High level conclusions

Fuzzers reach 41.58% of cyclomatic complexity.

Fuzzers reach 38.62% of all functions.

Fuzzer lua_stringtonumber_test is blocked:

The runtime code coverage of lua_stringtonumber_test covers 19.27% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

3485 / 9022

Cyclomatic complexity statically reachable by fuzzers

21426 / 51525

Runtime code coverage of functions

3317 / 9022

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: luaL_buffsub_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1412	70.0%
gold	[1:9]	3	0.14%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	602	29.8%
All colors	2017	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01957	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01950	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

160

Functions that are reachable but not covered

224

Reachable functions

382

Percentage of reachable functions covered

41.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_buffsub_test.cc	1
/src/testdir/build/lua-master/source/lauxlib.c	19
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	29

Fuzzer: luaL_buffaddr_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1411	69.8%
gold	[1:9]	4	0.19%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	604	29.9%
All colors	2019	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01957	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01950	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

161

Functions that are reachable but not covered

224

Reachable functions

383

Percentage of reachable functions covered

41.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_buffaddr_test.c	1
/src/testdir/build/lua-master/source/lauxlib.c	20
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	29

Fuzzer: luaL_bufflen_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1411	69.8%
gold	[1:9]	4	0.19%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	604	29.9%
All colors	2019	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01957	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01950	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

161

Functions that are reachable but not covered

224

Reachable functions

383

Percentage of reachable functions covered

41.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_bufflen_test.c	1
/src/testdir/build/lua-master/source/lauxlib.c	20
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	29

Fuzzer: lua_stringtonumber_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1644	87.9%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.05%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	224	11.9%
All colors	1869	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
6052	6052	4 : View List ['luaM_toobig', 'luaS_createlngstrobj', '__asan_handle_no_return', '__asan_memcpy']	6052	6052	luaS_newlstr	call site: 00393	/src/testdir/build/lua-master/source/lstring.c:223
3043	6068	6 : View List ['luaM_malloc_', '__asan_report_load8', 'luaO_ceillog2', 'luaG_runerror', '__asan_handle_no_return', '__asan_report_store4']	3053	6078	setnodevector	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:481
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
0	3037	1 : View List ['close_state']	0	3037	lua_newstate	call site: 00076	/src/testdir/build/lua-master/source/lstate.c:407
0	0	None	3033	3033	reinsert	call site: 01224	/src/testdir/build/lua-master/source/ltable.c:513
0	0	None	24	24	index2value	call site: 01823	/src/testdir/build/lua-master/source/lapi.c:68
0	0	None	16	3040	lua_settop	call site: 01865	/src/testdir/build/lua-master/source/lapi.c:188
0	0	None	14	6095	close_state	call site: 01799	/src/testdir/build/lua-master/source/lstate.c:271
0	0	None	12	12	index2value	call site: 01823	/src/testdir/build/lua-master/source/lapi.c:62
0	0	None	2	2	l_str2d	call site: 01674	/src/testdir/build/lua-master/source/lobject.c:266

Runtime coverage analysis

Covered functions

64

Functions that are reachable but not covered

268

Reachable functions

332

Percentage of reachable functions covered

19.28%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/lua_stringtonumber_test.c	1
/src/testdir/build/lua-master/source/lauxlib.c	7
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	14
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	70
/src/testdir/build/lua-master/source/lfunc.c	13
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	25
/src/testdir/build/lua-master/source/lobject.c	17
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	8

Fuzzer: luaL_gsub_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1412	69.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	156	7.68%
greenyellow	[30:49]	127	6.25%
lawngreen	50+	335	16.5%
All colors	2030	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01967	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01960	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

165

Functions that are reachable but not covered

224

Reachable functions

387

Percentage of reachable functions covered

42.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_gsub_test.cc	1
/src/testdir/build/lua-master/source/lauxlib.c	22
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	30

Fuzzer: torture_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1351	71.2%
gold	[1:9]	24	1.26%
yellow	[10:29]	37	1.95%
greenyellow	[30:49]	25	1.31%
lawngreen	50+	458	24.1%
All colors	1895	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
6052	6052	4 : View List ['luaM_toobig', 'luaS_createlngstrobj', '__asan_handle_no_return', '__asan_memcpy']	6052	6052	luaS_newlstr	call site: 00393	/src/testdir/build/lua-master/source/lstring.c:223
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3173	9288	luaH_newkey	call site: 01148	/src/testdir/build/lua-master/source/ltable.c:674
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3023	3023	1 : View List ['fullgen']	3025	3025	luaC_fullgc	call site: 00088	/src/testdir/build/lua-master/source/lgc.c:1734
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
87	87	5 : View List ['luaC_barrier_', '__asan_report_load1', '__asan_report_load8', '__asan_report_store1', '__asan_memcpy']	87	87	lua_setupvalue	call site: 00000	/src/testdir/build/lua-master/source/lapi.c:1407
79	79	3 : View List ['mainpositionfromnode', '__asan_report_store4', '__asan_report_load4']	135	135	luaH_newkey	call site: 01154	/src/testdir/build/lua-master/source/ltable.c:687
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776
20	20	5 : View List ['__asan_report_load8', '__asan_report_load1', '__asan_handle_no_return', '__asan_report_store1', '__asan_memcpy']	20	20	lua_getupvalue	call site: 00000	/src/testdir/build/lua-master/source/lapi.c:1389

