src/libvslvm/libbfio/libbfio_pool.c:2813
107	171	3 : View List ['libcdata_list_remove_element', 'libcerror_error_set', 'libcdata_list_element_free']	107	171	libbfio_internal_pool_remove_handle_from_last_used_list	call site: 00555	/src/libvslvm/libbfio/libbfio_pool.c:1051
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	552	6 : View List ['libbfio_pool_free', 'libcerror_error_set', 'libvslvm_metadata_area_free', 'libvslvm_metadata_free', 'libvslvm_internal_physical_volume_free', 'libbfio_pool_remove_handle']	0	552	libvslvm_internal_handle_open_read	call site: 00955	/src/libvslvm/libvslvm/libvslvm_handle.c:2171
0	144	4 : View List ['libcerror_error_set', 'free', 'libcdata_list_free', 'libcdata_array_free']	0	144	libbfio_pool_initialize	call site: 00130	/src/libvslvm/libbfio/libbfio_pool.c:139

Runtime coverage analysis

Covered functions

121

Functions that are reachable but not covered

46

Reachable functions

167

Percentage of reachable functions covered

72.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvslvm/ossfuzz/handle_fuzzer.cc	1
libvslvm/libbfio/libbfio_memory_range.c	2
libvslvm/libcerror/libcerror_error.c	3
libvslvm/libbfio/libbfio_memory_range_io_handle.c	12
libvslvm/libbfio/libbfio_handle.c	11
libvslvm/libcdata/libcdata_range_list.c	15
libvslvm/libcdata/libcdata_list_element.c	10
libvslvm/libcdata/libcdata_range_list_value.c	3
libvslvm/libbfio/libbfio_pool.c	14
libvslvm/libcdata/libcdata_array.c	9
libvslvm/libcdata/libcdata_list.c	7
libvslvm/libvslvm/libvslvm_handle.c	7
libvslvm/libvslvm/libvslvm_io_handle.c	3
libvslvm/libvslvm/libvslvm_physical_volume.c	10
libvslvm/libvslvm/libvslvm_checksum.c	2
libvslvm/libvslvm/libvslvm_data_area_descriptor.c	4
libvslvm/libvslvm/libvslvm_metadata_area.c	4
libvslvm/libvslvm/libvslvm_raw_location_descriptor.c	4
libvslvm/libvslvm/libvslvm_metadata.c	12
libvslvm/libcsplit/libcsplit_narrow_string.c	1
libvslvm/libcsplit/libcsplit_narrow_split_string.c	6
libvslvm/libvslvm/libvslvm_volume_group.c	8
libvslvm/libvslvm/libvslvm_logical_volume_values.c	5
libvslvm/libvslvm/libvslvm_segment.c	4
libvslvm/libfvalue/libfvalue_integer.c	2
libvslvm/libvslvm/libvslvm_stripe.c	4

Fuzzer: libnk2_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	365	78.6%
gold	[1:9]	8	1.72%
yellow	[10:29]	6	1.29%
greenyellow	[30:49]	8	1.72%
lawngreen	50+	77	16.5%
All colors	464	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	152	1 : View List ['libnk2_file_close']	0	330	libnk2_file_free	call site: 00456	/src/libnk2/libnk2/libnk2_file.c:178
0	148	4 : View List ['libnk2_file_header_free', 'libcerror_error_set', 'libcdata_array_empty', 'libnk2_file_footer_free']	0	148	libnk2_file_open_read	call site: 00426	/src/libnk2/libnk2/libnk2_file.c:957
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	275	libnk2_file_close	call site: 00442	/src/libnk2/libnk2/libnk2_file.c:765
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libnk2_file_initialize	call site: 00131	/src/libnk2/libnk2/libnk2_file.c:119
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00333	/src/libvsbsdl/libbfio/libbfio_handle.c:1164
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00401	/src/libfwnt/libcdata/libcdata_array.c:823
0	32	1 : View List ['libcerror_error_set']	0	32	libbfio_handle_free	call site: 00448	/src/libvsbsdl/libbfio/libbfio_handle.c:307

Runtime coverage analysis

Covered functions

55

Functions that are reachable but not covered

35

Reachable functions

90

Percentage of reachable functions covered

61.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libnk2/ossfuzz/file_fuzzer.cc	1
libnk2/libbfio/libbfio_memory_range.c	2
libnk2/libcerror/libcerror_error.c	3
libnk2/libbfio/libbfio_memory_range_io_handle.c	12
libnk2/libbfio/libbfio_handle.c	9
libnk2/libcdata/libcdata_range_list.c	15
libnk2/libcdata/libcdata_list_element.c	10
libnk2/libcdata/libcdata_range_list_value.c	3
libnk2/libnk2/libnk2_file.c	6
libnk2/libcdata/libcdata_array.c	6
libnk2/libnk2/libnk2_io_handle.c	3
libnk2/libnk2/libnk2_file_header.c	4
libnk2/libnk2/libnk2_item.c	3
libnk2/libnk2/libnk2_record_entry.c	4
libnk2/libnk2/libnk2_mapi_value.c	1
libnk2/libnk2/libnk2_file_footer.c	4

Fuzzer: libfwevt_xml_document_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	324	53.8%
gold	[1:9]	34	5.64%
yellow	[10:29]	32	5.31%
greenyellow	[30:49]	22	3.65%
lawngreen	50+	190	31.5%
All colors	602	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
77	431	7 : View List ['libfwevt_xml_tag_set_value_type', 'libfwevt_integer_as_unsigned_decimal_copy_to_utf16_string_with_index', 'libfwevt_internal_xml_tag_free', 'free', 'malloc', 'libfwevt_integer_as_unsigned_decimal_get_string_size', 'libfwevt_xml_tag_append_value_data']	77	879	libfwevt_xml_document_read_character_reference	call site: 00334	/src/libfwevt/libfwevt/libfwevt_xml_document.c:1264
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	4732	13 : View List ['libfwevt_xml_token_read_data', 'libfwevt_xml_document_read_cdata_section', 'libfwevt_xml_document_read_attribute', 'libfwevt_xml_document_read_pi_target', 'libfwevt_xml_tag_initialize', 'libfwevt_xml_document_read_element', 'libfwevt_xml_document_read_optional_substitution', 'libfwevt_xml_document_read_normal_substitution', 'libfwevt_xml_tag_append_element', 'libfwevt_xml_document_read_value', 'libfwevt_xml_document_read_entity_reference', 'libfwevt_xml_document_read_name', 'libfwevt_xml_document_read_character_reference']	0	6072	libfwevt_xml_document_read_element	call site: 00113	/src/libfwevt/libfwevt/libfwevt_xml_document.c:2276
0	158	3 : View List ['libfwevt_xml_token_free', 'libcerror_error_set', 'libfwevt_internal_xml_tag_free']	0	158	libfwevt_xml_document_read_attribute	call site: 00588	/src/libfwevt/libfwevt/libfwevt_xml_document.c:940
0	158	3 : View List ['libfwevt_xml_token_free', 'libcerror_error_set', 'libfwevt_internal_xml_tag_free']	0	158	libfwevt_xml_document_read_element	call site: 00113	/src/libfwevt/libfwevt/libfwevt_xml_document.c:2516
0	158	3 : View List ['libfwevt_xml_token_free', 'libcerror_error_set', 'libfwevt_internal_xml_tag_free']	0	158	libfwevt_xml_document_read_pi_target	call site: 00312	/src/libfwevt/libfwevt/libfwevt_xml_document.c:4581
0	122	3 : View List ['libcerror_error_set', 'libfwevt_internal_xml_tag_free', 'free']	0	122	libfwevt_xml_document_read_entity_reference	call site: 00439	/src/libfwevt/libfwevt/libfwevt_xml_document.c:3015
0	114	3 : View List ['libfwevt_xml_token_free', 'libcerror_error_set', 'libcdata_array_free']	0	114	libfwevt_xml_document_read_template_instance	call site: 00541	/src/libfwevt/libfwevt/libfwevt_xml_document.c:5139
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfwevt_xml_tag_initialize	call site: 00079	/src/libfwevt/libfwevt/libfwevt_xml_tag.c:121
0	68	2 : View List ['libfwevt_xml_token_free', 'libcerror_error_set']	0	68	libfwevt_xml_document_read_with_template_values	call site: 00594	/src/libfwevt/libfwevt/libfwevt_xml_document.c:457
0	68	2 : View List ['libfwevt_xml_token_free', 'libcerror_error_set']	0	68	libfwevt_xml_document_read_fragment	call site: 00051	/src/libfwevt/libfwevt/libfwevt_xml_document.c:3206
0	68	2 : View List ['libfwevt_xml_token_free', 'libcerror_error_set']	0	68	libfwevt_xml_document_substitute_template_value	call site: 00239	/src/libfwevt/libfwevt/libfwevt_xml_document.c:6144

Runtime coverage analysis

Covered functions

65

Functions that are reachable but not covered

14

Reachable functions

79

Percentage of reachable functions covered

82.28%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwevt/ossfuzz/xml_document_fuzzer.cc	1
libfwevt/libfwevt/libfwevt_xml_document.c	20
libfwevt/libcerror/libcerror_error.c	3
libfwevt/libfwevt/libfwevt_xml_token.c	3
libfwevt/libfwevt/libfwevt_xml_tag.c	12
libfwevt/libcdata/libcdata_array.c	7
libfwevt/libfwevt/libfwevt_xml_value.c	4
libfwevt/libfwevt/libfwevt_data_segment.c	2
libfwevt/libfguid/libfguid_identifier.c	1
libfwevt/libfdatetime/libfdatetime_filetime.c	1
libfwevt/libfdatetime/libfdatetime_systemtime.c	1
libfwevt/libfwnt/libfwnt_security_identifier.c	2
libfwevt/libfwevt/libfwevt_xml_template_value.c	9
libfwevt/libfwevt/libfwevt_integer.c	2
libfwevt/libuna/libuna_utf8_string.c	3
libfwevt/libuna/libuna_unicode_character.c	5

Fuzzer: libfcrypto_crypt_des3_cbc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	39	79.5%
gold	[1:9]	1	2.04%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	4	8.16%
lawngreen	50+	5	10.2%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_des3_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:147
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_des3_context_free	call site: 00047	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:201
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_des3_context_crypt_block	call site: 00029	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:395
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_des3_crypt_cbc	call site: 00044	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:897
0	0	None	0	614	libfcrypto_des3_crypt_cbc	call site: 00026	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:691
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:111
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:122
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:136
0	0	None	0	32	libfcrypto_des3_context_free	call site: 00046	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:185
0	0	None	0	32	libfcrypto_des3_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:234
0	0	None	0	32	libfcrypto_des3_context_set_key	call site: 00014	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:247

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

5

Reachable functions

12

Percentage of reachable functions covered

58.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_des3_cbc_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_des3_context.c	5
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libwrc_version_information_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	35	50.0%
gold	[1:9]	7	10.0%
yellow	[10:29]	6	8.57%
greenyellow	[30:49]	1	1.42%
lawngreen	50+	21	30.0%
All colors	70	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_version_information_resource_initialize	call site: 00011	/src/libwrc/libwrc/libwrc_version_information_resource.c:87
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_version_information_resource_free	call site: 00068	/src/libwrc/libwrc/libwrc_version_information_resource.c:124
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_internal_version_information_resource_read_string	call site: 00044	/src/libwrc/libwrc/libwrc_version_information_resource.c:856
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00001	/src/libwrc/libwrc/libwrc_version_information_resource.c:51
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00002	/src/libwrc/libwrc/libwrc_version_information_resource.c:62
0	0	None	0	32	libwrc_version_information_resource_initialize	call site: 00010	/src/libwrc/libwrc/libwrc_version_information_resource.c:76
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00022	/src/libwrc/libwrc/libwrc_version_information_resource.c:168
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00023	/src/libwrc/libwrc/libwrc_version_information_resource.c:179
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_file_information	call site: 00024	/src/libwrc/libwrc/libwrc_version_information_resource.c:190
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_table	call site: 00030	/src/libwrc/libwrc/libwrc_version_information_resource.c:408
0	0	None	0	32	libwrc_internal_version_information_resource_read_string_table	call site: 00031	/src/libwrc/libwrc/libwrc_version_information_resource.c:419

Runtime coverage analysis

Covered functions

10

Functions that are reachable but not covered

6

Reachable functions

16

Percentage of reachable functions covered

62.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/version_information_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_version_information_resource.c	8
libwrc/libcerror/libcerror_error.c	3

Fuzzer: libfcrypto_crypt_blowfish_cbc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	45	81.8%
gold	[1:9]	1	1.81%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	3.63%
lawngreen	50+	7	12.7%
All colors	55	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_blowfish_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:347
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_blowfish_context_free	call site: 00053	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:401
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_blowfish_context_encrypt_values	call site: 00019	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:462
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_blowfish_context_encrypt_block	call site: 00038	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:736
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_blowfish_crypt_cbc	call site: 00050	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:1180
0	0	None	42	276	libfcrypto_blowfish_crypt_cbc	call site: 00033	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:1058
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:311
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:322
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:336
0	0	None	0	32	libfcrypto_blowfish_context_free	call site: 00052	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:385
0	0	None	0	32	libfcrypto_internal_blowfish_context_encrypt_values	call site: 00017	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:440

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

6

Reachable functions

14

Percentage of reachable functions covered

57.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_blowfish_cbc_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_blowfish_context.c	7
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libfwps_set_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	67	65.0%
gold	[1:9]	4	3.88%
yellow	[10:29]	2	1.94%
greenyellow	[30:49]	6	5.82%
lawngreen	50+	24	23.3%
All colors	103	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00084	/src/libfwnt/libcdata/libcdata_array.c:823
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00097	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00083	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00077	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_initialize	call site: 00039	/src/libfwps/libfwps/libfwps_record.c:98
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_internal_record_free	call site: 00089	/src/libfwps/libfwps/libfwps_record.c:163
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_copy_from_byte_stream	call site: 00070	/src/libfwps/libfwps/libfwps_record.c:911
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_set_initialize	call site: 00013	/src/libfwps/libfwps/libfwps_set.c:108
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_set_free	call site: 00093	/src/libfwps/libfwps/libfwps_set.c:163
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_internal_set_free	call site: 00101	/src/libfwps/libfwps/libfwps_set.c:205

Runtime coverage analysis

Covered functions

14

Functions that are reachable but not covered

6

Reachable functions

20

Percentage of reachable functions covered

70.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwps/ossfuzz/set_fuzzer.cc	1
libfwps/libfwps/libfwps_set.c	4
libfwps/libcerror/libcerror_error.c	3
libfwps/libcdata/libcdata_array.c	5
libfwps/libfwps/libfwps_record.c	3

Fuzzer: libwrc_manifest_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	81.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	13.6%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	4.54%
All colors	22	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	32	2 : View List ['libcerror_error_set', 'free']	32	32	libwrc_manifest_resource_initialize	call site: 00011	/src/libwrc/libwrc/libwrc_manifest_resource.c:79
32	32	1 : View List ['libcerror_error_set']	32	32	libwrc_manifest_resource_free	call site: 00020	/src/libwrc/libwrc/libwrc_manifest_resource.c:116
32	32	2 : View List ['libcerror_error_set', 'free']	32	32	libwrc_manifest_resource_read	call site: 00018	/src/libwrc/libwrc/libwrc_manifest_resource.c:230
0	0	None	32	32	libwrc_manifest_resource_initialize	call site: 00001	/src/libwrc/libwrc/libwrc_manifest_resource.c:43
0	0	None	32	32	libwrc_manifest_resource_initialize	call site: 00002	/src/libwrc/libwrc/libwrc_manifest_resource.c:54
0	0	None	32	32	libwrc_manifest_resource_initialize	call site: 00010	/src/libwrc/libwrc/libwrc_manifest_resource.c:68
0	0	None	32	32	libwrc_manifest_resource_read	call site: 00013	/src/libwrc/libwrc/libwrc_manifest_resource.c:155
0	0	None	32	32	libwrc_manifest_resource_read	call site: 00014	/src/libwrc/libwrc/libwrc_manifest_resource.c:168
0	0	None	32	32	libwrc_manifest_resource_read	call site: 00015	/src/libwrc/libwrc/libwrc_manifest_resource.c:179
0	0	None	32	32	libwrc_manifest_resource_read	call site: 00016	/src/libwrc/libwrc/libwrc_manifest_resource.c:190
0	0	None	32	32	libwrc_manifest_resource_read	call site: 00017	/src/libwrc/libwrc/libwrc_manifest_resource.c:217

Runtime coverage analysis

Covered functions

4

Functions that are reachable but not covered

6

Reachable functions

10

Percentage of reachable functions covered

40.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/manifest_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_manifest_resource.c	3
libwrc/libcerror/libcerror_error.c	3

Fuzzer: libfwps_store_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	78	61.9%
gold	[1:9]	4	3.17%
yellow	[10:29]	5	3.96%
greenyellow	[30:49]	5	3.96%
lawngreen	50+	34	26.9%
All colors	126	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00096	/src/libfwnt/libcdata/libcdata_array.c:823
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00110	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_empty	call site: 00118	/src/libfwnt/libcdata/libcdata_array.c:328
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00095	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00089	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_initialize	call site: 00053	/src/libfwps/libfwps/libfwps_record.c:98
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_internal_record_free	call site: 00101	/src/libfwps/libfwps/libfwps_record.c:163
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_copy_from_byte_stream	call site: 00082	/src/libfwps/libfwps/libfwps_record.c:911
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_set_initialize	call site: 00035	/src/libfwps/libfwps/libfwps_set.c:108
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_internal_set_free	call site: 00114	/src/libfwps/libfwps/libfwps_set.c:205

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

6

Reachable functions

23

Percentage of reachable functions covered

73.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwps/ossfuzz/store_fuzzer.cc	1
libfwps/libfwps/libfwps_store.c	3
libfwps/libcerror/libcerror_error.c	3
libfwps/libcdata/libcdata_array.c	6
libfwps/libfwps/libfwps_set.c	3
libfwps/libfwps/libfwps_record.c	3

Fuzzer: libfsxfs_extended_attribute_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	777	71.7%
gold	[1:9]	20	1.84%
yellow	[10:29]	25	2.30%
greenyellow	[30:49]	20	1.84%
lawngreen	50+	241	22.2%
All colors	1083	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00193	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
142	174	2 : View List ['libfsxfs_file_entry_free', 'libcerror_error_set']	142	174	libfsxfs_volume_get_file_entry_by_utf8_path	call site: 00918	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:2113
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00450	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
40	40	1 : View List ['libfsxfs_directory_entry_clone']	40	309	libfsxfs_file_system_get_directory_entry_by_utf8_path	call site: 00810	/src/libfsxfs/libfsxfs/libfsxfs_file_system.c:667
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	478	1 : View List ['libfsxfs_extent_btree_get_extents_from_branch_node']	0	670	libfsxfs_extent_btree_get_extents_from_node	call site: 00625	/src/libfsxfs/libfsxfs/libfsxfs_extent_btree.c:698
0	206	1 : View List ['libfsxfs_volume_close']	0	405	libfsxfs_volume_free	call site: 01077	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:180
0	182	4 : View List ['libcerror_error_set', 'libfsxfs_directory_entry_free', 'libfsxfs_inode_free', 'libfsxfs_directory_free']	0	182	libfsxfs_file_system_get_directory_entry_by_utf8_path	call site: 00817	/src/libfsxfs/libfsxfs/libfsxfs_file_system.c:707
0	166	4 : View List ['libcerror_error_set', 'libcdata_array_empty', 'libfsxfs_block_directory_free', 'libfsxfs_directory_table_free']	0	166	libfsxfs_directory_read_file_io_handle	call site: 00708	/src/libfsxfs/libfsxfs/libfsxfs_directory.c:301
0	160	3 : View List ['libcerror_error_set', 'libfsxfs_extent_btree_free', 'libcdata_array_free']	0	160	libfsxfs_inode_read_file_io_handle	call site: 00659	/src/libfsxfs/libfsxfs/libfsxfs_inode.c:1242
0	118	3 : View List ['libcerror_error_set', 'libcdata_array_empty', 'libfsxfs_btree_block_free']	0	118	libfsxfs_extent_btree_get_extents_from_node	call site: 00632	/src/libfsxfs/libfsxfs/libfsxfs_extent_btree.c:742

Runtime coverage analysis

Covered functions

118

Functions that are reachable but not covered

100

Reachable functions

218

Percentage of reachable functions covered

54.13%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsxfs/ossfuzz/extended_attribute_fuzzer.cc	1
libfsxfs/libbfio/libbfio_memory_range.c	2
libfsxfs/libcerror/libcerror_error.c	3
libfsxfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsxfs/libbfio/libbfio_handle.c	10
libfsxfs/libcdata/libcdata_range_list.c	15
libfsxfs/libcdata/libcdata_list_element.c	10
libfsxfs/libcdata/libcdata_range_list_value.c	3
libfsxfs/libfsxfs/libfsxfs_volume.c	7
libfsxfs/libfsxfs/libfsxfs_io_handle.c	3
libfsxfs/libcthreads/libcthreads_read_write_lock.c	4
libfsxfs/libcerror/libcerror_system.c	2
libfsxfs/libfsxfs/libfsxfs_superblock.c	4
libfsxfs/libfsxfs/libfsxfs_file_system.c	5
libfsxfs/libfsxfs/libfsxfs_inode_btree.c	7
libfsxfs/libcdata/libcdata_array.c	9
libfsxfs/libfsxfs/libfsxfs_inode_information.c	4
libfsxfs/libfsxfs/libfsxfs_btree_block.c	4
libfsxfs/libfsxfs/libfsxfs_btree_header.c	3
libfsxfs/libfsxfs/libfsxfs_inode_btree_record.c	3
libfsxfs/libfsxfs/libfsxfs_inode.c	9
libfsxfs/libfsxfs/libfsxfs_extent_list.c	1
libfsxfs/libfsxfs/libfsxfs_extents.c	2
libfsxfs/libfsxfs/libfsxfs_extent.c	3
libfsxfs/libfsxfs/libfsxfs_extent_btree.c	5
libfsxfs/libfsxfs/libfsxfs_directory.c	4
libfsxfs/libfsxfs/libfsxfs_directory_entry.c	5
libfsxfs/libfsxfs/libfsxfs_directory_table.c	3
libfsxfs/libfsxfs/libfsxfs_directory_table_header.c	3
libfsxfs/libfsxfs/libfsxfs_block_directory.c	4
libfsxfs/libfsxfs/libfsxfs_block_directory_header.c	3
libfsxfs/libfsxfs/libfsxfs_block_directory_footer.c	3
libfsxfs/libuna/libuna_unicode_character.c	1
libfsxfs/libuna/libuna_utf8_string.c	1
libfsxfs/libfsxfs/libfsxfs_file_entry.c	5
libfsxfs/libfsxfs/libfsxfs_data_stream.c	3
libfsxfs/libfsxfs/libfsxfs_buffer_data_handle.c	4
libfsxfs/libfdata/libfdata_stream.c	4
libfsxfs/libfdata/libfdata_segments_array.c	1
libfsxfs/libfdata/libfdata_mapped_range.c	3
libfsxfs/libfdata/libfdata_range.c	3
libfsxfs/libfsxfs/libfsxfs_block_data_handle.c	2
libfsxfs/libfsxfs/libfsxfs_attribute_values.c	4
libfsxfs/libfsxfs/libfsxfs_attributes.c	4
libfsxfs/libfsxfs/libfsxfs_attributes_table.c	3
libfsxfs/libfsxfs/libfsxfs_attributes_table_header.c	3
libfsxfs/libfsxfs/libfsxfs_file_system_block.c	4
libfsxfs/libfsxfs/libfsxfs_file_system_block_header.c	3
libfsxfs/libfsxfs/libfsxfs_attributes_leaf_block_header.c	3
libfsxfs/libfsxfs/libfsxfs_extended_attribute.c	2

Fuzzer: libfwnt_lzx_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	104	57.7%
gold	[1:9]	14	7.77%
yellow	[10:29]	3	1.66%
greenyellow	[30:49]	4	2.22%
lawngreen	50+	55	30.5%
All colors	180	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	70	2 : View List ['libcerror_error_set', 'libfwnt_huffman_tree_free']	0	70	libfwnt_lzx_read_huffman_code_sizes	call site: 00111	/src/libfsntfs/libfwnt/libfwnt_lzx.c:333
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_bit_stream_initialize	call site: 00019	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:99
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_bit_stream_free	call site: 00169	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:138
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_bit_stream_read	call site: 00027	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:180
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_bit_stream_get_value	call site: 00026	/src/libfwnt/libfwnt/libfwnt_bit_stream.c:270
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_huffman_tree_initialize	call site: 00054	/src/libfwnt/libfwnt/libfwnt_huffman_tree.c:168
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_huffman_tree_free	call site: 00111	/src/libfwnt/libfwnt/libfwnt_huffman_tree.c:216
0	0	None	0	1902	libfwnt_lzx_decompress	call site: 00034	/src/libfsntfs/libfwnt/libfwnt_lzx.c:1022
0	0	None	0	1902	libfwnt_lzx_decompress	call site: 00161	/src/libfsntfs/libfwnt/libfwnt_lzx.c:1337
0	0	None	0	852	libfwnt_lzx_read_huffman_code_sizes	call site: 00080	/src/libfsntfs/libfwnt/libfwnt_lzx.c:106
0	0	None	0	770	libfwnt_lzx_read_huffman_code_sizes	call site: 00081	/src/libfsntfs/libfwnt/libfwnt_lzx.c:116

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

7

Reachable functions

24

Percentage of reachable functions covered

70.83%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/lzx_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_lzx.c	7
libfwnt/libcerror/libcerror_error.c	3
libfwnt/libfwnt/libfwnt_bit_stream.c	4
libfwnt/libcnotify/libcnotify_print.c	1
libfwnt/libfwnt/libfwnt_huffman_tree.c	4

Fuzzer: libwrc_stream_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	427	79.0%
gold	[1:9]	2	0.37%
yellow	[10:29]	4	0.74%
greenyellow	[30:49]	9	1.66%
lawngreen	50+	98	18.1%
All colors	540	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00188	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	167	1 : View List ['libwrc_stream_close']	0	267	libwrc_stream_free	call site: 00533	/src/libwrc/libwrc/libwrc_stream.c:158
0	137	4 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node', 'libcdata_tree_node_set_nodes']	0	137	libcdata_internal_tree_node_insert_node_before_sub_node	call site: 00441	/src/libfsntfs/libcdata/libcdata_tree_node.c:2697
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node']	0	102	libcdata_internal_tree_node_set_last_sub_node	call site: 00428	/src/libfsntfs/libcdata/libcdata_tree_node.c:1692
0	99	1 : View List ['libbfio_handle_free']	0	297	libwrc_stream_close	call site: 00517	/src/libwrc/libwrc/libwrc_stream.c:729
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	68	2 : View List ['libcdata_tree_node_get_next_node', 'libcerror_error_set']	0	68	libcdata_tree_node_get_sub_node_by_index	call site: 00474	/src/libfsntfs/libcdata/libcdata_tree_node.c:3948
0	68	2 : View List ['libcdata_tree_node_get_previous_node', 'libcerror_error_set']	0	68	libcdata_tree_node_get_sub_node_by_index	call site: 00476	/src/libfsntfs/libcdata/libcdata_tree_node.c:3979
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00328	/src/libvsbsdl/libbfio/libbfio_handle.c:1164

Runtime coverage analysis

Covered functions

68

Functions that are reachable but not covered

34

Reachable functions

102

Percentage of reachable functions covered

66.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/stream_fuzzer.cc	1
libwrc/libbfio/libbfio_memory_range.c	2
libwrc/libcerror/libcerror_error.c	3
libwrc/libbfio/libbfio_memory_range_io_handle.c	12
libwrc/libbfio/libbfio_handle.c	10
libwrc/libcdata/libcdata_range_list.c	15
libwrc/libcdata/libcdata_list_element.c	10
libwrc/libcdata/libcdata_range_list_value.c	3
libwrc/libwrc/libwrc_stream.c	5
libwrc/libwrc/libwrc_io_handle.c	3
libwrc/libcdata/libcdata_tree_node.c	19
libwrc/libwrc/libwrc_resource_node_tree.c	1
libwrc/libwrc/libwrc_resource_node_header.c	4
libwrc/libwrc/libwrc_resource_node_entry.c	6
libwrc/libwrc/libwrc_data_descriptor.c	4

Fuzzer: libvmdk_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	950	78.1%
gold	[1:9]	27	2.22%
yellow	[10:29]	11	0.90%
greenyellow	[30:49]	6	0.49%
lawngreen	50+	222	18.2%
All colors	1216	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	300	929	libvmdk_handle_close	call site: 01157	/src/libvmdk/libvmdk/libvmdk_handle.c:1907
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00267	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00182	/src/libvsbsdl/libcdata/libcdata_list.c:238
64	64	1 : View List ['libfdata_stream_free']	64	128	libvmdk_extent_table_clear	call site: 00197	/src/libvmdk/libvmdk/libvmdk_extent_table.c:235
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01148	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libvmdk_grain_table_free']	36	464	libvmdk_handle_close	call site: 01196	/src/libvmdk/libvmdk/libvmdk_handle.c:1969
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	342	1 : View List ['libvmdk_handle_close']	0	794	libvmdk_handle_free	call site: 01204	/src/libvmdk/libvmdk/libvmdk_handle.c:230
0	257	5 : View List ['libcerror_error_set', 'libvmdk_io_handle_free', 'free', 'libvmdk_extent_table_free', 'libcdata_array_free']	0	257	libvmdk_handle_initialize	call site: 00138	/src/libvmdk/libvmdk/libvmdk_handle.c:156
0	192	4 : View List ['libcerror_error_set', 'libvmdk_extent_file_free', 'libvmdk_descriptor_file_free', 'free']	0	192	libvmdk_internal_handle_open_read	call site: 01139	/src/libvmdk/libvmdk/libvmdk_handle.c:2280
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

85

Functions that are reachable but not covered

113

Reachable functions

198

Percentage of reachable functions covered

42.93%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvmdk/ossfuzz/handle_fuzzer.cc	1
libvmdk/libbfio/libbfio_memory_range.c	2
libvmdk/libcerror/libcerror_error.c	3
libvmdk/libbfio/libbfio_memory_range_io_handle.c	12
libvmdk/libbfio/libbfio_handle.c	12
libvmdk/libcdata/libcdata_range_list.c	15
libvmdk/libcdata/libcdata_list_element.c	10
libvmdk/libcdata/libcdata_range_list_value.c	3
libvmdk/libvmdk/libvmdk_handle.c	6
libvmdk/libvmdk/libvmdk_io_handle.c	3
libvmdk/libcdata/libcdata_array.c	9
libvmdk/libvmdk/libvmdk_extent_table.c	3
libvmdk/libcthreads/libcthreads_read_write_lock.c	4
libvmdk/libcerror/libcerror_system.c	2
libvmdk/libfdata/libfdata_list.c	5
libvmdk/libfdata/libfdata_list_element.c	8
libvmdk/libfdata/libfdata_range.c	4
libvmdk/libfdata/libfdata_mapped_range.c	3
libvmdk/libfcache/libfcache_cache.c	3
libvmdk/libcdata/libcdata_list.c	9
libvmdk/libfcache/libfcache_cache_value.c	6
libvmdk/libfdata/libfdata_stream.c	1
libvmdk/libcsplit/libcsplit_narrow_string.c	1
libvmdk/libcsplit/libcsplit_narrow_split_string.c	6
libvmdk/libvmdk/libvmdk_descriptor_file.c	11
libvmdk/libfvalue/libfvalue_integer.c	2
libvmdk/libclocale/libclocale_codepage.c	1
libvmdk/libvmdk/libvmdk_extent_values.c	4
libvmdk/libvmdk/libvmdk_extent_file.c	6
libvmdk/libbfio/libbfio_pool.c	9
libvmdk/libvmdk/libvmdk_grain_data.c	4
libvmdk/libvmdk/libvmdk_compression.c	1
libvmdk/libvmdk/libvmdk_deflate.c	8
libvmdk/libvmdk/libvmdk_bit_stream.c	3
libvmdk/libvmdk/libvmdk_huffman_tree.c	4
libvmdk/libvmdk/libvmdk_grain_group.c	1
libvmdk/libfcache/libfcache_date_time.c	1
libvmdk/libvmdk/libvmdk_grain_table.c	1

Fuzzer: libolecf_item_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	501	64.9%
gold	[1:9]	15	1.94%
yellow	[10:29]	12	1.55%
greenyellow	[30:49]	16	2.07%
lawngreen	50+	227	29.4%
All colors	771	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	395	6 : View List ['libolecf_allocation_table_free', 'libcerror_error_set', 'libcdata_tree_node_free', 'libcdata_list_free', 'libcdata_range_list_free', 'libolecf_file_header_free']	0	395	libolecf_file_open_read	call site: 00692	/src/libolecf/libolecf/libolecf_file.c:1126
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00187	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	0	215	libcdata_internal_range_list_insert_range_before_element	call site: 00245	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
0	214	4 : View List ['libcdata_range_list_free', 'libcerror_error_set', 'libcdata_list_empty', 'libolecf_directory_entry_free']	0	214	libolecf_io_handle_read_directory_entries	call site: 00462	/src/libolecf/libolecf/libolecf_io_handle.c:1361
0	176	1 : View List ['libolecf_file_close']	0	276	libolecf_file_free	call site: 00766	/src/libolecf/libolecf/libolecf_file.c:157
0	137	4 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node', 'libcdata_tree_node_set_nodes']	0	137	libcdata_internal_tree_node_insert_node_before_sub_node	call site: 00629	/src/libfsntfs/libcdata/libcdata_tree_node.c:2697
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	102	libcdata_internal_range_list_set_last_element	call site: 00251	/src/libvsbsdl/libcdata/libcdata_range_list.c:1002
0	102	3 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node']	0	102	libcdata_internal_tree_node_set_last_sub_node	call site: 00616	/src/libfsntfs/libcdata/libcdata_tree_node.c:1692
0	99	1 : View List ['libbfio_handle_free']	0	620	libolecf_file_close	call site: 00746	/src/libolecf/libolecf/libolecf_file.c:685
0	84	1 : View List ['libcdata_range_list_free']	0	363	libolecf_file_open_read	call site: 00692	/src/libolecf/libolecf/libolecf_file.c:1143

Runtime coverage analysis

Covered functions

111

Functions that are reachable but not covered

11

Reachable functions

122

Percentage of reachable functions covered

90.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libolecf/ossfuzz/item_fuzzer.cc	1
libolecf/libbfio/libbfio_memory_range.c	2
libolecf/libcerror/libcerror_error.c	3
libolecf/libbfio/libbfio_memory_range_io_handle.c	12
libolecf/libbfio/libbfio_handle.c	8
libolecf/libcdata/libcdata_range_list.c	16
libolecf/libcdata/libcdata_list_element.c	10
libolecf/libcdata/libcdata_range_list_value.c	3
libolecf/libolecf/libolecf_file.c	6
libolecf/libolecf/libolecf_io_handle.c	7
libolecf/libolecf/libolecf_file_header.c	4
libolecf/libolecf/libolecf_allocation_table.c	4
libolecf/libcdata/libcdata_list.c	7
libolecf/libolecf/libolecf_directory_entry.c	5
libolecf/libolecf/libolecf_directory_tree.c	2
libolecf/libcdata/libcdata_tree_node.c	19
libolecf/libuna/libuna_utf8_string.c	1
libolecf/libuna/libuna_unicode_character.c	3
libolecf/libolecf/libolecf_directory_list.c	1
libolecf/libolecf/libolecf_item.c	4

Fuzzer: libfwsi_item_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	321	96.3%
gold	[1:9]	1	0.30%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	10	3.00%
lawngreen	50+	1	0.30%
All colors	333	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2264	2264	43 : View List ['libfwsi_control_panel_category_values_read_data', 'libfwsi_acronis_tib_file_values_read_data', 'libfwsi_root_folder_values_initialize', 'libfwsi_network_location_values_initialize', 'libfwsi_acronis_tib_file_values_initialize', 'libfwsi_cdburn_values_initialize', 'libfwsi_control_panel_item_values_initialize', 'libfwsi_compressed_folder_values_read_data', 'libfwsi_control_panel_category_values_initialize', 'libfwsi_volume_values_initialize', 'libfwsi_control_panel_cpl_file_values_read_data', 'libfwsi_network_location_values_read_data', 'libfwsi_users_property_view_values_read_data', 'libfwsi_users_property_view_values_initialize', 'libfwsi_game_folder_values_initialize', 'libfwsi_file_entry_values_read_data', 'memcmp', 'libfwsi_mtp_volume_values_read_data', 'libfwsi_extension_block_copy_from_byte_stream', 'libfwsi_uri_values_read_data', 'libfwsi_compressed_folder_values_initialize', 'libfwsi_file_entry_values_initialize', 'libfwsi_control_panel_cpl_file_values_initialize', 'libfwsi_control_panel_item_values_read_data', 'libfwsi_web_site_values_initialize', 'libfwsi_delegate_folder_values_read_data', 'libfwsi_delegate_folder_values_initialize', 'libfwsi_uri_sub_values_read_data', 'libfwsi_mtp_file_entry_values_read_data', 'libfwsi_item_get_parent_item', 'libfwsi_internal_extension_block_free', 'libfwsi_delegate_folder_values_free', 'libfwsi_uri_values_initialize', 'libfwsi_mtp_file_entry_values_initialize', 'libfwsi_cdburn_values_read_data', 'libfwsi_mtp_volume_values_initialize', 'libfwsi_uri_sub_values_initialize', 'libfwsi_root_folder_values_read_data', 'libfwsi_game_folder_values_read_data', 'libfwsi_extension_block_initialize', 'libcdata_array_append_entry', 'libfwsi_volume_values_read_data', 'libfwsi_web_site_values_read_data']	2264	3672	libfwsi_item_copy_from_byte_stream	call site: 00031	/src/libfwsi/libfwsi/libfwsi_item.c:370
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00024	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00328	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libfwsi_item_initialize	call site: 00011	/src/libfwsi/libfwsi/libfwsi_item.c:92
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwsi_internal_item_initialize	call site: 00016	/src/libfwsi/libfwsi/libfwsi_item.c:170
0	32	1 : View List ['libcerror_error_set']	0	32	libfwsi_item_free	call site: 00323	/src/libfwsi/libfwsi/libfwsi_item.c:225
0	32	1 : View List ['libcerror_error_set']	0	32	libfwsi_internal_item_free	call site: 00332	/src/libfwsi/libfwsi/libfwsi_item.c:286
0	0	None	0	128	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:112
0	0	None	0	110	libfwsi_internal_item_free	call site: 00324	/src/libfwsi/libfwsi/libfwsi_item.c:267
0	0	None	0	32	libcdata_array_initialize	call site: 00016	/src/libfwnt/libcdata/libcdata_array.c:46
0	0	None	0	32	libcdata_array_initialize	call site: 00017	/src/libfwnt/libcdata/libcdata_array.c:57

Runtime coverage analysis

Covered functions

10

Functions that are reachable but not covered

77

Reachable functions

87

Percentage of reachable functions covered

11.49%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwsi/ossfuzz/item_fuzzer.cc	1
libfwsi/libfwsi/libfwsi_item.c	6
libfwsi/libcerror/libcerror_error.c	3
libfwsi/libcdata/libcdata_array.c	5
libfwsi/libfwsi/libfwsi_delegate_folder_values.c	3
libfwsi/libfwsi/libfwsi_acronis_tib_file_values.c	2
libfwsi/libfwsi/libfwsi_cdburn_values.c	2
libfwsi/libfwsi/libfwsi_compressed_folder_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_item_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_category_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_cpl_file_values.c	2
libfwsi/libfwsi/libfwsi_file_entry_values.c	2
libfwsi/libfwsi/libfwsi_game_folder_values.c	2
libfwsi/libfwsi/libfwsi_mtp_file_entry_values.c	2
libfwsi/libfwsi/libfwsi_mtp_volume_values.c	2
libfwsi/libfwsi/libfwsi_network_location_values.c	2
libfwsi/libfwsi/libfwsi_root_folder_values.c	2
libfwsi/libfwsi/libfwsi_uri_values.c	2
libfwsi/libfwsi/libfwsi_uri_sub_values.c	2
libfwsi/libfwsi/libfwsi_users_property_view_values.c	2
libfwsi/libfwsi/libfwsi_volume_values.c	2
libfwsi/libfwsi/libfwsi_web_site_values.c	2
libfwsi/libfwsi/libfwsi_extension_block.c	3
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0000_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0001_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0003_values.c	2
libfwsi/libfwsi/libfwsi_file_entry_extension_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0005_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0006_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef000a_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0013_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0014_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0019_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0025_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0026_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0027_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0029_values.c	2

