Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Project coverage
Per-fuzzer coverage

Table of contents

Project overview: matio
High level conclusions
Reachability and coverage overview
Fuzzers overview
Project functions overview
Fuzzer details
Fuzzer: matio_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Analyses and suggestions
Optimal target analysis
Remaining optimal interesting functions
All functions overview
Fuzz engine guidance
matio/ossfuzz/./matio_fuzzer.cpp
Dictionary
Fuzzer function priority
Runtime coverage analysis
Complex functions with low coverage
Files and Directories in report
Files in report
Directories in report
Metadata section
Report generation date: 2024-06-18

Project overview: matio

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
24.0%
1329 / 5631
Cyclomatic complexity statically reachable by fuzzers
22.0%
15305 / 68272
Runtime code coverage of functions
23.0%
1274 / 5631

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
matio_fuzzer matio/ossfuzz/./matio_fuzzer.cpp 1387 4358 67 130 70269 15413 matio_fuzzer.cpp

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: matio_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 4745 76.2%
gold [1:9] 325 5.22%
yellow [10:29] 261 4.19%
greenyellow [30:49] 91 1.46%
lawngreen 50+ 797 12.8%
All colors 6219 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
25867 94876 16 :

['H5G__obj_create_real', 'H5G__link_to_loc', 'H5G__obj_get_linfo', 'H5O_loc_hold_file', 'H5G_loc_copy', 'H5O_msg_exists', 'H5D_get_dcpl_id', 'H5O_msg_read', 'H5O_dec_rc_by_loc', 'H5O_close', 'H5G__component', 'H5G__obj_lookup', 'H5L_get_ocrt_info', 'H5G_loc_reset', 'H5G__traverse_special', 'H5G__loc_insert']

25867 120833 H5G__traverse_real call site: 00000 /src/hdf5/src/H5Gtraverse.c:576
25276 25276 4 :

['H5MF_free_aggrs', 'H5FD_truncate', 'H5MF_close', 'H5F_eoa_dirty']

25371 36887 H5F__dest call site: 05143 /src/hdf5/src/H5Fint.c:1465
19578 19578 2 :

['H5G__get_info_by_name', 'H5G__get_info_by_idx']

19578 19644 H5VL__native_group_get call site: 00000 /src/hdf5/src/H5VLnative_group.c:195
17218 17218 3 :

['H5FD_unlock', 'H5F_flush_tagged_metadata', 'H5F_super_dirty']

17218 25808 H5F_open call site: 00000 /src/hdf5/src/H5Fint.c:2153
17011 17011 2 :

['H5G__compact_get_name_by_idx', 'H5G__dense_get_name_by_idx']

17011 17084 H5G_obj_get_name_by_idx call site: 00000 /src/hdf5/src/H5Gobj.c:772
16967 16967 2 :

['H5G__dense_iterate', 'H5G__compact_iterate']

16967 17062 H5G__obj_iterate call site: 00000 /src/hdf5/src/H5Gobj.c:633
16875 16875 4 :

['H5F__super_ext_write_msg', 'H5F__super_ext_remove_msg', 'H5FD_sb_encode', 'H5FD_sb_size']

16875 42458 H5F__super_read call site: 00000 /src/hdf5/src/H5Fsuper.c:948
16833 16874 3 :

['H5O__chunk_unprotect', 'H5O__chunk_protect', 'H5AC_pin_protected_entry']

16833 25495 H5O_protect call site: 03088 /src/hdf5/src/H5Oint.c:1076
16828 16828 2 :

['H5G__compact_lookup', 'H5G__dense_lookup']

16828 16879 H5G__obj_lookup call site: 00000 /src/hdf5/src/H5Gobj.c:1071
12766 12766 1 :

['H5D__virtual_set_extent_unlim']

12766 13184 H5D__get_space call site: 00000 /src/hdf5/src/H5Dint.c:3875
9936 9936 1 :

['H5A__open_by_idx']

9936 9980 H5VL__native_attr_open call site: 00000 /src/hdf5/src/H5VLnative_attr.c:166
9873 9873 1 :

['H5G_visit']

9873 9895 H5VL__native_link_specific call site: 00000 /src/hdf5/src/H5VLnative_link.c:356