Runtime coverage analysis

Covered functions

250

Functions that are reachable but not covered

199

Reachable functions

340

Percentage of reachable functions covered

41.47%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/torture_test.cc	5
/src/testdir/build/lua-master/source/lauxlib.c	7
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	14
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	70
/src/testdir/build/lua-master/source/lfunc.c	13
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	27
/src/testdir/build/lua-master/source/lobject.c	17
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	7

Fuzzer: luaL_traceback_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1473	70.6%
gold	[1:9]	3	0.14%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	610	29.2%
All colors	2086	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01964	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01957	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

165

Functions that are reachable but not covered

238

Reachable functions

401

Percentage of reachable functions covered

40.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_traceback_test.c	1
/src/testdir/build/lua-master/source/lauxlib.c	27
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	37
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	36

Fuzzer: luaL_loadbufferx_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1243	65.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	11	0.58%
lawngreen	50+	635	33.6%
All colors	1889	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3049	3049	5 : View List ['__asan_report_load1', '__asan_report_load8', '__asan_report_store1', 'luaD_callnoyield', '__asan_memcpy']	3051	6078	luaG_errormsg	call site: 00781	/src/testdir/build/lua-master/source/ldebug.c:810
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3036	6063	6 : View List ['__asan_report_load1', 'luaE_resetthread', '__asan_report_store1', 'abort', '__asan_memcpy', 'luaD_throw']	3058	6085	luaD_throw	call site: 00372	/src/testdir/build/lua-master/source/ldo.c:116
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	3053	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
10	14	4 : View List ['__asan_report_store8', 'luaM_free_', '__asan_report_load8', '__asan_report_load2']	10	14	luaE_shrinkCI	call site: 00610	/src/testdir/build/lua-master/source/lstate.c:141
8	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	8	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
4	4	1 : View List ['__asan_report_store1']	4	3030	luaG_addinfo	call site: 00000	/src/testdir/build/lua-master/source/ldebug.c:800
2	3061	2 : View List ['lexerror', '__asan_handle_no_return']	2	3061	save	call site: 00000	/src/testdir/build/lua-master/source/llex.c:61
2	3061	2 : View List ['lexerror', '__asan_handle_no_return']	2	3061	inclinenumber	call site: 00000	/src/testdir/build/lua-master/source/llex.c:162
2	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	6	6060	luaM_growaux_	call site: 00000	/src/testdir/build/lua-master/source/lmem.c:103
2	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	2	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489

Runtime coverage analysis

Covered functions

401

Functions that are reachable but not covered

195

Reachable functions

591

Percentage of reachable functions covered

67.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_loadbufferx_test.c	1
/src/testdir/build/lua-master/source/lauxlib.c	9
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	14
/src/testdir/build/lua-master/source/ldo.c	25
/src/testdir/build/lua-master/source/lmem.c	6
/src/testdir/build/lua-master/source/lgc.c	70
/src/testdir/build/lua-master/source/lfunc.c	13
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	25
/src/testdir/build/lua-master/source/lobject.c	17
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	6
/src/testdir/build/lua-master/source/lzio.c	1

Fuzzer: lua_load_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	373	18.9%
gold	[1:9]	34	1.72%
yellow	[10:29]	27	1.37%
greenyellow	[30:49]	3	0.15%
lawngreen	50+	1530	77.7%
All colors	1967	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4917	4917	1 : View List ['localfunc']	4927	4942	statement	call site: 00000	/src/testdir/build/lua-master/source/lparser.c:1881
3496	12744	4 : View List ['loadfunc', 'lua_pushfstring', 'checkload', 'lua_pushstring']	3496	12744	searcher_Croot	call site: 00000	/src/testdir/build/lua-master/source/loadlib.c:587
3496	6688	2 : View List ['loadfunc', 'checkload']	3496	6688	searcher_C	call site: 00000	/src/testdir/build/lua-master/source/loadlib.c:574
3036	6063	6 : View List ['__asan_report_load1', 'luaE_resetthread', '__asan_report_store1', 'abort', '__asan_memcpy', 'luaD_throw']	3058	6085	luaD_throw	call site: 00372	/src/testdir/build/lua-master/source/ldo.c:116
3034	3034	1 : View List ['rethook']	3052	3052	moveresults	call site: 00889	/src/testdir/build/lua-master/source/ldo.c:456
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
104	3168	3 : View List ['lua_settop', 'lua_pushvalue', 'lua_setupvalue']	104	3168	load_aux	call site: 00000	/src/testdir/build/lua-master/source/lbaselib.c:325
26	20067	10 : View List ['strlen', '__asan_report_load8', 'luaL_buffinit', 'luaL_addlstring', 'luaL_pushresult', '__asan_report_store1', 'luaL_prepbuffsize', 'strstr', 'luaL_addstring', '__asan_set_shadow_f8']	32	29191	setpath	call site: 00000	/src/testdir/build/lua-master/source/loadlib.c:296
26	3049	5 : View List ['__asan_report_load1', '__asan_report_load8', '__asan_report_store1', 'luaD_callnoyield', '__asan_memcpy']	28	6078	luaG_errormsg	call site: 00781	/src/testdir/build/lua-master/source/ldebug.c:810
10	3043	3 : View List ['luaT_callTMres', '__asan_report_load1', '__asan_report_load8']	10	3043	luaV_equalobj	call site: 01515	/src/testdir/build/lua-master/source/lvm.c:612
8	3032	5 : View List ['__asan_report_load1', '__asan_report_store1', '__asan_handle_no_return', 'luaS_newlstr', '__asan_report_store8']	22	6074	lua_concat	call site: 00000	/src/testdir/build/lua-master/source/lapi.c:1288
8	8	2 : View List ['__asan_report_load1', '__asan_report_load8']	8	8	luaT_callorderTM	call site: 01553	/src/testdir/build/lua-master/source/ltm.c:203