Fuzzer: libevtx_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	902	64.7%
gold	[1:9]	65	4.66%
yellow	[10:29]	30	2.15%
greenyellow	[30:49]	15	1.07%
lawngreen	50+	380	27.2%
All colors	1392	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
193	356	5 : View List ['libbfio_handle_clone', 'libcerror_error_set', 'libbfio_handle_set_open_on_demand', 'free', 'libbfio_handle_free']	193	356	libevtx_record_initialize	call site: 01342	/src/libevtx/libevtx/libevtx_record.c:124
93	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	93	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
77	431	7 : View List ['libfwevt_xml_tag_set_value_type', 'libfwevt_integer_as_unsigned_decimal_copy_to_utf16_string_with_index', 'libfwevt_internal_xml_tag_free', 'free', 'malloc', 'libfwevt_integer_as_unsigned_decimal_get_string_size', 'libfwevt_xml_tag_append_value_data']	77	879	libfwevt_xml_document_read_character_reference	call site: 00944	/src/libfwevt/libfwevt/libfwevt_xml_document.c:1264
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00503	/src/libvsbsdl/libfcache/libfcache_cache.c:801
35	137	4 : View List ['libcerror_error_set', 'libcdata_list_element_set_elements', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	137	libcdata_list_remove_element	call site: 00661	/src/libvsbsdl/libcdata/libcdata_list.c:2812
35	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	102	libcdata_list_prepend_element	call site: 00531	/src/libvsbsdl/libcdata/libcdata_list.c:1314
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	4732	13 : View List ['libfwevt_xml_token_read_data', 'libfwevt_xml_document_read_cdata_section', 'libfwevt_xml_document_read_attribute', 'libfwevt_xml_document_read_pi_target', 'libfwevt_xml_tag_initialize', 'libfwevt_xml_document_read_element', 'libfwevt_xml_document_read_optional_substitution', 'libfwevt_xml_document_read_normal_substitution', 'libfwevt_xml_tag_append_element', 'libfwevt_xml_document_read_value', 'libfwevt_xml_document_read_entity_reference', 'libfwevt_xml_document_read_name', 'libfwevt_xml_document_read_character_reference']	0	6072	libfwevt_xml_document_read_element	call site: 00783	/src/libfwevt/libfwevt/libfwevt_xml_document.c:2276
0	205	3 : View List ['libcerror_error_set', 'libbfio_handle_close', 'libbfio_handle_free']	0	205	libevtx_record_free	call site: 01363	/src/libevtx/libevtx/libevtx_record.c:213
0	204	1 : View List ['libevtx_file_close']	0	304	libevtx_file_free	call site: 01387	/src/libevtx/libevtx/libevtx_file.c:178
0	158	3 : View List ['libfwevt_xml_token_free', 'libcerror_error_set', 'libfwevt_internal_xml_tag_free']	0	158	libfwevt_xml_document_read_attribute	call site: 01185	/src/libfwevt/libfwevt/libfwevt_xml_document.c:940

Runtime coverage analysis

Covered functions

180

Functions that are reachable but not covered

42

Reachable functions

222

Percentage of reachable functions covered

81.08%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libevtx/ossfuzz/record_fuzzer.cc	1
libevtx/libbfio/libbfio_memory_range.c	2
libevtx/libcerror/libcerror_error.c	4
libevtx/libbfio/libbfio_memory_range_io_handle.c	12
libevtx/libbfio/libbfio_handle.c	12
libevtx/libcdata/libcdata_range_list.c	15
libevtx/libcdata/libcdata_list_element.c	10
libevtx/libcdata/libcdata_range_list_value.c	3
libevtx/libevtx/libevtx_file.c	7
libevtx/libevtx/libevtx_io_handle.c	5
libevtx/libevtx/libevtx_i18n.c	1
libevtx/libevtx/libevtx_checksum.c	2
libevtx/libfdata/libfdata_vector.c	5
libevtx/libcdata/libcdata_array.c	8
libevtx/libfcache/libfcache_date_time.c	1
libevtx/libevtx/libevtx_chunk.c	7
libevtx/libevtx/libevtx_byte_stream.c	1
libevtx/libevtx/libevtx_record_values.c	5
libevtx/libfwevt/libfwevt_xml_document.c	20
libevtx/libfwevt/libfwevt_xml_tag.c	12
libevtx/libfwevt/libfwevt_xml_value.c	4
libevtx/libfwevt/libfwevt_data_segment.c	2
libevtx/libfguid/libfguid_identifier.c	1
libevtx/libfdatetime/libfdatetime_filetime.c	1
libevtx/libfdatetime/libfdatetime_systemtime.c	1
libevtx/libfwnt/libfwnt_security_identifier.c	2
libevtx/libfdata/libfdata_segments_array.c	2
libevtx/libfdata/libfdata_range.c	5
libevtx/libfcache/libfcache_cache.c	4
libevtx/libcdata/libcdata_list.c	9
libevtx/libfcache/libfcache_cache_value.c	8
libevtx/libfdata/libfdata_mapped_range.c	3
libevtx/libevtx/libevtx_chunks_table.c	3
libevtx/libfdata/libfdata_list.c	7
libevtx/libfwevt/libfwevt_xml_token.c	3
libevtx/libfwevt/libfwevt_xml_template_value.c	9
libevtx/libfwevt/libfwevt_integer.c	2
libevtx/libuna/libuna_utf8_string.c	3
libevtx/libuna/libuna_unicode_character.c	5
libevtx/libfdata/libfdata_list_element.c	7
libevtx/libevtx/libevtx_record.c	2

Fuzzer: libvsgpt_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	424	75.7%
gold	[1:9]	2	0.35%
yellow	[10:29]	4	0.71%
greenyellow	[30:49]	12	2.14%
lawngreen	50+	118	21.0%
All colors	560	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00214	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00514	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	186	1 : View List ['libvsgpt_volume_close']	0	463	libvsgpt_volume_free	call site: 00546	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:196
0	123	3 : View List ['libvsgpt_partition_table_header_free', 'libcerror_error_set', 'libvsgpt_boot_record_free']	0	123	libvsgpt_internal_volume_open_read	call site: 00501	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:1117
0	123	3 : View List ['libcerror_error_set', 'libvsgpt_boot_record_free', 'libvsgpt_partition_values_free']	0	123	libvsgpt_internal_volume_read_mbr_partition_entries	call site: 00489	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:2054
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	104	2 : View List ['libvsgpt_partition_table_header_free', 'libcerror_error_set']	0	104	libvsgpt_internal_volume_read_partition_table_headers	call site: 00382	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:1444
0	104	2 : View List ['libvsgpt_partition_table_header_free', 'libcerror_error_set']	0	104	libvsgpt_internal_volume_read_partition_table_headers	call site: 00385	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:1461
0	104	3 : View List ['libcerror_error_set', 'libvsgpt_partition_values_free', 'libvsgpt_partition_entry_free']	0	104	libvsgpt_internal_volume_read_partition_entries	call site: 00432	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:1765
0	99	1 : View List ['libbfio_handle_free']	0	443	libvsgpt_volume_close	call site: 00527	/src/libvsgpt/libvsgpt/libvsgpt_volume.c:898

Runtime coverage analysis

Covered functions

67

Functions that are reachable but not covered

41

Reachable functions

108

Percentage of reachable functions covered

62.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsgpt/ossfuzz/volume_fuzzer.cc	1
libvsgpt/libbfio/libbfio_memory_range.c	2
libvsgpt/libcerror/libcerror_error.c	4
libvsgpt/libbfio/libbfio_memory_range_io_handle.c	12
libvsgpt/libbfio/libbfio_handle.c	9
libvsgpt/libcdata/libcdata_range_list.c	15
libvsgpt/libcdata/libcdata_list_element.c	10
libvsgpt/libcdata/libcdata_range_list_value.c	3
libvsgpt/libvsgpt/libvsgpt_volume.c	8
libvsgpt/libvsgpt/libvsgpt_io_handle.c	3
libvsgpt/libcdata/libcdata_array.c	7
libvsgpt/libcthreads/libcthreads_read_write_lock.c	4
libvsgpt/libcerror/libcerror_system.c	2
libvsgpt/libvsgpt/libvsgpt_partition_table_header.c	4
libvsgpt/libvsgpt/libvsgpt_checksum.c	2
libvsgpt/libvsgpt/libvsgpt_partition_entry.c	3
libvsgpt/libvsgpt/libvsgpt_partition_values.c	2
libvsgpt/libvsgpt/libvsgpt_boot_record.c	5
libvsgpt/libvsgpt/libvsgpt_mbr_partition_entry.c	3

Fuzzer: libhmac_sha1_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libcerror_error_set', 'libhmac_sha1_context_free']	32	68	libhmac_sha1_calculate	call site: 00046	/src/libhmac/libhmac/libhmac_sha1.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_transform	call site: 00027	/src/libhmac/libhmac/libhmac_sha1_context.c:461
32	32	2 : View List ['libcerror_error_set', 'free']	32	32	libhmac_sha1_context_initialize	call site: 00013	/src/libhmac/libhmac/libhmac_sha1_context.c:633
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_free	call site: 00046	/src/libhmac/libhmac/libhmac_sha1_context.c:672
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_update	call site: 00032	/src/libhmac/libhmac/libhmac_sha1_context.c:1028
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha1_context_finalize	call site: 00043	/src/libhmac/libhmac/libhmac_sha1_context.c:1362
0	0	None	192	274	libhmac_sha1_context_update	call site: 00019	/src/libhmac/libhmac/libhmac_sha1_context.c:929
0	0	None	32	68	libhmac_sha1_calculate	call site: 00002	/src/libhmac/libhmac/libhmac_sha1.c:153
0	0	None	32	68	libhmac_sha1_calculate	call site: 00016	/src/libhmac/libhmac/libhmac_sha1.c:166
0	0	None	32	68	libhmac_sha1_calculate	call site: 00035	/src/libhmac/libhmac/libhmac_sha1.c:181
0	0	None	32	32	libhmac_sha1_context_transform	call site: 00022	/src/libhmac/libhmac/libhmac_sha1_context.c:287
0	0	None	32	32	libhmac_sha1_context_transform	call site: 00023	/src/libhmac/libhmac/libhmac_sha1_context.c:298

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha1_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha1.c	1
libhmac/libhmac/libhmac_sha1_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libwrc_message_table_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	56	74.6%
gold	[1:9]	1	1.33%
yellow	[10:29]	3	4.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	15	20.0%
All colors	75	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00058	/src/libfwnt/libcdata/libcdata_array.c:823
0	37	1 : View List ['libwrc_table_entry_free']	0	37	libwrc_message_table_resource_read	call site: 00062	/src/libwrc/libwrc/libwrc_message_table_resource.c:537
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00069	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00057	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00051	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_message_table_resource_initialize	call site: 00013	/src/libwrc/libwrc/libwrc_message_table_resource.c:101
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_message_table_resource_free	call site: 00073	/src/libwrc/libwrc/libwrc_message_table_resource.c:155
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_table_entry_initialize	call site: 00036	/src/libwrc/libwrc/libwrc_table_entry.c:76
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_table_entry_free	call site: 00063	/src/libwrc/libwrc/libwrc_table_entry.c:112
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_table_entry_set_string	call site: 00044	/src/libwrc/libwrc/libwrc_table_entry.c:211

Runtime coverage analysis

Covered functions

13

Functions that are reachable but not covered

5

Reachable functions

18

Percentage of reachable functions covered

72.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/message_table_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_message_table_resource.c	3
libwrc/libcerror/libcerror_error.c	3
libwrc/libcdata/libcdata_array.c	5
libwrc/libwrc/libwrc_table_entry.c	3

Fuzzer: libvslvm_logical_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	928	70.8%
gold	[1:9]	26	1.98%
yellow	[10:29]	12	0.91%
greenyellow	[30:49]	17	1.29%
lawngreen	50+	326	24.9%
All colors	1309	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00361	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00135	/src/libvsbsdl/libcdata/libcdata_list.c:238
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	208	libbfio_pool_append_handle	call site: 00978	/src/libvslvm/libbfio/libbfio_pool.c:1395
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	208	libbfio_pool_set_handle	call site: 00216	/src/libvslvm/libbfio/libbfio_pool.c:1591
138	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	138	170	libbfio_pool_remove_handle	call site: 00561	/src/libvslvm/libbfio/libbfio_pool.c:1753
129	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	129	516	libvslvm_handle_close	call site: 01272	/src/libvslvm/libvslvm/libvslvm_handle.c:1769
108	140	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_move_handle_to_front_of_last_used_list']	108	140	libbfio_internal_pool_get_open_handle	call site: 00329	/src/libvslvm/libbfio/libbfio_pool.c:2813
107	171	3 : View List ['libcdata_list_remove_element', 'libcerror_error_set', 'libcdata_list_element_free']	107	171	libbfio_internal_pool_remove_handle_from_last_used_list	call site: 00555	/src/libvslvm/libbfio/libbfio_pool.c:1051
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_vector_get_size	call site: 01212	/src/libvsbsdl/libfdata/libfdata_vector.c:1910
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	552	6 : View List ['libbfio_pool_free', 'libcerror_error_set', 'libvslvm_metadata_area_free', 'libvslvm_metadata_free', 'libvslvm_internal_physical_volume_free', 'libbfio_pool_remove_handle']	0	552	libvslvm_internal_handle_open_read	call site: 00955	/src/libvslvm/libvslvm/libvslvm_handle.c:2171

Runtime coverage analysis

Covered functions

155

Functions that are reachable but not covered

73

Reachable functions

228

Percentage of reachable functions covered

67.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvslvm/ossfuzz/logical_volume_fuzzer.cc	1
libvslvm/libbfio/libbfio_memory_range.c	2
libvslvm/libcerror/libcerror_error.c	3
libvslvm/libbfio/libbfio_memory_range_io_handle.c	12
libvslvm/libbfio/libbfio_handle.c	12
libvslvm/libcdata/libcdata_range_list.c	15
libvslvm/libcdata/libcdata_list_element.c	10
libvslvm/libcdata/libcdata_range_list_value.c	3
libvslvm/libbfio/libbfio_pool.c	16
libvslvm/libcdata/libcdata_array.c	9
libvslvm/libcdata/libcdata_list.c	9
libvslvm/libvslvm/libvslvm_handle.c	8
libvslvm/libvslvm/libvslvm_io_handle.c	3
libvslvm/libvslvm/libvslvm_physical_volume.c	12
libvslvm/libvslvm/libvslvm_checksum.c	2
libvslvm/libvslvm/libvslvm_data_area_descriptor.c	4
libvslvm/libvslvm/libvslvm_metadata_area.c	4
libvslvm/libvslvm/libvslvm_raw_location_descriptor.c	4
libvslvm/libvslvm/libvslvm_metadata.c	12
libvslvm/libcsplit/libcsplit_narrow_string.c	1
libvslvm/libcsplit/libcsplit_narrow_split_string.c	6
libvslvm/libvslvm/libvslvm_volume_group.c	13
libvslvm/libvslvm/libvslvm_logical_volume_values.c	7
libvslvm/libvslvm/libvslvm_segment.c	7
libvslvm/libfvalue/libfvalue_integer.c	2
libvslvm/libvslvm/libvslvm_stripe.c	7
libvslvm/libvslvm/libvslvm_logical_volume.c	3
libvslvm/libfdata/libfdata_vector.c	5
libvslvm/libfcache/libfcache_date_time.c	1
libvslvm/libvslvm/libvslvm_chunk_data.c	3
libvslvm/libfdata/libfdata_segments_array.c	3
libvslvm/libfdata/libfdata_range.c	5
libvslvm/libfcache/libfcache_cache.c	3
libvslvm/libfcache/libfcache_cache_value.c	6
libvslvm/libfdata/libfdata_mapped_range.c	3
libvslvm/libcthreads/libcthreads_read_write_lock.c	2
libvslvm/libcerror/libcerror_system.c	2

Fuzzer: libfwps_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	78	65.5%
gold	[1:9]	4	3.36%
yellow	[10:29]	2	1.68%
greenyellow	[30:49]	6	5.04%
lawngreen	50+	29	24.3%
All colors	119	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00084	/src/libfwnt/libcdata/libcdata_array.c:823
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00113	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00083	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_get_number_of_entries	call site: 00094	/src/libfwnt/libcdata/libcdata_array.c:1052
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_get_entry_by_index	call site: 00102	/src/libfwnt/libcdata/libcdata_array.c:1146
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00077	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_initialize	call site: 00039	/src/libfwps/libfwps/libfwps_record.c:98
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_record_free	call site: 00105	/src/libfwps/libfwps/libfwps_record.c:136
0	32	1 : View List ['libcerror_error_set']	0	32	libfwps_internal_record_free	call site: 00089	/src/libfwps/libfwps/libfwps_record.c:163
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwps_record_copy_from_byte_stream	call site: 00070	/src/libfwps/libfwps/libfwps_record.c:911

Runtime coverage analysis

Covered functions

19

Functions that are reachable but not covered

6

Reachable functions

25

Percentage of reachable functions covered

76.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwps/ossfuzz/record_fuzzer.cc	1
libfwps/libfwps/libfwps_set.c	6
libfwps/libcerror/libcerror_error.c	3
libfwps/libcdata/libcdata_array.c	7
libfwps/libfwps/libfwps_record.c	4

Fuzzer: libfcrypto_crypt_des3_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	32	76.1%
gold	[1:9]	1	2.38%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	4	9.52%
lawngreen	50+	5	11.9%
All colors	42	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_des3_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:147
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_des3_context_free	call site: 00040	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:201
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_des3_context_crypt_block	call site: 00026	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:395
0	0	None	0	486	libfcrypto_des3_crypt_ecb	call site: 00023	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:1025
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:111
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:122
0	0	None	0	32	libfcrypto_des3_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:136
0	0	None	0	32	libfcrypto_des3_context_free	call site: 00039	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:185
0	0	None	0	32	libfcrypto_des3_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:234
0	0	None	0	32	libfcrypto_des3_context_set_key	call site: 00014	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:247
0	0	None	0	32	libfcrypto_internal_des3_context_crypt_block	call site: 00024	/src/libfcrypto/libfcrypto/libfcrypto_des3_context.c:372

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

5

Reachable functions

12

Percentage of reachable functions covered

58.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_des3_ecb_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_des3_context.c	5
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libfcrypto_crypt_serpent_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	36	81.8%
gold	[1:9]	1	2.27%
yellow	[10:29]	1	2.27%
greenyellow	[30:49]	1	2.27%
lawngreen	50+	5	11.3%
All colors	44	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_serpent_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:609
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_free	call site: 00042	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:663
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_set_key	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:775
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_serpent_context_encrypt_block	call site: 00031	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:1541
0	0	None	41	146	libfcrypto_serpent_crypt_ecb	call site: 00026	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2684
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:573
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:584
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:598
0	0	None	0	32	libfcrypto_serpent_context_free	call site: 00041	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:647
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:706
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00014	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:719

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_serpent_ecb_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_serpent_context.c	6
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libfcrypto_crypt_blowfish_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	38	79.1%
gold	[1:9]	1	2.08%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	4.16%
lawngreen	50+	7	14.5%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_blowfish_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:347
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_blowfish_context_free	call site: 00046	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:401
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_blowfish_context_encrypt_values	call site: 00019	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:462
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_blowfish_context_encrypt_block	call site: 00035	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:736
0	0	None	42	148	libfcrypto_blowfish_crypt_ecb	call site: 00030	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:1300
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:311
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:322
0	0	None	0	32	libfcrypto_blowfish_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:336
0	0	None	0	32	libfcrypto_blowfish_context_free	call site: 00045	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:385
0	0	None	0	32	libfcrypto_internal_blowfish_context_encrypt_values	call site: 00017	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:440
0	0	None	0	32	libfcrypto_internal_blowfish_context_encrypt_values	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_blowfish_context.c:451

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

6

Reachable functions

14

Percentage of reachable functions covered

57.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_blowfish_ecb_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_blowfish_context.c	7
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libsmraw_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	996	90.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	98	8.90%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	5	0.45%
All colors	1100	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
445	445	3 : View List ['libsmraw_information_file_write_section', 'libsmraw_information_file_open', 'libsmraw_information_file_close']	899	1135	libsmraw_handle_close	call site: 00940	/src/libsmraw/libsmraw/libsmraw_handle.c:1914
304	560	6 : View List ['libcerror_error_set', 'libbfio_handle_is_open', 'libbfio_internal_pool_open_handle', 'libbfio_handle_get_access_flags', 'libcdata_array_get_entry_by_index', 'libbfio_internal_pool_move_handle_to_front_of_last_used_list']	304	560	libbfio_internal_pool_get_open_handle	call site: 00661	/src/libvslvm/libbfio/libbfio_pool.c:2744
292	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	292	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
274	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	274	274	libcdata_list_empty	call site: 00135	/src/libvsbsdl/libcdata/libcdata_list.c:238
170	170	2 : View List ['libcerror_error_set', 'libbfio_internal_pool_append_handle_to_last_used_list']	170	208	libbfio_pool_append_handle	call site: 00194	/src/libvslvm/libbfio/libbfio_pool.c:1393
138	138	1 : View List ['libbfio_internal_pool_append_handle_to_last_used_list']	234	322	libbfio_internal_pool_open_handle	call site: 00633	/src/libvslvm/libbfio/libbfio_pool.c:610
129	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	326	562	libsmraw_handle_close	call site: 01048	/src/libsmraw/libsmraw/libsmraw_handle.c:1977
69	69	2 : View List ['libcerror_error_set', 'libsmraw_information_file_free']	69	69	libsmraw_handle_close	call site: 01080	/src/libsmraw/libsmraw/libsmraw_handle.c:2037
64	64	1 : View List ['libcerror_error_set']	64	64	libcdata_internal_array_resize	call site: 00186	/src/libfwnt/libcdata/libcdata_array.c:823
64	64	1 : View List ['libcerror_error_set']	64	64	libfdata_stream_free	call site: 00935	/src/libregf/libfdata/libfdata_stream.c:278
32	345	4 : View List ['libcerror_error_set', 'libsmraw_io_handle_free', 'libfvalue_table_free', 'free']	32	345	libsmraw_handle_initialize	call site: 00278	/src/libsmraw/libsmraw/libsmraw_handle.c:162
32	144	4 : View List ['libcerror_error_set', 'free', 'libcdata_list_free', 'libcdata_array_free']	32	144	libbfio_pool_initialize	call site: 00130	/src/libvslvm/libbfio/libbfio_pool.c:139

Runtime coverage analysis

Covered functions

69

Functions that are reachable but not covered

138

Reachable functions

207

Percentage of reachable functions covered

33.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libsmraw/ossfuzz/handle_fuzzer.cc	1
libsmraw/libbfio/libbfio_memory_range.c	2
libsmraw/libcerror/libcerror_error.c	4
libsmraw/libbfio/libbfio_memory_range_io_handle.c	12
libsmraw/libbfio/libbfio_handle.c	14
libsmraw/libcdata/libcdata_range_list.c	15
libsmraw/libcdata/libcdata_list_element.c	10
libsmraw/libcdata/libcdata_range_list_value.c	3
libsmraw/libbfio/libbfio_pool.c	17
libsmraw/libcdata/libcdata_array.c	10
libsmraw/libcdata/libcdata_list.c	7
libsmraw/libsmraw/libsmraw_handle.c	4
libsmraw/libsmraw/libsmraw_io_handle.c	7
libsmraw/libfvalue/libfvalue_table.c	4
libsmraw/libcthreads/libcthreads_read_write_lock.c	2
libsmraw/libcerror/libcerror_system.c	2
libsmraw/libfvalue/libfvalue_value.c	7
libsmraw/libfvalue/libfvalue_data_handle.c	6
libsmraw/libfvalue/libfvalue_value_entry.c	1
libsmraw/libfdata/libfdata_stream.c	5
libsmraw/libsmraw/libsmraw_filename.c	1
libsmraw/libbfio/libbfio_file.c	2
libsmraw/libbfio/libbfio_file_io_handle.c	12
libsmraw/libcfile/libcfile_file.c	15
libsmraw/libcfile/libcfile_support.c	1
libsmraw/libcpath/libcpath_path.c	2
libsmraw/libcsplit/libcsplit_narrow_string.c	1
libsmraw/libcsplit/libcsplit_narrow_split_string.c	6
libsmraw/libbfio/libbfio_system_string.c	2
libsmraw/libfdata/libfdata_range.c	4
libsmraw/libfdata/libfdata_mapped_range.c	3
libsmraw/libfdata/libfdata_segments_array.c	2
libsmraw/libsmraw/libsmraw_information_file.c	4

Fuzzer: libfshfs_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	795	66.4%
gold	[1:9]	40	3.34%
yellow	[10:29]	14	1.16%
greenyellow	[30:49]	25	2.08%
lawngreen	50+	323	26.9%
All colors	1197	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
601	601	1 : View List ['libuna_utf8_string_copy_from_byte_stream']	601	633	libfshfs_master_directory_block_get_utf8_volume_label	call site: 01158	/src/libfshfs/libfshfs/libfshfs_master_directory_block.c:784
589	589	1 : View List ['libuna_utf8_string_size_from_byte_stream']	589	621	libfshfs_master_directory_block_get_utf8_volume_label_size	call site: 01122	/src/libfshfs/libfshfs/libfshfs_master_directory_block.c:742
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00630	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 01130	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01092	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	309	1 : View List ['libfshfs_volume_close']	0	508	libfshfs_volume_free	call site: 01192	/src/libfshfs/libfshfs/libfshfs_volume.c:171
0	198	3 : View List ['libcerror_error_set', 'libfshfs_btree_file_free', 'libfshfs_btree_node_cache_free']	0	198	libfshfs_file_system_read_catalog_file	call site: 00752	/src/libfshfs/libfshfs/libfshfs_file_system.c:591
0	176	3 : View List ['libcerror_error_set', 'libfshfs_fork_descriptor_free', 'free']	0	176	libfshfs_volume_header_initialize	call site: 00377	/src/libfshfs/libfshfs/libfshfs_volume_header.c:154
0	172	4 : View List ['libcerror_error_set', 'libfshfs_directory_record_free', 'libfshfs_directory_entry_free', 'libfshfs_file_record_free']	0	172	libfshfs_catalog_btree_file_get_directory_entry_from_key	call site: 01031	/src/libfshfs/libfshfs/libfshfs_catalog_btree_file.c:1088

Runtime coverage analysis

Covered functions

171

Functions that are reachable but not covered

75

Reachable functions

246

Percentage of reachable functions covered

69.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfshfs/ossfuzz/volume_fuzzer.cc	1
libfshfs/libbfio/libbfio_memory_range.c	2
libfshfs/libcerror/libcerror_error.c	3
libfshfs/libbfio/libbfio_memory_range_io_handle.c	12
libfshfs/libbfio/libbfio_handle.c	8
libfshfs/libcdata/libcdata_range_list.c	15
libfshfs/libcdata/libcdata_list_element.c	10
libfshfs/libcdata/libcdata_range_list_value.c	3
libfshfs/libfshfs/libfshfs_volume.c	7
libfshfs/libfshfs/libfshfs_io_handle.c	3
libfshfs/libcthreads/libcthreads_read_write_lock.c	6
libfshfs/libcerror/libcerror_system.c	2
libfshfs/libfshfs/libfshfs_master_directory_block.c	6
libfshfs/libfshfs/libfshfs_fork_descriptor.c	5
libfshfs/libfshfs/libfshfs_extents_record.c	1
libfshfs/libfshfs/libfshfs_volume_header.c	4
libfshfs/libfshfs/libfshfs_file_system.c	6
libfshfs/libfshfs/libfshfs_btree_file.c	5
libfshfs/libcdata/libcdata_array.c	9
libfshfs/libfshfs/libfshfs_btree_header.c	3
libfshfs/libfshfs/libfshfs_extent.c	2
libfshfs/libfshfs/libfshfs_btree_node_descriptor.c	3
libfshfs/libfshfs/libfshfs_btree_node_vector.c	3
libfshfs/libfcache/libfcache_date_time.c	1
libfshfs/libfshfs/libfshfs_btree_node_cache.c	2
libfshfs/libfcache/libfcache_cache.c	4
libfshfs/libcdata/libcdata_list.c	9
libfshfs/libfshfs/libfshfs_extents_btree_file.c	6
libfshfs/libfcache/libfcache_cache_value.c	8
libfshfs/libfshfs/libfshfs_btree_node.c	8
libfshfs/libfshfs/libfshfs_btree_node_record.c	2
libfshfs/libfshfs/libfshfs_extents_btree_key.c	3
libfshfs/libfshfs/libfshfs_catalog_btree_file.c	10
libfshfs/libfshfs/libfshfs_catalog_btree_key.c	4
libfshfs/libfshfs/libfshfs_thread_record.c	3
libfshfs/libfshfs/libfshfs_name.c	3
libfshfs/libuna/libuna_unicode_character.c	4
libfshfs/libuna/libuna_codepage_koi8_r.c	1
libfshfs/libuna/libuna_codepage_koi8_u.c	1
libfshfs/libuna/libuna_codepage_mac_arabic.c	1
libfshfs/libuna/libuna_codepage_mac_celtic.c	1
libfshfs/libuna/libuna_codepage_mac_centraleurroman.c	1
libfshfs/libuna/libuna_codepage_mac_croatian.c	1
libfshfs/libuna/libuna_codepage_mac_cyrillic.c	1
libfshfs/libuna/libuna_codepage_mac_dingbats.c	1
libfshfs/libuna/libuna_codepage_mac_farsi.c	1
libfshfs/libuna/libuna_codepage_mac_gaelic.c	1
libfshfs/libuna/libuna_codepage_mac_greek.c	1
libfshfs/libuna/libuna_codepage_mac_icelandic.c	1
libfshfs/libuna/libuna_codepage_mac_inuit.c	1
libfshfs/libuna/libuna_codepage_mac_roman.c	1
libfshfs/libuna/libuna_codepage_mac_romanian.c	1
libfshfs/libuna/libuna_codepage_mac_russian.c	1
libfshfs/libuna/libuna_codepage_mac_symbol.c	1
libfshfs/libuna/libuna_codepage_mac_thai.c	1
libfshfs/libuna/libuna_codepage_mac_turkish.c	1
libfshfs/libuna/libuna_codepage_mac_ukrainian.c	1
libfshfs/libuna/libuna_codepage_windows_874.c	1
libfshfs/libuna/libuna_codepage_windows_932.c	1
libfshfs/libuna/libuna_codepage_windows_936.c	1
libfshfs/libuna/libuna_codepage_windows_949.c	1
libfshfs/libuna/libuna_codepage_windows_950.c	1
libfshfs/libuna/libuna_codepage_windows_1250.c	1
libfshfs/libuna/libuna_codepage_windows_1251.c	1
libfshfs/libuna/libuna_codepage_windows_1252.c	1
libfshfs/libuna/libuna_codepage_windows_1253.c	1
libfshfs/libuna/libuna_codepage_windows_1254.c	1
libfshfs/libuna/libuna_codepage_windows_1255.c	1
libfshfs/libuna/libuna_codepage_windows_1256.c	1
libfshfs/libuna/libuna_codepage_windows_1257.c	1
libfshfs/libuna/libuna_codepage_windows_1258.c	1
libfshfs/libfshfs/libfshfs_directory_record.c	3
libfshfs/libfshfs/libfshfs_file_record.c	3
libfshfs/libfshfs/libfshfs_directory_entry.c	6
libfshfs/libuna/libuna_utf8_string.c	3

Fuzzer: libfsapfs_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	910	65.8%
gold	[1:9]	33	2.38%
yellow	[10:29]	52	3.76%
greenyellow	[30:49]	21	1.51%
lawngreen	50+	366	26.4%
All colors	1382	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
696	778	4 : View List ['libfsapfs_volume_key_bag_initialize', 'libfsapfs_encryption_context_initialize', 'libfsapfs_container_key_bag_get_volume_key_bag_extent_by_identifier', 'libfsapfs_volume_key_bag_read_file_io_handle']	752	2838	libfsapfs_internal_volume_open_read	call site: 01024	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:554
271	718	9 : View List ['libfsapfs_checksum_calculate_fletcher64', 'libfsapfs_key_bag_entry_initialize', 'libfsapfs_key_bag_header_read_data', 'libfsapfs_key_bag_header_free', 'libfsapfs_key_bag_entry_free', 'libfsapfs_key_bag_header_initialize', 'libcerror_error_set', 'libcdata_array_append_entry', 'libfsapfs_key_bag_entry_read_data']	271	718	libfsapfs_container_key_bag_read_data	call site: 00712	/src/libfsapfs/libfsapfs/libfsapfs_container_key_bag.c:504
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00196	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
142	174	2 : View List ['libcerror_error_set', 'libfsapfs_file_system_free']	142	174	libfsapfs_internal_volume_close	call site: 01252	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:1095
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00534	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
56	653	11 : View List ['libfsapfs_volume_key_bag_free', 'libfdata_vector_free', 'libfsapfs_encryption_context_free', 'libfsapfs_object_map_btree_free', 'libfsapfs_snapshot_metadata_tree_free', 'libfsapfs_container_data_handle_free', 'libcdata_array_free', 'libcerror_error_set', 'libfsapfs_file_system_data_handle_free', 'libfsapfs_volume_superblock_free', 'libfsapfs_object_map_free']	56	653	libfsapfs_internal_volume_open_read	call site: 01208	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:794
56	56	1 : View List ['libfsapfs_volume_key_bag_free']	198	437	libfsapfs_internal_volume_close	call site: 01247	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:1050
56	56	1 : View List ['libfsapfs_volume_key_bag_free']	56	474	libfsapfs_internal_volume_open_read	call site: 01212	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:833
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00803	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00783	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfsapfs_fusion_middle_tree_free']	36	571	libfsapfs_container_close	call site: 01365	/src/libfsapfs/libfsapfs/libfsapfs_container.c:922

Runtime coverage analysis

Covered functions

201

Functions that are reachable but not covered

53

Reachable functions

254

Percentage of reachable functions covered

79.13%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsapfs/ossfuzz/volume_fuzzer.cc	1
libfsapfs/libbfio/libbfio_memory_range.c	2
libfsapfs/libcerror/libcerror_error.c	3
libfsapfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsapfs/libbfio/libbfio_handle.c	8
libfsapfs/libcdata/libcdata_range_list.c	15
libfsapfs/libcdata/libcdata_list_element.c	10
libfsapfs/libcdata/libcdata_range_list_value.c	3
libfsapfs/libfsapfs/libfsapfs_container.c	7
libfsapfs/libfsapfs/libfsapfs_io_handle.c	3
libfsapfs/libcthreads/libcthreads_read_write_lock.c	6
libfsapfs/libcerror/libcerror_system.c	2
libfsapfs/libfsapfs/libfsapfs_container_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_checksum.c	1
libfsapfs/libfsapfs/libfsapfs_object.c	4
libfsapfs/libfsapfs/libfsapfs_checkpoint_map.c	4
libfsapfs/libcdata/libcdata_array.c	9
libfsapfs/libfsapfs/libfsapfs_checkpoint_map_entry.c	3
libfsapfs/libfsapfs/libfsapfs_container_data_handle.c	3
libfsapfs/libfdata/libfdata_vector.c	5
libfsapfs/libfcache/libfcache_date_time.c	1
libfsapfs/libfsapfs/libfsapfs_data_block.c	4
libfsapfs/libfsapfs/libfsapfs_encryption_context.c	4
libfsapfs/libcaes/libcaes_tweaked_context.c	4
libfsapfs/libcaes/libcaes_context.c	7
libfsapfs/libfdata/libfdata_segments_array.c	2
libfsapfs/libfdata/libfdata_range.c	4
libfsapfs/libfcache/libfcache_cache.c	4
libfsapfs/libcdata/libcdata_list.c	9
libfsapfs/libfcache/libfcache_cache_value.c	8
libfsapfs/libfdata/libfdata_mapped_range.c	3
libfsapfs/libfsapfs/libfsapfs_object_map.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_btree.c	7
libfsapfs/libfsapfs/libfsapfs_container_key_bag.c	5
libfsapfs/libfsapfs/libfsapfs_key_bag_header.c	3
libfsapfs/libfsapfs/libfsapfs_key_bag_entry.c	3
libfsapfs/libfsapfs/libfsapfs_fusion_middle_tree.c	1
libfsapfs/libfsapfs/libfsapfs_btree_node.c	7
libfsapfs/libfsapfs/libfsapfs_btree_node_header.c	3
libfsapfs/libfsapfs/libfsapfs_btree_footer.c	3
libfsapfs/libfsapfs/libfsapfs_btree_entry.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_descriptor.c	4
libfsapfs/libfsapfs/libfsapfs_volume.c	10
libfsapfs/libfsapfs/libfsapfs_volume_superblock.c	7
libfsapfs/libfsapfs/libfsapfs_volume_key_bag.c	4
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata_tree.c	8
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata.c	4
libfsapfs/libfsapfs/libfsapfs_file_system_data_handle.c	3
libfsapfs/libfsapfs/libfsapfs_file_system.c	1
libfsapfs/libfsapfs/libfsapfs_file_system_btree.c	1
libfsapfs/libuna/libuna_utf8_string.c	3
libfsapfs/libuna/libuna_unicode_character.c	3

Fuzzer: libmsiecf_item_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2123	90.3%
gold	[1:9]	5	0.21%
yellow	[10:29]	11	0.46%
greenyellow	[30:49]	4	0.17%
lawngreen	50+	206	8.76%
All colors	2349	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
172	172	1 : View List ['libcdata_internal_range_list_insert_range_merge']	172	288	libcdata_range_list_insert_range	call site: 00232	/src/libvsbsdl/libcdata/libcdata_range_list.c:2898
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00522	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00500	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
41	141	3 : View List ['libcerror_error_set', 'libcdata_range_list_value_check_range_overlap', 'libcdata_list_element_get_value']	41	141	libcdata_internal_range_list_check_range_overlap	call site: 00226	/src/libvsbsdl/libcdata/libcdata_range_list.c:1651
35	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	35	215	libcdata_internal_range_list_insert_range_before_element	call site: 00254	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	436	4 : View List ['libcerror_error_set', 'libcdata_list_element_get_value', 'libcdata_list_element_get_next_element', 'libcdata_list_element_get_previous_element']	0	436	libcdata_internal_range_list_insert_range_find_element	call site: 00208	/src/libvsbsdl/libcdata/libcdata_range_list.c:1453
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00194	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	205	1 : View List ['libmsiecf_file_close']	0	404	libmsiecf_file_free	call site: 02344	/src/libmsiecf/libmsiecf/libmsiecf_file.c:183
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	102	libcdata_internal_range_list_set_last_element	call site: 00260	/src/libvsbsdl/libcdata/libcdata_range_list.c:1002
0	99	1 : View List ['libbfio_handle_free']	0	726	libmsiecf_file_close	call site: 02330	/src/libmsiecf/libmsiecf/libmsiecf_file.c:876