Runtime coverage analysis

Covered functions
1275
Functions that are reachable but not covered
786
Reachable functions
1387
Percentage of reachable functions covered
43.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
matio/ossfuzz/./matio_fuzzer.cpp 1
matio/ossfuzz/./fuzzer_temp_file.h 5
matio/ossfuzz/./matio_wrap.h 1
matioio.c 8
hdf5H5E.c 9
hdf5H5.c 5
hdf5H5CX.c 18
hdf5H5Eint.c 15
hdf5H5FL.c 34
hdf5H5Iint.c 19
hdf5H5MM.c 5
hdf5H5Pint.c 20
hdf5H5SL.c 21
hdf5H5checksum.c 3
matiomat.c 33
matiomat4.c 3
matiomat5.c 10
matiomat73.c 20
hdf5H5P.c 2
hdf5H5Pfcpl.c 1
hdf5H5Pfapl.c 2
hdf5H5F.c 6
hdf5H5VLcallback.c 50
hdf5H5VLint.c 26
hdf5H5Tcommit.c 4
hdf5H5T.c 28
hdf5H5Ffake.c 2
hdf5H5Omessage.c 34
hdf5H5Tfields.c 2
hdf5H5Tvlen.c 1
hdf5H5Tref.c 1
hdf5H5Fquery.c 22
hdf5H5Rint.c 7
hdf5H5Sselect.c 6
hdf5H5S.c 10
hdf5H5VLnative.c 4
hdf5H5PLint.c 4
hdf5H5PLpath.c 4
hdf5H5FDint.c 5
hdf5H5PLplugin_cache.c 3
matioendian.c 8
matio./safe-math.h 2
zlib/inflate.c 11
hdf5H5I.c 2
hdf5H5G.c 5
hdf5H5D.c 9
hdf5H5L.c 5
zlib/zutil.c 1
matioinflate.c 4
zlib/crc32.c 5
zlib/adler32.c 2
zlib/inftrees.c 1
zlib/inffast.c 1
matioread_data.c 2
matio./read_data_impl.h 40
hdf5H5O.c 2
hdf5H5A.c 11
hdf5H5Pocpl.c 3
hdf5H5Z.c 8
hdf5H5Rdeprec.c 2
hdf5H5Fint.c 15
hdf5H5HG.c 2
hdf5H5AC.c 27
hdf5H5Centry.c 28
hdf5H5Cimage.c 20
hdf5H5Fio.c 2
hdf5H5PB.c 11
hdf5H5Faccum.c 6
hdf5./H5VMprivate.h 3
hdf5H5Cint.c 14
hdf5H5Ctag.c 7
hdf5H5MF.c 24
hdf5H5C.c 7
hdf5H5MFsection.c 2
hdf5H5FS.c 15
hdf5H5Clog.c 19
hdf5H5FSsection.c 26
hdf5H5Cquery.c 3
hdf5H5Fspace.c 3
hdf5H5FDspace.c 6
hdf5H5Fsuper.c 8
hdf5H5FD.c 5
hdf5H5Oint.c 25
hdf5H5ACproxy_entry.c 6
hdf5H5timer.c 1
hdf5H5MFaggr.c 9
hdf5H5Ochunk.c 7
hdf5H5SM.c 19
hdf5H5B2.c 9
hdf5H5B2hdr.c 12
hdf5H5B2int.c 13
hdf5H5B2internal.c 6
hdf5H5B2leaf.c 7
hdf5H5HF.c 8
hdf5H5HFhdr.c 20
hdf5H5HFdtable.c 6
hdf5H5Opline.c 1
hdf5H5HFiter.c 9
hdf5H5HFhuge.c 9
hdf5H5HFtiny.c 6
hdf5H5HFspace.c 8
hdf5H5HFiblock.c 15
hdf5H5HFdblock.c 6
hdf5H5SMmessage.c 2
hdf5H5HFman.c 4
hdf5H5HFbtree2.c 6
hdf5H5Oalloc.c 17
hdf5H5HFsection.c 28
hdf5H5Fmount.c 3
hdf5H5Gint.c 3
hdf5H5Aint.c 1
hdf5H5Dint.c 4
hdf5H5FO.c 8
hdf5H5Fefc.c 6
hdf5H5FSstat.c 1
hdf5H5Fsfile.c 1
hdf5H5Groot.c 1
hdf5H5Gname.c 3
hdf5H5RS.c 2
hdf5H5Gnode.c 1
hdf5H5UC.c 1
hdf5H5Tdbg.c 1
hdf5H5Oshared.c 1
hdf5H5system.c 1
hdf5H5Fcwfs.c 1
hdf5H5Sall.c 1
hdf5H5Tconv.c 1
hdf5H5Tcompound.c 6
hdf5H5Tvisit.c 1
matiomatvar_struct.c 2

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
H5D__virtual_read /src/hdf5/src/H5Dvirtual.c 2 ['N/A', 'N/A'] 167 0 639 153 25 1256 0 14366 5257
Mat_VarReadData /src/matio/src/mat.c 6 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 57 0 136 22 22 1204 0 16238 2607
Mat_VarDelete /src/matio/src/mat.c 2 ['N/A', 'N/A'] 68 0 595 109 34 1477 0 16538 1463

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
33.0%
1861 / 5631
Cyclomatic complexity statically reachable by fuzzers
36.0%
24602 / 68272