Runtime coverage analysis

Covered functions

753

Functions that are reachable but not covered

85

Reachable functions

614

Percentage of reachable functions covered

86.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/lua_load_test.c	2
/src/testdir/build/lua-master/source/lauxlib.c	9
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	14
/src/testdir/build/lua-master/source/ldo.c	25
/src/testdir/build/lua-master/source/lmem.c	6
/src/testdir/build/lua-master/source/lgc.c	70
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	25
/src/testdir/build/lua-master/source/lobject.c	17
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	22
/src/testdir/build/lua-master/source/linit.c	1
/src/testdir/build/lua-master/source/lzio.c	1

Fuzzer: luaL_addgsub_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1413	69.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	0.14%
greenyellow	[30:49]	10	0.49%
lawngreen	50+	600	29.6%
All colors	2026	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3867	3867	2 : View List ['luaV_execute', '__asan_report_store2']	3869	3869	ccall	call site: 00619	/src/testdir/build/lua-master/source/ldo.c:635
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3037	3037	3 : View List ['luaS_resize', '__asan_report_load8', '__asan_report_load4']	3037	3037	checkSizes	call site: 00544	/src/testdir/build/lua-master/source/lgc.c:873
3033	3033	2 : View List ['luaH_setint', '__asan_report_load1']	6080	12197	luaH_resize	call site: 01179	/src/testdir/build/lua-master/source/ltable.c:561
3032	3032	2 : View List ['luaG_runerror', '__asan_handle_no_return']	3032	3032	setnodevector	call site: 01181	/src/testdir/build/lua-master/source/ltable.c:489
3029	3029	1 : View List ['growstrtab']	3045	6071	internshrstr	call site: 00398	/src/testdir/build/lua-master/source/lstring.c:205
3029	3029	1 : View List ['luaD_seterrorobj']	3029	6059	prepcallclosemth	call site: 00881	/src/testdir/build/lua-master/source/lfunc.c:146
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01958	/src/testdir/build/lua-master/source/lapi.c:581
3027	3027	1 : View List ['luaD_growstack']	3035	3035	lua_checkstack	call site: 01951	/src/testdir/build/lua-master/source/lapi.c:117
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
76	76	4 : View List ['__asan_report_store8', '__asan_report_store1', '__asan_report_load1', 'getgeneric']	76	76	luaH_getstr	call site: 01288	/src/testdir/build/lua-master/source/ltable.c:776

Runtime coverage analysis

Covered functions

162

Functions that are reachable but not covered

225

Reachable functions

385

Percentage of reachable functions covered

41.56%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_addgsub_test.cc	1
/src/testdir/build/lua-master/source/lauxlib.c	21
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	24
/src/testdir/build/lua-master/source/lmem.c	5
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	32
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	29

Fuzzer: fuzz_lua

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	744	34.1%
gold	[1:9]	98	4.49%
yellow	[10:29]	147	6.74%
greenyellow	[30:49]	40	1.83%
lawngreen	50+	1151	52.7%
All colors	2180	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3176	3176	1 : View List ['luaU_undump']	3182	9237	f_parser	call site: 00000	/src/testdir/build/lua-master/source/ldo.c:992
3140	6227	4 : View List ['lua_typename', 'luaL_callmeta', 'lua_pushfstring', 'lua_type']	3140	9789	msghandler	call site: 01895	/src/fuzz_lua.c:103
3058	3058	1 : View List ['codeextraarg']	3060	6118	luaK_setlist	call site: 00000	/src/testdir/build/lua-master/source/lcode.c:1812
3058	3058	1 : View List ['codeextraarg']	3058	6116	luaK_codek	call site: 00000	/src/testdir/build/lua-master/source/lcode.c:452
3040	3040	2 : View List ['enterinc', 'entergen']	3042	3042	luaC_changemode	call site: 01804	/src/testdir/build/lua-master/source/lgc.c:1362
3036	6063	6 : View List ['__asan_report_load1', 'luaE_resetthread', '__asan_report_store1', 'abort', '__asan_memcpy', 'luaD_throw']	3058	6085	luaD_throw	call site: 00372	/src/testdir/build/lua-master/source/ldo.c:116
3034	3034	1 : View List ['rethook']	3052	3052	moveresults	call site: 00889	/src/testdir/build/lua-master/source/ldo.c:456
3028	6056	4 : View List ['luaC_step', 'luaF_newCclosure', '__asan_report_load1', '__asan_memcpy']	3066	6094	lua_pushcclosure	call site: 01888	/src/testdir/build/lua-master/source/lapi.c:581
3023	3023	1 : View List ['luaD_call']	3023	3023	callclosemethod	call site: 00885	/src/testdir/build/lua-master/source/lfunc.c:114
172	180	3 : View List ['linkgclist_', 'traverseephemeron', 'traverseweakvalue']	178	186	traversetable	call site: 00236	/src/testdir/build/lua-master/source/lgc.c:547
93	6208	5 : View List ['lua_rotate', 'lua_copy', 'lua_pushstring', 'lua_tolstring', 'strncmp']	93	12270	pushglobalfuncname	call site: 02098	/src/testdir/build/lua-master/source/lauxlib.c:83
10	10	2 : View List ['__asan_report_load1', '__asan_handle_no_return']	22	22	index2value	call site: 01823	/src/testdir/build/lua-master/source/lapi.c:73