Runtime coverage analysis

Covered functions

111

Functions that are reachable but not covered

360

Reachable functions

468

Percentage of reachable functions covered

23.08%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libmsiecf/ossfuzz/item_fuzzer.cc	1
libmsiecf/libbfio/libbfio_memory_range.c	2
libmsiecf/libcerror/libcerror_error.c	4
libmsiecf/libbfio/libbfio_memory_range_io_handle.c	12
libmsiecf/libbfio/libbfio_handle.c	9
libmsiecf/libcdata/libcdata_range_list.c	18
libmsiecf/libcdata/libcdata_list_element.c	10
libmsiecf/libcdata/libcdata_range_list_value.c	3
libmsiecf/libmsiecf/libmsiecf_file.c	7
libmsiecf/libmsiecf/libmsiecf_io_handle.c	5
libmsiecf/libcthreads/libcthreads_read_write_lock.c	6
libmsiecf/libcerror/libcerror_system.c	2
libmsiecf/libmsiecf/libmsiecf_file_header.c	4
libmsiecf/libmsiecf/libmsiecf_cache_directory_table.c	4
libmsiecf/libcdata/libcdata_array.c	8
libmsiecf/libmsiecf/libmsiecf_directory_descriptor.c	3
libmsiecf/libmsiecf/libmsiecf_allocation_table.c	1
libmsiecf/libmsiecf/libmsiecf_hash_table.c	1
libmsiecf/libmsiecf/libmsiecf_item_descriptor.c	2
libmsiecf/libmsiecf/libmsiecf_item.c	3
libmsiecf/libmsiecf/libmsiecf_leak_values.c	3
libmsiecf/libmsiecf/libmsiecf_redirected_values.c	3
libmsiecf/libmsiecf/libmsiecf_url_values.c	3
libmsiecf/libfvalue/libfvalue_value_type.c	5
libmsiecf/libfvalue/libfvalue_value.c	4
libmsiecf/libfvalue/libfvalue_data_handle.c	4
libmsiecf/libfvalue/libfvalue_binary_data.c	10
libmsiecf/libuna/libuna_base16_stream.c	2
libmsiecf/libuna/libuna_base32_stream.c	4
libmsiecf/libuna/libuna_base64_stream.c	6
libmsiecf/libfvalue/libfvalue_floating_point.c	22
libmsiecf/libfvalue/libfvalue_integer.c	20
libmsiecf/libfvalue/libfvalue_string.c	13
libmsiecf/libuna/libuna_utf16_stream.c	7
libmsiecf/libuna/libuna_unicode_character.c	25
libmsiecf/libuna/libuna_utf32_stream.c	7
libmsiecf/libuna/libuna_utf7_stream.c	6
libmsiecf/libuna/libuna_utf8_stream.c	7
libmsiecf/libuna/libuna_byte_stream.c	6
libmsiecf/libuna/libuna_codepage_mac_symbol.c	3
libmsiecf/libuna/libuna_codepage_mac_thai.c	3
libmsiecf/libuna/libuna_codepage_windows_932.c	3
libmsiecf/libuna/libuna_codepage_windows_936.c	3
libmsiecf/libuna/libuna_codepage_windows_949.c	3
libmsiecf/libuna/libuna_codepage_windows_950.c	3
libmsiecf/libuna/libuna_codepage_koi8_r.c	2
libmsiecf/libuna/libuna_codepage_koi8_u.c	2
libmsiecf/libuna/libuna_codepage_mac_arabic.c	2
libmsiecf/libuna/libuna_codepage_mac_celtic.c	2
libmsiecf/libuna/libuna_codepage_mac_centraleurroman.c	2
libmsiecf/libuna/libuna_codepage_mac_croatian.c	2
libmsiecf/libuna/libuna_codepage_mac_cyrillic.c	2
libmsiecf/libuna/libuna_codepage_mac_dingbats.c	2
libmsiecf/libuna/libuna_codepage_mac_farsi.c	2
libmsiecf/libuna/libuna_codepage_mac_gaelic.c	2
libmsiecf/libuna/libuna_codepage_mac_greek.c	2
libmsiecf/libuna/libuna_codepage_mac_icelandic.c	2
libmsiecf/libuna/libuna_codepage_mac_inuit.c	2
libmsiecf/libuna/libuna_codepage_mac_roman.c	2
libmsiecf/libuna/libuna_codepage_mac_romanian.c	2
libmsiecf/libuna/libuna_codepage_mac_russian.c	2
libmsiecf/libuna/libuna_codepage_mac_turkish.c	2
libmsiecf/libuna/libuna_codepage_mac_ukrainian.c	2
libmsiecf/libuna/libuna_codepage_windows_874.c	2
libmsiecf/libuna/libuna_codepage_windows_1250.c	2
libmsiecf/libuna/libuna_codepage_windows_1251.c	2
libmsiecf/libuna/libuna_codepage_windows_1252.c	2
libmsiecf/libuna/libuna_codepage_windows_1253.c	2
libmsiecf/libuna/libuna_codepage_windows_1254.c	2
libmsiecf/libuna/libuna_codepage_windows_1255.c	2
libmsiecf/libuna/libuna_codepage_windows_1256.c	2
libmsiecf/libuna/libuna_codepage_windows_1257.c	2
libmsiecf/libuna/libuna_codepage_windows_1258.c	2
libmsiecf/libuna/libuna_utf8_string.c	12
libmsiecf/libuna/libuna_utf16_string.c	12
libmsiecf/libuna/libuna_utf32_string.c	12
libmsiecf/libfdatetime/libfdatetime_fat_date_time.c	11
libmsiecf/libfdatetime/libfdatetime_date_time_values.c	4
libmsiecf/libfdatetime/libfdatetime_filetime.c	13
libmsiecf/libfvalue/libfvalue_filetime.c	2
libmsiecf/libfdatetime/libfdatetime_floatingtime.c	11
libmsiecf/libfdatetime/libfdatetime_nsf_timedate.c	11
libmsiecf/libfdatetime/libfdatetime_posix_time.c	11
libmsiecf/libfdatetime/libfdatetime_systemtime.c	11
libmsiecf/libfguid/libfguid_identifier.c	11
libmsiecf/libfvalue/libfvalue_value_entry.c	1

Fuzzer: libpff_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1534	66.9%
gold	[1:9]	44	1.92%
yellow	[10:29]	41	1.78%
greenyellow	[30:49]	13	0.56%
lawngreen	50+	659	28.7%
All colors	2291	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
267	363	4 : View List ['libpff_decompress_data', 'libcerror_error_set', 'free', 'malloc']	267	363	libpff_data_block_read_file_io_handle	call site: 00889	/src/libpff/libpff/libpff_data_block.c:831
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00178	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_descriptors_index_get_index_value_by_identifier	call site: 00758	/src/libpff/libpff/libpff_descriptors_index.c:258
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_offsets_index_get_index_value_by_identifier	call site: 00860	/src/libpff/libpff/libpff_offsets_index.c:250
98	230	3 : View List ['libcerror_error_set', 'libfdata_stream_get_segment_index_at_offset', 'libcdata_array_get_number_of_entries']	98	230	libfdata_stream_seek_offset	call site: 01896	/src/libregf/libfdata/libfdata_stream.c:2419
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 01086	/src/libvsbsdl/libfcache/libfcache_cache.c:801
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 01880	/src/libregf/libfdata/libfdata_stream.c:2554
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	84	2 : View List ['libpff_table_get_record_entry_by_index', 'libpff_record_entry_get_data_size']	36	4274	libpff_table_read_entry_value	call site: 01756	/src/libpff/libpff/libpff_table.c:9109
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	1130	1 : View List ['libpff_local_descriptors_get_leaf_node_from_node_by_identifier']	0	1372	libpff_local_descriptors_get_leaf_node_from_node_by_identifier	call site: 01687	/src/libpff/libpff/libpff_local_descriptors.c:516
0	343	5 : View List ['libcerror_error_set', 'libpff_name_to_id_map_entry_free', 'libpff_index_value_free', 'libpff_item_values_free', 'libcdata_list_empty']	0	343	libpff_name_to_id_map_read	call site: 02224	/src/libpff/libpff/libpff_name_to_id_map.c:553

Runtime coverage analysis

Covered functions

283

Functions that are reachable but not covered

68

Reachable functions

351

Percentage of reachable functions covered

80.63%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libpff/ossfuzz/file_fuzzer.cc	1
libpff/libbfio/libbfio_memory_range.c	2
libpff/libcerror/libcerror_error.c	4
libpff/libbfio/libbfio_memory_range_io_handle.c	12
libpff/libbfio/libbfio_handle.c	8
libpff/libcdata/libcdata_range_list.c	15
libpff/libcdata/libcdata_list_element.c	10
libpff/libcdata/libcdata_range_list_value.c	3
libpff/libpff/libpff_file.c	5
libpff/libpff/libpff_io_handle.c	3
libpff/libpff/libpff_file_header.c	4
libpff/libpff/libpff_checksum.c	2
libpff/libpff/libpff_descriptors_index.c	3
libpff/libpff/libpff_index.c	5
libpff/libcdata/libcdata_btree.c	3
libpff/libcdata/libcdata_array.c	11
libpff/libcdata/libcdata_tree_node.c	19
libpff/libcdata/libcdata_btree_values_list.c	1
libpff/libcdata/libcdata_list.c	11
libpff/libpff/libpff_index_values_list.c	3
libpff/libpff/libpff_index_value.c	3
libpff/libpff/libpff_offsets_index.c	3
libpff/libpff/libpff_item_tree.c	7
libpff/libpff/libpff_item_descriptor.c	3
libpff/libpff/libpff_index_node.c	6
libpff/libpff/libpff_block_tree.c	3
libpff/libpff/libpff_block_tree_node.c	6
libpff/libpff/libpff_block_descriptor.c	2
libpff/libpff/libpff_name_to_id_map.c	5
libpff/libcdata/libcdata_btree_node.c	2
libpff/libpff/libpff_item_values.c	3
libpff/libpff/libpff_table.c	33
libpff/libpff/libpff_table_header.c	8
libpff/libpff/libpff_local_descriptors_tree.c	3
libpff/libpff/libpff_local_descriptors.c	4
libpff/libfcache/libfcache_cache.c	4
libpff/libfcache/libfcache_cache_value.c	8
libpff/libpff/libpff_data_block.c	7
libpff/libpff/libpff_compression.c	1
libpff/libpff/libpff_deflate.c	8
libpff/libpff/libpff_bit_stream.c	3
libpff/libpff/libpff_huffman_tree.c	4
libpff/libpff/libpff_data_array.c	6
libpff/libfdata/libfdata_list.c	17
libpff/libpff/libpff_data_array_entry.c	3
libpff/libfdata/libfdata_list_element.c	10
libpff/libpff/libpff_encryption.c	1
libpff/libfdata/libfdata_range.c	4
libpff/libfdata/libfdata_mapped_range.c	4
libpff/libfcache/libfcache_date_time.c	1
libpff/libpff/libpff_table_block_index.c	5
libpff/libpff/libpff_table_index_value.c	2
libpff/libpff/libpff_reference_descriptor.c	2
libpff/libpff/libpff_record_set.c	6
libpff/libpff/libpff_record_entry.c	7
libpff/libpff/libpff_column_definition.c	2
libpff/libpff/libpff_local_descriptors_node.c	5
libpff/libpff/libpff_local_descriptor_value.c	3
libpff/libpff/libpff_descriptor_data_stream.c	6
libpff/libfdata/libfdata_stream.c	8
libpff/libfdata/libfdata_segments_array.c	2
libpff/libpff/libpff_value_type.c	1

Fuzzer: libluksde_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1001	91.3%
gold	[1:9]	1	0.09%
yellow	[10:29]	2	0.18%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	91	8.30%
All colors	1096	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
578	642	5 : View List ['libcerror_error_set', 'libluksde_encryption_context_set_key', 'free', 'libluksde_encryption_context_free', 'libluksde_encryption_context_initialize']	578	642	libluksde_internal_volume_open_read_keys	call site: 01005	/src/libluksde/libluksde/libluksde_volume.c:1731
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00216	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 01037	/src/libvsbsdl/libcdata/libcdata_list.c:238
83	269	4 : View List ['libcerror_error_set', 'libluksde_sector_data_vector_free', 'libluksde_volume_header_free', 'libluksde_encryption_context_free']	83	269	libluksde_internal_volume_open_read	call site: 01012	/src/libluksde/libluksde/libluksde_volume.c:1200
83	83	1 : View List ['libluksde_encryption_context_free']	83	215	libluksde_volume_close	call site: 01083	/src/libluksde/libluksde/libluksde_volume.c:1004
83	83	1 : View List ['libluksde_encryption_context_free']	83	138	libluksde_internal_volume_open_read	call site: 01030	/src/libluksde/libluksde/libluksde_volume.c:1225
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01060	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
2	2	1 : View List ['realloc']	2	98	libcdata_internal_array_resize	call site: 00422	/src/libfwnt/libcdata/libcdata_array.c:753
0	278	1 : View List ['libluksde_volume_close']	0	513	libluksde_volume_free	call site: 01087	/src/libluksde/libluksde/libluksde_volume.c:185
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

68

Functions that are reachable but not covered

124

Reachable functions

192

Percentage of reachable functions covered

35.42%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libluksde/ossfuzz/volume_fuzzer.cc	1
libluksde/libbfio/libbfio_memory_range.c	2
libluksde/libcerror/libcerror_error.c	3
libluksde/libbfio/libbfio_memory_range_io_handle.c	12
libluksde/libbfio/libbfio_handle.c	9
libluksde/libcdata/libcdata_range_list.c	15
libluksde/libcdata/libcdata_list_element.c	10
libluksde/libcdata/libcdata_range_list_value.c	3
libluksde/libluksde/libluksde_volume.c	7
libluksde/libluksde/libluksde_io_handle.c	3
libluksde/libcthreads/libcthreads_read_write_lock.c	4
libluksde/libcerror/libcerror_system.c	2
libluksde/libluksde/libluksde_volume_header.c	7
libluksde/libcdata/libcdata_array.c	7
libluksde/libfguid/libfguid_identifier.c	5
libluksde/libluksde/libluksde_key_slot.c	3
libluksde/libluksde/libluksde_password.c	1
libluksde/libhmac/libhmac_sha1.c	6
libluksde/libhmac/libhmac_sha1_context.c	5
libluksde/libhmac/libhmac_sha224.c	5
libluksde/libhmac/libhmac_sha224_context.c	5
libluksde/libhmac/libhmac_sha256.c	6
libluksde/libhmac/libhmac_sha256_context.c	5
libluksde/libhmac/libhmac_sha512.c	5
libluksde/libhmac/libhmac_sha512_context.c	5
libluksde/libluksde/libluksde_encryption_context.c	4
libluksde/libcaes/libcaes_context.c	8
libluksde/libcaes/libcaes_tweaked_context.c	4
libluksde/libfcrypto/libfcrypto_blowfish_context.c	8
libluksde/libfcrypto/libfcrypto_rc4_context.c	4
libluksde/libfcrypto/libfcrypto_serpent_context.c	7
libluksde/libluksde/libluksde_diffuser.c	2
libluksde/libluksde/libluksde_sector_data_vector.c	2
libluksde/libfcache/libfcache_date_time.c	1
libluksde/libfcache/libfcache_cache.c	2
libluksde/libcdata/libcdata_list.c	3
libluksde/libfcache/libfcache_cache_value.c	1

Fuzzer: libcaes_crypt_ccm_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	54	83.0%
gold	[1:9]	2	3.07%
yellow	[10:29]	1	1.53%
greenyellow	[30:49]	2	3.07%
lawngreen	50+	6	9.23%
All colors	65	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00019	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcaes_context_initialize	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00033	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00020	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00022	/src/libcaes/libcaes/libcaes_context.c:1064
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_crypt_ccm	call site: 00062	/src/libcaes/libcaes/libcaes_context.c:2249
0	0	None	0	64	libcaes_crypt_ecb	call site: 00056	/src/libcaes/libcaes/libcaes_context.c:3019
0	0	None	0	64	libcaes_crypt_ecb	call site: 00056	/src/libcaes/libcaes/libcaes_context.c:3107
0	0	None	0	64	libcaes_crypt_ecb	call site: 00057	/src/libcaes/libcaes/libcaes_context.c:3121
0	0	None	0	32	libcaes_context_initialize	call site: 00001	/src/libcaes/libcaes/libcaes_context.c:275

Runtime coverage analysis

Covered functions

9

Functions that are reachable but not covered

6

Reachable functions

15

Percentage of reachable functions covered

60.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_ccm_fuzzer.cc	1
libcaes/libcaes/libcaes_context.c	8
libcaes/libcerror/libcerror_error.c	3

Fuzzer: libvsmbr_partition_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	555	80.9%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	0.43%
greenyellow	[30:49]	1	0.14%
lawngreen	50+	127	18.5%
All colors	686	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00207	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00636	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00460	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00437	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00602	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	181	1 : View List ['libvsmbr_volume_close']	0	458	libvsmbr_volume_free	call site: 00675	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:193
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00487	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	123	3 : View List ['libvsmbr_boot_record_free', 'libcerror_error_set', 'libvsmbr_partition_values_free']	0	123	libvsmbr_internal_volume_read_partition_entries	call site: 00411	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:1325
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	375	libvsmbr_volume_close	call site: 00659	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:895

Runtime coverage analysis

Covered functions

81

Functions that are reachable but not covered

61

Reachable functions

142

Percentage of reachable functions covered

57.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsmbr/ossfuzz/partition_fuzzer.cc	1
libvsmbr/libbfio/libbfio_memory_range.c	2
libvsmbr/libcerror/libcerror_error.c	4
libvsmbr/libbfio/libbfio_memory_range_io_handle.c	12
libvsmbr/libbfio/libbfio_handle.c	9
libvsmbr/libcdata/libcdata_range_list.c	15
libvsmbr/libcdata/libcdata_list_element.c	10
libvsmbr/libcdata/libcdata_range_list_value.c	3
libvsmbr/libvsmbr/libvsmbr_volume.c	8
libvsmbr/libvsmbr/libvsmbr_io_handle.c	3
libvsmbr/libcdata/libcdata_array.c	9
libvsmbr/libcthreads/libcthreads_read_write_lock.c	6
libvsmbr/libcerror/libcerror_system.c	2
libvsmbr/libvsmbr/libvsmbr_boot_record.c	5
libvsmbr/libvsmbr/libvsmbr_partition_entry.c	3
libvsmbr/libvsmbr/libvsmbr_partition_values.c	4
libvsmbr/libvsmbr/libvsmbr_partition.c	2
libvsmbr/libfdata/libfdata_vector.c	4
libvsmbr/libfcache/libfcache_date_time.c	1
libvsmbr/libvsmbr/libvsmbr_sector_data.c	4
libvsmbr/libfdata/libfdata_segments_array.c	2
libvsmbr/libfdata/libfdata_range.c	4
libvsmbr/libfcache/libfcache_cache.c	3
libvsmbr/libcdata/libcdata_list.c	7
libvsmbr/libfcache/libfcache_cache_value.c	6
libvsmbr/libfdata/libfdata_mapped_range.c	3

Fuzzer: libfplist_property_list_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	171	76.3%
gold	[1:9]	4	1.78%
yellow	[10:29]	3	1.33%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	46	20.5%
All colors	224	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	8 : View List ['libfplist_xml_scanner_realloc', 'clearerr', 'ferror', 'libfplist_xml_scanner_restart', 'fread', '__errno_location', 'yy_fatal_error', 'getc']	85	85	yy_get_next_buffer	call site: 00057	/src/libfplist/libfplist/libfplist_xml_scanner.c:158629
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfplist_xml_tag_initialize	call site: 00103	/src/libfplist/libfplist/libfplist_xml_tag.c:169
0	70	2 : View List ['libcerror_error_set', 'libfplist_xml_attribute_free']	0	70	libfplist_xml_tag_append_attribute	call site: 00163	/src/libfplist/libfplist/libfplist_xml_tag.c:598
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00127	/src/libfwnt/libcdata/libcdata_array.c:823
0	60	1 : View List ['libfplist_xml_tag_free']	0	60	libfplist_property_list_copy_from_byte_stream	call site: 00219	/src/libfplist/libfplist/libfplist_property_list.c:490
0	38	1 : View List ['libfplist_xml_attribute_free']	0	38	libfplist_xml_tag_append_attribute	call site: 00164	/src/libfplist/libfplist/libfplist_xml_tag.c:616
0	32	1 : View List ['libcerror_error_set']	0	127	libfplist_xml_parser_parse_buffer	call site: 00171	/src/libfplist/libfplist/libfplist_xml_parser.c:463
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00100	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00107	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00126	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_get_number_of_entries	call site: 00204	/src/libfwnt/libcdata/libcdata_array.c:1052

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

21

Reachable functions

62

Percentage of reachable functions covered

66.13%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfplist/ossfuzz/property_list_fuzzer.cc	1
libfplist/libfplist/libfplist_property_list.c	4
libfplist/libcerror/libcerror_error.c	3
libfplist/libfplist/libfplist_xml_parser.c	3
libfplist/libfplist/libfplist_xml_scanner.c	17
libfplist/libfplist/libfplist_xml_scanner.l	5
libfplist/libfplist/libfplist_xml_tag.c	8
libfplist/libcdata/libcdata_array.c	7
libfplist/libfplist/libfplist_xml_attribute.c	2

Fuzzer: libfplist_property_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	196	76.2%
gold	[1:9]	4	1.55%
yellow	[10:29]	3	1.16%
greenyellow	[30:49]	7	2.72%
lawngreen	50+	47	18.2%
All colors	257	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	8 : View List ['libfplist_xml_scanner_realloc', 'clearerr', 'ferror', 'libfplist_xml_scanner_restart', 'fread', '__errno_location', 'yy_fatal_error', 'getc']	85	85	yy_get_next_buffer	call site: 00057	/src/libfplist/libfplist/libfplist_xml_scanner.c:158629
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
4	4	1 : View List ['memcmp']	4	4	libfplist_xml_tag_get_value_type	call site: 00243	/src/libfplist/libfplist/libfplist_xml_tag.c:340
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfplist_xml_tag_initialize	call site: 00103	/src/libfplist/libfplist/libfplist_xml_tag.c:169
0	70	2 : View List ['libcerror_error_set', 'libfplist_xml_attribute_free']	0	70	libfplist_xml_tag_append_attribute	call site: 00163	/src/libfplist/libfplist/libfplist_xml_tag.c:598
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00127	/src/libfwnt/libcdata/libcdata_array.c:823
0	60	1 : View List ['libfplist_xml_tag_free']	0	60	libfplist_property_list_copy_from_byte_stream	call site: 00219	/src/libfplist/libfplist/libfplist_property_list.c:490
0	41	1 : View List ['libfplist_xml_tag_compare_name']	0	169	libfplist_property_initialize	call site: 00226	/src/libfplist/libfplist/libfplist_property.c:84
0	38	1 : View List ['libfplist_xml_attribute_free']	0	38	libfplist_xml_tag_append_attribute	call site: 00164	/src/libfplist/libfplist/libfplist_xml_tag.c:616
0	32	1 : View List ['libcerror_error_set']	0	127	libfplist_xml_parser_parse_buffer	call site: 00171	/src/libfplist/libfplist/libfplist_xml_parser.c:463
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00100	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00107	/src/libfwnt/libcdata/libcdata_array.c:260

Runtime coverage analysis

Covered functions

46

Functions that are reachable but not covered

21

Reachable functions

67

Percentage of reachable functions covered

68.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfplist/ossfuzz/property_fuzzer.cc	1
libfplist/libfplist/libfplist_property_list.c	5
libfplist/libcerror/libcerror_error.c	3
libfplist/libfplist/libfplist_xml_parser.c	3
libfplist/libfplist/libfplist_xml_scanner.c	17
libfplist/libfplist/libfplist_xml_scanner.l	5
libfplist/libfplist/libfplist_xml_tag.c	9
libfplist/libcdata/libcdata_array.c	7
libfplist/libfplist/libfplist_xml_attribute.c	2
libfplist/libfplist/libfplist_property.c	3

Fuzzer: libfsext_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	831	80.9%
gold	[1:9]	6	0.58%
yellow	[10:29]	7	0.68%
greenyellow	[30:49]	4	0.38%
lawngreen	50+	178	17.3%
All colors	1026	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00197	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00819	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00858	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00840	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00789	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
36	36	1 : View List ['libfsext_bitmap_free']	36	108	libfsext_internal_volume_read_block_groups	call site: 00429	/src/libfsext/libfsext/libfsext_volume.c:1614
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	249	1 : View List ['libfsext_volume_close']	0	526	libfsext_volume_free	call site: 01013	/src/libfsext/libfsext/libfsext_volume.c:195
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00446	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	118	1 : View List ['libfsext_inode_table_free']	0	198	libfsext_internal_volume_open_read	call site: 00811	/src/libfsext/libfsext/libfsext_volume.c:1060
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

97

Functions that are reachable but not covered

93

Reachable functions

190

Percentage of reachable functions covered

51.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsext/ossfuzz/volume_fuzzer.cc	1
libfsext/libbfio/libbfio_memory_range.c	2
libfsext/libcerror/libcerror_error.c	3
libfsext/libbfio/libbfio_memory_range_io_handle.c	12
libfsext/libbfio/libbfio_handle.c	10
libfsext/libcdata/libcdata_range_list.c	15
libfsext/libcdata/libcdata_list_element.c	10
libfsext/libcdata/libcdata_range_list_value.c	3
libfsext/libfsext/libfsext_volume.c	16
libfsext/libfsext/libfsext_io_handle.c	3
libfsext/libcdata/libcdata_array.c	9
libfsext/libcthreads/libcthreads_read_write_lock.c	6
libfsext/libcerror/libcerror_system.c	2
libfsext/libfsext/libfsext_superblock.c	9
libfsext/libfsext/libfsext_checksum.c	2
libfsext/libfsext/libfsext_group_descriptor.c	4
libfsext/libfsext/libfsext_bitmap.c	1
libfsext/libfsext/libfsext_inode_table.c	2
libfsext/libfdata/libfdata_vector.c	4
libfsext/libfcache/libfcache_date_time.c	1
libfsext/libfsext/libfsext_inode.c	6
libfsext/libfsext/libfsext_attributes_block.c	1
libfsext/libfsext/libfsext_attribute_values.c	3
libfsext/libfsext/libfsext_extents.c	4
libfsext/libfsext/libfsext_extents_header.c	3
libfsext/libfsext/libfsext_extent.c	3
libfsext/libfsext/libfsext_extent_index.c	3
libfsext/libfsext/libfsext_extents_footer.c	3
libfsext/libfsext/libfsext_data_blocks.c	4
libfsext/libfsext/libfsext_block.c	3
libfsext/libfdata/libfdata_segments_array.c	2
libfsext/libfdata/libfdata_range.c	4
libfsext/libfcache/libfcache_cache.c	3
libfsext/libcdata/libcdata_list.c	7
libfsext/libfcache/libfcache_cache_value.c	6
libfsext/libfdata/libfdata_mapped_range.c	3
libfsext/libuna/libuna_utf8_string.c	3
libfsext/libuna/libuna_unicode_character.c	3

Fuzzer: liblnk_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	476	72.7%
gold	[1:9]	19	2.90%
yellow	[10:29]	18	2.75%
greenyellow	[30:49]	21	3.21%
lawngreen	50+	120	18.3%
All colors	654	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00214	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	194	1 : View List ['liblnk_file_close']	0	471	liblnk_file_free	call site: 00642	/src/liblnk/liblnk/liblnk_file.c:201
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	116	3 : View List ['liblnk_internal_data_block_free', 'libcerror_error_set', 'libcdata_array_empty']	0	116	liblnk_internal_file_read_extra_data_blocks	call site: 00502	/src/liblnk/liblnk/liblnk_file.c:1799
0	99	1 : View List ['libbfio_handle_free']	0	966	liblnk_file_close	call site: 00612	/src/liblnk/liblnk/liblnk_file.c:799
0	69	2 : View List ['liblnk_data_string_free', 'libcerror_error_set']	0	69	liblnk_strings_data_block_read	call site: 00515	/src/liblnk/liblnk/liblnk_strings_data_block.c:257
0	69	2 : View List ['liblnk_data_string_free', 'libcerror_error_set']	0	69	liblnk_strings_data_block_read	call site: 00517	/src/liblnk/liblnk/liblnk_strings_data_block.c:291
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	68	3 : View List ['liblnk_io_handle_free', 'libcerror_error_set', 'free']	0	68	liblnk_file_initialize	call site: 00131	/src/liblnk/liblnk/liblnk_file.c:142
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00356	/src/libvsbsdl/libbfio/libbfio_handle.c:1164

Runtime coverage analysis

Covered functions

77

Functions that are reachable but not covered

39

Reachable functions

116

Percentage of reachable functions covered

66.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
liblnk/ossfuzz/file_fuzzer.cc	1
liblnk/libbfio/libbfio_memory_range.c	2
liblnk/libcerror/libcerror_error.c	4
liblnk/libbfio/libbfio_memory_range_io_handle.c	12
liblnk/libbfio/libbfio_handle.c	10
liblnk/libcdata/libcdata_range_list.c	15
liblnk/libcdata/libcdata_list_element.c	10
liblnk/libcdata/libcdata_range_list_value.c	3
liblnk/liblnk/liblnk_file.c	6
liblnk/liblnk/liblnk_io_handle.c	3
liblnk/libcdata/libcdata_array.c	6
liblnk/libcthreads/libcthreads_read_write_lock.c	2
liblnk/libcerror/libcerror_system.c	2
liblnk/liblnk/liblnk_file_header.c	4
liblnk/liblnk/liblnk_link_target_identifier.c	3
liblnk/liblnk/liblnk_location_information.c	4
liblnk/liblnk/liblnk_data_string.c	3
liblnk/liblnk/liblnk_data_block.c	6
liblnk/liblnk/liblnk_strings_data_block.c	1
liblnk/liblnk/liblnk_distributed_link_tracking_data_block.c	1
liblnk/liblnk/liblnk_distributed_link_tracker_properties.c	3
liblnk/liblnk/liblnk_special_folder_location.c	4
liblnk/liblnk/liblnk_known_folder_location.c	4

Fuzzer: libfsfat_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	602	72.2%
gold	[1:9]	21	2.52%
yellow	[10:29]	8	0.96%
greenyellow	[30:49]	2	0.24%
lawngreen	50+	200	24.0%
All colors	833	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
653	653	1 : View List ['libfsfat_internal_file_entry_get_directory']	653	1153	libfsfat_internal_file_entry_get_sub_file_entry_by_index	call site: 00767	/src/libfsfat/libfsfat/libfsfat_file_entry.c:1290
653	653	1 : View List ['libfsfat_internal_file_entry_get_directory']	653	857	libfsfat_file_entry_get_number_of_sub_file_entries	call site: 00739	/src/libfsfat/libfsfat/libfsfat_file_entry.c:1190
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00392	/src/libvsbsdl/libcdata/libcdata_list.c:238
64	64	1 : View List ['libfdata_stream_free']	64	174	libfsfat_file_entry_free	call site: 00717	/src/libfsfat/libfsfat/libfsfat_file_entry.c:315
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00755	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00667	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	259	5 : View List ['libcerror_error_set', 'libfsfat_directory_entry_free', 'libfsfat_block_tree_free', 'libfsfat_directory_free', 'libcdata_array_free']	0	259	libfsfat_file_system_read_directory	call site: 00634	/src/libfsfat/libfsfat/libfsfat_file_system.c:1082
0	245	1 : View List ['libfsfat_volume_close']	0	444	libfsfat_volume_free	call site: 00826	/src/libfsfat/libfsfat/libfsfat_volume.c:175
0	227	3 : View List ['libfsfat_boot_record_free', 'libcerror_error_set', 'libfsfat_file_system_free']	0	227	libfsfat_internal_volume_open_read	call site: 00643	/src/libfsfat/libfsfat/libfsfat_volume.c:1101

Runtime coverage analysis

Covered functions

103

Functions that are reachable but not covered

49

Reachable functions

152

Percentage of reachable functions covered

67.76%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsfat/ossfuzz/file_entry_fuzzer.cc	1
libfsfat/libbfio/libbfio_memory_range.c	2
libfsfat/libcerror/libcerror_error.c	3
libfsfat/libbfio/libbfio_memory_range_io_handle.c	12
libfsfat/libbfio/libbfio_handle.c	9
libfsfat/libcdata/libcdata_range_list.c	15
libfsfat/libcdata/libcdata_list_element.c	10
libfsfat/libcdata/libcdata_range_list_value.c	3
libfsfat/libfsfat/libfsfat_volume.c	6
libfsfat/libfsfat/libfsfat_io_handle.c	3
libfsfat/libcthreads/libcthreads_read_write_lock.c	6
libfsfat/libcerror/libcerror_system.c	2
libfsfat/libfsfat/libfsfat_boot_record.c	4
libfsfat/libfsfat/libfsfat_file_system.c	8
libfsfat/libfcache/libfcache_date_time.c	1
libfsfat/libfcache/libfcache_cache.c	2
libfsfat/libcdata/libcdata_array.c	8
libfsfat/libcdata/libcdata_list.c	3
libfsfat/libfcache/libfcache_cache_value.c	1
libfsfat/libfsfat/libfsfat_allocation_table.c	4
libfsfat/libfsfat/libfsfat_directory.c	4
libfsfat/libfsfat/libfsfat_directory_entry.c	13
libfsfat/libfsfat/libfsfat_block_tree.c	3
libfsfat/libfsfat/libfsfat_block_tree_node.c	6
libfsfat/libfsfat/libfsfat_block_descriptor.c	2
libfsfat/libfsfat/libfsfat_file_entry.c	6
libfsfat/libfdata/libfdata_stream.c	1
libfsfat/libfdata/libfdata_range.c	1
libfsfat/libfdata/libfdata_mapped_range.c	1
libfsfat/libfsfat/libfsfat_extent.c	1

Fuzzer: libhmac_sha512_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libhmac_sha512_context_free', 'libcerror_error_set']	32	68	libhmac_sha512_calculate	call site: 00046	/src/libluksde/libhmac/libhmac_sha512.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_transform	call site: 00027	/src/libluksde/libhmac/libhmac_sha512_context.c:456
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_initialize	call site: 00013	/src/libluksde/libhmac/libhmac_sha512_context.c:628
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_free	call site: 00046	/src/libluksde/libhmac/libhmac_sha512_context.c:667
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_update	call site: 00032	/src/libluksde/libhmac/libhmac_sha512_context.c:1023
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha512_context_finalize	call site: 00043	/src/libluksde/libhmac/libhmac_sha512_context.c:1369
0	0	None	192	274	libhmac_sha512_context_update	call site: 00019	/src/libluksde/libhmac/libhmac_sha512_context.c:924
0	0	None	32	68	libhmac_sha512_calculate	call site: 00002	/src/libluksde/libhmac/libhmac_sha512.c:153
0	0	None	32	68	libhmac_sha512_calculate	call site: 00016	/src/libluksde/libhmac/libhmac_sha512.c:166
0	0	None	32	68	libhmac_sha512_calculate	call site: 00035	/src/libluksde/libhmac/libhmac_sha512.c:181
0	0	None	32	32	libhmac_sha512_context_transform	call site: 00022	/src/libluksde/libhmac/libhmac_sha512_context.c:284
0	0	None	32	32	libhmac_sha512_context_transform	call site: 00023	/src/libluksde/libhmac/libhmac_sha512_context.c:295

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha512_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha512.c	1
libhmac/libhmac/libhmac_sha512_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libfshfs_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1267	62.3%
gold	[1:9]	35	1.72%
yellow	[10:29]	43	2.11%
greenyellow	[30:49]	23	1.13%
lawngreen	50+	665	32.7%
All colors	2033	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
841	841	2 : View List ['libfshfs_allocation_block_stream_initialize_from_compressed_stream', 'libfshfs_allocation_block_stream_initialize_from_data']	841	3041	libfshfs_internal_file_entry_get_data_stream	call site: 01638	/src/libfshfs/libfshfs/libfshfs_file_entry.c:618
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
98	230	3 : View List ['libcerror_error_set', 'libfdata_stream_get_segment_index_at_offset', 'libcdata_array_get_number_of_entries']	98	230	libfdata_stream_seek_offset	call site: 01527	/src/libregf/libfdata/libfdata_stream.c:2419
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00630	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 01154	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01092	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfshfs_compressed_data_header_free']	36	490	libfshfs_file_entry_free	call site: 01995	/src/libfshfs/libfshfs/libfshfs_file_entry.c:287
36	36	1 : View List ['libfshfs_directory_record_get_flags']	36	68	libfshfs_directory_entry_get_flags	call site: 01867	/src/libfshfs/libfshfs/libfshfs_directory_entry.c:557
36	36	1 : View List ['libfshfs_compressed_data_header_free']	36	36	libfshfs_internal_file_entry_get_data_size	call site: 01978	/src/libfshfs/libfshfs/libfshfs_file_entry.c:5404
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	891	1 : View List ['libfshfs_file_system_get_directory_entries']	0	1444	libfshfs_file_entry_get_sub_file_entry_by_index	call site: 01226	/src/libfshfs/libfshfs/libfshfs_file_entry.c:4433