Runtime coverage analysis

Covered functions

537

Functions that are reachable but not covered

152

Reachable functions

683

Percentage of reachable functions covered

77.75%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzz_lua.c	8
/src/testdir/build/lua-master/source/lauxlib.c	31
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	15
/src/testdir/build/lua-master/source/ldo.c	25
/src/testdir/build/lua-master/source/lmem.c	6
/src/testdir/build/lua-master/source/lgc.c	73
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	37
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	34
/src/testdir/build/lua-master/source/lobject.c	18
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	44
/src/testdir/build/lua-master/source/lzio.c	1

Fuzzer: luaL_loadbuffer_proto_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6382	62.5%
gold	[1:9]	652	6.39%
yellow	[10:29]	134	1.31%
greenyellow	[30:49]	74	0.72%
lawngreen	50+	2961	29.0%
All colors	10203	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
132688	185822	25 : View List ['google::protobuf::Message const* const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'std::__1::basic_string , std::__1::allocator >::empty() const', '__asan_report_load1', 'google::protobuf::FieldDescriptor::cpp_type() const', 'std::__1::basic_string , std::__1::allocator >::size() const', '__asan_report_load4', 'unsigned int const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::InlinedStringField::GetNoArena() const', 'google::protobuf::internal::LogMessage::~LogMessage()', 'google::protobuf::internal::ReflectionSchema::IsDefaultInstance(google::protobuf::Message const&) const', 'google::protobuf::FieldDescriptor::options() const', 'google::protobuf::internal::ArenaStringPtr const& google::protobuf::Reflection::GetField (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::(anonymous namespace)::CheckInvalidAccess(google::protobuf::internal::ReflectionSchema const&, google::protobuf::FieldDescriptor const*)', 'google::protobuf::internal::ArenaStringPtr::Get() const', 'google::protobuf::internal::LogMessage::LogMessage(google::protobuf::LogLevel, char const*, int)', '__asan_report_load8', 'bool const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::LogMessage::operator<<(char const*)', 'unsigned long const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'long const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::InlinedStringField const& google::protobuf::Reflection::GetField (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::LogFinisher::operator=(google::protobuf::internal::LogMessage&)', 'google::protobuf::FieldOptions::ctype() const', 'google::protobuf::Reflection::IsInlined(google::protobuf::FieldDescriptor const*) const', 'int const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const']	132688	185822	google::protobuf::Reflection::HasBit(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:2556
26972	53567	8 : View List ['google::protobuf::(anonymous namespace)::DefaultFinderFindAnyType(google::protobuf::Message const&, std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator > const&)', 'google::protobuf::strings::AlphaNum::AlphaNum(std::__1::basic_string , std::__1::allocator > const&)', 'std::__1::remove_reference , std::__1::allocator >&>::type&& std::__1::move , std::__1::allocator >&>(std::__1::basic_string , std::__1::allocator >&)', 'std::__1::basic_string , std::__1::allocator >::basic_string(std::__1::basic_string , std::__1::allocator >&&)', 'google::protobuf::TextFormat::Parser::ParserImpl::ConsumeAnyValue(google::protobuf::Descriptor const*, std::__1::basic_string , std::__1::allocator >*)', 'google::protobuf::TextFormat::Parser::ParserImpl::ConsumeAnyTypeUrl(std::__1::basic_string , std::__1::allocator >*, std::__1::basic_string , std::__1::allocator >*)', 'google::protobuf::Reflection::SetString(google::protobuf::Message*, google::protobuf::FieldDescriptor const*, std::__1::basic_string , std::__1::allocator >) const', 'google::protobuf::StrCat(google::protobuf::strings::AlphaNum const&, google::protobuf::strings::AlphaNum const&)']	27000	81873	google::protobuf::TextFormat::Parser::ParserImpl::ConsumeField(google::protobuf::Message*)	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.cc:426
26522	26554	6 : View List ['google::protobuf::FieldOptions::weak() const', 'google::protobuf::FieldDescriptor::is_extension() const', 'google::protobuf::FieldDescriptor::options() const', 'google::protobuf::internal::ReflectionSchema::InRealOneof(google::protobuf::FieldDescriptor const*) const', 'google::protobuf::Reflection::IsLazyField(google::protobuf::FieldDescriptor const*) const', 'google::protobuf::Message const* const& google::protobuf::Reflection::DefaultRaw (google::protobuf::FieldDescriptor const*) const']	26530	39830	google::protobuf::Reflection::GetDefaultMessageInstance(google::protobuf::FieldDescriptorconst*)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:1956
13690	13690	2 : View List ['google::protobuf::(anonymous namespace)::DefaultFinderFindExtension(google::protobuf::Message*, std::__1::basic_string , std::__1::allocator > const&)', 'google::protobuf::TextFormat::Parser::ParserImpl::ConsumeFullTypeName(std::__1::basic_string , std::__1::allocator >*)']	27061	167714	google::protobuf::TextFormat::Parser::ParserImpl::ConsumeField(google::protobuf::Message*)	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.cc:465
13531	13531	4 : View List ['google::protobuf::internal::MapFieldBase::IsRepeatedFieldValid() const', 'google::protobuf::internal::MapFieldBase::GetRepeatedField() const', 'google::protobuf::internal::MapFieldBase const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', '__asan_report_load8']	13531	13535	google::protobuf::Reflection::FieldSize(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:1203
13523	13523	2 : View List ['google::protobuf::internal::MapFieldBase::GetRepeatedField() const', 'google::protobuf::internal::MapFieldBase const& google::protobuf::Reflection::GetRaw (google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const']	13523	13551	google::protobuf::Reflection::GetRepeatedMessage(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*,int)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:2165
13520	13520	2 : View List ['google::protobuf::internal::MapFieldBase* google::protobuf::Reflection::MutableRaw (google::protobuf::Message*, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::MapFieldBase::MutableRepeatedField()']	13528	27122	google::protobuf::Reflection::AddMessage(google::protobuf::Message*,google::protobuf::FieldDescriptorconst*,google::protobuf::MessageFactory*)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:2214
13520	13520	2 : View List ['google::protobuf::internal::MapFieldBase* google::protobuf::Reflection::MutableRaw (google::protobuf::Message*, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::MapFieldBase::MutableRepeatedField()']	13520	13548	google::protobuf::Reflection::MutableRepeatedMessage(google::protobuf::Message*,google::protobuf::FieldDescriptorconst*,int)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:2187
13444	13472	9 : View List ['google::protobuf::internal::ReflectionSchema::InlinedStringIndex(google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::LogMessage::LogMessage(google::protobuf::LogLevel, char const*, int)', 'google::protobuf::internal::LogMessage::operator<<(char const*)', 'google::protobuf::Reflection::IsInlinedStringDonated(google::protobuf::Message const&, google::protobuf::FieldDescriptor const*) const', 'google::protobuf::internal::LogFinisher::operator=(google::protobuf::internal::LogMessage&)', 'google::protobuf::internal::InlinedStringField::Set(std::__1::basic_string , std::__1::allocator > const&, google::protobuf::Arena*, bool, unsigned int*, unsigned int, google::protobuf::MessageLite*)', 'google::protobuf::Reflection::MutableInlinedStringDonatedArray(google::protobuf::Message*) const', 'google::protobuf::internal::LogMessage::~LogMessage()', 'google::protobuf::internal::InlinedStringField* google::protobuf::Reflection::MutableField (google::protobuf::Message*, google::protobuf::FieldDescriptor const*) const']	13444	13491	google::protobuf::Reflection::SetString(google::protobuf::Message*,google::protobuf::FieldDescriptorconst*,std::__1::basic_string ,std::__1::allocator >)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:1698
13344	13344	4 : View List ['google::protobuf::(anonymous namespace)::DefaultFinderFindExtensionByNumber(google::protobuf::Descriptor const*, int)', 'google::protobuf::Descriptor::FindFieldByNumber(int) const', 'google::protobuf::Descriptor::IsExtensionNumber(int) const', 'google::protobuf::Descriptor::IsReservedNumber(int) const']	26723	166530	google::protobuf::TextFormat::Parser::ParserImpl::ConsumeField(google::protobuf::Message*)	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.cc:492
13313	13313	2 : View List ['google::protobuf::internal::ExtensionSet::MutableMessage(google::protobuf::FieldDescriptor const*, google::protobuf::MessageFactory*)', 'google::protobuf::Reflection::MutableExtensionSet(google::protobuf::Message*) const']	13313	13313	google::protobuf::Reflection::MutableMessage(google::protobuf::Message*,google::protobuf::FieldDescriptorconst*,google::protobuf::MessageFactory*)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc:2014
13309	13309	2 : View List ['protobuf_mutator::ConstFieldInstance::index() const', 'google::protobuf::Reflection::SetRepeatedString(google::protobuf::Message*, google::protobuf::FieldDescriptor const*, int, std::__1::basic_string , std::__1::allocator >) const']	13311	13331	protobuf_mutator::FieldInstance::Store(std::__1::basic_string ,std::__1::allocator >const&)const	call site: 00000	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/field_instance.h:316