Runtime coverage analysis

Covered functions

287

Functions that are reachable but not covered

109

Reachable functions

396

Percentage of reachable functions covered

72.47%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfshfs/ossfuzz/file_entry_fuzzer.cc	1
libfshfs/libbfio/libbfio_memory_range.c	2
libfshfs/libcerror/libcerror_error.c	3
libfshfs/libbfio/libbfio_memory_range_io_handle.c	12
libfshfs/libbfio/libbfio_handle.c	10
libfshfs/libcdata/libcdata_range_list.c	15
libfshfs/libcdata/libcdata_list_element.c	10
libfshfs/libcdata/libcdata_range_list_value.c	3
libfshfs/libfshfs/libfshfs_volume.c	6
libfshfs/libfshfs/libfshfs_io_handle.c	3
libfshfs/libcthreads/libcthreads_read_write_lock.c	6
libfshfs/libcerror/libcerror_system.c	2
libfshfs/libfshfs/libfshfs_master_directory_block.c	4
libfshfs/libfshfs/libfshfs_fork_descriptor.c	6
libfshfs/libfshfs/libfshfs_extents_record.c	1
libfshfs/libfshfs/libfshfs_volume_header.c	4
libfshfs/libfshfs/libfshfs_file_system.c	10
libfshfs/libfshfs/libfshfs_btree_file.c	5
libfshfs/libcdata/libcdata_array.c	9
libfshfs/libfshfs/libfshfs_btree_header.c	3
libfshfs/libfshfs/libfshfs_extent.c	2
libfshfs/libfshfs/libfshfs_btree_node_descriptor.c	3
libfshfs/libfshfs/libfshfs_btree_node_vector.c	3
libfshfs/libfcache/libfcache_date_time.c	1
libfshfs/libfshfs/libfshfs_btree_node_cache.c	2
libfshfs/libfcache/libfcache_cache.c	4
libfshfs/libcdata/libcdata_list.c	9
libfshfs/libfshfs/libfshfs_extents_btree_file.c	6
libfshfs/libfcache/libfcache_cache_value.c	8
libfshfs/libfshfs/libfshfs_btree_node.c	8
libfshfs/libfshfs/libfshfs_btree_node_record.c	2
libfshfs/libfshfs/libfshfs_extents_btree_key.c	3
libfshfs/libfshfs/libfshfs_catalog_btree_file.c	13
libfshfs/libfshfs/libfshfs_catalog_btree_key.c	4
libfshfs/libfshfs/libfshfs_thread_record.c	3
libfshfs/libfshfs/libfshfs_name.c	3
libfshfs/libuna/libuna_unicode_character.c	6
libfshfs/libuna/libuna_codepage_koi8_r.c	1
libfshfs/libuna/libuna_codepage_koi8_u.c	1
libfshfs/libuna/libuna_codepage_mac_arabic.c	1
libfshfs/libuna/libuna_codepage_mac_celtic.c	1
libfshfs/libuna/libuna_codepage_mac_centraleurroman.c	1
libfshfs/libuna/libuna_codepage_mac_croatian.c	1
libfshfs/libuna/libuna_codepage_mac_cyrillic.c	1
libfshfs/libuna/libuna_codepage_mac_dingbats.c	1
libfshfs/libuna/libuna_codepage_mac_farsi.c	1
libfshfs/libuna/libuna_codepage_mac_gaelic.c	1
libfshfs/libuna/libuna_codepage_mac_greek.c	1
libfshfs/libuna/libuna_codepage_mac_icelandic.c	1
libfshfs/libuna/libuna_codepage_mac_inuit.c	1
libfshfs/libuna/libuna_codepage_mac_roman.c	1
libfshfs/libuna/libuna_codepage_mac_romanian.c	1
libfshfs/libuna/libuna_codepage_mac_russian.c	1
libfshfs/libuna/libuna_codepage_mac_symbol.c	1
libfshfs/libuna/libuna_codepage_mac_thai.c	1
libfshfs/libuna/libuna_codepage_mac_turkish.c	1
libfshfs/libuna/libuna_codepage_mac_ukrainian.c	1
libfshfs/libuna/libuna_codepage_windows_874.c	1
libfshfs/libuna/libuna_codepage_windows_932.c	1
libfshfs/libuna/libuna_codepage_windows_936.c	1
libfshfs/libuna/libuna_codepage_windows_949.c	1
libfshfs/libuna/libuna_codepage_windows_950.c	1
libfshfs/libuna/libuna_codepage_windows_1250.c	1
libfshfs/libuna/libuna_codepage_windows_1251.c	1
libfshfs/libuna/libuna_codepage_windows_1252.c	1
libfshfs/libuna/libuna_codepage_windows_1253.c	1
libfshfs/libuna/libuna_codepage_windows_1254.c	1
libfshfs/libuna/libuna_codepage_windows_1255.c	1
libfshfs/libuna/libuna_codepage_windows_1256.c	1
libfshfs/libuna/libuna_codepage_windows_1257.c	1
libfshfs/libuna/libuna_codepage_windows_1258.c	1
libfshfs/libfshfs/libfshfs_directory_record.c	13
libfshfs/libfshfs/libfshfs_file_record.c	17
libfshfs/libfshfs/libfshfs_directory_entry.c	21
libfshfs/libfshfs/libfshfs_file_entry.c	32
libfshfs/libfshfs/libfshfs_allocation_block_stream.c	4
libfshfs/libfdata/libfdata_stream.c	10
libfshfs/libfshfs/libfshfs_block_data_handle.c	2
libfshfs/libfdata/libfdata_segments_array.c	2
libfshfs/libfdata/libfdata_mapped_range.c	4
libfshfs/libfdata/libfdata_range.c	4
libfshfs/libuna/libuna_utf8_string.c	4
libfshfs/libfshfs/libfshfs_buffer_data_handle.c	4
libfshfs/libfshfs/libfshfs_compressed_data_handle.c	5
libfshfs/libfshfs/libfshfs_compression.c	1
libfshfs/libfshfs/libfshfs_deflate.c	8
libfshfs/libfshfs/libfshfs_bit_stream.c	3
libfshfs/libfshfs/libfshfs_huffman_tree.c	4
libfshfs/libfmos/libfmos_lzvn.c	1
libfshfs/libfshfs/libfshfs_attributes_btree_file.c	6
libfshfs/libfshfs/libfshfs_attributes_btree_key.c	3
libfshfs/libfshfs/libfshfs_attribute_record.c	5
libfshfs/libfshfs/libfshfs_compressed_data_header.c	3

Fuzzer: libfsxfs_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	436	77.0%
gold	[1:9]	11	1.94%
yellow	[10:29]	4	0.70%
greenyellow	[30:49]	6	1.06%
lawngreen	50+	109	19.2%
All colors	566	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00193	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00471	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00450	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	206	1 : View List ['libfsxfs_volume_close']	0	405	libfsxfs_volume_free	call site: 00559	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	495	libfsxfs_volume_close	call site: 00543	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:869
0	87	3 : View List ['libcerror_error_set', 'free', 'libfsxfs_inode_btree_free']	0	87	libfsxfs_file_system_initialize	call site: 00376	/src/libfsxfs/libfsxfs/libfsxfs_file_system.c:119
0	74	2 : View List ['libcerror_error_set', 'libbfio_handle_close']	0	74	libfsxfs_volume_open_file_io_handle	call site: 00449	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:752
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	68	2 : View List ['libcerror_error_set', 'libfsxfs_inode_information_free']	0	68	libfsxfs_inode_btree_read_inode_information	call site: 00412	/src/libfsxfs/libfsxfs/libfsxfs_inode_btree.c:231

Runtime coverage analysis

Covered functions

67

Functions that are reachable but not covered

43

Reachable functions

110

Percentage of reachable functions covered

60.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsxfs/ossfuzz/volume_fuzzer.cc	1
libfsxfs/libbfio/libbfio_memory_range.c	2
libfsxfs/libcerror/libcerror_error.c	3
libfsxfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsxfs/libbfio/libbfio_handle.c	8
libfsxfs/libcdata/libcdata_range_list.c	15
libfsxfs/libcdata/libcdata_list_element.c	10
libfsxfs/libcdata/libcdata_range_list_value.c	3
libfsxfs/libfsxfs/libfsxfs_volume.c	8
libfsxfs/libfsxfs/libfsxfs_io_handle.c	3
libfsxfs/libcthreads/libcthreads_read_write_lock.c	6
libfsxfs/libcerror/libcerror_system.c	2
libfsxfs/libfsxfs/libfsxfs_superblock.c	6
libfsxfs/libfsxfs/libfsxfs_file_system.c	3
libfsxfs/libfsxfs/libfsxfs_inode_btree.c	3
libfsxfs/libcdata/libcdata_array.c	5
libfsxfs/libfsxfs/libfsxfs_inode_information.c	4
libfsxfs/libuna/libuna_utf8_string.c	3
libfsxfs/libuna/libuna_unicode_character.c	3

Fuzzer: libevtx_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1176	88.0%
gold	[1:9]	2	0.14%
yellow	[10:29]	5	0.37%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	152	11.3%
All colors	1335	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 01275	/src/libvsbsdl/libcdata/libcdata_list.c:238
96	128	2 : View List ['libcerror_error_set', 'libfwevt_xml_document_free']	96	128	libevtx_record_values_free	call site: 00444	/src/libevtx/libevtx/libevtx_record_values.c:171
38	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	38	147	libfdata_list_append_element	call site: 01251	/src/libregf/libfdata/libfdata_list.c:1489
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00588	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
38	38	1 : View List ['libcdata_array_set_entry_by_index']	38	74	libfdata_segments_array_append_segment	call site: 00589	/src/libvsbsdl/libfdata/libfdata_segments_array.c:642
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	204	1 : View List ['libevtx_file_close']	0	304	libevtx_file_free	call site: 01330	/src/libevtx/libevtx/libevtx_file.c:178
0	138	3 : View List ['libcerror_error_set', 'free', 'libevtx_record_values_free']	0	138	libevtx_chunk_read	call site: 00441	/src/libevtx/libevtx/libevtx_chunk.c:922
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00358	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

81

Functions that are reachable but not covered

131

Reachable functions

212

Percentage of reachable functions covered

38.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libevtx/ossfuzz/file_fuzzer.cc	1
libevtx/libbfio/libbfio_memory_range.c	2
libevtx/libcerror/libcerror_error.c	4
libevtx/libbfio/libbfio_memory_range_io_handle.c	12
libevtx/libbfio/libbfio_handle.c	9
libevtx/libcdata/libcdata_range_list.c	15
libevtx/libcdata/libcdata_list_element.c	10
libevtx/libcdata/libcdata_range_list_value.c	3
libevtx/libevtx/libevtx_file.c	5
libevtx/libevtx/libevtx_io_handle.c	5
libevtx/libevtx/libevtx_i18n.c	1
libevtx/libevtx/libevtx_checksum.c	2
libevtx/libfdata/libfdata_vector.c	5
libevtx/libcdata/libcdata_array.c	8
libevtx/libfcache/libfcache_date_time.c	1
libevtx/libevtx/libevtx_chunk.c	7
libevtx/libevtx/libevtx_byte_stream.c	1
libevtx/libevtx/libevtx_record_values.c	5
libevtx/libfwevt/libfwevt_xml_document.c	20
libevtx/libfwevt/libfwevt_xml_tag.c	12
libevtx/libfwevt/libfwevt_xml_value.c	4
libevtx/libfwevt/libfwevt_data_segment.c	2
libevtx/libfguid/libfguid_identifier.c	1
libevtx/libfdatetime/libfdatetime_filetime.c	1
libevtx/libfdatetime/libfdatetime_systemtime.c	1
libevtx/libfwnt/libfwnt_security_identifier.c	2
libevtx/libfdata/libfdata_segments_array.c	2
libevtx/libfdata/libfdata_range.c	5
libevtx/libfcache/libfcache_cache.c	4
libevtx/libcdata/libcdata_list.c	9
libevtx/libfcache/libfcache_cache_value.c	8
libevtx/libfdata/libfdata_mapped_range.c	3
libevtx/libevtx/libevtx_chunks_table.c	3
libevtx/libfdata/libfdata_list.c	4
libevtx/libfwevt/libfwevt_xml_token.c	3
libevtx/libfwevt/libfwevt_xml_template_value.c	9
libevtx/libfwevt/libfwevt_integer.c	2
libevtx/libuna/libuna_utf8_string.c	3
libevtx/libuna/libuna_unicode_character.c	5
libevtx/libfdata/libfdata_list_element.c	7

Fuzzer: libfwnt_lznt1_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	20	58.8%
gold	[1:9]	3	8.82%
yellow	[10:29]	2	5.88%
greenyellow	[30:49]	3	8.82%
lawngreen	50+	6	17.6%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00014	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:57
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00015	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:68
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00016	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:79
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00018	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:103
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00020	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:125
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00021	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:136
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00024	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:267
0	0	None	0	32	libfwnt_lznt1_decompress_chunk	call site: 00028	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:333
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00001	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:374
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00002	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:385
0	0	None	0	32	libfwnt_lznt1_decompress	call site: 00010	/src/libfsntfs/libfwnt/libfwnt_lznt1.c:396

Runtime coverage analysis

Covered functions

4

Functions that are reachable but not covered

5

Reachable functions

9

Percentage of reachable functions covered

44.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/lznt1_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_lznt1.c	2
libfwnt/libcerror/libcerror_error.c	3

Fuzzer: libfusn_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	66.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	11.1%
greenyellow	[30:49]	1	3.70%
lawngreen	50+	5	18.5%
All colors	27	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfusn_record_initialize	call site: 00011	/src/libfusn/libfusn/libfusn_record.c:86
0	32	1 : View List ['libcerror_error_set']	0	32	libfusn_record_free	call site: 00025	/src/libfusn/libfusn/libfusn_record.c:123
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfusn_record_copy_from_byte_stream	call site: 00023	/src/libfusn/libfusn/libfusn_record.c:479
0	0	None	0	32	libfusn_record_initialize	call site: 00001	/src/libfusn/libfusn/libfusn_record.c:50
0	0	None	0	32	libfusn_record_initialize	call site: 00002	/src/libfusn/libfusn/libfusn_record.c:61
0	0	None	0	32	libfusn_record_initialize	call site: 00010	/src/libfusn/libfusn/libfusn_record.c:75
0	0	None	0	32	libfusn_record_copy_from_byte_stream	call site: 00013	/src/libfusn/libfusn/libfusn_record.c:169
0	0	None	0	32	libfusn_record_copy_from_byte_stream	call site: 00014	/src/libfusn/libfusn/libfusn_record.c:182
0	0	None	0	32	libfusn_record_copy_from_byte_stream	call site: 00015	/src/libfusn/libfusn/libfusn_record.c:193
0	0	None	0	32	libfusn_record_copy_from_byte_stream	call site: 00016	/src/libfusn/libfusn/libfusn_record.c:204
0	0	None	0	32	libfusn_record_copy_from_byte_stream	call site: 00022	/src/libfusn/libfusn/libfusn_record.c:466

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfusn/ossfuzz/record_fuzzer.cc	1
libfusn/libfusn/libfusn_record.c	3
libfusn/libcerror/libcerror_error.c	3

Fuzzer: libevt_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	612	70.9%
gold	[1:9]	6	0.69%
yellow	[10:29]	11	1.27%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	234	27.1%
All colors	863	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00176	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
93	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	93	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00437	/src/libvsbsdl/libfcache/libfcache_cache.c:801
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00699	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
35	137	4 : View List ['libcerror_error_set', 'libcdata_list_element_set_elements', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	137	libcdata_list_remove_element	call site: 00764	/src/libvsbsdl/libcdata/libcdata_list.c:2812
35	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	102	libcdata_list_prepend_element	call site: 00466	/src/libvsbsdl/libcdata/libcdata_list.c:1314
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	230	1 : View List ['libevt_file_close']	0	757	libevt_file_free	call site: 00844	/src/libevt/libevt/libevt_file.c:246
0	206	4 : View List ['libcerror_error_set', 'free', 'libfdata_list_free', 'libevt_io_handle_free']	0	206	libevt_file_initialize	call site: 00513	/src/libevt/libevt/libevt_file.c:175
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element	call site: 00633	/src/libregf/libfdata/libfdata_list.c:1489
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	113	4 : View List ['libcerror_error_set', 'libevt_strings_array_free', 'free', 'libfwnt_security_identifier_free']	0	113	libevt_event_record_read_data	call site: 00381	/src/libevt/libevt/libevt_event_record.c:887

Runtime coverage analysis

Covered functions

130

Functions that are reachable but not covered

36

Reachable functions

166

Percentage of reachable functions covered

78.31%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libevt/ossfuzz/record_fuzzer.cc	1
libevt/libbfio/libbfio_memory_range.c	2
libevt/libcerror/libcerror_error.c	4
libevt/libbfio/libbfio_memory_range_io_handle.c	12
libevt/libbfio/libbfio_handle.c	10
libevt/libcdata/libcdata_range_list.c	15
libevt/libcdata/libcdata_list_element.c	10
libevt/libcdata/libcdata_range_list_value.c	3
libevt/libevt/libevt_file.c	7
libevt/libevt/libevt_io_handle.c	7
libevt/libfdata/libfdata_list.c	8
libevt/libcdata/libcdata_array.c	10
libevt/libevt/libevt_record_values.c	5
libevt/libevt/libevt_event_record.c	3
libevt/libfwnt/libfwnt_security_identifier.c	4
libevt/libevt/libevt_strings_array.c	3
libevt/libevt/libevt_end_of_file_record.c	3
libevt/libfdata/libfdata_list_element.c	7
libevt/libfdata/libfdata_range.c	4
libevt/libfcache/libfcache_cache.c	5
libevt/libcdata/libcdata_list.c	9
libevt/libfcache/libfcache_cache_value.c	8
libevt/libcthreads/libcthreads_read_write_lock.c	4
libevt/libcerror/libcerror_system.c	2
libevt/libfdata/libfdata_mapped_range.c	3
libevt/libevt/libevt_file_header.c	4
libevt/libfcache/libfcache_date_time.c	1
libevt/libevt/libevt_record.c	2

Fuzzer: libfvde_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1936	90.2%
gold	[1:9]	20	0.93%
yellow	[10:29]	7	0.32%
greenyellow	[30:49]	9	0.41%
lawngreen	50+	174	8.10%
All colors	2146	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
523	523	1 : View List ['libfvde_volume_close']	606	938	libfvde_volume_free	call site: 02136	/src/libfvde/libfvde/libfvde_volume.c:180
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00238	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
193	193	1 : View List ['libfvde_logical_volume_free']	193	476	libfvde_internal_volume_open_read	call site: 02024	/src/libfvde/libfvde/libfvde_volume.c:2481
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00135	/src/libvsbsdl/libcdata/libcdata_list.c:238
85	85	8 : View List ['libfplist_xml_scanner_realloc', 'clearerr', 'ferror', 'libfplist_xml_scanner_restart', 'fread', '__errno_location', 'yy_fatal_error', 'getc']	85	85	yy_get_next_buffer	call site: 00493	/src/libfplist/libfplist/libfplist_xml_scanner.c:158629
83	83	1 : View List ['libfvde_encryption_context_plist_free']	83	188	libfvde_volume_free	call site: 02139	/src/libfvde/libfvde/libfvde_volume.c:272
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01485	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	426	6 : View List ['libfplist_xml_tag_free', 'libcerror_error_set', 'libfplist_xml_tag_compare_name', 'free', 'libfplist_xml_tag_get_element', 'libfplist_xml_tag_get_number_of_elements']	0	426	libfplist_property_list_copy_from_byte_stream	call site: 00606	/src/libfplist/libfplist/libfplist_property_list.c:365
0	241	5 : View List ['libfplist_property_free', 'libcerror_error_set', 'free', 'libfplist_property_list_free', 'libfvde_physical_volume_descriptor_free']	0	241	libfvde_metadata_read_volume_group_plist	call site: 00751	/src/libfvde/libfvde/libfvde_metadata.c:1154
0	144	4 : View List ['libcerror_error_set', 'free', 'libcdata_list_free', 'libcdata_array_free']	0	144	libbfio_pool_initialize	call site: 00130	/src/libvslvm/libbfio/libbfio_pool.c:139

Runtime coverage analysis

Covered functions

107

Functions that are reachable but not covered

278

Reachable functions

385

Percentage of reachable functions covered

27.79%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfvde/ossfuzz/volume_fuzzer.cc	1
libfvde/libbfio/libbfio_memory_range.c	2
libfvde/libcerror/libcerror_error.c	4
libfvde/libbfio/libbfio_memory_range_io_handle.c	12
libfvde/libbfio/libbfio_handle.c	11
libfvde/libcdata/libcdata_range_list.c	15
libfvde/libcdata/libcdata_list_element.c	10
libfvde/libcdata/libcdata_range_list_value.c	3
libfvde/libbfio/libbfio_pool.c	15
libfvde/libcdata/libcdata_array.c	10
libfvde/libcdata/libcdata_list.c	9
libfvde/libfvde/libfvde_volume.c	7
libfvde/libfvde/libfvde_io_handle.c	3
libfvde/libcthreads/libcthreads_read_write_lock.c	4
libfvde/libcerror/libcerror_system.c	2
libfvde/libfvde/libfvde_volume_header.c	4
libfvde/libfvde/libfvde_checksum.c	2
libfvde/libfvde/libfvde_metadata.c	7
libfvde/libfvde/libfvde_metadata_block.c	4
libfvde/libfplist/libfplist_property_list.c	6
libfvde/libfplist/libfplist_xml_parser.c	3
libfvde/libfplist/libfplist_xml_scanner.c	17
libfvde/libfplist/libfplist_xml_scanner.l	5
libfvde/libfplist/libfplist_xml_tag.c	9
libfvde/libfplist/libfplist_xml_attribute.c	2
libfvde/libfplist/libfplist_property.c	10
libfvde/libfvde/libfvde_physical_volume_descriptor.c	2
libfvde/libfguid/libfguid_identifier.c	5
libfvde/libfvde/libfvde_encrypted_metadata.c	32
libfvde/libfvde/libfvde_encryption_context_plist.c	7
libfvde/libfvde/libfvde_encryption_context.c	5
libfvde/libcaes/libcaes_tweaked_context.c	4
libfvde/libcaes/libcaes_context.c	7
libfvde/libfvalue/libfvalue_integer.c	2
libfvde/libfvde/libfvde_compression.c	1
libfvde/libfvde/libfvde_deflate.c	8
libfvde/libfvde/libfvde_bit_stream.c	3
libfvde/libfvde/libfvde_huffman_tree.c	4
libfvde/libfvde/libfvde_logical_volume_descriptor.c	6
libfvde/libfvde/libfvde_segment_descriptor.c	3
libfvde/libfvde/libfvde_logical_volume.c	10
libfvde/libfvde/libfvde_keyring.c	2
libfvde/libfvde/libfvde_password.c	2
libfvde/libuna/libuna_byte_stream.c	2
libfvde/libuna/libuna_unicode_character.c	3
libfvde/libuna/libuna_codepage_mac_symbol.c	2
libfvde/libuna/libuna_codepage_mac_thai.c	2
libfvde/libuna/libuna_codepage_windows_932.c	2
libfvde/libuna/libuna_codepage_windows_936.c	2
libfvde/libuna/libuna_codepage_windows_949.c	2
libfvde/libuna/libuna_codepage_windows_950.c	2
libfvde/libuna/libuna_codepage_koi8_r.c	1
libfvde/libuna/libuna_codepage_koi8_u.c	1
libfvde/libuna/libuna_codepage_mac_arabic.c	1
libfvde/libuna/libuna_codepage_mac_celtic.c	1
libfvde/libuna/libuna_codepage_mac_centraleurroman.c	1
libfvde/libuna/libuna_codepage_mac_croatian.c	1
libfvde/libuna/libuna_codepage_mac_cyrillic.c	1
libfvde/libuna/libuna_codepage_mac_dingbats.c	1
libfvde/libuna/libuna_codepage_mac_farsi.c	1
libfvde/libuna/libuna_codepage_mac_gaelic.c	1
libfvde/libuna/libuna_codepage_mac_greek.c	1
libfvde/libuna/libuna_codepage_mac_icelandic.c	1
libfvde/libuna/libuna_codepage_mac_inuit.c	1
libfvde/libuna/libuna_codepage_mac_roman.c	1
libfvde/libuna/libuna_codepage_mac_romanian.c	1
libfvde/libuna/libuna_codepage_mac_russian.c	1
libfvde/libuna/libuna_codepage_mac_turkish.c	1
libfvde/libuna/libuna_codepage_mac_ukrainian.c	1
libfvde/libuna/libuna_codepage_windows_874.c	1
libfvde/libuna/libuna_codepage_windows_1250.c	1
libfvde/libuna/libuna_codepage_windows_1251.c	1
libfvde/libuna/libuna_codepage_windows_1252.c	1
libfvde/libuna/libuna_codepage_windows_1253.c	1
libfvde/libuna/libuna_codepage_windows_1254.c	1
libfvde/libuna/libuna_codepage_windows_1255.c	1
libfvde/libuna/libuna_codepage_windows_1256.c	1
libfvde/libuna/libuna_codepage_windows_1257.c	1
libfvde/libuna/libuna_codepage_windows_1258.c	1
libfvde/libfvde/libfvde_volume_data_handle.c	3
libfvde/libuna/libuna_base64_stream.c	5
libfvde/libhmac/libhmac_sha256.c	2
libfvde/libhmac/libhmac_sha256_context.c	5
libfvde/libfvde/libfvde_sector_data.c	3
libfvde/libfdata/libfdata_vector.c	4
libfvde/libfcache/libfcache_date_time.c	1
libfvde/libfdata/libfdata_segments_array.c	2
libfvde/libfdata/libfdata_range.c	4
libfvde/libfcache/libfcache_cache.c	3
libfvde/libfcache/libfcache_cache_value.c	6
libfvde/libfdata/libfdata_mapped_range.c	3

Fuzzer: libcaes_crypt_ecb_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	39	81.2%
gold	[1:9]	2	4.16%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	2.08%
lawngreen	50+	6	12.5%
All colors	48	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
85	85	1 : View List ['libcaes_internal_context_set_decryption_key']	85	117	libcaes_context_set_key	call site: 00019	/src/libcaes/libcaes/libcaes_context.c:585
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcaes_context_initialize	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:360
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_free	call site: 00033	/src/libcaes/libcaes/libcaes_context.c:406
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_context_set_key	call site: 00020	/src/libcaes/libcaes/libcaes_context.c:587
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_initialize_tables	call site: 00013	/src/libcaes/libcaes/libcaes_context.c:644
0	32	1 : View List ['libcerror_error_set']	0	32	libcaes_internal_context_set_encryption_key	call site: 00022	/src/libcaes/libcaes/libcaes_context.c:1064
0	0	None	0	64	libcaes_crypt_ecb	call site: 00044	/src/libcaes/libcaes/libcaes_context.c:3019
0	0	None	0	64	libcaes_crypt_ecb	call site: 00044	/src/libcaes/libcaes/libcaes_context.c:3107
0	0	None	0	64	libcaes_crypt_ecb	call site: 00045	/src/libcaes/libcaes/libcaes_context.c:3121
0	0	None	0	32	libcaes_context_initialize	call site: 00001	/src/libcaes/libcaes/libcaes_context.c:275
0	0	None	0	32	libcaes_context_initialize	call site: 00002	/src/libcaes/libcaes/libcaes_context.c:286

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

6

Reachable functions

14

Percentage of reachable functions covered

57.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcaes/ossfuzz/crypt_ecb_fuzzer.cc	1
libcaes/libcaes/libcaes_context.c	7
libcaes/libcerror/libcerror_error.c	3

Fuzzer: libphdi_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	814	85.9%
gold	[1:9]	21	2.21%
yellow	[10:29]	7	0.73%
greenyellow	[30:49]	2	0.21%
lawngreen	50+	103	10.8%
All colors	947	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
317	317	1 : View List ['libphdi_handle_close']	317	823	libphdi_handle_free	call site: 00930	/src/libphdi/libphdi/libphdi_handle.c:288
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00244	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
147	147	1 : View List ['libphdi_snapshot_values_free']	147	191	libphdi_disk_descriptor_xml_file_get_snapshots	call site: 00811	/src/libphdi/libphdi/libphdi_disk_descriptor_xml_file.c:2067
94	94	1 : View List ['libfcache_cache_free']	158	195	libphdi_internal_handle_open_read	call site: 00836	/src/libphdi/libphdi/libphdi_handle.c:2372
85	85	8 : View List ['libfplist_xml_scanner_realloc', 'clearerr', 'ferror', 'libfplist_xml_scanner_restart', 'fread', '__errno_location', 'yy_fatal_error', 'getc']	85	85	yy_get_next_buffer	call site: 00430	/src/libfplist/libfplist/libfplist_xml_scanner.c:158629
83	178	4 : View List ['libphdi_extent_values_get_number_of_images', 'libphdi_extent_values_get_image_values_by_index', 'libcdata_array_get_entry_by_index', 'libcdata_array_append_entry']	241	598	libphdi_internal_handle_open_read	call site: 00821	/src/libphdi/libphdi/libphdi_handle.c:2267
64	64	1 : View List ['libfdata_vector_free']	64	101	libphdi_internal_handle_open_read	call site: 00837	/src/libphdi/libphdi/libphdi_handle.c:2378
56	56	1 : View List ['libphdi_extent_values_free']	56	100	libphdi_disk_descriptor_xml_file_get_storage_data	call site: 00729	/src/libphdi/libphdi/libphdi_disk_descriptor_xml_file.c:1798
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00849	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
42	42	1 : View List ['libbfio_handle_close']	42	74	libphdi_handle_open_file_io_handle	call site: 00188	/src/libphdi/libphdi/libphdi_handle.c:1117
37	37	1 : View List ['libphdi_image_values_free']	93	137	libphdi_disk_descriptor_xml_file_get_storage_data	call site: 00728	/src/libphdi/libphdi/libphdi_disk_descriptor_xml_file.c:1792

Runtime coverage analysis

Covered functions

85

Functions that are reachable but not covered

99

Reachable functions

184

Percentage of reachable functions covered

46.2%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libphdi/ossfuzz/handle_fuzzer.cc	1
libphdi/libbfio/libbfio_memory_range.c	2
libphdi/libcerror/libcerror_error.c	3
libphdi/libbfio/libbfio_memory_range_io_handle.c	12
libphdi/libbfio/libbfio_handle.c	9
libphdi/libcdata/libcdata_range_list.c	15
libphdi/libcdata/libcdata_list_element.c	10
libphdi/libcdata/libcdata_range_list_value.c	3
libphdi/libphdi/libphdi_handle.c	5
libphdi/libphdi/libphdi_io_handle.c	3
libphdi/libcdata/libcdata_array.c	8
libphdi/libphdi/libphdi_data_files.c	3
libphdi/libphdi/libphdi_i18n.c	1
libphdi/libcthreads/libcthreads_read_write_lock.c	4
libphdi/libcerror/libcerror_system.c	2
libphdi/libphdi/libphdi_disk_descriptor_xml_file.c	9
libphdi/libphdi/libphdi_xml_parser.c	3
libphdi/libphdi/libphdi_xml_scanner.c	17
libphdi/libphdi/libphdi_xml_scanner.l	5
libphdi/libphdi/libphdi_xml_tag.c	8
libphdi/libphdi/libphdi_xml_attribute.c	2
libphdi/libphdi/libphdi_disk_parameters.c	3
libphdi/libfvalue/libfvalue_integer.c	2
libphdi/libphdi/libphdi_extent_values.c	5
libphdi/libphdi/libphdi_image_values.c	4
libphdi/libphdi/libphdi_uuid_string.c	1
libphdi/libfguid/libfguid_identifier.c	5
libphdi/libphdi/libphdi_snapshot_values.c	4
libphdi/libphdi/libphdi_extent_table.c	3
libphdi/libfdata/libfdata_stream.c	1
libphdi/libfdata/libfdata_range.c	1
libphdi/libfdata/libfdata_mapped_range.c	1
libphdi/libfdata/libfdata_list.c	1
libphdi/libfdata/libfdata_list_element.c	1
libphdi/libfcache/libfcache_cache.c	1
libphdi/libcdata/libcdata_list.c	3
libphdi/libfcache/libfcache_cache_value.c	1
libphdi/libfdata/libfdata_vector.c	1
libphdi/libbfio/libbfio_pool.c	3

Fuzzer: libmodi_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1403	79.4%
gold	[1:9]	26	1.47%
yellow	[10:29]	6	0.33%
greenyellow	[30:49]	16	0.90%
lawngreen	50+	316	17.8%
All colors	1767	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	264	1102	libmodi_handle_close	call site: 01713	/src/libmodi/libmodi/libmodi_handle.c:2324
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00209	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 01326	/src/libvsbsdl/libcdata/libcdata_list.c:238
85	85	8 : View List ['libfplist_xml_scanner_realloc', 'clearerr', 'ferror', 'libfplist_xml_scanner_restart', 'fread', '__errno_location', 'yy_fatal_error', 'getc']	85	85	yy_get_next_buffer	call site: 00949	/src/libfplist/libfplist/libfplist_xml_scanner.c:158629
80	80	1 : View List ['libfvalue_utf8_string_copy_to_integer']	80	112	libfplist_property_get_value_integer	call site: 01460	/src/libfplist/libfplist/libfplist_property.c:591
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01701	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	346	1 : View List ['libmodi_handle_close']	0	545	libmodi_handle_free	call site: 01760	/src/libmodi/libmodi/libmodi_handle.c:206
0	341	2 : View List ['libfplist_property_get_value_integer', 'libfplist_property_get_sub_property_by_utf8_name']	0	1007	libmodi_sparse_bundle_xml_plist_read_data	call site: 01457	/src/libmodi/libmodi/libmodi_sparse_bundle_xml_plist.c:285
0	251	4 : View List ['libmodi_udif_resource_file_free', 'libcerror_error_set', 'libmodi_udif_xml_plist_free', 'libmodi_block_chunks_data_handle_free']	0	251	libmodi_internal_handle_open_read_udif_image	call site: 01318	/src/libmodi/libmodi/libmodi_handle.c:3489
0	205	3 : View List ['libfplist_property_list_free', 'libcerror_error_set', 'libfplist_property_free']	0	205	libmodi_udif_xml_plist_read_data	call site: 01236	/src/libmodi/libmodi/libmodi_udif_xml_plist.c:652

Runtime coverage analysis

Covered functions

163

Functions that are reachable but not covered

152

Reachable functions

315

Percentage of reachable functions covered

51.75%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libmodi/ossfuzz/handle_fuzzer.cc	1
libmodi/libbfio/libbfio_memory_range.c	2
libmodi/libcerror/libcerror_error.c	3
libmodi/libbfio/libbfio_memory_range_io_handle.c	12
libmodi/libbfio/libbfio_handle.c	9
libmodi/libcdata/libcdata_range_list.c	15
libmodi/libcdata/libcdata_list_element.c	10
libmodi/libcdata/libcdata_range_list_value.c	3
libmodi/libmodi/libmodi_handle.c	8
libmodi/libmodi/libmodi_io_handle.c	3
libmodi/libmodi/libmodi_i18n.c	1
libmodi/libcthreads/libcthreads_read_write_lock.c	4
libmodi/libcerror/libcerror_system.c	2
libmodi/libmodi/libmodi_udif_resource_file.c	4
libmodi/libmodi/libmodi_block_chunks_data_handle.c	5
libmodi/libfdata/libfdata_list.c	13
libmodi/libcdata/libcdata_array.c	8
libmodi/libmodi/libmodi_data_block.c	5
libmodi/libfdata/libfdata_list_element.c	9
libmodi/libmodi/libmodi_compression.c	1
libmodi/libfmos/libfmos_adc.c	1
libmodi/libmodi/libmodi_bzip.c	13
libmodi/libmodi/libmodi_bit_stream.c	3
libmodi/libmodi/libmodi_huffman_tree.c	4
libmodi/libmodi/libmodi_deflate.c	8
libmodi/libfmos/libfmos_lzfse.c	9
libmodi/libfmos/libfmos_lzfse_decoder.c	2
libmodi/libfmos/libfmos_lzfse_bit_stream.c	3
libmodi/libfmos/libfmos_lzvn.c	1
libmodi/libfdata/libfdata_range.c	5
libmodi/libfcache/libfcache_cache.c	4
libmodi/libcdata/libcdata_list.c	9
libmodi/libfcache/libfcache_cache_value.c	8
libmodi/libfdata/libfdata_mapped_range.c	4
libmodi/libmodi/libmodi_udif_xml_plist.c	8
libmodi/libfplist/libfplist_property_list.c	5
libmodi/libfplist/libfplist_xml_parser.c	3
libmodi/libfplist/libfplist_xml_scanner.c	17
libmodi/libfplist/libfplist_xml_scanner.l	5
libmodi/libfplist/libfplist_xml_tag.c	9
libmodi/libfplist/libfplist_xml_attribute.c	2
libmodi/libfplist/libfplist_property.c	8
libmodi/libuna/libuna_base64_stream.c	5
libmodi/libmodi/libmodi_udif_block_table.c	5
libmodi/libmodi/libmodi_udif_block_table_entry.c	3
libmodi/libfcache/libfcache_date_time.c	1
libmodi/libmodi/libmodi_sparse_image_header.c	4
libmodi/libmodi/libmodi_bands_data_handle.c	5
libmodi/libfdata/libfdata_vector.c	8
libmodi/libbfio/libbfio_pool.c	4
libmodi/libfdata/libfdata_segments_array.c	3
libmodi/libmodi/libmodi_sparse_bundle_xml_plist.c	4
libmodi/libfvalue/libfvalue_integer.c	2
libmodi/libfdata/libfdata_stream.c	3

Fuzzer: libpff_record_set_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1548	65.6%
gold	[1:9]	51	2.16%
yellow	[10:29]	46	1.95%
greenyellow	[30:49]	22	0.93%
lawngreen	50+	690	29.2%
All colors	2357	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
267	363	4 : View List ['libpff_decompress_data', 'libcerror_error_set', 'free', 'malloc']	267	363	libpff_data_block_read_file_io_handle	call site: 00889	/src/libpff/libpff/libpff_data_block.c:831
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00178	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_descriptors_index_get_index_value_by_identifier	call site: 00758	/src/libpff/libpff/libpff_descriptors_index.c:258
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_offsets_index_get_index_value_by_identifier	call site: 00860	/src/libpff/libpff/libpff_offsets_index.c:250
116	324	4 : View List ['libcerror_error_set', 'libcdata_tree_node_clone', 'libpff_item_values_free', 'free']	116	324	libpff_item_initialize	call site: 02266	/src/libpff/libpff/libpff_item.c:188
98	230	3 : View List ['libcerror_error_set', 'libfdata_stream_get_segment_index_at_offset', 'libcdata_array_get_number_of_entries']	98	230	libfdata_stream_seek_offset	call site: 01896	/src/libregf/libfdata/libfdata_stream.c:2419
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 01086	/src/libvsbsdl/libfcache/libfcache_cache.c:801
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 01880	/src/libregf/libfdata/libfdata_stream.c:2554
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	84	2 : View List ['libpff_table_get_record_entry_by_index', 'libpff_record_entry_get_data_size']	36	4274	libpff_table_read_entry_value	call site: 01756	/src/libpff/libpff/libpff_table.c:9109
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	3009	1 : View List ['libpff_item_values_read']	0	3148	libpff_item_get_record_set_by_index	call site: 02306	/src/libpff/libpff/libpff_item.c:986

Runtime coverage analysis

Covered functions

292

Functions that are reachable but not covered

70

Reachable functions

362

Percentage of reachable functions covered

80.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libpff/ossfuzz/record_set_fuzzer.cc	1
libpff/libbfio/libbfio_memory_range.c	2
libpff/libcerror/libcerror_error.c	4
libpff/libbfio/libbfio_memory_range_io_handle.c	12
libpff/libbfio/libbfio_handle.c	8
libpff/libcdata/libcdata_range_list.c	15
libpff/libcdata/libcdata_list_element.c	10
libpff/libcdata/libcdata_range_list_value.c	3
libpff/libpff/libpff_file.c	6
libpff/libpff/libpff_io_handle.c	3
libpff/libpff/libpff_file_header.c	4
libpff/libpff/libpff_checksum.c	2
libpff/libpff/libpff_descriptors_index.c	3
libpff/libpff/libpff_index.c	5
libpff/libcdata/libcdata_btree.c	3
libpff/libcdata/libcdata_array.c	11
libpff/libcdata/libcdata_tree_node.c	21
libpff/libcdata/libcdata_btree_values_list.c	1
libpff/libcdata/libcdata_list.c	11
libpff/libpff/libpff_index_values_list.c	3
libpff/libpff/libpff_index_value.c	3
libpff/libpff/libpff_offsets_index.c	3
libpff/libpff/libpff_item_tree.c	7
libpff/libpff/libpff_item_descriptor.c	4
libpff/libpff/libpff_index_node.c	6
libpff/libpff/libpff_block_tree.c	3
libpff/libpff/libpff_block_tree_node.c	6
libpff/libpff/libpff_block_descriptor.c	2
libpff/libpff/libpff_name_to_id_map.c	5
libpff/libcdata/libcdata_btree_node.c	2
libpff/libpff/libpff_item_values.c	3
libpff/libpff/libpff_table.c	35
libpff/libpff/libpff_table_header.c	8
libpff/libpff/libpff_local_descriptors_tree.c	3
libpff/libpff/libpff_local_descriptors.c	4
libpff/libfcache/libfcache_cache.c	4
libpff/libfcache/libfcache_cache_value.c	8
libpff/libpff/libpff_data_block.c	7
libpff/libpff/libpff_compression.c	1
libpff/libpff/libpff_deflate.c	8
libpff/libpff/libpff_bit_stream.c	3
libpff/libpff/libpff_huffman_tree.c	4
libpff/libpff/libpff_data_array.c	6
libpff/libfdata/libfdata_list.c	17
libpff/libpff/libpff_data_array_entry.c	3
libpff/libfdata/libfdata_list_element.c	10
libpff/libpff/libpff_encryption.c	1
libpff/libfdata/libfdata_range.c	4
libpff/libfdata/libfdata_mapped_range.c	4
libpff/libfcache/libfcache_date_time.c	1
libpff/libpff/libpff_table_block_index.c	5
libpff/libpff/libpff_table_index_value.c	2
libpff/libpff/libpff_reference_descriptor.c	2
libpff/libpff/libpff_record_set.c	7
libpff/libpff/libpff_record_entry.c	7
libpff/libpff/libpff_column_definition.c	2
libpff/libpff/libpff_local_descriptors_node.c	5
libpff/libpff/libpff_local_descriptor_value.c	3
libpff/libpff/libpff_descriptor_data_stream.c	6
libpff/libfdata/libfdata_stream.c	8
libpff/libfdata/libfdata_segments_array.c	2
libpff/libpff/libpff_value_type.c	1
libpff/libpff/libpff_item.c	4