Runtime coverage analysis

Covered functions

3174

Functions that are reachable but not covered

3418

Reachable functions

6551

Percentage of reachable functions covered

47.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/testdir/tests/luaL_loadbuffer_proto/luaL_loadbuffer_proto_test.cc	3
/src/testdir/build/tests/luaL_loadbuffer_proto/lua_grammar.pb.h	327
/src/testdir/build/tests/luaL_loadbuffer_proto/lua_grammar.pb.cc	75
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/message.h	6
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/message_lite.h	6
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/metadata_lite.h	20
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/common.cc	5
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/has_bits.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/generated_message_util.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message_lite.cc	23
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena.h	16
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena.cc	18
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena_impl.h	25
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_macro.cc	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/binary_format.cc	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message_lite.h	21
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/stringpiece.h	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringpiece.cc	8
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/coded_stream.h	32
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/parse_context.h	13
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringpiece.h	13
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/text_format.cc	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.cc	77
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/text_format.h	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/strutil.h	21
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/strutil.cc	32
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl_lite.cc	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/tokenizer.h	11
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/tokenizer.cc	56
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringprintf.cc	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.cc	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.h	85
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.cc	276
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/descriptor.h	26
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/mutex.h	8
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.pb.h	350
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.pb.cc	48
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_ptr_field.h	113
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/repeated_ptr_field.h	27
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_field.h	55
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arenastring.h	6
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/map_util.h	10
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenastring.cc	9
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenastring.h	14
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arena.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arena_impl.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenaz_sampler.h	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/once.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/port.h	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_ptr_field.cc	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set.cc	45
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set.h	14
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format_lite.h	12
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/port.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/casts.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/once.h	1
/usr/local/bin/../include/c++/v1/math.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/unknown_field_set.h	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/unknown_field_set.cc	17
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/unknown_field_set.h	13
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stl_util.h	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl_lite.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_util.h	5
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_util.cc	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/explicitly_constructed.h	6
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/explicitly_constructed.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/substitute.h	6
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/substitute.cc	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/dynamic_message.cc	21
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message.h	34
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc	160
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.h	21
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/inlined_string_field.h	8
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/descriptor.pb.h	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map_field.cc	7
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map_field.h	33
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set_heavy.cc	7
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message.cc	8
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/coded_stream.cc	23
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format.cc	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/wire_format_lite.h	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/casts.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor_database.cc	21
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor_database.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map.h	4
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.h	18
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any_lite.cc	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/parse_context.cc	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/io/coded_stream.h	5
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/port.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/repeated_field.h	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/strtod.cc	2
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/reflection_ops.cc	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_mutator.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/mutator.h	1
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/mutator.cc	9
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/any.pb.h	5
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.pb.cc	3
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/field_instance.h	2
/src/testdir/build/lua-master/source/lauxlib.c	11
/src/testdir/build/lua-master/source/lstate.c	18
/src/testdir/build/lua-master/source/lstring.c	14
/src/testdir/build/lua-master/source/ldo.c	25
/src/testdir/build/lua-master/source/lmem.c	6
/src/testdir/build/lua-master/source/lgc.c	70
/src/testdir/build/lua-master/source/lfunc.c	14
/src/testdir/build/lua-master/source/ltable.c	35
/src/testdir/build/lua-master/source/ltm.c	15
/src/testdir/build/lua-master/source/ldebug.c	25
/src/testdir/build/lua-master/source/lobject.c	17
/src/testdir/build/lua-master/source/lvm.c	25
/src/testdir/build/lua-master/source/llex.c	1
/src/testdir/build/lua-master/source/lapi.c	22
/src/testdir/tests/luaL_loadbuffer_proto/serializer.cc	57
/src/testdir/build/lua-master/source/linit.c	1
/src/testdir/build/lua-master/source/lzio.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
protobuf_mutator::libfuzzer::(anonymousnamespace)::CrossOverBinaryMessages(unsignedcharconst*,unsignedlong,unsignedcharconst*,unsignedlong,unsignedchar*,unsignedlong,unsignedint,google::protobuf::Message*,google::protobuf::Message*)	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_macro.cc	9	['char *', 'size_t', 'char *', 'size_t', 'char *', 'size_t', 'int', 'class.google::protobuf::Message *', 'class.google::protobuf::Message *']	46	0	174	8	4	5779	0	15342	1903
lua_grammar::Expression::ByteSizeLong()const	/src/testdir/build/tests/luaL_loadbuffer_proto/lua_grammar.pb.cc	1	['class.lua_grammar::Expression *']	89	0	216	27	28	653	94	1616	1403
google::protobuf::FileOptions::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.pb.cc	3	['class.google::protobuf::FileOptions *', 'char *', 'class.google::protobuf::internal::ParseContext *']	51	0	1730	388	80	5430	0	14629	1276