Fuzzer: libregf_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	586	82.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	9	1.27%
greenyellow	[30:49]	4	0.56%
lawngreen	50+	109	15.3%
All colors	708	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00623	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00664	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	38	147	libfdata_list_append_element	call site: 00604	/src/libregf/libfdata/libfdata_list.c:1489
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	253	1 : View List ['libregf_file_close']	0	452	libregf_file_free	call site: 00698	/src/libregf/libregf/libregf_file.c:183
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	101	3 : View List ['libcerror_error_set', 'free', 'libfdata_list_free']	0	101	libregf_hive_bins_list_initialize	call site: 00546	/src/libregf/libregf/libregf_hive_bins_list.c:135
0	99	1 : View List ['libbfio_handle_free']	0	592	libregf_file_close	call site: 00679	/src/libregf/libregf/libregf_file.c:862
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfcache_cache_initialize	call site: 00549	/src/libvsbsdl/libfcache/libfcache_cache.c:123
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfdata_list_initialize	call site: 00377	/src/libregf/libfdata/libfdata_list.c:163

Runtime coverage analysis

Covered functions

80

Functions that are reachable but not covered

69

Reachable functions

149

Percentage of reachable functions covered

53.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libregf/ossfuzz/file_fuzzer.cc	1
libregf/libbfio/libbfio_memory_range.c	2
libregf/libcerror/libcerror_error.c	3
libregf/libbfio/libbfio_memory_range_io_handle.c	12
libregf/libbfio/libbfio_handle.c	10
libregf/libcdata/libcdata_range_list.c	15
libregf/libcdata/libcdata_list_element.c	10
libregf/libcdata/libcdata_range_list_value.c	3
libregf/libregf/libregf_file.c	7
libregf/libregf/libregf_io_handle.c	3
libregf/libcthreads/libcthreads_read_write_lock.c	4
libregf/libcerror/libcerror_system.c	2
libregf/libregf/libregf_file_header.c	4
libregf/libregf/libregf_checksum.c	1
libregf/libregf/libregf_hive_bins_list.c	5
libregf/libfdata/libfdata_list.c	4
libregf/libcdata/libcdata_array.c	8
libregf/libregf/libregf_hive_bin_header.c	4
libregf/libregf/libregf_hive_bin.c	4
libregf/libregf/libregf_hive_bin_cell.c	2
libregf/libfdata/libfdata_list_element.c	7
libregf/libfdata/libfdata_range.c	4
libregf/libfcache/libfcache_cache.c	3
libregf/libcdata/libcdata_list.c	7
libregf/libfcache/libfcache_cache_value.c	6
libregf/libfdata/libfdata_mapped_range.c	3
libregf/libfcache/libfcache_date_time.c	1
libregf/libregf/libregf_dirty_vector.c	4

Fuzzer: libfwsi_item_list_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	339	97.1%
gold	[1:9]	1	0.28%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	8	2.29%
lawngreen	50+	1	0.28%
All colors	349	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1194	1194	5 : View List ['libfwsi_item_copy_from_byte_stream', 'libfwsi_internal_item_initialize', 'libfwsi_internal_item_free', 'libcdata_array_append_entry', 'libfwsi_item_set_parent_item']	1194	1386	libfwsi_item_list_copy_from_byte_stream	call site: 00026	/src/libfwsi/libfwsi/libfwsi_item_list.c:234
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00019	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00340	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwsi_item_list_initialize	call site: 00013	/src/libfwsi/libfwsi/libfwsi_item_list.c:96
0	32	1 : View List ['libcerror_error_set']	0	32	libfwsi_item_list_free	call site: 00348	/src/libfwsi/libfwsi/libfwsi_item_list.c:150
0	0	None	0	128	libcdata_array_initialize	call site: 00016	/src/libfwnt/libcdata/libcdata_array.c:112
0	0	None	0	32	libcdata_array_initialize	call site: 00013	/src/libfwnt/libcdata/libcdata_array.c:46
0	0	None	0	32	libcdata_array_initialize	call site: 00013	/src/libfwnt/libcdata/libcdata_array.c:57
0	0	None	0	32	libcdata_array_initialize	call site: 00013	/src/libfwnt/libcdata/libcdata_array.c:68
0	0	None	0	32	libcdata_array_initialize	call site: 00014	/src/libfwnt/libcdata/libcdata_array.c:82
0	0	None	0	32	libcdata_array_initialize	call site: 00015	/src/libfwnt/libcdata/libcdata_array.c:93

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

81

Reachable functions

89

Percentage of reachable functions covered

8.99%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwsi/ossfuzz/item_list_fuzzer.cc	1
libfwsi/libfwsi/libfwsi_item_list.c	3
libfwsi/libcerror/libcerror_error.c	3
libfwsi/libcdata/libcdata_array.c	5
libfwsi/libfwsi/libfwsi_item.c	5
libfwsi/libfwsi/libfwsi_delegate_folder_values.c	3
libfwsi/libfwsi/libfwsi_acronis_tib_file_values.c	2
libfwsi/libfwsi/libfwsi_cdburn_values.c	2
libfwsi/libfwsi/libfwsi_compressed_folder_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_item_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_category_values.c	2
libfwsi/libfwsi/libfwsi_control_panel_cpl_file_values.c	2
libfwsi/libfwsi/libfwsi_file_entry_values.c	2
libfwsi/libfwsi/libfwsi_game_folder_values.c	2
libfwsi/libfwsi/libfwsi_mtp_file_entry_values.c	2
libfwsi/libfwsi/libfwsi_mtp_volume_values.c	2
libfwsi/libfwsi/libfwsi_network_location_values.c	2
libfwsi/libfwsi/libfwsi_root_folder_values.c	2
libfwsi/libfwsi/libfwsi_uri_values.c	2
libfwsi/libfwsi/libfwsi_uri_sub_values.c	2
libfwsi/libfwsi/libfwsi_users_property_view_values.c	2
libfwsi/libfwsi/libfwsi_volume_values.c	2
libfwsi/libfwsi/libfwsi_web_site_values.c	2
libfwsi/libfwsi/libfwsi_extension_block.c	3
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0000_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0001_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0003_values.c	2
libfwsi/libfwsi/libfwsi_file_entry_extension_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0005_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0006_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef000a_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0013_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0014_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0019_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0025_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0026_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0027_values.c	2
libfwsi/libfwsi/libfwsi_extension_block_0xbeef0029_values.c	2

Fuzzer: libodraw_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	563	80.3%
gold	[1:9]	10	1.42%
yellow	[10:29]	2	0.28%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	126	17.9%
All colors	701	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	2 : View List ['libbfio_pool_close_all', 'libbfio_pool_free']	264	776	libodraw_handle_close	call site: 00599	/src/libodraw/libodraw/libodraw_handle.c:1724
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00226	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
168	2074	12 : View List ['yygrowstack', 'libodraw_cue_scanner_error', 'libodraw_cue_parser_parse_number', 'libodraw_handle_append_session', 'libcerror_error_set', 'libodraw_handle_append_lead_out', 'libodraw_cue_parser_parse_msf', 'libodraw_handle_append_data_file', 'libodraw_cue_parser_parse_track_type', 'libodraw_handle_append_track', 'memcmp', 'libodraw_cue_scanner_lex']	168	2074	libodraw_cue_scanner_parse	call site: 00561	/src/libodraw/libodraw/libodraw_cue_parser.c:2177
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
79	79	1 : View List ['libodraw_handle_append_session']	158	373	libodraw_cue_parser_parse_buffer	call site: 00564	/src/libodraw/libodraw/libodraw_cue_parser.c:1186
79	79	1 : View List ['libodraw_handle_append_lead_out']	79	262	libodraw_cue_parser_parse_buffer	call site: 00568	/src/libodraw/libodraw/libodraw_cue_parser.c:1204
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	262	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	262	libodraw_handle_initialize	call site: 00139	/src/libodraw/libodraw/libodraw_handle.c:189
0	254	1 : View List ['libodraw_handle_close']	0	744	libodraw_handle_free	call site: 00683	/src/libodraw/libodraw/libodraw_handle.c:278
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	264	907	libodraw_handle_close	call site: 00591	/src/libodraw/libodraw/libodraw_handle.c:1705
0	69	2 : View List ['libcerror_error_set', 'libodraw_data_file_descriptor_free']	0	69	libodraw_handle_append_data_file	call site: 00451	/src/libodraw/libodraw/libodraw_handle.c:6253

Runtime coverage analysis

Covered functions

68

Functions that are reachable but not covered

62

Reachable functions

130

Percentage of reachable functions covered

52.31%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libodraw/ossfuzz/handle_fuzzer.cc	1
libodraw/libbfio/libbfio_memory_range.c	2
libodraw/libcerror/libcerror_error.c	3
libodraw/libbfio/libbfio_memory_range_io_handle.c	12
libodraw/libbfio/libbfio_handle.c	9
libodraw/libcdata/libcdata_range_list.c	15
libodraw/libcdata/libcdata_list_element.c	10
libodraw/libcdata/libcdata_range_list_value.c	3
libodraw/libodraw/libodraw_handle.c	9
libodraw/libcdata/libcdata_array.c	8
libodraw/libodraw/libodraw_io_handle.c	3
libodraw/libodraw/libodraw_track_value.c	3
libodraw/libodraw/libodraw_sector_range.c	3
libodraw/libodraw/libodraw_cue_parser.c	6
libodraw/libodraw/libodraw_cue_scanner.c	17
libodraw/libodraw/libodraw_cue_scanner.l	5
libodraw/libodraw/libodraw_data_file_descriptor.c	3
libodraw/libbfio/libbfio_pool.c	3
libodraw/libcdata/libcdata_list.c	3

Fuzzer: libexe_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	437	71.6%
gold	[1:9]	24	3.93%
yellow	[10:29]	4	0.65%
greenyellow	[30:49]	9	1.47%
lawngreen	50+	136	22.2%
All colors	610	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	192	1 : View List ['libexe_file_close']	0	390	libexe_file_free	call site: 00596	/src/libexe/libexe/libexe_file.c:181
0	140	4 : View List ['libexe_export_table_free', 'libcerror_error_set', 'libexe_debug_data_free', 'libexe_import_table_free']	0	140	libexe_file_open_read	call site: 00567	/src/libexe/libexe/libexe_file.c:1083
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	295	libexe_file_close	call site: 00581	/src/libexe/libexe/libexe_file.c:766
0	96	3 : View List ['libcerror_error_set', 'free', 'libfdata_stream_free']	0	96	libexe_section_descriptor_initialize	call site: 00453	/src/libexe/libexe/libexe_section_descriptor.c:118
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libexe_file_initialize	call site: 00130	/src/libexe/libexe/libexe_file.c:122
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfdata_stream_initialize	call site: 00441	/src/libregf/libfdata/libfdata_stream.c:179
0	69	1 : View List ['libexe_section_descriptor_free']	0	69	libexe_io_handle_read_section_table	call site: 00521	/src/libexe/libexe/libexe_io_handle.c:1170
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83

Runtime coverage analysis

Covered functions

94

Functions that are reachable but not covered

38

Reachable functions

132

Percentage of reachable functions covered

71.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libexe/ossfuzz/file_fuzzer.cc	1
libexe/libbfio/libbfio_memory_range.c	2
libexe/libcerror/libcerror_error.c	3
libexe/libbfio/libbfio_memory_range_io_handle.c	12
libexe/libbfio/libbfio_handle.c	10
libexe/libcdata/libcdata_range_list.c	15
libexe/libcdata/libcdata_list_element.c	10
libexe/libcdata/libcdata_range_list_value.c	3
libexe/libexe/libexe_file.c	6
libexe/libcdata/libcdata_array.c	9
libexe/libexe/libexe_io_handle.c	11
libexe/libexe/libexe_mz_header.c	4
libexe/libexe/libexe_le_header.c	4
libexe/libexe/libexe_ne_header.c	4
libexe/libexe/libexe_coff_header.c	4
libexe/libexe/libexe_coff_optional_header.c	4
libexe/libexe/libexe_section_descriptor.c	4
libexe/libfdata/libfdata_stream.c	5
libexe/libfdata/libfdata_range.c	4
libexe/libfdata/libfdata_mapped_range.c	2
libexe/libfdata/libfdata_segments_array.c	2
libexe/libexe/libexe_export_table.c	3
libexe/libexe/libexe_import_table.c	3
libexe/libexe/libexe_debug_data.c	3

Fuzzer: libvshadow_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	509	73.8%
gold	[1:9]	9	1.30%
yellow	[10:29]	5	0.72%
greenyellow	[30:49]	9	1.30%
lawngreen	50+	157	22.7%
All colors	689	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00267	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00191	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00555	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	298	3 : View List ['libvshadow_store_descriptor_free', 'libcerror_error_set', 'libvshadow_block_tree_free']	0	298	libvshadow_io_handle_read_catalog	call site: 00593	/src/libvshadow/libvshadow/libvshadow_io_handle.c:897
0	253	1 : View List ['libvshadow_volume_close']	0	530	libvshadow_volume_free	call site: 00678	/src/libvshadow/libvshadow/libvshadow_volume.c:193
0	182	4 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free', 'libcdata_list_free']	0	182	libvshadow_store_descriptor_initialize	call site: 00534	/src/libvshadow/libvshadow/libvshadow_store_descriptor.c:150
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	104	2 : View List ['libcerror_error_set', 'libvshadow_ntfs_volume_header_free']	0	104	libvshadow_volume_open_read_ntfs_volume_headers	call site: 00437	/src/libvshadow/libvshadow/libvshadow_volume.c:1304
0	102	2 : View List ['libvshadow_block_tree_node_free', 'libcdata_array_get_entry_by_index']	0	244	libvshadow_block_tree_node_free	call site: 00166	/src/libvshadow/libvshadow/libvshadow_block_tree_node.c:203
0	99	1 : View List ['libbfio_handle_free']	0	375	libvshadow_volume_close	call site: 00662	/src/libvshadow/libvshadow/libvshadow_volume.c:877

Runtime coverage analysis

Covered functions

79

Functions that are reachable but not covered

44

Reachable functions

123

Percentage of reachable functions covered

64.23%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvshadow/ossfuzz/volume_fuzzer.cc	1
libvshadow/libbfio/libbfio_memory_range.c	2
libvshadow/libcerror/libcerror_error.c	3
libvshadow/libbfio/libbfio_memory_range_io_handle.c	12
libvshadow/libbfio/libbfio_handle.c	9
libvshadow/libcdata/libcdata_range_list.c	15
libvshadow/libcdata/libcdata_list_element.c	10
libvshadow/libcdata/libcdata_range_list_value.c	3
libvshadow/libvshadow/libvshadow_volume.c	6
libvshadow/libcdata/libcdata_array.c	10
libvshadow/libvshadow/libvshadow_io_handle.c	8
libvshadow/libcthreads/libcthreads_read_write_lock.c	4
libvshadow/libcerror/libcerror_system.c	2
libvshadow/libvshadow/libvshadow_store_descriptor.c	6
libvshadow/libvshadow/libvshadow_block_tree.c	3
libvshadow/libvshadow/libvshadow_block_tree_node.c	6
libvshadow/libvshadow/libvshadow_block_descriptor.c	3
libvshadow/libcdata/libcdata_list.c	3
libvshadow/libvshadow/libvshadow_ntfs_volume_header.c	4
libvshadow/libvshadow/libvshadow_store_block.c	4

Fuzzer: libesedb_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	695	66.8%
gold	[1:9]	14	1.34%
yellow	[10:29]	20	1.92%
greenyellow	[30:49]	6	0.57%
lawngreen	50+	304	29.2%
All colors	1039	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00189	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00508	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	36	1 : View List ['libesedb_root_page_header_free']	36	325	libesedb_page_tree_free	call site: 00647	/src/libesedb/libesedb/libesedb_page_tree.c:235
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	308	1 : View List ['libesedb_file_close']	0	408	libesedb_file_free	call site: 01034	/src/libesedb/libesedb/libesedb_file.c:179
0	268	4 : View List ['libesedb_block_tree_free', 'libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	268	libesedb_catalog_initialize	call site: 00883	/src/libesedb/libesedb/libesedb_catalog.c:158
0	199	3 : View List ['libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	199	libesedb_database_initialize	call site: 00644	/src/libesedb/libesedb/libesedb_database.c:140
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00593	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	136	3 : View List ['libcerror_error_set', 'libesedb_table_definition_free', 'libesedb_catalog_definition_free']	0	136	libesedb_catalog_read_value_data	call site: 00943	/src/libesedb/libesedb/libesedb_catalog.c:410
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00380	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

159

Functions that are reachable but not covered

37

Reachable functions

196

Percentage of reachable functions covered

81.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libesedb/ossfuzz/file_fuzzer.cc	1
libesedb/libbfio/libbfio_memory_range.c	2
libesedb/libcerror/libcerror_error.c	4
libesedb/libbfio/libbfio_memory_range_io_handle.c	12
libesedb/libbfio/libbfio_handle.c	9
libesedb/libcdata/libcdata_range_list.c	15
libesedb/libcdata/libcdata_list_element.c	10
libesedb/libcdata/libcdata_range_list_value.c	3
libesedb/libesedb/libesedb_file.c	5
libesedb/libesedb/libesedb_io_handle.c	5
libesedb/libesedb/libesedb_i18n.c	1
libesedb/libesedb/libesedb_file_header.c	4
libesedb/libesedb/libesedb_checksum.c	2
libesedb/libfdata/libfdata_vector.c	5
libesedb/libcdata/libcdata_array.c	10
libesedb/libfcache/libfcache_date_time.c	1
libesedb/libesedb/libesedb_page.c	13
libesedb/libesedb/libesedb_page_header.c	6
libesedb/libcnotify/libcnotify_print.c	1
libesedb/libesedb/libesedb_page_value.c	2
libesedb/libfdata/libfdata_segments_array.c	2
libesedb/libfdata/libfdata_range.c	4
libesedb/libfcache/libfcache_cache.c	4
libesedb/libcdata/libcdata_list.c	9
libesedb/libfcache/libfcache_cache_value.c	8
libesedb/libfdata/libfdata_mapped_range.c	3
libesedb/libesedb/libesedb_database.c	4
libesedb/libesedb/libesedb_page_tree.c	5
libesedb/libesedb/libesedb_block_tree.c	3
libesedb/libesedb/libesedb_block_tree_node.c	6
libesedb/libcdata/libcdata_btree.c	2
libesedb/libcdata/libcdata_tree_node.c	6
libesedb/libesedb/libesedb_block_descriptor.c	2
libesedb/libesedb/libesedb_root_page_header.c	1
libesedb/libcdata/libcdata_btree_values_list.c	1
libesedb/libesedb/libesedb_leaf_page_descriptor.c	1
libesedb/libesedb/libesedb_page_tree_value.c	3
libesedb/libesedb/libesedb_catalog.c	5
libesedb/libesedb/libesedb_catalog_definition.c	3
libesedb/libesedb/libesedb_table_definition.c	6

Fuzzer: libfmapi_one_off_entry_identifier_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	26	66.6%
gold	[1:9]	1	2.56%
yellow	[10:29]	3	7.69%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	9	23.0%
All colors	39	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfmapi_one_off_entry_identifier_initialize	call site: 00011	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:80
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_one_off_entry_identifier_free	call site: 00037	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:117
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00035	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:621
0	0	None	0	32	libfmapi_one_off_entry_identifier_initialize	call site: 00001	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:44
0	0	None	0	32	libfmapi_one_off_entry_identifier_initialize	call site: 00002	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:55
0	0	None	0	32	libfmapi_one_off_entry_identifier_initialize	call site: 00010	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:69
0	0	None	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00013	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:172
0	0	None	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00014	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:185
0	0	None	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00015	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:196
0	0	None	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00016	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:207
0	0	None	0	32	libfmapi_one_off_entry_identifier_copy_from_byte_stream	call site: 00017	/src/libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c:218

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmapi/ossfuzz/one_off_entry_identifier_fuzzer.cc	1
libfmapi/libfmapi/libfmapi_one_off_entry_identifier.c	3
libfmapi/libcerror/libcerror_error.c	3

Fuzzer: libfsext_extended_attribute_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	769	62.5%
gold	[1:9]	40	3.25%
yellow	[10:29]	31	2.52%
greenyellow	[30:49]	28	2.27%
lawngreen	50+	361	29.3%
All colors	1229	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00197	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00840	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfsext_bitmap_free']	36	108	libfsext_internal_volume_read_block_groups	call site: 00429	/src/libfsext/libfsext/libfsext_volume.c:1614
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	440	1 : View List ['libfsext_internal_file_entry_get_extended_attributes']	0	753	libfsext_file_entry_get_extended_attribute_by_index	call site: 01183	/src/libfsext/libfsext/libfsext_file_entry.c:2559
0	249	1 : View List ['libfsext_volume_close']	0	526	libfsext_volume_free	call site: 01218	/src/libfsext/libfsext/libfsext_volume.c:195
0	212	5 : View List ['libcerror_error_set', 'libfsext_extent_index_free', 'libfsext_extent_free', 'libfsext_extents_header_free', 'libfsext_extents_footer_free']	0	212	libfsext_extents_read_data	call site: 00596	/src/libfsext/libfsext/libfsext_extents.c:640
0	174	2 : View List ['libcerror_error_set', 'libfsext_file_entry_free']	0	174	libfsext_volume_get_file_entry_by_utf8_path	call site: 01133	/src/libfsext/libfsext/libfsext_volume.c:3861
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00789	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	132	3 : View List ['libcerror_error_set', 'libfdata_stream_free', 'libfsext_buffer_data_handle_free']	0	132	libfsext_block_stream_initialize_from_data	call site: 01091	/src/libfsext/libfsext/libfsext_block_stream.c:122
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00446	/src/libvsbsdl/libfdata/libfdata_vector.c:180

Runtime coverage analysis

Covered functions

182

Functions that are reachable but not covered

39

Reachable functions

221

Percentage of reachable functions covered

82.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsext/ossfuzz/extended_attribute_fuzzer.cc	1
libfsext/libbfio/libbfio_memory_range.c	2
libfsext/libcerror/libcerror_error.c	3
libfsext/libbfio/libbfio_memory_range_io_handle.c	12
libfsext/libbfio/libbfio_handle.c	10
libfsext/libcdata/libcdata_range_list.c	15
libfsext/libcdata/libcdata_list_element.c	10
libfsext/libcdata/libcdata_range_list_value.c	3
libfsext/libfsext/libfsext_volume.c	8
libfsext/libfsext/libfsext_io_handle.c	3
libfsext/libcdata/libcdata_array.c	10
libfsext/libcthreads/libcthreads_read_write_lock.c	4
libfsext/libcerror/libcerror_system.c	2
libfsext/libfsext/libfsext_superblock.c	4
libfsext/libfsext/libfsext_checksum.c	2
libfsext/libfsext/libfsext_group_descriptor.c	4
libfsext/libfsext/libfsext_bitmap.c	1
libfsext/libfsext/libfsext_inode_table.c	3
libfsext/libfdata/libfdata_vector.c	6
libfsext/libfcache/libfcache_date_time.c	1
libfsext/libfsext/libfsext_inode.c	11
libfsext/libfsext/libfsext_attributes_block.c	3
libfsext/libfsext/libfsext_attribute_values.c	3
libfsext/libfsext/libfsext_extents.c	4
libfsext/libfsext/libfsext_extents_header.c	3
libfsext/libfsext/libfsext_extent.c	4
libfsext/libfsext/libfsext_extent_index.c	3
libfsext/libfsext/libfsext_extents_footer.c	3
libfsext/libfsext/libfsext_data_blocks.c	4
libfsext/libfsext/libfsext_block.c	3
libfsext/libfdata/libfdata_segments_array.c	2
libfsext/libfdata/libfdata_range.c	4
libfsext/libfcache/libfcache_cache.c	4
libfsext/libcdata/libcdata_list.c	9
libfsext/libfcache/libfcache_cache_value.c	8
libfsext/libfdata/libfdata_mapped_range.c	3
libfsext/libfsext/libfsext_directory.c	6
libfsext/libfsext/libfsext_directory_entry.c	6
libfsext/libfsext/libfsext_block_vector.c	2
libfsext/libuna/libuna_unicode_character.c	1
libfsext/libuna/libuna_utf8_string.c	1
libfsext/libfsext/libfsext_file_entry.c	5
libfsext/libfsext/libfsext_block_stream.c	3
libfsext/libfsext/libfsext_buffer_data_handle.c	4
libfsext/libfdata/libfdata_stream.c	4
libfsext/libfsext/libfsext_block_data_handle.c	2
libfsext/libfsext/libfsext_extended_attribute.c	2

Fuzzer: libhmac_sha256_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libcerror_error_set', 'libhmac_sha256_context_free']	32	68	libhmac_sha256_calculate	call site: 00046	/src/libbde/libhmac/libhmac_sha256.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha256_context_transform	call site: 00027	/src/libbde/libhmac/libhmac_sha256_context.c:420
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha256_context_initialize	call site: 00013	/src/libbde/libhmac/libhmac_sha256_context.c:592
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha256_context_free	call site: 00046	/src/libbde/libhmac/libhmac_sha256_context.c:631
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha256_context_update	call site: 00032	/src/libbde/libhmac/libhmac_sha256_context.c:987
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha256_context_finalize	call site: 00043	/src/libbde/libhmac/libhmac_sha256_context.c:1333
0	0	None	192	274	libhmac_sha256_context_update	call site: 00019	/src/libbde/libhmac/libhmac_sha256_context.c:888
0	0	None	32	68	libhmac_sha256_calculate	call site: 00002	/src/libbde/libhmac/libhmac_sha256.c:153
0	0	None	32	68	libhmac_sha256_calculate	call site: 00016	/src/libbde/libhmac/libhmac_sha256.c:166
0	0	None	32	68	libhmac_sha256_calculate	call site: 00035	/src/libbde/libhmac/libhmac_sha256.c:181
0	0	None	32	32	libhmac_sha256_context_transform	call site: 00022	/src/libbde/libhmac/libhmac_sha256_context.c:248
0	0	None	32	32	libhmac_sha256_context_transform	call site: 00023	/src/libbde/libhmac/libhmac_sha256_context.c:259

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha256_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha256.c	1
libhmac/libhmac/libhmac_sha256_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libregf_key_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	880	73.6%
gold	[1:9]	10	0.83%
yellow	[10:29]	16	1.33%
greenyellow	[30:49]	7	0.58%
lawngreen	50+	282	23.5%
All colors	1195	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00200	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
75	75	1 : View List ['libfdata_list_calculate_mapped_ranges']	75	551	libfdata_list_get_element_index_at_offset	call site: 00701	/src/libregf/libfdata/libfdata_list.c:3171
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00475	/src/libvsbsdl/libfcache/libfcache_cache.c:801
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00664	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	253	1 : View List ['libregf_file_close']	0	452	libregf_file_free	call site: 01190	/src/libregf/libregf/libregf_file.c:183
0	171	3 : View List ['libregf_key_item_free', 'libcerror_error_set', 'free']	0	171	libregf_key_initialize	call site: 01123	/src/libregf/libregf/libregf_key.c:155
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element	call site: 00604	/src/libregf/libfdata/libfdata_list.c:1489
0	131	3 : View List ['libcerror_error_set', 'libcdata_array_empty', 'libregf_sub_key_list_free']	0	131	libregf_key_item_read_sub_keys_list	call site: 00966	/src/libregf/libregf/libregf_key_item.c:1453
0	124	3 : View List ['libcerror_error_set', 'libregf_hive_bin_free', 'libregf_hive_bin_header_free']	0	124	libregf_hive_bins_list_read_element_data	call site: 00541	/src/libregf/libregf/libregf_hive_bins_list.c:736
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

158

Functions that are reachable but not covered

96

Reachable functions

254

Percentage of reachable functions covered

62.2%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libregf/ossfuzz/key_fuzzer.cc	1
libregf/libbfio/libbfio_memory_range.c	2
libregf/libcerror/libcerror_error.c	3
libregf/libbfio/libbfio_memory_range_io_handle.c	12
libregf/libbfio/libbfio_handle.c	11
libregf/libcdata/libcdata_range_list.c	15
libregf/libcdata/libcdata_list_element.c	10
libregf/libcdata/libcdata_range_list_value.c	3
libregf/libregf/libregf_file.c	8
libregf/libregf/libregf_io_handle.c	3
libregf/libcthreads/libcthreads_read_write_lock.c	4
libregf/libcerror/libcerror_system.c	2
libregf/libregf/libregf_file_header.c	4
libregf/libregf/libregf_checksum.c	1
libregf/libregf/libregf_hive_bins_list.c	7
libregf/libfdata/libfdata_list.c	9
libregf/libcdata/libcdata_array.c	10
libregf/libregf/libregf_hive_bin_header.c	4
libregf/libregf/libregf_hive_bin.c	5
libregf/libregf/libregf_hive_bin_cell.c	2
libregf/libfdata/libfdata_list_element.c	8
libregf/libfdata/libfdata_range.c	4
libregf/libfcache/libfcache_cache.c	4
libregf/libcdata/libcdata_list.c	9
libregf/libfcache/libfcache_cache_value.c	8
libregf/libfdata/libfdata_mapped_range.c	4
libregf/libfcache/libfcache_date_time.c	1
libregf/libregf/libregf_dirty_vector.c	4
libregf/libregf/libregf_key.c	4
libregf/libregf/libregf_key_item.c	11
libregf/libregf/libregf_named_key.c	3
libregf/libuna/libuna_unicode_character.c	4
libregf/libuna/libuna_codepage_koi8_r.c	1
libregf/libuna/libuna_codepage_koi8_u.c	1
libregf/libuna/libuna_codepage_mac_arabic.c	1
libregf/libuna/libuna_codepage_mac_celtic.c	1
libregf/libuna/libuna_codepage_mac_centraleurroman.c	1
libregf/libuna/libuna_codepage_mac_croatian.c	1
libregf/libuna/libuna_codepage_mac_cyrillic.c	1
libregf/libuna/libuna_codepage_mac_dingbats.c	1
libregf/libuna/libuna_codepage_mac_farsi.c	1
libregf/libuna/libuna_codepage_mac_gaelic.c	1
libregf/libuna/libuna_codepage_mac_greek.c	1
libregf/libuna/libuna_codepage_mac_icelandic.c	1
libregf/libuna/libuna_codepage_mac_inuit.c	1
libregf/libuna/libuna_codepage_mac_roman.c	1
libregf/libuna/libuna_codepage_mac_romanian.c	1
libregf/libuna/libuna_codepage_mac_russian.c	1
libregf/libuna/libuna_codepage_mac_symbol.c	1
libregf/libuna/libuna_codepage_mac_thai.c	1
libregf/libuna/libuna_codepage_mac_turkish.c	1
libregf/libuna/libuna_codepage_mac_ukrainian.c	1
libregf/libuna/libuna_codepage_windows_874.c	1
libregf/libuna/libuna_codepage_windows_932.c	1
libregf/libuna/libuna_codepage_windows_936.c	1
libregf/libuna/libuna_codepage_windows_949.c	1
libregf/libuna/libuna_codepage_windows_950.c	1
libregf/libuna/libuna_codepage_windows_1250.c	1
libregf/libuna/libuna_codepage_windows_1251.c	1
libregf/libuna/libuna_codepage_windows_1252.c	1
libregf/libuna/libuna_codepage_windows_1253.c	1
libregf/libuna/libuna_codepage_windows_1254.c	1
libregf/libuna/libuna_codepage_windows_1255.c	1
libregf/libuna/libuna_codepage_windows_1256.c	1
libregf/libuna/libuna_codepage_windows_1257.c	1
libregf/libuna/libuna_codepage_windows_1258.c	1
libregf/libregf/libregf_security_key.c	3
libregf/libregf/libregf_sub_key_list.c	3
libregf/libregf/libregf_key_descriptor.c	2
libregf/libregf/libregf_value_item.c	6
libregf/libregf/libregf_value_key.c	4
libregf/libregf/libregf_data_block_key.c	3
libregf/libfdata/libfdata_stream.c	4
libregf/libregf/libregf_data_block_stream.c	2
libregf/libfdata/libfdata_segments_array.c	1
libregf/libuna/libuna_utf16_string.c	1

Fuzzer: libfwnt_security_identifier_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	69.2%
gold	[1:9]	2	7.69%
yellow	[10:29]	1	3.84%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	5	19.2%
All colors	26	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwnt_security_identifier_initialize	call site: 00011	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:79
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_security_identifier_free	call site: 00023	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:134
0	32	1 : View List ['libcerror_error_set']	0	32	libfwnt_internal_security_identifier_free	call site: 00023	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:162
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00001	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:43
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00002	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:54
0	0	None	0	32	libfwnt_security_identifier_initialize	call site: 00010	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:68
0	0	None	0	32	libfwnt_security_identifier_free	call site: 00021	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:117
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00013	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:198
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00014	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:211
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00016	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:233
0	0	None	0	32	libfwnt_security_identifier_copy_from_byte_stream	call site: 00017	/src/libfwnt/libfwnt/libfwnt_security_identifier.c:244

Runtime coverage analysis

Covered functions

6

Functions that are reachable but not covered

5

Reachable functions

11

Percentage of reachable functions covered

54.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwnt/ossfuzz/security_identifier_fuzzer.cc	1
libfwnt/libfwnt/libfwnt_security_identifier.c	4
libfwnt/libcerror/libcerror_error.c	3

Fuzzer: libagdb_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	737	70.8%
gold	[1:9]	10	0.96%
yellow	[10:29]	16	1.53%
greenyellow	[30:49]	11	1.05%
lawngreen	50+	266	25.5%
All colors	1040	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00201	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
98	230	3 : View List ['libcerror_error_set', 'libfdata_stream_get_segment_index_at_offset', 'libcdata_array_get_number_of_entries']	98	230	libfdata_stream_seek_offset	call site: 00845	/src/libregf/libfdata/libfdata_stream.c:2419
75	75	1 : View List ['libfdata_list_calculate_mapped_ranges']	75	551	libfdata_list_get_element_index_at_offset	call site: 00666	/src/libregf/libfdata/libfdata_list.c:3171
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 00828	/src/libregf/libfdata/libfdata_stream.c:2554
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	243	1 : View List ['libagdb_file_close']	0	499	libagdb_file_free	call site: 01029	/src/libagdb/libagdb/libagdb_file.c:202
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element_with_mapped_size	call site: 00622	/src/libregf/libfdata/libfdata_list.c:2841
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00785	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libagdb_file_initialize	call site: 00132	/src/libagdb/libagdb/libagdb_file.c:136
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_elements']	0	102	libcdata_list_remove_element	call site: 00736	/src/libvsbsdl/libcdata/libcdata_list.c:2819

Runtime coverage analysis

Covered functions

153

Functions that are reachable but not covered

29

Reachable functions

182

Percentage of reachable functions covered

84.07%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libagdb/ossfuzz/file_fuzzer.cc	1
libagdb/libbfio/libbfio_memory_range.c	2
libagdb/libcerror/libcerror_error.c	3
libagdb/libbfio/libbfio_memory_range_io_handle.c	12
libagdb/libbfio/libbfio_handle.c	11
libagdb/libcdata/libcdata_range_list.c	15
libagdb/libcdata/libcdata_list_element.c	10
libagdb/libcdata/libcdata_range_list_value.c	3
libagdb/libagdb/libagdb_file.c	5
libagdb/libcdata/libcdata_array.c	9
libagdb/libagdb/libagdb_io_handle.c	7
libagdb/libagdb/libagdb_compressed_file_header.c	4
libagdb/libfdata/libfdata_list.c	12
libagdb/libagdb/libagdb_compressed_block.c	4
libagdb/libfdata/libfdata_list_element.c	9
libagdb/libfwnt/libfwnt_lznt1.c	2
libagdb/libfwnt/libfwnt_lzxpress.c	2
libagdb/libfwnt/libfwnt_bit_stream.c	4
libagdb/libfwnt/libfwnt_huffman_tree.c	4
libagdb/libfdata/libfdata_range.c	4
libagdb/libfcache/libfcache_cache.c	4
libagdb/libcdata/libcdata_list.c	9
libagdb/libfcache/libfcache_cache_value.c	8
libagdb/libfdata/libfdata_mapped_range.c	4
libagdb/libfcache/libfcache_date_time.c	1
libagdb/libagdb/libagdb_compressed_blocks_stream.c	1
libagdb/libagdb/libagdb_compressed_blocks_stream_data_handle.c	4
libagdb/libfdata/libfdata_stream.c	8
libagdb/libfdata/libfdata_segments_array.c	2
libagdb/libagdb/libagdb_volume_information.c	4
libagdb/libagdb/libagdb_hash.c	1
libagdb/libagdb/libagdb_file_information.c	4
libagdb/libagdb/libagdb_source_information.c	4

Fuzzer: libwrc_string_table_resource_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	59	76.6%
gold	[1:9]	1	1.29%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	22.0%
All colors	77	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00054	/src/libfwnt/libcdata/libcdata_array.c:823
0	37	1 : View List ['libwrc_table_entry_free']	0	81	libwrc_string_table_resource_read	call site: 00058	/src/libwrc/libwrc/libwrc_string_table_resource.c:346
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00073	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_empty	call site: 00063	/src/libfwnt/libcdata/libcdata_array.c:328
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00053	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00047	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_string_table_resource_initialize	call site: 00013	/src/libwrc/libwrc/libwrc_string_table_resource.c:98
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_string_table_resource_free	call site: 00075	/src/libwrc/libwrc/libwrc_string_table_resource.c:152
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libwrc_table_entry_initialize	call site: 00032	/src/libwrc/libwrc/libwrc_table_entry.c:76
0	32	1 : View List ['libcerror_error_set']	0	32	libwrc_table_entry_free	call site: 00059	/src/libwrc/libwrc/libwrc_table_entry.c:112

Runtime coverage analysis

Covered functions

14

Functions that are reachable but not covered

5

Reachable functions

19

Percentage of reachable functions covered

73.68%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libwrc/ossfuzz/string_table_resource_fuzzer.cc	1
libwrc/libwrc/libwrc_string_table_resource.c	3
libwrc/libcerror/libcerror_error.c	3
libwrc/libcdata/libcdata_array.c	6
libwrc/libwrc/libwrc_table_entry.c	3

Fuzzer: libewf_handle_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4709	86.2%
gold	[1:9]	33	0.60%
yellow	[10:29]	34	0.62%
greenyellow	[30:49]	22	0.40%
lawngreen	50+	664	12.1%
All colors	5462	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
6564	7099	5 : View List ['libfcache_cache_initialize', 'libewf_device_information_section_read_file_io_pool', 'libewf_segment_file_seek_offset', 'libewf_segment_table_get_segment_by_index', 'libfdata_list_get_element_value_by_index']	6564	7479	libewf_internal_handle_open_read_device_information	call site: 02779	/src/libewf/libewf/libewf_handle.c:3226
4690	4690	1 : View List ['libewf_internal_handle_write_finalize_file_io_pool']	4998	6749	libewf_handle_close	call site: 04247	/src/libewf/libewf/libewf_handle.c:4020
3245	3245	4 : View List ['libewf_single_files_parse_sub_category', 'libewf_single_files_parse_entry_category', 'libewf_single_files_parse_perm_category', 'libewf_single_files_parse_srce_category']	3245	3493	libewf_single_files_read_data_stream	call site: 03535	/src/libewf/libewf/libewf_single_files.c:3418
1127	1223	3 : View List ['libewf_chunk_data_unpack', 'libewf_chunk_table_get_chunk_data_by_offset', 'libcerror_error_set']	1127	1223	libewf_internal_handle_get_media_values	call site: 04067	/src/libewf/libewf/libewf_handle.c:8221
839	1486	10 : View List ['libewf_chunk_table_free', 'libfvalue_table_free', 'libewf_hash_sections_free', 'libewf_write_io_handle_free', 'libewf_read_io_handle_free', 'libcerror_error_set', 'libewf_single_files_free', 'libewf_segment_file_free', 'libewf_write_io_handle_initialize_resume', 'libewf_write_io_handle_initialize_values']	839	1486	libewf_internal_handle_open_file_io_pool	call site: 04064	/src/libewf/libewf/libewf_handle.c:3774
699	1668	5 : View List ['libewf_internal_handle_get_media_values', 'libcerror_error_set', 'libewf_write_io_handle_initialize_values', 'libewf_write_io_handle_initialize_resume', 'libcerror_error_free']	839	2391	libewf_internal_handle_open_file_io_pool	call site: 02740	/src/libewf/libewf/libewf_handle.c:3726
550	550	1 : View List ['libewf_volume_section_s01_read_file_io_pool']	550	582	libewf_segment_file_read_volume_section	call site: 03219	/src/libewf/libewf/libewf_segment_file.c:1872
444	444	1 : View List ['libewf_header_values_parse_xheader_date_value']	444	476	libewf_header_values_parse_xheader	call site: 03373	/src/libewf/libewf/libewf_header_values.c:5736
264	314	2 : View List ['libcdata_range_list_insert_range', 'libewf_deflate_calculate_adler32']	264	632	libewf_error2_section_read_data	call site: 03111	/src/libewf/libewf/libewf_error2_section.c:263
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00395	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
140	140	1 : View List ['libewf_write_io_handle_free']	179	1493	libewf_handle_close	call site: 05405	/src/libewf/libewf/libewf_handle.c:4114
140	140	1 : View List ['libewf_write_io_handle_free']	140	178	libewf_internal_handle_open_file_io_pool	call site: 04231	/src/libewf/libewf/libewf_handle.c:3853

Runtime coverage analysis

Covered functions

296

Functions that are reachable but not covered

652

Reachable functions

948

Percentage of reachable functions covered

31.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libewf/ossfuzz/handle_fuzzer.cc	1
libewf/libbfio/libbfio_memory_range.c	2
libewf/libcerror/libcerror_error.c	4
libewf/libbfio/libbfio_memory_range_io_handle.c	12
libewf/libbfio/libbfio_handle.c	17
libewf/libcdata/libcdata_range_list.c	19
libewf/libcdata/libcdata_list_element.c	10
libewf/libcdata/libcdata_range_list_value.c	3
libewf/libbfio/libbfio_pool.c	21
libewf/libcdata/libcdata_array.c	13
libewf/libcdata/libcdata_list.c	9
libewf/libewf/libewf_handle.c	10
libewf/libewf/libewf_io_handle.c	4
libewf/libewf/libewf_media_values.c	4
libewf/libewf/libewf_segment_table.c	11
libewf/libfdata/libfdata_list.c	21
libewf/libewf/libewf_segment_file.c	30
libewf/libewf/libewf_section_descriptor.c	8
libewf/libewf/libewf_deflate.c	8
libewf/libfdata/libfdata_list_element.c	9
libewf/libfdata/libfdata_range.c	4
libewf/libfcache/libfcache_cache.c	5
libewf/libfcache/libfcache_cache_value.c	8
libewf/libewf/libewf_table_section.c	8
libewf/libewf/libewf_chunk_group.c	4
libewf/libewf/libewf_chunk_data.c	15
libewf/libcnotify/libcnotify_print.c	1
libewf/libfdata/libfdata_mapped_range.c	4
libewf/libfcache/libfcache_date_time.c	1
libewf/libcthreads/libcthreads_read_write_lock.c	4
libewf/libcerror/libcerror_system.c	2
libewf/libewf/libewf_read_io_handle.c	2
libewf/libewf/libewf_write_io_handle.c	18
libewf/libewf/libewf_chunk_table.c	5
libewf/libewf/libewf_header_values.c	24
libewf/libfvalue/libfvalue_table.c	9
libewf/libewf/libewf_value_table.c	4
libewf/libfvalue/libfvalue_value_type.c	3
libewf/libfvalue/libfvalue_value.c	13
libewf/libfvalue/libfvalue_data_handle.c	7
libewf/libfvalue/libfvalue_binary_data.c	10
libewf/libuna/libuna_base16_stream.c	5
libewf/libuna/libuna_base32_stream.c	4
libewf/libuna/libuna_base64_stream.c	6
libewf/libfvalue/libfvalue_floating_point.c	22
libewf/libfvalue/libfvalue_integer.c	21
libewf/libfvalue/libfvalue_string.c	13
libewf/libuna/libuna_utf16_stream.c	7
libewf/libuna/libuna_unicode_character.c	25
libewf/libuna/libuna_utf32_stream.c	7
libewf/libuna/libuna_utf7_stream.c	6
libewf/libuna/libuna_utf8_stream.c	7
libewf/libuna/libuna_byte_stream.c	6
libewf/libuna/libuna_codepage_mac_symbol.c	3
libewf/libuna/libuna_codepage_mac_thai.c	3
libewf/libuna/libuna_codepage_windows_932.c	3
libewf/libuna/libuna_codepage_windows_936.c	3
libewf/libuna/libuna_codepage_windows_949.c	3
libewf/libuna/libuna_codepage_windows_950.c	3
libewf/libuna/libuna_codepage_koi8_r.c	2
libewf/libuna/libuna_codepage_koi8_u.c	2
libewf/libuna/libuna_codepage_mac_arabic.c	2
libewf/libuna/libuna_codepage_mac_celtic.c	2
libewf/libuna/libuna_codepage_mac_centraleurroman.c	2
libewf/libuna/libuna_codepage_mac_croatian.c	2
libewf/libuna/libuna_codepage_mac_cyrillic.c	2
libewf/libuna/libuna_codepage_mac_dingbats.c	2
libewf/libuna/libuna_codepage_mac_farsi.c	2
libewf/libuna/libuna_codepage_mac_gaelic.c	2
libewf/libuna/libuna_codepage_mac_greek.c	2
libewf/libuna/libuna_codepage_mac_icelandic.c	2
libewf/libuna/libuna_codepage_mac_inuit.c	2
libewf/libuna/libuna_codepage_mac_roman.c	2
libewf/libuna/libuna_codepage_mac_romanian.c	2
libewf/libuna/libuna_codepage_mac_russian.c	2
libewf/libuna/libuna_codepage_mac_turkish.c	2
libewf/libuna/libuna_codepage_mac_ukrainian.c	2
libewf/libuna/libuna_codepage_windows_874.c	2
libewf/libuna/libuna_codepage_windows_1250.c	2
libewf/libuna/libuna_codepage_windows_1251.c	2
libewf/libuna/libuna_codepage_windows_1252.c	2
libewf/libuna/libuna_codepage_windows_1253.c	2
libewf/libuna/libuna_codepage_windows_1254.c	2
libewf/libuna/libuna_codepage_windows_1255.c	2
libewf/libuna/libuna_codepage_windows_1256.c	2
libewf/libuna/libuna_codepage_windows_1257.c	2
libewf/libuna/libuna_codepage_windows_1258.c	2
libewf/libuna/libuna_utf8_string.c	14
libewf/libuna/libuna_utf16_string.c	12
libewf/libuna/libuna_utf32_string.c	12
libewf/libfdatetime/libfdatetime_fat_date_time.c	11
libewf/libfdatetime/libfdatetime_date_time_values.c	4
libewf/libfdatetime/libfdatetime_filetime.c	13
libewf/libfvalue/libfvalue_filetime.c	2
libewf/libfdatetime/libfdatetime_floatingtime.c	11
libewf/libfdatetime/libfdatetime_nsf_timedate.c	11
libewf/libfdatetime/libfdatetime_posix_time.c	11
libewf/libfdatetime/libfdatetime_systemtime.c	11
libewf/libfguid/libfguid_identifier.c	11
libewf/libfvalue/libfvalue_value_entry.c	1
libewf/libewf/libewf_hash_sections.c	2
libewf/libewf/libewf_sector_range.c	4
libewf/libewf/libewf_device_information_section.c	1
libewf/libewf/libewf_section.c	8
libewf/libhmac/libhmac_md5.c	4
libewf/libhmac/libhmac_md5_context.c	5
libewf/libewf/libewf_compression.c	2
libewf/libewf/libewf_bit_stream.c	3
libewf/libewf/libewf_huffman_tree.c	4
libewf/libewf/libewf_device_information.c	5
libewf/libfvalue/libfvalue_utf8_string.c	1
libewf/libfvalue/libfvalue_split_utf8_string.c	6
libewf/libewf/libewf_header_sections.c	4
libewf/libewf/libewf_case_data_section.c	1
libewf/libewf/libewf_case_data.c	5
libewf/libewf/libewf_date_time_values.c	11
libewf/libewf/libewf_date_time.c	1
libewf/libewf/libewf_error2_section.c	4
libewf/libewf/libewf_session_section.c	4
libewf/libewf/libewf_sector_range_list.c	2
libewf/libewf/libewf_md5_hash_section.c	4
libewf/libewf/libewf_sha1_hash_section.c	4
libewf/libewf/libewf_restart_data.c	1
libewf/libewf/libewf_analytical_data.c	1
libewf/libewf/libewf_ltree_section.c	2
libewf/libewf/libewf_data_stream.c	1
libewf/libewf/libewf_section_data_handle.c	4
libewf/libfdata/libfdata_stream.c	8
libewf/libfdata/libfdata_segments_array.c	2
libewf/libewf/libewf_volume_section.c	8
libewf/libewf/libewf_digest_section.c	4
libewf/libewf/libewf_single_files.c	16
libewf/libewf/libewf_permission_group.c	3
libewf/libewf/libewf_lef_permission.c	3
libewf/libewf/libewf_serialized_string.c	4
libewf/libewf/libewf_line_reader.c	4
libewf/libewf/libewf_lef_source.c	4
libewf/libewf/libewf_lef_subject.c	3
libewf/libcdata/libcdata_tree_node.c	10
libewf/libewf/libewf_lef_file_entry.c	6
libewf/libewf/libewf_value_reader.c	9
libewf/libewf/libewf_lef_extended_attribute.c	3
libewf/libewf/libewf_chunk_descriptor.c	3
libewf/libewf/libewf_filename.c	2
libewf/libbfio/libbfio_file.c	2
libewf/libbfio/libbfio_file_io_handle.c	12
libewf/libcfile/libcfile_file.c	15
libewf/libcfile/libcfile_support.c	1
libewf/libcpath/libcpath_path.c	2
libewf/libcsplit/libcsplit_narrow_string.c	1
libewf/libcsplit/libcsplit_narrow_split_string.c	6
libewf/libbfio/libbfio_system_string.c	2
libewf/libewf/libewf_hash_values.c	1

Fuzzer: libfwevt_manifest_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	229	51.5%
gold	[1:9]	17	3.82%
yellow	[10:29]	11	2.47%
greenyellow	[30:49]	10	2.25%
lawngreen	50+	177	39.8%
All colors	444	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	354	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	354	libfwevt_provider_initialize	call site: 00052	/src/libfwevt/libfwevt/libfwevt_provider.c:245
0	78	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	78	libfwevt_template_initialize	call site: 00321	/src/libevtx/libfwevt/libfwevt_template.c:116
0	64	1 : View List ['libcerror_error_set']	0	64	libcdata_internal_array_resize	call site: 00091	/src/libfwnt/libcdata/libcdata_array.c:823
0	36	1 : View List ['libfwevt_xml_template_value_free']	0	161	libfwevt_template_read_template_items	call site: 00384	/src/libevtx/libfwevt/libfwevt_template.c:960
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libcdata_array_initialize	call site: 00021	/src/libfwnt/libcdata/libcdata_array.c:162
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_free	call site: 00056	/src/libfwnt/libcdata/libcdata_array.c:260
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_empty	call site: 00138	/src/libfwnt/libcdata/libcdata_array.c:328
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_internal_array_resize	call site: 00090	/src/libfwnt/libcdata/libcdata_array.c:797
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_get_entry_by_index	call site: 00099	/src/libfwnt/libcdata/libcdata_array.c:1146
0	32	1 : View List ['libcerror_error_set']	0	32	libcdata_array_append_entry	call site: 00084	/src/libfwnt/libcdata/libcdata_array.c:1609
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfwevt_channel_initialize	call site: 00115	/src/libfwevt/libfwevt/libfwevt_channel.c:86

Runtime coverage analysis

Covered functions

59

Functions that are reachable but not covered

6

Reachable functions

65

Percentage of reachable functions covered

90.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfwevt/ossfuzz/manifest_fuzzer.cc	1
libfwevt/libfwevt/libfwevt_manifest.c	3
libfwevt/libcerror/libcerror_error.c	3
libfwevt/libcdata/libcdata_array.c	7
libfwevt/libfwevt/libfwevt_provider.c	11
libfwevt/libfwevt/libfwevt_channel.c	3
libfwevt/libfwevt/libfwevt_event.c	3
libfwevt/libfwevt/libfwevt_keyword.c	3
libfwevt/libfwevt/libfwevt_level.c	3
libfwevt/libfwevt/libfwevt_map.c	3
libfwevt/libfwevt/libfwevt_opcode.c	3
libfwevt/libfwevt/libfwevt_task.c	3
libfwevt/libfwevt/libfwevt_template.c	6
libfwevt/libfwevt/libfwevt_template_item.c	3
libfwevt/libfwevt/libfwevt_xml_template_value.c	6

Fuzzer: libfsext_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	891	61.5%
gold	[1:9]	29	2.00%
yellow	[10:29]	27	1.86%
greenyellow	[30:49]	26	1.79%
lawngreen	50+	475	32.8%
All colors	1448	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00197	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_stream_get_segment_index_at_offset	call site: 01328	/src/libregf/libfdata/libfdata_stream.c:1085
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 01113	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00840	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfsext_bitmap_free']	36	108	libfsext_internal_volume_read_block_groups	call site: 00429	/src/libfsext/libfsext/libfsext_volume.c:1614
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	838	1 : View List ['libfsext_internal_file_entry_get_directory']	0	2204	libfsext_internal_file_entry_get_sub_file_entry_by_index	call site: 01125	/src/libfsext/libfsext/libfsext_file_entry.c:3396
0	249	1 : View List ['libfsext_volume_close']	0	526	libfsext_volume_free	call site: 01437	/src/libfsext/libfsext/libfsext_volume.c:195
0	212	5 : View List ['libcerror_error_set', 'libfsext_extent_index_free', 'libfsext_extent_free', 'libfsext_extents_header_free', 'libfsext_extents_footer_free']	0	212	libfsext_extents_read_data	call site: 00596	/src/libfsext/libfsext/libfsext_extents.c:640
0	174	2 : View List ['libcerror_error_set', 'libfsext_file_entry_free']	0	174	libfsext_volume_get_root_directory	call site: 01008	/src/libfsext/libfsext/libfsext_volume.c:3108
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00789	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592

Runtime coverage analysis

Covered functions

227

Functions that are reachable but not covered

37

Reachable functions

264

Percentage of reachable functions covered

85.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsext/ossfuzz/file_entry_fuzzer.cc	1
libfsext/libbfio/libbfio_memory_range.c	2
libfsext/libcerror/libcerror_error.c	3
libfsext/libbfio/libbfio_memory_range_io_handle.c	12
libfsext/libbfio/libbfio_handle.c	10
libfsext/libcdata/libcdata_range_list.c	15
libfsext/libcdata/libcdata_list_element.c	10
libfsext/libcdata/libcdata_range_list_value.c	3
libfsext/libfsext/libfsext_volume.c	8
libfsext/libfsext/libfsext_io_handle.c	3
libfsext/libcdata/libcdata_array.c	10
libfsext/libcthreads/libcthreads_read_write_lock.c	6
libfsext/libcerror/libcerror_system.c	2
libfsext/libfsext/libfsext_superblock.c	4
libfsext/libfsext/libfsext_checksum.c	2
libfsext/libfsext/libfsext_group_descriptor.c	4
libfsext/libfsext/libfsext_bitmap.c	1
libfsext/libfsext/libfsext_inode_table.c	3
libfsext/libfdata/libfdata_vector.c	6
libfsext/libfcache/libfcache_date_time.c	1
libfsext/libfsext/libfsext_inode.c	21
libfsext/libfsext/libfsext_attributes_block.c	1
libfsext/libfsext/libfsext_attribute_values.c	3
libfsext/libfsext/libfsext_extents.c	4
libfsext/libfsext/libfsext_extents_header.c	3
libfsext/libfsext/libfsext_extent.c	4
libfsext/libfsext/libfsext_extent_index.c	3
libfsext/libfsext/libfsext_extents_footer.c	3
libfsext/libfsext/libfsext_data_blocks.c	4
libfsext/libfsext/libfsext_block.c	3
libfsext/libfdata/libfdata_segments_array.c	3
libfsext/libfdata/libfdata_range.c	5
libfsext/libfcache/libfcache_cache.c	4
libfsext/libcdata/libcdata_list.c	9
libfsext/libfcache/libfcache_cache_value.c	8
libfsext/libfdata/libfdata_mapped_range.c	4
libfsext/libfsext/libfsext_file_entry.c	26
libfsext/libfsext/libfsext_block_stream.c	3
libfsext/libfsext/libfsext_buffer_data_handle.c	4
libfsext/libfdata/libfdata_stream.c	9
libfsext/libfsext/libfsext_block_data_handle.c	2
libfsext/libfsext/libfsext_directory_entry.c	6
libfsext/libfsext/libfsext_directory.c	7
libfsext/libfsext/libfsext_block_vector.c	2
libfsext/libuna/libuna_utf8_string.c	3
libfsext/libuna/libuna_unicode_character.c	3

Fuzzer: libhmac_sha224_context_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	42	84.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	8	16.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
32	68	2 : View List ['libcerror_error_set', 'libhmac_sha224_context_free']	32	68	libhmac_sha224_calculate	call site: 00046	/src/libluksde/libhmac/libhmac_sha224.c:196
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_transform	call site: 00027	/src/libluksde/libhmac/libhmac_sha224_context.c:420
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_initialize	call site: 00013	/src/libluksde/libhmac/libhmac_sha224_context.c:592
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_free	call site: 00046	/src/libluksde/libhmac/libhmac_sha224_context.c:631
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_update	call site: 00032	/src/libluksde/libhmac/libhmac_sha224_context.c:987
32	32	1 : View List ['libcerror_error_set']	32	32	libhmac_sha224_context_finalize	call site: 00043	/src/libluksde/libhmac/libhmac_sha224_context.c:1330
0	0	None	192	274	libhmac_sha224_context_update	call site: 00019	/src/libluksde/libhmac/libhmac_sha224_context.c:888
0	0	None	32	68	libhmac_sha224_calculate	call site: 00002	/src/libluksde/libhmac/libhmac_sha224.c:153
0	0	None	32	68	libhmac_sha224_calculate	call site: 00016	/src/libluksde/libhmac/libhmac_sha224.c:166
0	0	None	32	68	libhmac_sha224_calculate	call site: 00035	/src/libluksde/libhmac/libhmac_sha224.c:181
0	0	None	32	32	libhmac_sha224_context_transform	call site: 00022	/src/libluksde/libhmac/libhmac_sha224_context.c:248
0	0	None	32	32	libhmac_sha224_context_transform	call site: 00023	/src/libluksde/libhmac/libhmac_sha224_context.c:259

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libhmac/ossfuzz/sha224_context_fuzzer.cc	1
libhmac/libhmac/libhmac_sha224.c	1
libhmac/libhmac/libhmac_sha224_context.c	5
libhmac/libcerror/libcerror_error.c	3

Fuzzer: libqcow_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	579	80.5%
gold	[1:9]	7	0.97%
yellow	[10:29]	2	0.27%
greenyellow	[30:49]	28	3.89%
lawngreen	50+	103	14.3%
All colors	719	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00221	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00634	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00665	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00597	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
2	2	1 : View List ['realloc']	2	98	libcdata_internal_array_resize	call site: 00585	/src/libfwnt/libcdata/libcdata_array.c:753
0	463	7 : View List ['libqcow_cluster_table_free', 'libqcow_encryption_free', 'libcerror_error_set', 'libfdata_vector_free', 'free', 'libqcow_file_header_free', 'libfcache_cache_free']	0	463	libqcow_internal_file_open_read	call site: 00628	/src/libqcow/libqcow/libqcow_file.c:1630
0	255	1 : View List ['libqcow_file_close']	0	491	libqcow_file_free	call site: 00707	/src/libqcow/libqcow/libqcow_file.c:198
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00466	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	1080	libqcow_file_close	call site: 00679	/src/libqcow/libqcow/libqcow_file.c:897

Runtime coverage analysis

Covered functions

76

Functions that are reachable but not covered

65

Reachable functions

141

Percentage of reachable functions covered

53.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libqcow/ossfuzz/file_fuzzer.cc	1
libqcow/libbfio/libbfio_memory_range.c	2
libqcow/libcerror/libcerror_error.c	3
libqcow/libbfio/libbfio_memory_range_io_handle.c	12
libqcow/libbfio/libbfio_handle.c	9
libqcow/libcdata/libcdata_range_list.c	15
libqcow/libcdata/libcdata_list_element.c	10
libqcow/libcdata/libcdata_range_list_value.c	3
libqcow/libqcow/libqcow_file.c	6
libqcow/libqcow/libqcow_io_handle.c	5
libqcow/libqcow/libqcow_i18n.c	1
libqcow/libcthreads/libcthreads_read_write_lock.c	4
libqcow/libcerror/libcerror_system.c	2
libqcow/libqcow/libqcow_file_header.c	4
libqcow/libqcow/libqcow_encryption.c	3
libqcow/libcaes/libcaes_context.c	6
libqcow/libqcow/libqcow_cluster_table.c	3
libqcow/libfdata/libfdata_vector.c	4
libqcow/libcdata/libcdata_array.c	8
libqcow/libfcache/libfcache_date_time.c	1
libqcow/libfdata/libfdata_segments_array.c	2
libqcow/libfdata/libfdata_range.c	4
libqcow/libfcache/libfcache_cache.c	3
libqcow/libcdata/libcdata_list.c	7
libqcow/libfcache/libfcache_cache_value.c	6
libqcow/libfdata/libfdata_mapped_range.c	3
libqcow/libqcow/libqcow_cluster_block.c	3

Fuzzer: libolecf_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	478	64.7%
gold	[1:9]	11	1.49%
yellow	[10:29]	18	2.43%
greenyellow	[30:49]	6	0.81%
lawngreen	50+	225	30.4%
All colors	738	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	395	6 : View List ['libolecf_allocation_table_free', 'libcerror_error_set', 'libcdata_tree_node_free', 'libcdata_list_free', 'libcdata_range_list_free', 'libolecf_file_header_free']	0	395	libolecf_file_open_read	call site: 00692	/src/libolecf/libolecf/libolecf_file.c:1126
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00187	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	0	215	libcdata_internal_range_list_insert_range_before_element	call site: 00245	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
0	214	4 : View List ['libcdata_range_list_free', 'libcerror_error_set', 'libcdata_list_empty', 'libolecf_directory_entry_free']	0	214	libolecf_io_handle_read_directory_entries	call site: 00462	/src/libolecf/libolecf/libolecf_io_handle.c:1361
0	176	1 : View List ['libolecf_file_close']	0	276	libolecf_file_free	call site: 00733	/src/libolecf/libolecf/libolecf_file.c:157
0	137	4 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node', 'libcdata_tree_node_set_nodes']	0	137	libcdata_internal_tree_node_insert_node_before_sub_node	call site: 00629	/src/libfsntfs/libcdata/libcdata_tree_node.c:2697
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	102	libcdata_internal_range_list_set_last_element	call site: 00251	/src/libvsbsdl/libcdata/libcdata_range_list.c:1002
0	102	3 : View List ['libcerror_error_set', 'libcdata_tree_node_set_next_node', 'libcdata_tree_node_set_previous_node']	0	102	libcdata_internal_tree_node_set_last_sub_node	call site: 00616	/src/libfsntfs/libcdata/libcdata_tree_node.c:1692
0	99	1 : View List ['libbfio_handle_free']	0	620	libolecf_file_close	call site: 00712	/src/libolecf/libolecf/libolecf_file.c:685
0	84	1 : View List ['libcdata_range_list_free']	0	363	libolecf_file_open_read	call site: 00692	/src/libolecf/libolecf/libolecf_file.c:1143

Runtime coverage analysis

Covered functions

104

Functions that are reachable but not covered

11

Reachable functions

115

Percentage of reachable functions covered

90.43%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libolecf/ossfuzz/file_fuzzer.cc	1
libolecf/libbfio/libbfio_memory_range.c	2
libolecf/libcerror/libcerror_error.c	3
libolecf/libbfio/libbfio_memory_range_io_handle.c	12
libolecf/libbfio/libbfio_handle.c	8
libolecf/libcdata/libcdata_range_list.c	16
libolecf/libcdata/libcdata_list_element.c	10
libolecf/libcdata/libcdata_range_list_value.c	3
libolecf/libolecf/libolecf_file.c	5
libolecf/libolecf/libolecf_io_handle.c	7
libolecf/libolecf/libolecf_file_header.c	4
libolecf/libolecf/libolecf_allocation_table.c	4
libolecf/libcdata/libcdata_list.c	7
libolecf/libolecf/libolecf_directory_entry.c	5
libolecf/libolecf/libolecf_directory_tree.c	2
libolecf/libcdata/libcdata_tree_node.c	17
libolecf/libuna/libuna_utf8_string.c	1
libolecf/libuna/libuna_unicode_character.c	3
libolecf/libolecf/libolecf_directory_list.c	1

Fuzzer: libfmapi_entry_identifier_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	76.1%
gold	[1:9]	1	4.76%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	3	14.2%
lawngreen	50+	1	4.76%
All colors	21	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfmapi_entry_identifier_initialize	call site: 00011	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:81
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_entry_identifier_free	call site: 00019	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:118
0	32	1 : View List ['libcerror_error_set']	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00017	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:221
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00001	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:45
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00002	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:56
0	0	None	0	32	libfmapi_entry_identifier_initialize	call site: 00010	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:70
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00013	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:159
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00014	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:172
0	0	None	0	32	libfmapi_entry_identifier_copy_from_byte_stream	call site: 00016	/src/libfmapi/libfmapi/libfmapi_entry_identifier.c:207

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

5

Reachable functions

10

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmapi/ossfuzz/entry_identifier_fuzzer.cc	1
libfmapi/libfmapi/libfmapi_entry_identifier.c	3
libfmapi/libcerror/libcerror_error.c	3

Fuzzer: libfmos_adc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	15	65.2%
gold	[1:9]	1	4.34%
yellow	[10:29]	3	13.0%
greenyellow	[30:49]	1	4.34%
lawngreen	50+	3	13.0%
All colors	23	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	0	None	0	32	libfmos_adc_decompress	call site: 00001	/src/libmodi/libfmos/libfmos_adc.c:54
0	0	None	0	32	libfmos_adc_decompress	call site: 00002	/src/libmodi/libfmos/libfmos_adc.c:65
0	0	None	0	32	libfmos_adc_decompress	call site: 00010	/src/libmodi/libfmos/libfmos_adc.c:76
0	0	None	0	32	libfmos_adc_decompress	call site: 00011	/src/libmodi/libfmos/libfmos_adc.c:87
0	0	None	0	32	libfmos_adc_decompress	call site: 00012	/src/libmodi/libfmos/libfmos_adc.c:100
0	0	None	0	32	libfmos_adc_decompress	call site: 00013	/src/libmodi/libfmos/libfmos_adc.c:117
0	0	None	0	32	libfmos_adc_decompress	call site: 00016	/src/libmodi/libfmos/libfmos_adc.c:170
0	0	None	0	32	libfmos_adc_decompress	call site: 00020	/src/libmodi/libfmos/libfmos_adc.c:237

Runtime coverage analysis

Covered functions

3

Functions that are reachable but not covered

5

Reachable functions

8

Percentage of reachable functions covered

37.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfmos/ossfuzz/adc_fuzzer.cc	1
libfmos/libfmos/libfmos_adc.c	1
libfmos/libcerror/libcerror_error.c	3

Fuzzer: libevt_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	583	74.7%
gold	[1:9]	6	0.76%
yellow	[10:29]	12	1.53%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	179	22.9%
All colors	780	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00176	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00740	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00699	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	38	147	libfdata_list_append_element	call site: 00633	/src/libregf/libfdata/libfdata_list.c:1489
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	230	1 : View List ['libevt_file_close']	0	757	libevt_file_free	call site: 00758	/src/libevt/libevt/libevt_file.c:246
0	206	4 : View List ['libcerror_error_set', 'free', 'libfdata_list_free', 'libevt_io_handle_free']	0	206	libevt_file_initialize	call site: 00513	/src/libevt/libevt/libevt_file.c:175
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	113	4 : View List ['libcerror_error_set', 'libevt_strings_array_free', 'free', 'libfwnt_security_identifier_free']	0	113	libevt_event_record_read_data	call site: 00381	/src/libevt/libevt/libevt_event_record.c:887
0	99	1 : View List ['libbfio_handle_free']	0	673	libevt_file_close	call site: 00714	/src/libevt/libevt/libevt_file.c:980
0	98	2 : View List ['libcerror_error_set', 'libevt_record_values_free']	0	98	libevt_io_handle_event_record_scan	call site: 00676	/src/libevt/libevt/libevt_io_handle.c:852

Runtime coverage analysis

Covered functions

92

Functions that are reachable but not covered

62

Reachable functions

154

Percentage of reachable functions covered

59.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libevt/ossfuzz/file_fuzzer.cc	1
libevt/libbfio/libbfio_memory_range.c	2
libevt/libcerror/libcerror_error.c	4
libevt/libbfio/libbfio_memory_range_io_handle.c	12
libevt/libbfio/libbfio_handle.c	10
libevt/libcdata/libcdata_range_list.c	15
libevt/libcdata/libcdata_list_element.c	10
libevt/libcdata/libcdata_range_list_value.c	3
libevt/libevt/libevt_file.c	5
libevt/libevt/libevt_io_handle.c	7
libevt/libfdata/libfdata_list.c	5
libevt/libcdata/libcdata_array.c	10
libevt/libevt/libevt_record_values.c	5
libevt/libevt/libevt_event_record.c	3
libevt/libfwnt/libfwnt_security_identifier.c	4
libevt/libevt/libevt_strings_array.c	3
libevt/libevt/libevt_end_of_file_record.c	3
libevt/libfdata/libfdata_list_element.c	7
libevt/libfdata/libfdata_range.c	4
libevt/libfcache/libfcache_cache.c	4
libevt/libcdata/libcdata_list.c	7
libevt/libfcache/libfcache_cache_value.c	6
libevt/libcthreads/libcthreads_read_write_lock.c	4
libevt/libcerror/libcerror_system.c	2
libevt/libfdata/libfdata_mapped_range.c	3
libevt/libevt/libevt_file_header.c	4
libevt/libfcache/libfcache_date_time.c	1

Fuzzer: libfsxfs_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	734	61.4%
gold	[1:9]	23	1.92%
yellow	[10:29]	19	1.58%
greenyellow	[30:49]	22	1.84%
lawngreen	50+	397	33.2%
All colors	1195	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00193	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_stream_get_segment_index_at_offset	call site: 01084	/src/libregf/libfdata/libfdata_stream.c:1085
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00888	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00450	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00712	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	601	1 : View List ['libfsxfs_internal_file_entry_get_directory']	0	2378	libfsxfs_file_entry_get_sub_file_entry_by_index	call site: 00896	/src/libfsxfs/libfsxfs/libfsxfs_file_entry.c:2940
0	478	1 : View List ['libfsxfs_extent_btree_get_extents_from_branch_node']	0	670	libfsxfs_extent_btree_get_extents_from_node	call site: 00618	/src/libfsxfs/libfsxfs/libfsxfs_extent_btree.c:698
0	206	1 : View List ['libfsxfs_volume_close']	0	405	libfsxfs_volume_free	call site: 01189	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:180
0	174	2 : View List ['libfsxfs_file_entry_free', 'libcerror_error_set']	0	174	libfsxfs_volume_get_root_directory	call site: 00768	/src/libfsxfs/libfsxfs/libfsxfs_volume.c:1721
0	166	4 : View List ['libcerror_error_set', 'libcdata_array_empty', 'libfsxfs_block_directory_free', 'libfsxfs_directory_table_free']	0	166	libfsxfs_directory_read_file_io_handle	call site: 00825	/src/libfsxfs/libfsxfs/libfsxfs_directory.c:301

Runtime coverage analysis

Covered functions

188

Functions that are reachable but not covered

46

Reachable functions

234

Percentage of reachable functions covered

80.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsxfs/ossfuzz/file_entry_fuzzer.cc	1
libfsxfs/libbfio/libbfio_memory_range.c	2
libfsxfs/libcerror/libcerror_error.c	3
libfsxfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsxfs/libbfio/libbfio_handle.c	10
libfsxfs/libcdata/libcdata_range_list.c	15
libfsxfs/libcdata/libcdata_list_element.c	10
libfsxfs/libcdata/libcdata_range_list_value.c	3
libfsxfs/libfsxfs/libfsxfs_volume.c	6
libfsxfs/libfsxfs/libfsxfs_io_handle.c	3
libfsxfs/libcthreads/libcthreads_read_write_lock.c	6
libfsxfs/libcerror/libcerror_system.c	2
libfsxfs/libfsxfs/libfsxfs_superblock.c	4
libfsxfs/libfsxfs/libfsxfs_file_system.c	4
libfsxfs/libfsxfs/libfsxfs_inode_btree.c	7
libfsxfs/libcdata/libcdata_array.c	9
libfsxfs/libfsxfs/libfsxfs_inode_information.c	4
libfsxfs/libfsxfs/libfsxfs_btree_block.c	4
libfsxfs/libfsxfs/libfsxfs_btree_header.c	3
libfsxfs/libfsxfs/libfsxfs_inode_btree_record.c	3
libfsxfs/libfsxfs/libfsxfs_inode.c	17
libfsxfs/libfsxfs/libfsxfs_extent_list.c	1
libfsxfs/libfsxfs/libfsxfs_extents.c	2
libfsxfs/libfsxfs/libfsxfs_extent.c	3
libfsxfs/libfsxfs/libfsxfs_extent_btree.c	5
libfsxfs/libfsxfs/libfsxfs_file_entry.c	24
libfsxfs/libfsxfs/libfsxfs_data_stream.c	3
libfsxfs/libfsxfs/libfsxfs_buffer_data_handle.c	4
libfsxfs/libfdata/libfdata_stream.c	9
libfsxfs/libfdata/libfdata_segments_array.c	2
libfsxfs/libfdata/libfdata_mapped_range.c	4
libfsxfs/libfdata/libfdata_range.c	4
libfsxfs/libfsxfs/libfsxfs_block_data_handle.c	2
libfsxfs/libfsxfs/libfsxfs_directory_entry.c	5
libfsxfs/libfsxfs/libfsxfs_attribute_values.c	1
libfsxfs/libfsxfs/libfsxfs_directory.c	5
libfsxfs/libfsxfs/libfsxfs_directory_table.c	3
libfsxfs/libfsxfs/libfsxfs_directory_table_header.c	3
libfsxfs/libfsxfs/libfsxfs_block_directory.c	4
libfsxfs/libfsxfs/libfsxfs_block_directory_header.c	3
libfsxfs/libfsxfs/libfsxfs_block_directory_footer.c	3
libfsxfs/libuna/libuna_utf8_string.c	3
libfsxfs/libuna/libuna_unicode_character.c	3

Fuzzer: libfcrypto_crypt_serpent_cbc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	43	84.3%
gold	[1:9]	1	1.96%
yellow	[10:29]	1	1.96%
greenyellow	[30:49]	1	1.96%
lawngreen	50+	5	9.80%
All colors	51	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_serpent_context_initialize	call site: 00011	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:609
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_free	call site: 00049	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:663
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_context_set_key	call site: 00018	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:775
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_internal_serpent_context_encrypt_block	call site: 00034	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:1541
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_serpent_crypt_cbc	call site: 00046	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2564
0	0	None	41	274	libfcrypto_serpent_crypt_cbc	call site: 00029	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:2426
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00001	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:573
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00002	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:584
0	0	None	0	32	libfcrypto_serpent_context_initialize	call site: 00010	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:598
0	0	None	0	32	libfcrypto_serpent_context_free	call site: 00048	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:647
0	0	None	0	32	libfcrypto_serpent_context_set_key	call site: 00013	/src/libfcrypto/libfcrypto/libfcrypto_serpent_context.c:706

Runtime coverage analysis

Covered functions

7

Functions that are reachable but not covered

6

Reachable functions

13

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_serpent_cbc_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_serpent_context.c	6
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libcreg_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	667	83.4%
gold	[1:9]	4	0.50%
yellow	[10:29]	1	0.12%
greenyellow	[30:49]	3	0.37%
lawngreen	50+	124	15.5%
All colors	799	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00195	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00530	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00767	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	38	147	libfdata_list_append_element	call site: 00722	/src/libregf/libfdata/libfdata_list.c:1489
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00510	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	255	1 : View List ['libcreg_file_close']	0	454	libcreg_file_free	call site: 00789	/src/libcreg/libcreg/libcreg_file.c:176
0	190	3 : View List ['libcerror_error_set', 'libfdata_area_free', 'libfcache_cache_free']	0	190	libcreg_key_navigation_read_file_io_handle	call site: 00519	/src/libcreg/libcreg/libcreg_key_navigation.c:446
0	165	3 : View List ['libcerror_error_set', 'libcreg_data_block_free', 'libfdata_list_free']	0	165	libcreg_key_navigation_read_data_blocks	call site: 00731	/src/libcreg/libcreg/libcreg_key_navigation.c:680
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	470	libcreg_file_close	call site: 00779	/src/libcreg/libcreg/libcreg_file.c:855

Runtime coverage analysis

Covered functions

77

Functions that are reachable but not covered

79

Reachable functions

156

Percentage of reachable functions covered

49.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcreg/ossfuzz/file_fuzzer.cc	1
libcreg/libbfio/libbfio_memory_range.c	2
libcreg/libcerror/libcerror_error.c	3
libcreg/libbfio/libbfio_memory_range_io_handle.c	12
libcreg/libbfio/libbfio_handle.c	10
libcreg/libcdata/libcdata_range_list.c	15
libcreg/libcdata/libcdata_list_element.c	10
libcreg/libcdata/libcdata_range_list_value.c	3
libcreg/libcreg/libcreg_file.c	5
libcreg/libcreg/libcreg_io_handle.c	5
libcreg/libcthreads/libcthreads_read_write_lock.c	4
libcreg/libcerror/libcerror_system.c	2
libcreg/libcreg/libcreg_key_navigation.c	6
libcreg/libfdata/libfdata_area.c	4
libcreg/libcdata/libcdata_array.c	9
libcreg/libfcache/libfcache_date_time.c	1
libcreg/libcreg/libcreg_key_hierarchy_entry.c	3
libcreg/libfdata/libfdata_segments_array.c	2
libcreg/libfdata/libfdata_range.c	5
libcreg/libfcache/libfcache_cache.c	5
libcreg/libfcache/libfcache_cache_value.c	6
libcreg/libcdata/libcdata_list.c	7
libcreg/libfdata/libfdata_mapped_range.c	3
libcreg/libfdata/libfdata_list.c	5
libcreg/libcreg/libcreg_data_block.c	4
libcreg/libcreg/libcreg_key_name_entry.c	4
libcreg/libcreg/libcreg_value_entry.c	3
libcreg/libfdata/libfdata_list_element.c	7