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

4186 / 9022

Cyclomatic complexity statically reachable by fuzzers

25980 / 51525

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
auxgetinfo	53	26	49.05%	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'luaL_gsub_test', 'luaL_traceback_test', 'luaL_addgsub_test', 'fuzz_lua']
luaG_traceexec	43	9	20.93%	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
funcnamefromcode	36	13	36.11%	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
str_unpack	71	35	49.29%	[]
google::protobuf::DescriptorBuilder::AddSymbol(std::__1::basic_string ,std::__1::allocator >const&,voidconst*,std::__1::basic_string ,std::__1::allocator >const&,google::protobuf::Messageconst&,google::protobuf::Symbol)	40	8	20.0%	[]
google::protobuf::DescriptorBuilder::BuildFile(google::protobuf::FileDescriptorProtoconst&)	49	21	42.85%	['luaL_loadbuffer_proto_test']
google::protobuf::DescriptorBuilder::BuildFileImpl(google::protobuf::FileDescriptorProtoconst&,google::protobuf::internal::FlatAllocator&)	201	80	39.80%	['luaL_loadbuffer_proto_test']
google::protobuf::DescriptorBuilder::BuildMessage(google::protobuf::DescriptorProtoconst&,google::protobuf::Descriptorconst*,google::protobuf::Descriptor*,google::protobuf::internal::FlatAllocator&)	135	68	50.37%	[]
google::protobuf::DescriptorBuilder::BuildFieldOrExtension(google::protobuf::FieldDescriptorProtoconst&,google::protobuf::Descriptor*,google::protobuf::FieldDescriptor*,bool,google::protobuf::internal::FlatAllocator&)	232	105	45.25%	[]
google::protobuf::DescriptorBuilder::BuildEnum(google::protobuf::EnumDescriptorProtoconst&,google::protobuf::Descriptorconst*,google::protobuf::EnumDescriptor*,google::protobuf::internal::FlatAllocator&)	84	37	44.04%	[]
google::protobuf::DescriptorBuilder::BuildEnumValue(google::protobuf::EnumValueDescriptorProtoconst&,google::protobuf::EnumDescriptorconst*,google::protobuf::EnumValueDescriptor*,google::protobuf::internal::FlatAllocator&)	43	21	48.83%	[]
google::protobuf::DescriptorBuilder::CrossLinkField(google::protobuf::FieldDescriptor*,google::protobuf::FieldDescriptorProtoconst&)	193	53	27.46%	['luaL_loadbuffer_proto_test']
google::protobuf::FileDescriptorProto::Clear()	33	15	45.45%	[]
google::protobuf::FileDescriptorProto::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	171	64	37.42%	[]
google::protobuf::DescriptorProto_ExtensionRange::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	53	28	52.83%	[]
google::protobuf::OneofDescriptorProto::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	48	24	50.0%	[]
google::protobuf::EnumDescriptorProto::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	88	35	39.77%	[]
google::protobuf::FileOptions::Clear()	55	13	23.63%	['luaL_loadbuffer_proto_test']
google::protobuf::FileOptions::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	241	88	36.51%	[]
google::protobuf::FileOptions::_InternalSerialize(unsignedchar*,google::protobuf::io::EpsCopyOutputStream*)const	139	76	54.67%	[]
google::protobuf::FieldOptions::_InternalParse(charconst*,google::protobuf::internal::ParseContext*)	111	28	25.22%	[]
google::protobuf::FieldOptions::_InternalSerialize(unsignedchar*,google::protobuf::io::EpsCopyOutputStream*)const	48	24	50.0%	[]
google::protobuf::Reflection::FieldSize(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	38	15	39.47%	['luaL_loadbuffer_proto_test']
google::protobuf::Reflection::ClearOneof(google::protobuf::Message*,google::protobuf::OneofDescriptorconst*)const	31	5	16.12%	['luaL_loadbuffer_proto_test']
google::protobuf::internal::IsDescendant(google::protobuf::Message&,google::protobuf::Messageconst&)	37	7	18.91%	[]
google::protobuf::Reflection::HasBit(google::protobuf::Messageconst&,google::protobuf::FieldDescriptorconst*)const	50	5	10.0%	['luaL_loadbuffer_proto_test']
google::protobuf::io::Tokenizer::ConsumeString(char)	53	27	50.94%	['luaL_loadbuffer_proto_test']
google::protobuf::internal::EpsCopyInputStream::NextBuffer(int,int)	41	12	29.26%	[]
google::protobuf::internal::(anonymousnamespace)::UTF8GenericScan(google::protobuf::internal::UTF8StateMachineObjconst*,charconst*,int,int*)	72	3	4.166%	[]
google::protobuf::TextFormat::Parser::ParserImpl::ConsumeField(google::protobuf::Message*)	199	81	40.70%	['luaL_loadbuffer_proto_test']
google::protobuf::TextFormat::Parser::ParserImpl::SkipFieldValue()	53	24	45.28%	['luaL_loadbuffer_proto_test']
google::protobuf::TextFormat::Parser::ParserImpl::ConsumeFieldValue(google::protobuf::Message*,google::protobuf::Reflectionconst*,google::protobuf::FieldDescriptorconst*)	118	44	37.28%	['luaL_loadbuffer_proto_test']
voidprotobuf_mutator::FieldFunction ::operator() (protobuf_mutator::FieldInstanceconst&)const	39	15	38.46%	[]
lua_grammar::Expression::MergeImpl(google::protobuf::Message&,google::protobuf::Messageconst&)	62	12	19.35%	[]
lua_grammar::BinaryOperator::MergeImpl(google::protobuf::Message&,google::protobuf::Messageconst&)	73	12	16.43%	[]