Fuzzer: libfcrypto_crypt_rc4_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	21	77.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	5	18.5%
lawngreen	50+	1	3.70%
All colors	27	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfcrypto_rc4_context_initialize	call site: 00011	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:77
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_rc4_context_free	call site: 00025	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:131
0	32	1 : View List ['libcerror_error_set']	0	32	libfcrypto_rc4_context_set_key	call site: 00015	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:192
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00001	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:41
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00002	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:52
0	0	None	0	32	libfcrypto_rc4_context_initialize	call site: 00010	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:66
0	0	None	0	32	libfcrypto_rc4_context_free	call site: 00024	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:115
0	0	None	0	32	libfcrypto_rc4_context_set_key	call site: 00013	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:168
0	0	None	0	32	libfcrypto_rc4_context_set_key	call site: 00014	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:181
0	0	None	0	32	libfcrypto_rc4_crypt	call site: 00017	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:253
0	0	None	0	32	libfcrypto_rc4_crypt	call site: 00018	/src/libluksde/libfcrypto/libfcrypto_rc4_context.c:266

Runtime coverage analysis

Covered functions

6

Functions that are reachable but not covered

5

Reachable functions

11

Percentage of reachable functions covered

54.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfcrypto/ossfuzz/crypt_rc4_fuzzer.cc	1
libfcrypto/libfcrypto/libfcrypto_rc4_context.c	4
libfcrypto/libcerror/libcerror_error.c	3

Fuzzer: libpff_item_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1566	66.6%
gold	[1:9]	61	2.59%
yellow	[10:29]	44	1.87%
greenyellow	[30:49]	16	0.68%
lawngreen	50+	663	28.2%
All colors	2350	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
267	363	4 : View List ['libpff_decompress_data', 'libcerror_error_set', 'free', 'malloc']	267	363	libpff_data_block_read_file_io_handle	call site: 00889	/src/libpff/libpff/libpff_data_block.c:831
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00178	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_descriptors_index_get_index_value_by_identifier	call site: 00758	/src/libpff/libpff/libpff_descriptors_index.c:258
167	206	3 : View List ['libcdata_btree_get_value_by_value', 'libpff_index_value_initialize', 'libpff_index_values_list_get_value_by_index']	167	370	libpff_offsets_index_get_index_value_by_identifier	call site: 00860	/src/libpff/libpff/libpff_offsets_index.c:250
116	324	4 : View List ['libcerror_error_set', 'libcdata_tree_node_clone', 'libpff_item_values_free', 'free']	116	324	libpff_item_initialize	call site: 02266	/src/libpff/libpff/libpff_item.c:188
98	230	3 : View List ['libcerror_error_set', 'libfdata_stream_get_segment_index_at_offset', 'libcdata_array_get_number_of_entries']	98	230	libfdata_stream_seek_offset	call site: 01896	/src/libregf/libfdata/libfdata_stream.c:2419
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 01086	/src/libvsbsdl/libfcache/libfcache_cache.c:801
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 01880	/src/libregf/libfdata/libfdata_stream.c:2554
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	84	2 : View List ['libpff_table_get_record_entry_by_index', 'libpff_record_entry_get_data_size']	36	4274	libpff_table_read_entry_value	call site: 01756	/src/libpff/libpff/libpff_table.c:9109
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	1130	1 : View List ['libpff_local_descriptors_get_leaf_node_from_node_by_identifier']	0	1372	libpff_local_descriptors_get_leaf_node_from_node_by_identifier	call site: 01687	/src/libpff/libpff/libpff_local_descriptors.c:516

Runtime coverage analysis

Covered functions

289

Functions that are reachable but not covered

70

Reachable functions

359

Percentage of reachable functions covered

80.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libpff/ossfuzz/item_fuzzer.cc	1
libpff/libbfio/libbfio_memory_range.c	2
libpff/libcerror/libcerror_error.c	4
libpff/libbfio/libbfio_memory_range_io_handle.c	12
libpff/libbfio/libbfio_handle.c	8
libpff/libcdata/libcdata_range_list.c	15
libpff/libcdata/libcdata_list_element.c	10
libpff/libcdata/libcdata_range_list_value.c	3
libpff/libpff/libpff_file.c	6
libpff/libpff/libpff_io_handle.c	3
libpff/libpff/libpff_file_header.c	4
libpff/libpff/libpff_checksum.c	2
libpff/libpff/libpff_descriptors_index.c	3
libpff/libpff/libpff_index.c	5
libpff/libcdata/libcdata_btree.c	3
libpff/libcdata/libcdata_array.c	11
libpff/libcdata/libcdata_tree_node.c	21
libpff/libcdata/libcdata_btree_values_list.c	1
libpff/libcdata/libcdata_list.c	11
libpff/libpff/libpff_index_values_list.c	3
libpff/libpff/libpff_index_value.c	3
libpff/libpff/libpff_offsets_index.c	3
libpff/libpff/libpff_item_tree.c	7
libpff/libpff/libpff_item_descriptor.c	4
libpff/libpff/libpff_index_node.c	6
libpff/libpff/libpff_block_tree.c	3
libpff/libpff/libpff_block_tree_node.c	6
libpff/libpff/libpff_block_descriptor.c	2
libpff/libpff/libpff_name_to_id_map.c	5
libpff/libcdata/libcdata_btree_node.c	2
libpff/libpff/libpff_item_values.c	3
libpff/libpff/libpff_table.c	33
libpff/libpff/libpff_table_header.c	8
libpff/libpff/libpff_local_descriptors_tree.c	3
libpff/libpff/libpff_local_descriptors.c	4
libpff/libfcache/libfcache_cache.c	4
libpff/libfcache/libfcache_cache_value.c	8
libpff/libpff/libpff_data_block.c	7
libpff/libpff/libpff_compression.c	1
libpff/libpff/libpff_deflate.c	8
libpff/libpff/libpff_bit_stream.c	3
libpff/libpff/libpff_huffman_tree.c	4
libpff/libpff/libpff_data_array.c	6
libpff/libfdata/libfdata_list.c	17
libpff/libpff/libpff_data_array_entry.c	3
libpff/libfdata/libfdata_list_element.c	10
libpff/libpff/libpff_encryption.c	1
libpff/libfdata/libfdata_range.c	4
libpff/libfdata/libfdata_mapped_range.c	4
libpff/libfcache/libfcache_date_time.c	1
libpff/libpff/libpff_table_block_index.c	5
libpff/libpff/libpff_table_index_value.c	2
libpff/libpff/libpff_reference_descriptor.c	2
libpff/libpff/libpff_record_set.c	6
libpff/libpff/libpff_record_entry.c	7
libpff/libpff/libpff_column_definition.c	2
libpff/libpff/libpff_local_descriptors_node.c	5
libpff/libpff/libpff_local_descriptor_value.c	3
libpff/libpff/libpff_descriptor_data_stream.c	6
libpff/libfdata/libfdata_stream.c	8
libpff/libfdata/libfdata_segments_array.c	2
libpff/libpff/libpff_value_type.c	1
libpff/libpff/libpff_item.c	4

Fuzzer: libfsntfs_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1565	62.1%
gold	[1:9]	63	2.5%
yellow	[10:29]	39	1.54%
greenyellow	[30:49]	55	2.18%
lawngreen	50+	798	31.6%
All colors	2520	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2245	2245	2 : View List ['libfsntfs_reparse_point_attribute_get_compression_method', 'libfsntfs_internal_file_entry_get_reparse_point_attribute']	2245	4646	libfsntfs_file_entry_initialize	call site: 01950	/src/libfsntfs/libfsntfs/libfsntfs_file_entry.c:234
676	772	3 : View List ['libcerror_error_set', 'libfsntfs_cluster_block_stream_initialize_from_compressed_stream', 'libfdata_stream_free']	676	772	libfsntfs_cluster_block_stream_initialize	call site: 01362	/src/libfsntfs/libfsntfs/libfsntfs_cluster_block_stream.c:945
259	469	2 : View List ['libcdata_btree_node_split', 'libcdata_btree_node_get_sub_node_by_value']	259	653	libcdata_btree_insert_value	call site: 02123	/src/libfsntfs/libcdata/libcdata_btree.c:591
82	82	1 : View List ['libfsntfs_internal_attribute_free']	82	580	libfsntfs_volume_close	call site: 02507	/src/libfsntfs/libfsntfs/libfsntfs_volume.c:957
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 01403	/src/libregf/libfdata/libfdata_stream.c:2554
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_vector_get_size	call site: 01273	/src/libvsbsdl/libfdata/libfdata_vector.c:1910
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_stream_get_segment_index_at_offset	call site: 01035	/src/libregf/libfdata/libfdata_stream.c:1085
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_vector_get_element_index_at_offset	call site: 01294	/src/libvsbsdl/libfdata/libfdata_vector.c:1078
53	53	1 : View List ['libcdata_tree_node_get_sub_node_by_index']	89	385	libcdata_btree_node_get_sub_node_by_value	call site: 01566	/src/libfsntfs/libcdata/libcdata_btree_node.c:193
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 02431	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01922	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
40	40	1 : View List ['libbfio_handle_get_size']	40	4754	libfsntfs_file_system_read_mft	call site: 00692	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:391

Runtime coverage analysis

Covered functions

369

Functions that are reachable but not covered

99

Reachable functions

468

Percentage of reachable functions covered

78.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsntfs/ossfuzz/file_entry_fuzzer.cc	1
libfsntfs/libbfio/libbfio_memory_range.c	2
libfsntfs/libcerror/libcerror_error.c	3
libfsntfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsntfs/libbfio/libbfio_handle.c	11
libfsntfs/libcdata/libcdata_range_list.c	16
libfsntfs/libcdata/libcdata_list_element.c	10
libfsntfs/libcdata/libcdata_range_list_value.c	3
libfsntfs/libfsntfs/libfsntfs_volume.c	6
libfsntfs/libfsntfs/libfsntfs_io_handle.c	3
libfsntfs/libcthreads/libcthreads_read_write_lock.c	6
libfsntfs/libcerror/libcerror_system.c	2
libfsntfs/libfsntfs/libfsntfs_volume_header.c	9
libfsntfs/libfsntfs/libfsntfs_file_system.c	5
libfsntfs/libfsntfs/libfsntfs_mft_entry.c	19
libfsntfs/libcdata/libcdata_array.c	11
libfsntfs/libfsntfs/libfsntfs_mft_entry_header.c	7
libfsntfs/libfsntfs/libfsntfs_fixup_values.c	1
libfsntfs/libfsntfs/libfsntfs_mft_attribute.c	21
libfsntfs/libfsntfs/libfsntfs_data_run.c	4
libfsntfs/libuna/libuna_utf8_string.c	4
libfsntfs/libuna/libuna_unicode_character.c	7
libfsntfs/libfsntfs/libfsntfs_name.c	1
libfsntfs/libfsntfs/libfsntfs_mft.c	4
libfsntfs/libfdata/libfdata_vector.c	11
libfsntfs/libfcache/libfcache_date_time.c	1
libfsntfs/libfdata/libfdata_segments_array.c	4
libfsntfs/libfdata/libfdata_range.c	5
libfsntfs/libfcache/libfcache_cache.c	5
libfsntfs/libcdata/libcdata_list.c	17
libfsntfs/libfcache/libfcache_cache_value.c	9
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list.c	11
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list_entry.c	4
libfsntfs/libfdata/libfdata_mapped_range.c	4
libfsntfs/libfsntfs/libfsntfs_cluster_block_stream.c	5
libfsntfs/libfsntfs/libfsntfs_buffer_data_handle.c	4
libfsntfs/libfdata/libfdata_stream.c	8
libfsntfs/libfsntfs/libfsntfs_compressed_block_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compressed_block_vector.c	2
libfsntfs/libfsntfs/libfsntfs_compression_unit_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compression_unit_descriptor.c	3
libfsntfs/libfsntfs/libfsntfs_cluster_block_data.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_block.c	2
libfsntfs/libfsntfs/libfsntfs_compression.c	1
libfsntfs/libfwnt/libfwnt_lznt1.c	2
libfsntfs/libfwnt/libfwnt_lzx.c	7
libfsntfs/libfwnt/libfwnt_bit_stream.c	4
libfsntfs/libcnotify/libcnotify_print.c	1
libfsntfs/libfwnt/libfwnt_huffman_tree.c	4
libfsntfs/libfwnt/libfwnt_lzxpress.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_data_handle.c	5
libfsntfs/libcdata/libcdata_btree.c	4
libfsntfs/libcdata/libcdata_tree_node.c	16
libfsntfs/libcdata/libcdata_btree_values_list.c	1
libfsntfs/libfsntfs/libfsntfs_path_hint.c	1
libfsntfs/libcdata/libcdata_btree_node.c	5
libfsntfs/libfsntfs/libfsntfs_file_name_values.c	6
libfsntfs/libfsntfs/libfsntfs_security_descriptor_index.c	3
libfsntfs/libfsntfs/libfsntfs_data_stream.c	2
libfsntfs/libfsntfs/libfsntfs_extent.c	2
libfsntfs/libfsntfs/libfsntfs_index.c	10
libfsntfs/libfsntfs/libfsntfs_index_root_header.c	6
libfsntfs/libfsntfs/libfsntfs_bitmap_values.c	4
libfsntfs/libfsntfs/libfsntfs_cluster_block_vector.c	2
libfsntfs/libfsntfs/libfsntfs_cluster_block.c	4
libfsntfs/libfsntfs/libfsntfs_index_node.c	6
libfsntfs/libfsntfs/libfsntfs_index_node_header.c	3
libfsntfs/libfsntfs/libfsntfs_index_value.c	3
libfsntfs/libfsntfs/libfsntfs_index_entry_vector.c	2
libfsntfs/libfsntfs/libfsntfs_index_entry.c	3
libfsntfs/libfsntfs/libfsntfs_index_entry_header.c	5
libfsntfs/libfsntfs/libfsntfs_file_entry.c	6
libfsntfs/libfsntfs/libfsntfs_directory_entries_tree.c	8
libfsntfs/libfdata/libfdata_list.c	7
libfsntfs/libfdata/libfdata_list_element.c	8
libfsntfs/libfsntfs/libfsntfs_directory_entry.c	5
libfsntfs/libfsntfs/libfsntfs_standard_information_values.c	4
libfsntfs/libfsntfs/libfsntfs_attribute.c	4
libfsntfs/libfsntfs/libfsntfs_txf_data_values.c	3
libfsntfs/libfsntfs/libfsntfs_logged_utility_stream_values.c	3
libfsntfs/libfsntfs/libfsntfs_object_identifier_values.c	3
libfsntfs/libfsntfs/libfsntfs_reparse_point_values.c	4
libfsntfs/libfsntfs/libfsntfs_security_descriptor_values.c	6
libfsntfs/libfsntfs/libfsntfs_volume_information_values.c	3
libfsntfs/libfsntfs/libfsntfs_volume_name_values.c	3
libfsntfs/libfsntfs/libfsntfs_reparse_point_attribute.c	1

Fuzzer: libftxf_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	32	58.1%
gold	[1:9]	2	3.63%
yellow	[10:29]	3	5.45%
greenyellow	[30:49]	3	5.45%
lawngreen	50+	15	27.2%
All colors	55	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libftxf_record_initialize	call site: 00011	/src/libftxf/libftxf/libftxf_record.c:89
0	32	1 : View List ['libcerror_error_set']	0	32	libftxf_record_free	call site: 00053	/src/libftxf/libftxf/libftxf_record.c:126
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfusn_record_initialize	call site: 00029	/src/libfusn/libfusn/libfusn_record.c:86
0	32	1 : View List ['libcerror_error_set']	0	32	libfusn_record_free	call site: 00048	/src/libfusn/libfusn/libfusn_record.c:123
0	32	2 : View List ['libcerror_error_set', 'free']	0	32	libfusn_record_copy_from_byte_stream	call site: 00041	/src/libfusn/libfusn/libfusn_record.c:479
0	32	1 : View List ['libcerror_error_set']	0	32	libfusn_record_get_size	call site: 00045	/src/libfusn/libfusn/libfusn_record.c:576
0	0	None	0	69	libftxf_internal_record_read_update_journal_entry_list_data	call site: 00026	/src/libftxf/libftxf/libftxf_record.c:336
0	0	None	0	69	libftxf_internal_record_read_update_journal_entry_list_data	call site: 00044	/src/libftxf/libftxf/libftxf_record.c:364
0	0	None	0	32	libftxf_record_initialize	call site: 00001	/src/libftxf/libftxf/libftxf_record.c:53
0	0	None	0	32	libftxf_record_initialize	call site: 00002	/src/libftxf/libftxf/libftxf_record.c:64
0	0	None	0	32	libftxf_record_initialize	call site: 00010	/src/libftxf/libftxf/libftxf_record.c:78

Runtime coverage analysis

Covered functions

10

Functions that are reachable but not covered

5

Reachable functions

15

Percentage of reachable functions covered

66.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libftxf/ossfuzz/record_fuzzer.cc	1
libftxf/libftxf/libftxf_record.c	4
libftxf/libcerror/libcerror_error.c	3
libftxf/libfusn/libfusn_record.c	4

Fuzzer: libvsbsdl_partition_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	550	82.2%
gold	[1:9]	1	0.14%
yellow	[10:29]	5	0.74%
greenyellow	[30:49]	7	1.04%
lawngreen	50+	106	15.8%
All colors	669	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00210	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00625	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_read	call site: 00439	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:614
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00416	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00591	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
38	38	1 : View List ['libcdata_array_set_entry_by_index']	38	74	libfdata_segments_array_append_segment	call site: 00593	/src/libvsbsdl/libfdata/libfdata_segments_array.c:642
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
2	2	1 : View List ['realloc']	2	98	libcdata_internal_array_resize	call site: 00380	/src/libfwnt/libcdata/libcdata_array.c:753
0	189	1 : View List ['libvsbsdl_volume_close']	0	388	libvsbsdl_volume_free	call site: 00661	/src/libvsbsdl/libvsbsdl/libvsbsdl_volume.c:169
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00473	/src/libvsbsdl/libfdata/libfdata_vector.c:180
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140

Runtime coverage analysis

Covered functions

78

Functions that are reachable but not covered

63

Reachable functions

141

Percentage of reachable functions covered

55.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsbsdl/ossfuzz/partition_fuzzer.cc	1
libvsbsdl/libbfio/libbfio_memory_range.c	2
libvsbsdl/libcerror/libcerror_error.c	3
libvsbsdl/libbfio/libbfio_memory_range_io_handle.c	12
libvsbsdl/libbfio/libbfio_handle.c	9
libvsbsdl/libcdata/libcdata_range_list.c	15
libvsbsdl/libcdata/libcdata_list_element.c	10
libvsbsdl/libcdata/libcdata_range_list_value.c	3
libvsbsdl/libvsbsdl/libvsbsdl_volume.c	7
libvsbsdl/libvsbsdl/libvsbsdl_io_handle.c	3
libvsbsdl/libcthreads/libcthreads_read_write_lock.c	6
libvsbsdl/libcerror/libcerror_system.c	2
libvsbsdl/libvsbsdl/libvsbsdl_disklabel.c	7
libvsbsdl/libcdata/libcdata_array.c	9
libvsbsdl/libvsbsdl/libvsbsdl_partition_entry.c	5
libvsbsdl/libvsbsdl/libvsbsdl_partition.c	2
libvsbsdl/libfdata/libfdata_vector.c	4
libvsbsdl/libfcache/libfcache_date_time.c	1
libvsbsdl/libvsbsdl/libvsbsdl_sector_data.c	4
libvsbsdl/libfdata/libfdata_segments_array.c	2
libvsbsdl/libfdata/libfdata_range.c	4
libvsbsdl/libfcache/libfcache_cache.c	3
libvsbsdl/libcdata/libcdata_list.c	7
libvsbsdl/libfcache/libfcache_cache_value.c	6
libvsbsdl/libfdata/libfdata_mapped_range.c	3

Fuzzer: libfsntfs_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1281	65.4%
gold	[1:9]	52	2.65%
yellow	[10:29]	26	1.32%
greenyellow	[30:49]	30	1.53%
lawngreen	50+	569	29.0%
All colors	1958	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
774	1029	6 : View List ['libfcache_cache_initialize', 'libfdata_vector_get_number_of_segments', 'libfdata_vector_get_segment_by_index', 'libfdata_vector_get_element_value_by_index', 'libfsntfs_cluster_block_vector_initialize', 'libfdata_vector_get_number_of_elements']	774	1943	libfsntfs_bitmap_values_read_from_mft_attribute	call site: 01724	/src/libfsntfs/libfsntfs/libfsntfs_bitmap_values.c:497
676	772	3 : View List ['libcerror_error_set', 'libfsntfs_cluster_block_stream_initialize_from_compressed_stream', 'libfdata_stream_free']	676	772	libfsntfs_cluster_block_stream_initialize	call site: 01362	/src/libfsntfs/libfsntfs/libfsntfs_cluster_block_stream.c:945
124	194	2 : View List ['libfsntfs_mft_attribute_list_initialize', 'libcdata_btree_get_value_by_value']	124	1400	libfsntfs_mft_entry_read_attributes	call site: 01551	/src/libfsntfs/libfsntfs/libfsntfs_mft_entry.c:1132
82	82	1 : View List ['libfsntfs_internal_attribute_free']	82	580	libfsntfs_volume_close	call site: 01945	/src/libfsntfs/libfsntfs/libfsntfs_volume.c:957
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 01403	/src/libregf/libfdata/libfdata_stream.c:2554
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_vector_get_size	call site: 01273	/src/libvsbsdl/libfdata/libfdata_vector.c:1910
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_stream_get_segment_index_at_offset	call site: 01035	/src/libregf/libfdata/libfdata_stream.c:1085
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_vector_get_element_index_at_offset	call site: 01294	/src/libvsbsdl/libfdata/libfdata_vector.c:1078
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01922	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
40	40	1 : View List ['libbfio_handle_get_size']	40	4754	libfsntfs_file_system_read_mft	call site: 00692	/src/libfsntfs/libfsntfs/libfsntfs_file_system.c:391
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	435	1 : View List ['libfsntfs_volume_close']	0	634	libfsntfs_volume_free	call site: 01952	/src/libfsntfs/libfsntfs/libfsntfs_volume.c:187

Runtime coverage analysis

Covered functions

285

Functions that are reachable but not covered

83

Reachable functions

368

Percentage of reachable functions covered

77.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsntfs/ossfuzz/volume_fuzzer.cc	1
libfsntfs/libbfio/libbfio_memory_range.c	2
libfsntfs/libcerror/libcerror_error.c	3
libfsntfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsntfs/libbfio/libbfio_handle.c	11
libfsntfs/libcdata/libcdata_range_list.c	15
libfsntfs/libcdata/libcdata_list_element.c	10
libfsntfs/libcdata/libcdata_range_list_value.c	3
libfsntfs/libfsntfs/libfsntfs_volume.c	5
libfsntfs/libfsntfs/libfsntfs_io_handle.c	3
libfsntfs/libcthreads/libcthreads_read_write_lock.c	4
libfsntfs/libcerror/libcerror_system.c	2
libfsntfs/libfsntfs/libfsntfs_volume_header.c	9
libfsntfs/libfsntfs/libfsntfs_file_system.c	4
libfsntfs/libfsntfs/libfsntfs_mft_entry.c	17
libfsntfs/libcdata/libcdata_array.c	11
libfsntfs/libfsntfs/libfsntfs_mft_entry_header.c	7
libfsntfs/libfsntfs/libfsntfs_fixup_values.c	1
libfsntfs/libfsntfs/libfsntfs_mft_attribute.c	21
libfsntfs/libfsntfs/libfsntfs_data_run.c	4
libfsntfs/libuna/libuna_utf8_string.c	4
libfsntfs/libuna/libuna_unicode_character.c	7
libfsntfs/libfsntfs/libfsntfs_name.c	1
libfsntfs/libfsntfs/libfsntfs_mft.c	3
libfsntfs/libfdata/libfdata_vector.c	11
libfsntfs/libfcache/libfcache_date_time.c	1
libfsntfs/libfdata/libfdata_segments_array.c	4
libfsntfs/libfdata/libfdata_range.c	5
libfsntfs/libfcache/libfcache_cache.c	4
libfsntfs/libcdata/libcdata_list.c	9
libfsntfs/libfcache/libfcache_cache_value.c	8
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list.c	11
libfsntfs/libfsntfs/libfsntfs_mft_attribute_list_entry.c	4
libfsntfs/libfdata/libfdata_mapped_range.c	4
libfsntfs/libfsntfs/libfsntfs_cluster_block_stream.c	5
libfsntfs/libfsntfs/libfsntfs_buffer_data_handle.c	4
libfsntfs/libfdata/libfdata_stream.c	8
libfsntfs/libfsntfs/libfsntfs_compressed_block_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compressed_block_vector.c	2
libfsntfs/libfsntfs/libfsntfs_compression_unit_data_handle.c	4
libfsntfs/libfsntfs/libfsntfs_compression_unit_descriptor.c	3
libfsntfs/libfsntfs/libfsntfs_cluster_block_data.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_block.c	2
libfsntfs/libfsntfs/libfsntfs_compression.c	1
libfsntfs/libfwnt/libfwnt_lznt1.c	2
libfsntfs/libfwnt/libfwnt_lzx.c	7
libfsntfs/libfwnt/libfwnt_bit_stream.c	4
libfsntfs/libcnotify/libcnotify_print.c	1
libfsntfs/libfwnt/libfwnt_huffman_tree.c	4
libfsntfs/libfwnt/libfwnt_lzxpress.c	2
libfsntfs/libfsntfs/libfsntfs_compressed_data_handle.c	5
libfsntfs/libcdata/libcdata_btree.c	3
libfsntfs/libcdata/libcdata_tree_node.c	11
libfsntfs/libcdata/libcdata_btree_values_list.c	1
libfsntfs/libfsntfs/libfsntfs_path_hint.c	1
libfsntfs/libcdata/libcdata_btree_node.c	2
libfsntfs/libfsntfs/libfsntfs_file_name_values.c	5
libfsntfs/libfsntfs/libfsntfs_security_descriptor_index.c	3
libfsntfs/libfsntfs/libfsntfs_data_stream.c	2
libfsntfs/libfsntfs/libfsntfs_extent.c	2
libfsntfs/libfsntfs/libfsntfs_index.c	8
libfsntfs/libfsntfs/libfsntfs_index_root_header.c	6
libfsntfs/libfsntfs/libfsntfs_bitmap_values.c	4
libfsntfs/libfsntfs/libfsntfs_cluster_block_vector.c	2
libfsntfs/libfsntfs/libfsntfs_cluster_block.c	4
libfsntfs/libfsntfs/libfsntfs_index_node.c	4
libfsntfs/libfsntfs/libfsntfs_index_node_header.c	3
libfsntfs/libfsntfs/libfsntfs_index_value.c	3
libfsntfs/libfsntfs/libfsntfs_index_entry_vector.c	2
libfsntfs/libfsntfs/libfsntfs_index_entry.c	3
libfsntfs/libfsntfs/libfsntfs_index_entry_header.c	5
libfsntfs/libfsntfs/libfsntfs_attribute.c	1

Fuzzer: libvsmbr_volume_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	391	81.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	0.62%
greenyellow	[30:49]	11	2.28%
lawngreen	50+	76	15.8%
All colors	481	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00207	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00437	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	181	1 : View List ['libvsmbr_volume_close']	0	458	libvsmbr_volume_free	call site: 00467	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:193
0	123	3 : View List ['libvsmbr_boot_record_free', 'libcerror_error_set', 'libvsmbr_partition_values_free']	0	123	libvsmbr_internal_volume_read_partition_entries	call site: 00411	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:1325
0	116	3 : View List ['libcerror_error_set', 'free', 'libcdata_range_list_free']	0	116	libbfio_handle_initialize	call site: 00022	/src/libvsbsdl/libbfio/libbfio_handle.c:140
0	99	1 : View List ['libbfio_handle_free']	0	375	libvsmbr_volume_close	call site: 00450	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:895
0	87	2 : View List ['libvsmbr_boot_record_free', 'libcerror_error_set']	0	87	libvsmbr_internal_volume_open_read	call site: 00425	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:1052
0	68	2 : View List ['libbfio_memory_range_io_handle_free', 'libcerror_error_set']	0	68	libbfio_memory_range_initialize	call site: 00104	/src/libvsbsdl/libbfio/libbfio_memory_range.c:83
0	68	3 : View List ['libcerror_error_set', 'libvsmbr_io_handle_free', 'free']	0	68	libvsmbr_volume_initialize	call site: 00135	/src/libvsmbr/libvsmbr/libvsmbr_volume.c:134
0	64	1 : View List ['libcerror_error_set']	0	64	libbfio_internal_handle_read_buffer	call site: 00345	/src/libvsbsdl/libbfio/libbfio_handle.c:1164

Runtime coverage analysis

Covered functions

56

Functions that are reachable but not covered

40

Reachable functions

96

Percentage of reachable functions covered

58.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libvsmbr/ossfuzz/volume_fuzzer.cc	1
libvsmbr/libbfio/libbfio_memory_range.c	2
libvsmbr/libcerror/libcerror_error.c	4
libvsmbr/libbfio/libbfio_memory_range_io_handle.c	12
libvsmbr/libbfio/libbfio_handle.c	9
libvsmbr/libcdata/libcdata_range_list.c	15
libvsmbr/libcdata/libcdata_list_element.c	10
libvsmbr/libcdata/libcdata_range_list_value.c	3
libvsmbr/libvsmbr/libvsmbr_volume.c	6
libvsmbr/libvsmbr/libvsmbr_io_handle.c	3
libvsmbr/libcdata/libcdata_array.c	7
libvsmbr/libcthreads/libcthreads_read_write_lock.c	4
libvsmbr/libcerror/libcerror_system.c	2
libvsmbr/libvsmbr/libvsmbr_boot_record.c	5
libvsmbr/libvsmbr/libvsmbr_partition_entry.c	3
libvsmbr/libvsmbr/libvsmbr_partition_values.c	2

Fuzzer: libcreg_key_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	618	63.8%
gold	[1:9]	9	0.92%
yellow	[10:29]	5	0.51%
greenyellow	[30:49]	10	1.03%
lawngreen	50+	326	33.6%
All colors	968	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00659	/src/libvsbsdl/libfcache/libfcache_cache.c:801
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00767	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	264	1 : View List ['libcdata_range_list_insert_range']	0	360	libbfio_internal_handle_read_buffer	call site: 00195	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
0	255	1 : View List ['libcreg_file_close']	0	454	libcreg_file_free	call site: 00961	/src/libcreg/libcreg/libcreg_file.c:176
0	215	6 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_range_list_value_free', 'libcdata_list_element_set_elements']	0	215	libcdata_internal_range_list_insert_range_before_element	call site: 00255	/src/libvsbsdl/libcdata/libcdata_range_list.c:1813
0	190	3 : View List ['libcerror_error_set', 'libfdata_area_free', 'libfcache_cache_free']	0	190	libcreg_key_navigation_read_file_io_handle	call site: 00519	/src/libcreg/libcreg/libcreg_key_navigation.c:446
0	165	3 : View List ['libcerror_error_set', 'libcreg_data_block_free', 'libfdata_list_free']	0	165	libcreg_key_navigation_read_data_blocks	call site: 00731	/src/libcreg/libcreg/libcreg_key_navigation.c:680
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element	call site: 00722	/src/libregf/libfdata/libfdata_list.c:1489
0	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	0	142	libfdata_segments_array_append_segment	call site: 00510	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
0	140	3 : View List ['libcerror_error_set', 'free', 'libcreg_key_item_free']	0	140	libcreg_key_initialize	call site: 00908	/src/libcreg/libcreg/libcreg_key.c:143
0	137	4 : View List ['libcerror_error_set', 'libcdata_list_element_set_elements', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	0	137	libcdata_list_remove_element	call site: 00861	/src/libvsbsdl/libcdata/libcdata_list.c:2812

Runtime coverage analysis

Covered functions

162

Functions that are reachable but not covered

19

Reachable functions

181

Percentage of reachable functions covered

89.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libcreg/ossfuzz/key_fuzzer.cc	1
libcreg/libbfio/libbfio_memory_range.c	2
libcreg/libcerror/libcerror_error.c	3
libcreg/libbfio/libbfio_memory_range_io_handle.c	12
libcreg/libbfio/libbfio_handle.c	10
libcreg/libcdata/libcdata_range_list.c	16
libcreg/libcdata/libcdata_list_element.c	10
libcreg/libcdata/libcdata_range_list_value.c	3
libcreg/libcreg/libcreg_file.c	6
libcreg/libcreg/libcreg_io_handle.c	5
libcreg/libcthreads/libcthreads_read_write_lock.c	4
libcreg/libcerror/libcerror_system.c	2
libcreg/libcreg/libcreg_key_navigation.c	8
libcreg/libfdata/libfdata_area.c	5
libcreg/libcdata/libcdata_array.c	9
libcreg/libfcache/libfcache_date_time.c	1
libcreg/libcreg/libcreg_key_hierarchy_entry.c	3
libcreg/libfdata/libfdata_segments_array.c	2
libcreg/libfdata/libfdata_range.c	5
libcreg/libfcache/libfcache_cache.c	7
libcreg/libfcache/libfcache_cache_value.c	8
libcreg/libcdata/libcdata_list.c	9
libcreg/libfdata/libfdata_mapped_range.c	3
libcreg/libfdata/libfdata_list.c	7
libcreg/libcreg/libcreg_data_block.c	5
libcreg/libcreg/libcreg_key_name_entry.c	4
libcreg/libcreg/libcreg_value_entry.c	3
libcreg/libfdata/libfdata_list_element.c	7
libcreg/libcreg/libcreg_key.c	4
libcreg/libcreg/libcreg_key_item.c	5
libcreg/libcreg/libcreg_key_descriptor.c	2

Fuzzer: libscca_file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2280	87.7%
gold	[1:9]	3	0.11%
yellow	[10:29]	12	0.46%
greenyellow	[30:49]	18	0.69%
lawngreen	50+	285	10.9%
All colors	2598	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00210	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
93	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	93	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
75	75	1 : View List ['libfdata_list_calculate_mapped_ranges']	75	551	libfdata_list_get_element_index_at_offset	call site: 00659	/src/libregf/libfdata/libfdata_list.c:3171
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00483	/src/libvsbsdl/libfcache/libfcache_cache.c:801
63	95	2 : View List ['libcerror_error_set', 'libfdata_segments_array_calculate_mapped_ranges']	63	95	libfdata_stream_get_size	call site: 00815	/src/libregf/libfdata/libfdata_stream.c:2554
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_stream_get_segment_index_at_offset	call site: 00839	/src/libregf/libfdata/libfdata_stream.c:1085
35	137	4 : View List ['libcerror_error_set', 'libcdata_list_element_set_elements', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	137	libcdata_list_remove_element	call site: 00729	/src/libvsbsdl/libcdata/libcdata_list.c:2812
35	102	3 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element']	35	102	libcdata_list_prepend_element	call site: 00510	/src/libvsbsdl/libcdata/libcdata_list.c:1314
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	180	4 : View List ['libcerror_error_set', 'free', 'libscca_filename_strings_free', 'libcdata_array_free']	0	180	libscca_file_initialize	call site: 00138	/src/libscca/libscca/libscca_file.c:154
0	162	2 : View List ['libfcache_cache_get_value_by_identifier', 'libfcache_cache_value_get_identifier']	0	358	libfdata_list_get_element_value	call site: 00735	/src/libregf/libfdata/libfdata_list.c:3885
0	147	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_list_element_free', 'libcdata_array_set_entry_by_index']	0	147	libfdata_list_append_element_with_mapped_size	call site: 00611	/src/libregf/libfdata/libfdata_list.c:2841

Runtime coverage analysis

Covered functions

163

Functions that are reachable but not covered

362

Reachable functions

525

Percentage of reachable functions covered

31.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libscca/ossfuzz/file_fuzzer.cc	1
libscca/libbfio/libbfio_memory_range.c	2
libscca/libcerror/libcerror_error.c	4
libscca/libbfio/libbfio_memory_range_io_handle.c	12
libscca/libbfio/libbfio_handle.c	11
libscca/libcdata/libcdata_range_list.c	15
libscca/libcdata/libcdata_list_element.c	10
libscca/libcdata/libcdata_range_list_value.c	3
libscca/libscca/libscca_file.c	5
libscca/libcdata/libcdata_array.c	9
libscca/libscca/libscca_filename_strings.c	5
libscca/libscca/libscca_io_handle.c	9
libscca/libscca/libscca_filename_string.c	2
libscca/libfdata/libfdata_list.c	13
libscca/libscca/libscca_compressed_block.c	4
libscca/libfdata/libfdata_list_element.c	9
libscca/libfwnt/libfwnt_lzxpress.c	2
libscca/libfwnt/libfwnt_bit_stream.c	4
libscca/libfwnt/libfwnt_huffman_tree.c	4
libscca/libfdata/libfdata_range.c	4
libscca/libfcache/libfcache_cache.c	4
libscca/libcdata/libcdata_list.c	9
libscca/libfcache/libfcache_cache_value.c	8
libscca/libfdata/libfdata_mapped_range.c	4
libscca/libfcache/libfcache_date_time.c	1
libscca/libscca/libscca_compressed_blocks_stream.c	5
libscca/libfdata/libfdata_stream.c	9
libscca/libfdata/libfdata_segments_array.c	2
libscca/libscca/libscca_file_header.c	4
libscca/libscca/libscca_file_information.c	4
libscca/libscca/libscca_file_metrics.c	3
libscca/libscca/libscca_volume_information.c	2
libscca/libfvalue/libfvalue_value_type.c	3
libscca/libfvalue/libfvalue_value.c	3
libscca/libfvalue/libfvalue_data_handle.c	3
libscca/libfvalue/libfvalue_binary_data.c	10
libscca/libuna/libuna_base16_stream.c	2
libscca/libuna/libuna_base32_stream.c	4
libscca/libuna/libuna_base64_stream.c	6
libscca/libfvalue/libfvalue_floating_point.c	22
libscca/libfvalue/libfvalue_integer.c	20
libscca/libfvalue/libfvalue_string.c	13
libscca/libuna/libuna_utf16_stream.c	7
libscca/libuna/libuna_unicode_character.c	25
libscca/libuna/libuna_utf32_stream.c	7
libscca/libuna/libuna_utf7_stream.c	6
libscca/libuna/libuna_utf8_stream.c	7
libscca/libuna/libuna_byte_stream.c	6
libscca/libuna/libuna_codepage_mac_symbol.c	3
libscca/libuna/libuna_codepage_mac_thai.c	3
libscca/libuna/libuna_codepage_windows_932.c	3
libscca/libuna/libuna_codepage_windows_936.c	3
libscca/libuna/libuna_codepage_windows_949.c	3
libscca/libuna/libuna_codepage_windows_950.c	3
libscca/libuna/libuna_codepage_koi8_r.c	2
libscca/libuna/libuna_codepage_koi8_u.c	2
libscca/libuna/libuna_codepage_mac_arabic.c	2
libscca/libuna/libuna_codepage_mac_celtic.c	2
libscca/libuna/libuna_codepage_mac_centraleurroman.c	2
libscca/libuna/libuna_codepage_mac_croatian.c	2
libscca/libuna/libuna_codepage_mac_cyrillic.c	2
libscca/libuna/libuna_codepage_mac_dingbats.c	2
libscca/libuna/libuna_codepage_mac_farsi.c	2
libscca/libuna/libuna_codepage_mac_gaelic.c	2
libscca/libuna/libuna_codepage_mac_greek.c	2
libscca/libuna/libuna_codepage_mac_icelandic.c	2
libscca/libuna/libuna_codepage_mac_inuit.c	2
libscca/libuna/libuna_codepage_mac_roman.c	2
libscca/libuna/libuna_codepage_mac_romanian.c	2
libscca/libuna/libuna_codepage_mac_russian.c	2
libscca/libuna/libuna_codepage_mac_turkish.c	2
libscca/libuna/libuna_codepage_mac_ukrainian.c	2
libscca/libuna/libuna_codepage_windows_874.c	2
libscca/libuna/libuna_codepage_windows_1250.c	2
libscca/libuna/libuna_codepage_windows_1251.c	2
libscca/libuna/libuna_codepage_windows_1252.c	2
libscca/libuna/libuna_codepage_windows_1253.c	2
libscca/libuna/libuna_codepage_windows_1254.c	2
libscca/libuna/libuna_codepage_windows_1255.c	2
libscca/libuna/libuna_codepage_windows_1256.c	2
libscca/libuna/libuna_codepage_windows_1257.c	2
libscca/libuna/libuna_codepage_windows_1258.c	2
libscca/libuna/libuna_utf8_string.c	12
libscca/libuna/libuna_utf16_string.c	12
libscca/libuna/libuna_utf32_string.c	12
libscca/libfdatetime/libfdatetime_fat_date_time.c	11
libscca/libfdatetime/libfdatetime_date_time_values.c	4
libscca/libfdatetime/libfdatetime_filetime.c	13
libscca/libfvalue/libfvalue_filetime.c	2
libscca/libfdatetime/libfdatetime_floatingtime.c	11
libscca/libfdatetime/libfdatetime_nsf_timedate.c	11
libscca/libfdatetime/libfdatetime_posix_time.c	11
libscca/libfdatetime/libfdatetime_systemtime.c	11
libscca/libfwnt/libfwnt_security_identifier.c	8
libscca/libfvalue/libfvalue_value_entry.c	1

Fuzzer: libesedb_record_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2368	78.6%
gold	[1:9]	39	1.29%
yellow	[10:29]	36	1.19%
greenyellow	[30:49]	19	0.63%
lawngreen	50+	550	18.2%
All colors	3012	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00189	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	337	6 : View List ['libcerror_error_set', 'libcdata_tree_node_free', 'libcdata_tree_node_remove_node', 'libcdata_list_free', 'libcdata_tree_node_set_value', 'libcdata_tree_node_empty']	72	337	libcdata_btree_node_split	call site: 01368	/src/libfsntfs/libcdata/libcdata_btree_node.c:1561
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00508	/src/libvsbsdl/libfcache/libfcache_cache.c:801
63	63	1 : View List ['libfdata_segments_array_calculate_mapped_ranges']	63	539	libfdata_vector_get_element_index_at_offset	call site: 01489	/src/libvsbsdl/libfdata/libfdata_vector.c:1078
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
36	36	1 : View List ['libesedb_root_page_header_free']	36	325	libesedb_page_tree_free	call site: 00647	/src/libesedb/libesedb/libesedb_page_tree.c:235
36	36	1 : View List ['libcdata_tree_node_get_previous_node']	36	68	libcdata_tree_node_get_sub_node_by_index	call site: 01207	/src/libfsntfs/libcdata/libcdata_tree_node.c:3940
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	854	1 : View List ['libesedb_page_tree_get_number_of_leaf_values']	0	2330	libesedb_page_tree_get_leaf_value_by_index	call site: 01412	/src/libesedb/libesedb/libesedb_page_tree.c:2357
0	308	1 : View List ['libesedb_file_close']	0	408	libesedb_file_free	call site: 03008	/src/libesedb/libesedb/libesedb_file.c:179
0	268	4 : View List ['libesedb_block_tree_free', 'libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	268	libesedb_catalog_initialize	call site: 00883	/src/libesedb/libesedb/libesedb_catalog.c:158
0	199	3 : View List ['libcerror_error_set', 'free', 'libesedb_page_tree_free']	0	199	libesedb_database_initialize	call site: 00644	/src/libesedb/libesedb/libesedb_database.c:140

Runtime coverage analysis

Covered functions

227

Functions that are reachable but not covered

375

Reachable functions

602

Percentage of reachable functions covered

37.71%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libesedb/ossfuzz/record_fuzzer.cc	1
libesedb/libbfio/libbfio_memory_range.c	2
libesedb/libcerror/libcerror_error.c	4
libesedb/libbfio/libbfio_memory_range_io_handle.c	12
libesedb/libbfio/libbfio_handle.c	9
libesedb/libcdata/libcdata_range_list.c	15
libesedb/libcdata/libcdata_list_element.c	10
libesedb/libcdata/libcdata_range_list_value.c	3
libesedb/libesedb/libesedb_file.c	7
libesedb/libesedb/libesedb_io_handle.c	5
libesedb/libesedb/libesedb_i18n.c	1
libesedb/libesedb/libesedb_file_header.c	4
libesedb/libesedb/libesedb_checksum.c	2
libesedb/libfdata/libfdata_vector.c	7
libesedb/libcdata/libcdata_array.c	10
libesedb/libfcache/libfcache_date_time.c	1
libesedb/libesedb/libesedb_page.c	13
libesedb/libesedb/libesedb_page_header.c	6
libesedb/libcnotify/libcnotify_print.c	1
libesedb/libesedb/libesedb_page_value.c	2
libesedb/libfdata/libfdata_segments_array.c	3
libesedb/libfdata/libfdata_range.c	5
libesedb/libfcache/libfcache_cache.c	4
libesedb/libcdata/libcdata_list.c	17
libesedb/libfcache/libfcache_cache_value.c	8
libesedb/libfdata/libfdata_mapped_range.c	4
libesedb/libesedb/libesedb_database.c	4
libesedb/libesedb/libesedb_page_tree.c	9
libesedb/libesedb/libesedb_block_tree.c	3
libesedb/libesedb/libesedb_block_tree_node.c	6
libesedb/libcdata/libcdata_btree.c	4
libesedb/libcdata/libcdata_tree_node.c	16
libesedb/libesedb/libesedb_block_descriptor.c	2
libesedb/libesedb/libesedb_root_page_header.c	1
libesedb/libcdata/libcdata_btree_values_list.c	1
libesedb/libesedb/libesedb_leaf_page_descriptor.c	3
libesedb/libesedb/libesedb_page_tree_value.c	3
libesedb/libesedb/libesedb_catalog.c	8
libesedb/libesedb/libesedb_catalog_definition.c	4
libesedb/libesedb/libesedb_table_definition.c	8
libesedb/libuna/libuna_utf8_string.c	13
libesedb/libuna/libuna_unicode_character.c	25
libesedb/libuna/libuna_codepage_koi8_r.c	2
libesedb/libuna/libuna_codepage_koi8_u.c	2
libesedb/libuna/libuna_codepage_mac_arabic.c	2
libesedb/libuna/libuna_codepage_mac_celtic.c	2
libesedb/libuna/libuna_codepage_mac_centraleurroman.c	2
libesedb/libuna/libuna_codepage_mac_croatian.c	2
libesedb/libuna/libuna_codepage_mac_cyrillic.c	2
libesedb/libuna/libuna_codepage_mac_dingbats.c	2
libesedb/libuna/libuna_codepage_mac_farsi.c	2
libesedb/libuna/libuna_codepage_mac_gaelic.c	2
libesedb/libuna/libuna_codepage_mac_greek.c	2
libesedb/libuna/libuna_codepage_mac_icelandic.c	2
libesedb/libuna/libuna_codepage_mac_inuit.c	2
libesedb/libuna/libuna_codepage_mac_roman.c	2
libesedb/libuna/libuna_codepage_mac_romanian.c	2
libesedb/libuna/libuna_codepage_mac_russian.c	2
libesedb/libuna/libuna_codepage_mac_symbol.c	3
libesedb/libuna/libuna_codepage_mac_thai.c	3
libesedb/libuna/libuna_codepage_mac_turkish.c	2
libesedb/libuna/libuna_codepage_mac_ukrainian.c	2
libesedb/libuna/libuna_codepage_windows_874.c	2
libesedb/libuna/libuna_codepage_windows_932.c	3
libesedb/libuna/libuna_codepage_windows_936.c	3
libesedb/libuna/libuna_codepage_windows_949.c	3
libesedb/libuna/libuna_codepage_windows_950.c	3
libesedb/libuna/libuna_codepage_windows_1250.c	2
libesedb/libuna/libuna_codepage_windows_1251.c	2
libesedb/libuna/libuna_codepage_windows_1252.c	2
libesedb/libuna/libuna_codepage_windows_1253.c	2
libesedb/libuna/libuna_codepage_windows_1254.c	2
libesedb/libuna/libuna_codepage_windows_1255.c	2
libesedb/libuna/libuna_codepage_windows_1256.c	2
libesedb/libuna/libuna_codepage_windows_1257.c	2
libesedb/libuna/libuna_codepage_windows_1258.c	2
libesedb/libesedb/libesedb_table.c	4
libesedb/libcdata/libcdata_btree_node.c	5
libesedb/libesedb/libesedb_data_definition.c	3
libesedb/libesedb/libesedb_record.c	2
libesedb/libfvalue/libfvalue_value.c	3
libesedb/libfvalue/libfvalue_data_handle.c	6
libesedb/libfvalue/libfvalue_value_entry.c	2
libesedb/libesedb/libesedb_value_data_handle.c	1
libesedb/libfvalue/libfvalue_value_type.c	2
libesedb/libfvalue/libfvalue_binary_data.c	10
libesedb/libuna/libuna_base16_stream.c	2
libesedb/libuna/libuna_base32_stream.c	4
libesedb/libuna/libuna_base64_stream.c	6
libesedb/libfvalue/libfvalue_floating_point.c	22
libesedb/libfvalue/libfvalue_integer.c	20
libesedb/libfvalue/libfvalue_string.c	13
libesedb/libuna/libuna_utf16_stream.c	7
libesedb/libuna/libuna_utf32_stream.c	7
libesedb/libuna/libuna_utf7_stream.c	6
libesedb/libuna/libuna_utf8_stream.c	7
libesedb/libuna/libuna_byte_stream.c	6
libesedb/libuna/libuna_utf16_string.c	12
libesedb/libuna/libuna_utf32_string.c	12
libesedb/libfdatetime/libfdatetime_fat_date_time.c	11
libesedb/libfdatetime/libfdatetime_date_time_values.c	4
libesedb/libfdatetime/libfdatetime_filetime.c	13
libesedb/libfvalue/libfvalue_filetime.c	2
libesedb/libfdatetime/libfdatetime_floatingtime.c	11
libesedb/libfdatetime/libfdatetime_nsf_timedate.c	11
libesedb/libfdatetime/libfdatetime_posix_time.c	11
libesedb/libfdatetime/libfdatetime_systemtime.c	11
libesedb/libfguid/libfguid_identifier.c	11
libesedb/libfwnt/libfwnt_security_identifier.c	8

Fuzzer: libfsapfs_container_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	638	77.1%
gold	[1:9]	6	0.72%
yellow	[10:29]	3	0.36%
greenyellow	[30:49]	39	4.71%
lawngreen	50+	141	17.0%
All colors	827	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
271	718	9 : View List ['libfsapfs_checksum_calculate_fletcher64', 'libfsapfs_key_bag_entry_initialize', 'libfsapfs_key_bag_header_read_data', 'libfsapfs_key_bag_header_free', 'libfsapfs_key_bag_entry_free', 'libfsapfs_key_bag_header_initialize', 'libcerror_error_set', 'libcdata_array_append_entry', 'libfsapfs_key_bag_entry_read_data']	271	718	libfsapfs_container_key_bag_read_data	call site: 00712	/src/libfsapfs/libfsapfs/libfsapfs_container_key_bag.c:504
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00196	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
164	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	164	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
146	274	5 : View List ['libcerror_error_set', 'libcdata_list_element_free', 'libcdata_list_element_set_previous_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	146	274	libcdata_list_empty	call site: 00748	/src/libvsbsdl/libcdata/libcdata_list.c:238
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 00783	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
38	142	4 : View List ['libfdata_mapped_range_free', 'libcerror_error_set', 'libfdata_range_free', 'libcdata_array_set_entry_by_index']	38	142	libfdata_segments_array_append_segment	call site: 00608	/src/libvsbsdl/libfdata/libfdata_segments_array.c:592
38	38	1 : View List ['libcdata_array_set_entry_by_index']	38	74	libfdata_segments_array_append_segment	call site: 00610	/src/libvsbsdl/libfdata/libfdata_segments_array.c:642
36	36	1 : View List ['libfsapfs_fusion_middle_tree_free']	36	571	libfsapfs_container_close	call site: 00806	/src/libfsapfs/libfsapfs/libfsapfs_container.c:922
36	36	1 : View List ['libfsapfs_fusion_middle_tree_free']	36	108	libfsapfs_internal_container_open_read	call site: 00772	/src/libfsapfs/libfsapfs/libfsapfs_container.c:1861
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	270	1 : View List ['libfsapfs_container_close']	0	469	libfsapfs_container_free	call site: 00819	/src/libfsapfs/libfsapfs/libfsapfs_container.c:178
0	124	3 : View List ['libcerror_error_set', 'free', 'libcdata_array_free']	0	124	libfdata_vector_initialize	call site: 00441	/src/libvsbsdl/libfdata/libfdata_vector.c:180

Runtime coverage analysis

Covered functions

99

Functions that are reachable but not covered

71

Reachable functions

170

Percentage of reachable functions covered

58.24%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsapfs/ossfuzz/container_fuzzer.cc	1
libfsapfs/libbfio/libbfio_memory_range.c	2
libfsapfs/libcerror/libcerror_error.c	3
libfsapfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsapfs/libbfio/libbfio_handle.c	8
libfsapfs/libcdata/libcdata_range_list.c	15
libfsapfs/libcdata/libcdata_list_element.c	10
libfsapfs/libcdata/libcdata_range_list_value.c	3
libfsapfs/libfsapfs/libfsapfs_container.c	5
libfsapfs/libfsapfs/libfsapfs_io_handle.c	3
libfsapfs/libcthreads/libcthreads_read_write_lock.c	4
libfsapfs/libcerror/libcerror_system.c	2
libfsapfs/libfsapfs/libfsapfs_container_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_checksum.c	1
libfsapfs/libfsapfs/libfsapfs_object.c	4
libfsapfs/libfsapfs/libfsapfs_checkpoint_map.c	4
libfsapfs/libcdata/libcdata_array.c	8
libfsapfs/libfsapfs/libfsapfs_checkpoint_map_entry.c	3
libfsapfs/libfsapfs/libfsapfs_container_data_handle.c	3
libfsapfs/libfdata/libfdata_vector.c	4
libfsapfs/libfcache/libfcache_date_time.c	1
libfsapfs/libfsapfs/libfsapfs_data_block.c	3
libfsapfs/libfsapfs/libfsapfs_encryption_context.c	4
libfsapfs/libcaes/libcaes_tweaked_context.c	4
libfsapfs/libcaes/libcaes_context.c	7
libfsapfs/libfdata/libfdata_segments_array.c	2
libfsapfs/libfdata/libfdata_range.c	4
libfsapfs/libfcache/libfcache_cache.c	3
libfsapfs/libcdata/libcdata_list.c	7
libfsapfs/libfcache/libfcache_cache_value.c	6
libfsapfs/libfdata/libfdata_mapped_range.c	3
libfsapfs/libfsapfs/libfsapfs_object_map.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_btree.c	2
libfsapfs/libfsapfs/libfsapfs_container_key_bag.c	4
libfsapfs/libfsapfs/libfsapfs_key_bag_header.c	3
libfsapfs/libfsapfs/libfsapfs_key_bag_entry.c	3
libfsapfs/libfsapfs/libfsapfs_fusion_middle_tree.c	1

Fuzzer: libfsapfs_file_entry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1580	66.4%
gold	[1:9]	66	2.77%
yellow	[10:29]	23	0.96%
greenyellow	[30:49]	29	1.21%
lawngreen	50+	681	28.6%
All colors	2379	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
717	1666	2 : View List ['libfsapfs_data_stream_initialize_from_file_extents', 'libfsapfs_attributes_get_file_extents']	717	1730	libfsapfs_attributes_get_data_stream	call site: 01922	/src/libfsapfs/libfsapfs/libfsapfs_attributes.c:144
697	697	1 : View List ['libfsapfs_file_system_btree_get_attributes_from_branch_node']	697	773	libfsapfs_file_system_btree_get_attributes	call site: 01835	/src/libfsapfs/libfsapfs/libfsapfs_file_system_btree.c:4286
696	778	4 : View List ['libfsapfs_volume_key_bag_initialize', 'libfsapfs_encryption_context_initialize', 'libfsapfs_container_key_bag_get_volume_key_bag_extent_by_identifier', 'libfsapfs_volume_key_bag_read_file_io_handle']	752	2838	libfsapfs_internal_volume_open_read	call site: 01024	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:554
690	690	1 : View List ['libfsapfs_file_system_btree_get_directory_entries_from_branch_node']	690	766	libfsapfs_file_system_btree_get_directory_entries	call site: 01534	/src/libfsapfs/libfsapfs/libfsapfs_file_system_btree.c:3468
676	676	1 : View List ['libfsapfs_file_system_btree_get_file_extents_from_branch_node']	676	752	libfsapfs_file_system_btree_get_file_extents	call site: 01930	/src/libfsapfs/libfsapfs/libfsapfs_file_system_btree.c:5085
645	3443	2 : View List ['libfsapfs_attributes_get_data_stream', 'libfsapfs_data_stream_initialize_from_compressed_data_stream']	645	3635	libfsapfs_internal_file_entry_get_data_stream	call site: 02163	/src/libfsapfs/libfsapfs/libfsapfs_file_entry.c:4342
431	431	1 : View List ['libfsapfs_internal_volume_unlock']	431	1696	libfsapfs_internal_volume_get_file_system	call site: 01272	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:2832
271	718	9 : View List ['libfsapfs_checksum_calculate_fletcher64', 'libfsapfs_key_bag_entry_initialize', 'libfsapfs_key_bag_header_read_data', 'libfsapfs_key_bag_header_free', 'libfsapfs_key_bag_entry_free', 'libfsapfs_key_bag_header_initialize', 'libcerror_error_set', 'libcdata_array_append_entry', 'libfsapfs_key_bag_entry_read_data']	271	718	libfsapfs_container_key_bag_read_data	call site: 00712	/src/libfsapfs/libfsapfs/libfsapfs_container_key_bag.c:504
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00196	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
152	1825	6 : View List ['libfsapfs_compressed_data_header_read_data', 'libfsapfs_compressed_data_header_free', 'libfdata_stream_read_buffer_at_offset', 'libfsapfs_attributes_get_data_stream', 'libfdata_stream_free', 'libfsapfs_compressed_data_header_initialize']	152	2085	libfsapfs_internal_file_entry_get_data_size	call site: 02144	/src/libfsapfs/libfsapfs/libfsapfs_file_entry.c:4963
114	114	1 : View List ['libfsapfs_inode_get_utf8_name']	114	246	libfsapfs_file_entry_get_utf8_name	call site: 01790	/src/libfsapfs/libfsapfs/libfsapfs_file_entry.c:1597
102	102	1 : View List ['libfsapfs_inode_get_utf8_name_size']	102	234	libfsapfs_file_entry_get_utf8_name_size	call site: 01756	/src/libfsapfs/libfsapfs/libfsapfs_file_entry.c:1502

Runtime coverage analysis

Covered functions

299

Functions that are reachable but not covered

107

Reachable functions

406

Percentage of reachable functions covered

73.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsapfs/ossfuzz/file_entry_fuzzer.cc	1
libfsapfs/libbfio/libbfio_memory_range.c	2
libfsapfs/libcerror/libcerror_error.c	3
libfsapfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsapfs/libbfio/libbfio_handle.c	8
libfsapfs/libcdata/libcdata_range_list.c	15
libfsapfs/libcdata/libcdata_list_element.c	10
libfsapfs/libcdata/libcdata_range_list_value.c	3
libfsapfs/libfsapfs/libfsapfs_container.c	7
libfsapfs/libfsapfs/libfsapfs_io_handle.c	3
libfsapfs/libcthreads/libcthreads_read_write_lock.c	6
libfsapfs/libcerror/libcerror_system.c	2
libfsapfs/libfsapfs/libfsapfs_container_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_checksum.c	1
libfsapfs/libfsapfs/libfsapfs_object.c	4
libfsapfs/libfsapfs/libfsapfs_checkpoint_map.c	4
libfsapfs/libcdata/libcdata_array.c	9
libfsapfs/libfsapfs/libfsapfs_checkpoint_map_entry.c	3
libfsapfs/libfsapfs/libfsapfs_container_data_handle.c	3
libfsapfs/libfdata/libfdata_vector.c	8
libfsapfs/libfcache/libfcache_date_time.c	1
libfsapfs/libfsapfs/libfsapfs_data_block.c	4
libfsapfs/libfsapfs/libfsapfs_encryption_context.c	5
libfsapfs/libcaes/libcaes_tweaked_context.c	4
libfsapfs/libcaes/libcaes_context.c	7
libfsapfs/libfdata/libfdata_segments_array.c	3
libfsapfs/libfdata/libfdata_range.c	5
libfsapfs/libfcache/libfcache_cache.c	4
libfsapfs/libcdata/libcdata_list.c	9
libfsapfs/libfcache/libfcache_cache_value.c	8
libfsapfs/libfdata/libfdata_mapped_range.c	4
libfsapfs/libfsapfs/libfsapfs_object_map.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_btree.c	7
libfsapfs/libfsapfs/libfsapfs_container_key_bag.c	6
libfsapfs/libfsapfs/libfsapfs_key_bag_header.c	3
libfsapfs/libfsapfs/libfsapfs_key_bag_entry.c	3
libfsapfs/libfsapfs/libfsapfs_fusion_middle_tree.c	1
libfsapfs/libfsapfs/libfsapfs_btree_node.c	7
libfsapfs/libfsapfs/libfsapfs_btree_node_header.c	3
libfsapfs/libfsapfs/libfsapfs_btree_footer.c	3
libfsapfs/libfsapfs/libfsapfs_btree_entry.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_descriptor.c	4
libfsapfs/libfsapfs/libfsapfs_volume.c	7
libfsapfs/libfsapfs/libfsapfs_volume_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_volume_key_bag.c	5
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata_tree.c	8
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata.c	4
libfsapfs/libfsapfs/libfsapfs_file_system_data_handle.c	3
libfsapfs/libfsapfs/libfsapfs_file_system.c	3
libfsapfs/libfsapfs/libfsapfs_file_system_btree.c	17
libfsapfs/libfsapfs/libfsapfs_key_encrypted_key.c	5
libfsapfs/libfsapfs/libfsapfs_password.c	1
libfsapfs/libhmac/libhmac_sha256.c	2
libfsapfs/libhmac/libhmac_sha256_context.c	5
libfsapfs/libfsapfs/libfsapfs_inode.c	21
libfsapfs/libfsapfs/libfsapfs_file_entry.c	30
libfsapfs/libfsapfs/libfsapfs_directory_record.c	9
libfsapfs/libfsapfs/libfsapfs_attribute_values.c	5
libfsapfs/libfsapfs/libfsapfs_file_extent.c	4
libfsapfs/libfsapfs/libfsapfs_compressed_data_header.c	3
libfsapfs/libfdata/libfdata_stream.c	9
libfsapfs/libuna/libuna_utf8_string.c	4
libfsapfs/libuna/libuna_unicode_character.c	3
libfsapfs/libfsapfs/libfsapfs_attributes.c	2
libfsapfs/libfsapfs/libfsapfs_data_stream.c	3
libfsapfs/libfsapfs/libfsapfs_data_block_data_handle.c	4
libfsapfs/libfsapfs/libfsapfs_data_block_vector.c	1
libfsapfs/libfsapfs/libfsapfs_buffer_data_handle.c	4
libfsapfs/libfsapfs/libfsapfs_compressed_data_handle.c	5
libfsapfs/libfsapfs/libfsapfs_compression.c	1
libfsapfs/libfsapfs/libfsapfs_deflate.c	8
libfsapfs/libfsapfs/libfsapfs_bit_stream.c	3
libfsapfs/libfsapfs/libfsapfs_huffman_tree.c	4
libfsapfs/libfmos/libfmos_lzvn.c	1

Fuzzer: libfshfs_extended_attribute_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	894	63.3%
gold	[1:9]	70	4.96%
yellow	[10:29]	18	1.27%
greenyellow	[30:49]	27	1.91%
lawngreen	50+	402	28.4%
All colors	1411	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00190	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00630	/src/libvsbsdl/libfcache/libfcache_cache.c:801
64	64	1 : View List ['libfdata_stream_free']	64	344	libfshfs_file_entry_free	call site: 01251	/src/libfshfs/libfshfs/libfshfs_file_entry.c:320
64	64	1 : View List ['libfdata_stream_free']	64	174	libfshfs_extended_attribute_free	call site: 01377	/src/libfshfs/libfshfs/libfshfs_extended_attribute.c:197
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
46	46	1 : View List ['libcerror_system_set_error']	46	46	libcthreads_read_write_lock_release_for_write	call site: 01092	/src/libvsbsdl/libcthreads/libcthreads_read_write_lock.c:673
36	36	1 : View List ['libfshfs_compressed_data_header_free']	100	490	libfshfs_file_entry_free	call site: 01247	/src/libfshfs/libfshfs/libfshfs_file_entry.c:287
16	16	5 : View List ['realloc', 'free', 'libcerror_error_resize', 'libcerror_error_initialize', 'strlen']	16	16	libcerror_error_set	call site: 00002	/src/libfmos/libcerror/libcerror_error.c:328
0	1841	1 : View List ['libfshfs_internal_file_entry_get_attributes']	0	2155	libfshfs_file_entry_get_extended_attribute_by_index	call site: 01365	/src/libfshfs/libfshfs/libfshfs_file_entry.c:3592
0	1653	1 : View List ['libfshfs_catalog_btree_file_get_directory_entry_by_identifier']	0	1745	libfshfs_catalog_btree_file_get_directory_entry_by_utf8_path	call site: 01114	/src/libfshfs/libfshfs/libfshfs_catalog_btree_file.c:2628
0	309	1 : View List ['libfshfs_volume_close']	0	508	libfshfs_volume_free	call site: 01406	/src/libfshfs/libfshfs/libfshfs_volume.c:171
0	198	3 : View List ['libcerror_error_set', 'libfshfs_btree_file_free', 'libfshfs_btree_node_cache_free']	0	198	libfshfs_file_system_read_catalog_file	call site: 00752	/src/libfshfs/libfshfs/libfshfs_file_system.c:591

Runtime coverage analysis

Covered functions

204

Functions that are reachable but not covered

75

Reachable functions

279

Percentage of reachable functions covered

73.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfshfs/ossfuzz/extended_attribute_fuzzer.cc	1
libfshfs/libbfio/libbfio_memory_range.c	2
libfshfs/libcerror/libcerror_error.c	3
libfshfs/libbfio/libbfio_memory_range_io_handle.c	12
libfshfs/libbfio/libbfio_handle.c	8
libfshfs/libcdata/libcdata_range_list.c	15
libfshfs/libcdata/libcdata_list_element.c	10
libfshfs/libcdata/libcdata_range_list_value.c	3
libfshfs/libfshfs/libfshfs_volume.c	6
libfshfs/libfshfs/libfshfs_io_handle.c	3
libfshfs/libcthreads/libcthreads_read_write_lock.c	4
libfshfs/libcerror/libcerror_system.c	2
libfshfs/libfshfs/libfshfs_master_directory_block.c	4
libfshfs/libfshfs/libfshfs_fork_descriptor.c	5
libfshfs/libfshfs/libfshfs_extents_record.c	1
libfshfs/libfshfs/libfshfs_volume_header.c	4
libfshfs/libfshfs/libfshfs_file_system.c	9
libfshfs/libfshfs/libfshfs_btree_file.c	5
libfshfs/libcdata/libcdata_array.c	9
libfshfs/libfshfs/libfshfs_btree_header.c	3
libfshfs/libfshfs/libfshfs_extent.c	2
libfshfs/libfshfs/libfshfs_btree_node_descriptor.c	3
libfshfs/libfshfs/libfshfs_btree_node_vector.c	3
libfshfs/libfcache/libfcache_date_time.c	1
libfshfs/libfshfs/libfshfs_btree_node_cache.c	2
libfshfs/libfcache/libfcache_cache.c	4
libfshfs/libcdata/libcdata_list.c	9
libfshfs/libfshfs/libfshfs_extents_btree_file.c	6
libfshfs/libfcache/libfcache_cache_value.c	8
libfshfs/libfshfs/libfshfs_btree_node.c	8
libfshfs/libfshfs/libfshfs_btree_node_record.c	2
libfshfs/libfshfs/libfshfs_extents_btree_key.c	3
libfshfs/libfshfs/libfshfs_catalog_btree_file.c	13
libfshfs/libfshfs/libfshfs_catalog_btree_key.c	5
libfshfs/libfshfs/libfshfs_thread_record.c	3
libfshfs/libfshfs/libfshfs_name.c	4
libfshfs/libuna/libuna_unicode_character.c	3
libfshfs/libuna/libuna_codepage_koi8_r.c	1
libfshfs/libuna/libuna_codepage_koi8_u.c	1
libfshfs/libuna/libuna_codepage_mac_arabic.c	1
libfshfs/libuna/libuna_codepage_mac_celtic.c	1
libfshfs/libuna/libuna_codepage_mac_centraleurroman.c	1
libfshfs/libuna/libuna_codepage_mac_croatian.c	1
libfshfs/libuna/libuna_codepage_mac_cyrillic.c	1
libfshfs/libuna/libuna_codepage_mac_dingbats.c	1
libfshfs/libuna/libuna_codepage_mac_farsi.c	1
libfshfs/libuna/libuna_codepage_mac_gaelic.c	1
libfshfs/libuna/libuna_codepage_mac_greek.c	1
libfshfs/libuna/libuna_codepage_mac_icelandic.c	1
libfshfs/libuna/libuna_codepage_mac_inuit.c	1
libfshfs/libuna/libuna_codepage_mac_roman.c	1
libfshfs/libuna/libuna_codepage_mac_romanian.c	1
libfshfs/libuna/libuna_codepage_mac_russian.c	1
libfshfs/libuna/libuna_codepage_mac_symbol.c	1
libfshfs/libuna/libuna_codepage_mac_thai.c	1
libfshfs/libuna/libuna_codepage_mac_turkish.c	1
libfshfs/libuna/libuna_codepage_mac_ukrainian.c	1
libfshfs/libuna/libuna_codepage_windows_874.c	1
libfshfs/libuna/libuna_codepage_windows_932.c	1
libfshfs/libuna/libuna_codepage_windows_936.c	1
libfshfs/libuna/libuna_codepage_windows_949.c	1
libfshfs/libuna/libuna_codepage_windows_950.c	1
libfshfs/libuna/libuna_codepage_windows_1250.c	1
libfshfs/libuna/libuna_codepage_windows_1251.c	1
libfshfs/libuna/libuna_codepage_windows_1252.c	1
libfshfs/libuna/libuna_codepage_windows_1253.c	1
libfshfs/libuna/libuna_codepage_windows_1254.c	1
libfshfs/libuna/libuna_codepage_windows_1255.c	1
libfshfs/libuna/libuna_codepage_windows_1256.c	1
libfshfs/libuna/libuna_codepage_windows_1257.c	1
libfshfs/libuna/libuna_codepage_windows_1258.c	1
libfshfs/libfshfs/libfshfs_directory_record.c	6
libfshfs/libfshfs/libfshfs_file_record.c	7
libfshfs/libfshfs/libfshfs_directory_entry.c	9
libfshfs/libfshfs/libfshfs_file_entry.c	6
libfshfs/libfshfs/libfshfs_compressed_data_header.c	1
libfshfs/libfdata/libfdata_stream.c	1
libfshfs/libfdata/libfdata_range.c	1
libfshfs/libfdata/libfdata_mapped_range.c	1
libfshfs/libfshfs/libfshfs_attribute_record.c	4
libfshfs/libfshfs/libfshfs_attributes_btree_file.c	6
libfshfs/libfshfs/libfshfs_attributes_btree_key.c	3
libfshfs/libfshfs/libfshfs_extended_attribute.c	2

Fuzzer: libfsapfs_extended_attribute_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1170	65.1%
gold	[1:9]	58	3.22%
yellow	[10:29]	23	1.27%
greenyellow	[30:49]	40	2.22%
lawngreen	50+	506	28.1%
All colors	1797	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
697	697	1 : View List ['libfsapfs_file_system_btree_get_attributes_from_branch_node']	697	773	libfsapfs_file_system_btree_get_attributes	call site: 01642	/src/libfsapfs/libfsapfs/libfsapfs_file_system_btree.c:4286
696	778	4 : View List ['libfsapfs_volume_key_bag_initialize', 'libfsapfs_encryption_context_initialize', 'libfsapfs_container_key_bag_get_volume_key_bag_extent_by_identifier', 'libfsapfs_volume_key_bag_read_file_io_handle']	752	2838	libfsapfs_internal_volume_open_read	call site: 01024	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:554
431	431	1 : View List ['libfsapfs_internal_volume_unlock']	431	1696	libfsapfs_internal_volume_get_file_system	call site: 01274	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:2832
271	718	9 : View List ['libfsapfs_checksum_calculate_fletcher64', 'libfsapfs_key_bag_entry_initialize', 'libfsapfs_key_bag_header_read_data', 'libfsapfs_key_bag_header_free', 'libfsapfs_key_bag_entry_free', 'libfsapfs_key_bag_header_initialize', 'libcerror_error_set', 'libcdata_array_append_entry', 'libfsapfs_key_bag_entry_read_data']	271	718	libfsapfs_container_key_bag_read_data	call site: 00712	/src/libfsapfs/libfsapfs/libfsapfs_container_key_bag.c:504
264	264	1 : View List ['libcdata_range_list_insert_range']	264	360	libbfio_internal_handle_read_buffer	call site: 00196	/src/libvsbsdl/libbfio/libbfio_handle.c:1139
72	147	4 : View List ['libcdata_list_get_last_element', 'libfcache_cache_value_get_cache_index', 'libcdata_list_element_get_value', 'libcdata_array_get_entry_by_index']	72	415	libfcache_cache_set_value_by_identifier	call site: 00534	/src/libvsbsdl/libfcache/libfcache_cache.c:801
64	96	2 : View List ['libcerror_error_set', 'libfdata_stream_free']	64	96	libfsapfs_extended_attribute_free	call site: 01751	/src/libfsapfs/libfsapfs/libfsapfs_extended_attribute.c:201
64	96	2 : View List ['libcerror_error_set', 'libfdata_stream_free']	64	96	libfsapfs_file_entry_free	call site: 01769	/src/libfsapfs/libfsapfs/libfsapfs_file_entry.c:306
58	292	5 : View List ['libcerror_error_set', 'libcdata_list_element_set_previous_element', 'libcdata_internal_range_list_free_element', 'libcdata_list_element_set_next_element', 'libcdata_list_element_get_next_element']	58	292	libcdata_range_list_empty	call site: 00030	/src/libvsbsdl/libcdata/libcdata_range_list.c:326
56	653	11 : View List ['libfsapfs_volume_key_bag_free', 'libfdata_vector_free', 'libfsapfs_encryption_context_free', 'libfsapfs_object_map_btree_free', 'libfsapfs_snapshot_metadata_tree_free', 'libfsapfs_container_data_handle_free', 'libcdata_array_free', 'libcerror_error_set', 'libfsapfs_file_system_data_handle_free', 'libfsapfs_volume_superblock_free', 'libfsapfs_object_map_free']	56	653	libfsapfs_internal_volume_open_read	call site: 01208	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:794
56	56	1 : View List ['libfsapfs_volume_key_bag_free']	56	474	libfsapfs_internal_volume_open_read	call site: 01212	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:833
56	56	1 : View List ['libfsapfs_volume_key_bag_free']	56	437	libfsapfs_internal_volume_close	call site: 01247	/src/libfsapfs/libfsapfs/libfsapfs_volume.c:1050

Runtime coverage analysis

Covered functions

232

Functions that are reachable but not covered

71

Reachable functions

303

Percentage of reachable functions covered

76.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
libfsapfs/ossfuzz/extended_attribute_fuzzer.cc	1
libfsapfs/libbfio/libbfio_memory_range.c	2
libfsapfs/libcerror/libcerror_error.c	3
libfsapfs/libbfio/libbfio_memory_range_io_handle.c	12
libfsapfs/libbfio/libbfio_handle.c	8
libfsapfs/libcdata/libcdata_range_list.c	15
libfsapfs/libcdata/libcdata_list_element.c	10
libfsapfs/libcdata/libcdata_range_list_value.c	3
libfsapfs/libfsapfs/libfsapfs_container.c	7
libfsapfs/libfsapfs/libfsapfs_io_handle.c	3
libfsapfs/libcthreads/libcthreads_read_write_lock.c	6
libfsapfs/libcerror/libcerror_system.c	2
libfsapfs/libfsapfs/libfsapfs_container_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_checksum.c	2
libfsapfs/libfsapfs/libfsapfs_object.c	4
libfsapfs/libfsapfs/libfsapfs_checkpoint_map.c	4
libfsapfs/libcdata/libcdata_array.c	9
libfsapfs/libfsapfs/libfsapfs_checkpoint_map_entry.c	3
libfsapfs/libfsapfs/libfsapfs_container_data_handle.c	3
libfsapfs/libfdata/libfdata_vector.c	5
libfsapfs/libfcache/libfcache_date_time.c	1
libfsapfs/libfsapfs/libfsapfs_data_block.c	4
libfsapfs/libfsapfs/libfsapfs_encryption_context.c	5
libfsapfs/libcaes/libcaes_tweaked_context.c	4
libfsapfs/libcaes/libcaes_context.c	7
libfsapfs/libfdata/libfdata_segments_array.c	2
libfsapfs/libfdata/libfdata_range.c	4
libfsapfs/libfcache/libfcache_cache.c	4
libfsapfs/libcdata/libcdata_list.c	9
libfsapfs/libfcache/libfcache_cache_value.c	8
libfsapfs/libfdata/libfdata_mapped_range.c	3
libfsapfs/libfsapfs/libfsapfs_object_map.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_btree.c	7
libfsapfs/libfsapfs/libfsapfs_container_key_bag.c	6
libfsapfs/libfsapfs/libfsapfs_key_bag_header.c	3
libfsapfs/libfsapfs/libfsapfs_key_bag_entry.c	3
libfsapfs/libfsapfs/libfsapfs_fusion_middle_tree.c	1
libfsapfs/libfsapfs/libfsapfs_btree_node.c	7
libfsapfs/libfsapfs/libfsapfs_btree_node_header.c	3
libfsapfs/libfsapfs/libfsapfs_btree_footer.c	3
libfsapfs/libfsapfs/libfsapfs_btree_entry.c	4
libfsapfs/libfsapfs/libfsapfs_object_map_descriptor.c	4
libfsapfs/libfsapfs/libfsapfs_volume.c	7
libfsapfs/libfsapfs/libfsapfs_volume_superblock.c	4
libfsapfs/libfsapfs/libfsapfs_volume_key_bag.c	5
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata_tree.c	8
libfsapfs/libfsapfs/libfsapfs_snapshot_metadata.c	4
libfsapfs/libfsapfs/libfsapfs_file_system_data_handle.c	3
libfsapfs/libfsapfs/libfsapfs_file_system.c	3
libfsapfs/libfsapfs/libfsapfs_file_system_btree.c	13
libfsapfs/libfsapfs/libfsapfs_key_encrypted_key.c	5
libfsapfs/libfsapfs/libfsapfs_password.c	1
libfsapfs/libhmac/libhmac_sha256.c	2
libfsapfs/libhmac/libhmac_sha256_context.c	5
libfsapfs/libuna/libuna_unicode_character.c	1
libfsapfs/libfsapfs/libfsapfs_name_hash.c	1
libfsapfs/libfsapfs/libfsapfs_directory_record.c	6
libfsapfs/libfsapfs/libfsapfs_name.c	1
libfsapfs/libfsapfs/libfsapfs_inode.c	5
libfsapfs/libfsapfs/libfsapfs_file_entry.c	5
libfsapfs/libfsapfs/libfsapfs_attribute_values.c	5
libfsapfs/libfsapfs/libfsapfs_file_extent.c	1
libfsapfs/libuna/libuna_utf8_string.c	1
libfsapfs/libfsapfs/libfsapfs_extended_attribute.c	2
libfsapfs/libfdata/libfdata_stream.c	1
libfsapfs/libfsapfs/libfsapfs_compressed_data_header.c	1