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/mathutil.h	[]	[]
/src/testdir/build/lua-master/source/lbaselib.c	[]	[]
/src/testdir/build/lua-master/source/loslib.c	[]	[]
/src/testdir/build/tests/luaL_loadbuffer_proto/lua_grammar.pb.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/repeated_ptr_field.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/tests/lua_stringtonumber_test.c	['lua_stringtonumber_test']	['lua_stringtonumber_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.pb.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_macro.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/mutator.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.pb.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/strutil.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arena_impl.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenaz_sampler.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/lua-master/source/ldblib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/any.pb.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/liolib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/metadata_lite.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/text_format.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/reflection_internal.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map_field_inl.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/explicitly_constructed.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set_heavy.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message_lite.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lmem.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/reflection_ops.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor_database.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/parse_context.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any_lite.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/port.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/message_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lundump.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_field.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/callback.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl.cc	[]	[]
/src/testdir/build/lua-master/source/ltablib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/stringpiece.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/casts.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/ldo.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/parse_context.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/coded_stream.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/printer.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/strutil.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenastring.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/inlined_string_field.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/parse_context.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/field_instance.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/weighted_reservoir_sampler.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/substitute.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/lua-master/source/lstate.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/has_bits.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_ptr_field.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/coded_stream.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_mutator.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringprintf.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/repeated_field.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set_inl.h	[]	[]
/src/testdir/build/lua-master/source/lapi.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/explicitly_constructed.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/casts.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/io/coded_stream.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/wire_format_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lcode.c	[]	[]
/src/testdir/tests/luaL_loadbuffer_proto/serializer.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/tests/lua_load_test.c	['lua_load_test']	['lua_load_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringpiece.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/tests/luaL_buffsub_test.cc	['luaL_buffsub_test']	['luaL_buffsub_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/once.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/util/message_differencer.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/implicit_weak_message.cc	[]	[]
/src/testdir/build/lua-master/source/ldump.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/mutex.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl_lite.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/tests/luaL_gsub_test.cc	['luaL_gsub_test']	['luaL_gsub_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/printer.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/usr/local/bin/../include/c++/v1/iosfwd	[]	[]
/src/testdir/build/lua-master/source/lfunc.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/binary_format.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/lua-master/source/lmathlib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/unknown_field_set.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/text_format.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/port.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/loadlib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/dynamic_message.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/libfuzzer_mutator.cc	[]	[]
/src/testdir/build/lua-master/source/lutf8lib.c	[]	[]
/src/testdir/build/lua-master/source/lauxlib.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stl_util.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arena.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map_field.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/lua-master/source/lobject.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor_database.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/strtod.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/luaL_loadbuffer_proto/lua_grammar.pb.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lgc.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/usr/local/bin/../include/c++/v1/math.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/tests/luaL_loadbufferx_test.c	['luaL_loadbufferx_test']	['luaL_loadbufferx_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/port.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/substitute.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/tests/luaL_loadbuffer_proto/luaL_loadbuffer_proto_test.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/unknown_field_set.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/fuzz_lua.c	['fuzz_lua']	['fuzz_lua']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/wire_format.h	[]	[]
/src/testdir/tests/luaL_buffaddr_test.c	['luaL_buffaddr_test']	['luaL_buffaddr_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/repeated_ptr_field.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format_lite.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/util/message_differencer.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/extension_set.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/ldebug.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/arenastring.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lzio.c	['luaL_loadbufferx_test', 'lua_load_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_loadbufferx_test', 'lua_load_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_reflection.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/structurally_valid.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/implicit_weak_message.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.pb.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/descriptor.pb.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/dynamic_message.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/tokenizer.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/reflection.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/message.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/common.h	[]	[]
/src/testdir/build/lua-master/source/lparser.c	[]	[]
/src/testdir/tests/luaL_addgsub_test.cc	['luaL_addgsub_test']	['luaL_addgsub_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/endian.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lcorolib.c	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/util/field_comparator.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/zero_copy_stream_impl.h	[]	[]
/src/testdir/build/lua-master/source/ltable.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_util.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/tests/luaL_traceback_test.c	['luaL_traceback_test']	['luaL_traceback_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/map_util.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lstring.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/lstrlib.c	[]	[]
/src/testdir/build/lua-master/source/lvm.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/map_field.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/stringpiece.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arena_impl.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/tokenizer.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.pb.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/once.h	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/lua-master/source/linit.c	['lua_load_test', 'luaL_loadbuffer_proto_test']	['lua_load_test', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/descriptor.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/descriptor.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/util/field_comparator.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/message_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/text_format.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/generated_message_util.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/any.h	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/endian.h	[]	[]
/src/testdir/build/lua-master/source/ltm.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/tests/torture_test.cc	['torture_test']	['torture_test']
/src/testdir/tests/luaL_bufflen_test.c	['luaL_bufflen_test']	['luaL_bufflen_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/arenastring.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/common.cc	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/unknown_field_set.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/wire_format.cc	['luaL_loadbuffer_proto_test']	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/utf8_fix.cc	[]	[]
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/mutator.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/metadata_lite.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']
/src/testdir/build/lua-master/source/llex.c	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']	['luaL_buffsub_test', 'luaL_buffaddr_test', 'luaL_bufflen_test', 'lua_stringtonumber_test', 'luaL_gsub_test', 'torture_test', 'luaL_traceback_test', 'luaL_loadbufferx_test', 'lua_load_test', 'luaL_addgsub_test', 'fuzz_lua', 'luaL_loadbuffer_proto_test']
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/generated_message_util.h	['luaL_loadbuffer_proto_test']	['luaL_loadbuffer_proto_test']

Directories in report

Directory
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/stubs/
/src/testdir/build/tests/luaL_loadbuffer_proto/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/stubs/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/include/google/protobuf/io/
/src/testdir/tests/luaL_loadbuffer_proto/
/src/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator/src/libfuzzer/
/src/testdir/build/lua-master/source/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/util/
/usr/local/bin/../include/c++/v1/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/io/
/src/testdir/tests/
/src/testdir/build/tests/external.protobuf_mutator/src/external.protobuf_mutator-build/external.protobuf/src/external.protobuf/src/google/protobuf/