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

matio/ossfuzz/./matio_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name 

-focus_function=['H5O__alloc_msgs', 'H5FO_opened', 'H5O_msg_reset', 'H5FL_fac_term', 'H5FL_blk_calloc', 'Mat_VarRead73', 'H5C__flush_invalidate_ring', 'H5O__free', 'H5SL_remove', 'Mat_VarRead5']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
H5check_version 93 27 29.03% ['matio_fuzzer']
H5__debug_mask 69 25 36.23% ['matio_fuzzer']
H5AC_validate_config 34 18 52.94% []
H5C_set_cache_auto_resize_config 110 58 52.72% []
H5CX_get_vlen_alloc_info 35 17 48.57% ['matio_fuzzer']
H5C__flush_single_entry 195 93 47.69% ['matio_fuzzer']
H5C__prep_image_for_file_close 64 23 35.93% ['matio_fuzzer']
H5C__flush_invalidate_ring 173 94 54.33% ['matio_fuzzer']
H5D__contig_read 42 14 33.33% []
H5D_close 121 44 36.36% []
H5D_get_create_plist 107 56 52.33% []
H5D__append_flush_setup 40 10 25.0% []
H5D__open_oid 133 65 48.87% []
H5D__read 211 84 39.81% []
H5D__typeinfo_init_phase2 44 9 20.45% []
H5D__typeinfo_init_phase3 66 36 54.54% []
H5D__layout_oh_read 56 25 44.64% []
H5F__accum_read 90 25 27.77% ['matio_fuzzer']
H5F_open 219 91 41.55% []
H5F_try_close 79 28 35.44% ['matio_fuzzer']
H5F__get_objects_cb 80 37 46.25% ['matio_fuzzer']
H5F__build_actual_name 65 30 46.15% []
H5F_traverse_mount 36 19 52.77% []
H5F__super_read 333 86 25.82% []
H5F__cache_superblock_deserialize 129 69 53.48% []
H5G_open 43 21 48.83% []
H5G_close 52 23 44.23% ['matio_fuzzer']
H5G_link_to_info 43 21 48.83% []
H5G_loc_real 75 27 36.0% []
H5G__obj_iterate 36 17 47.22% []
H5G_obj_get_name_by_idx 31 16 51.61% []
H5G_mkroot 94 40 42.55% []
H5G__traverse_special 37 16 43.24% []
H5G__traverse_real 203 103 50.73% []
H5I__find_id 43 21 48.83% ['matio_fuzzer']
H5O__prefix_deserialize 120 43 35.83% []
H5O__cache_notify 40 18 45.0% []
H5O__cache_chk_notify 66 19 28.78% []
H5O__dtype_decode_helper 485 125 25.77% []
H5O__efl_copy 35 16 45.71% []
H5O__fill_new_decode 74 32 43.24% []
H5O__fill_copy 67 27 40.29% []
H5O_get_info 58 23 39.65% []
H5O__layout_decode 487 39 8.008% []
H5O__pline_copy 51 17 33.33% []
H5PB_read 163 25 15.33% ['matio_fuzzer']
H5PL__path_table_iterate_process_path 55 18 32.72% ['matio_fuzzer']
H5P__facc_set_def_driver 58 12 20.68% []
H5P__file_driver_copy 37 14 37.83% []
H5P__cmp_class 73 13 17.80% ['matio_fuzzer']
H5SL_remove 42 15 35.71% ['matio_fuzzer']
H5SL_search 43 21 48.83% ['matio_fuzzer']
H5S_select_shape_same 155 59 38.06% []
H5T_detect_class 42 21 50.0% []
H5T__create 78 33 42.30% ['matio_fuzzer']
H5T_copy_reopen 53 16 30.18% []
H5T_close 40 9 22.5% []
H5T_cmp 344 94 27.32% ['matio_fuzzer']
H5T_set_loc 87 27 31.03% ['matio_fuzzer']
H5T__init_inf 69 37 53.62% []
H5T__register 142 50 35.21% []
H5T__complete_copy 128 36 28.12% ['matio_fuzzer']
H5T__path_find_init_new_path 113 54 47.78% []
H5T_path_match_find_type_with_volobj 41 9 21.95% ['matio_fuzzer']
H5T__conv_ref 182 32 17.58% []
H5T__conv_vlen 316 118 37.34% []
H5VL__set_def_conn 80 27 33.75% []
H5VL_cmp_connector_cls 50 22 44.0% ['matio_fuzzer']
H5VL__object 41 15 36.58% []
H5VL_native_get_file_struct 46 15 32.60% ['matio_fuzzer']
H5VL__native_attr_get 103 19 18.44% []
H5VL__native_attr_specific 81 20 24.69% []
H5VL__native_blob_specific 36 17 47.22% []
H5VL__native_dataset_io_setup 76 35 46.05% []
H5VL__native_file_get 76 14 18.42% []
H5VL__native_file_optional 183 15 8.196% []
H5VL__native_group_get 41 19 46.34% []
H5VL__native_introspect_opt_query 133 17 12.78% []
H5VL__native_link_get 55 20 36.36% []
H5VL__native_link_specific 71 29 40.84% []
H5VL__native_object_open 37 20 54.05% []
H5VL__native_object_get 94 28 29.78% []
H5VM_memcpyvv 108 49 45.37% []
H5_build_extpath 66 24 36.36% []
InflateRankDims 50 25 50.0% ['matio_fuzzer']
InflateData 72 35 48.61% ['matio_fuzzer']
mat_logfunc 39 12 30.76% []
ClassType2DataType 36 18 50.0% ['matio_fuzzer']
Mat_Open 149 72 48.32% ['matio_fuzzer']
Mat_VarRead5 826 300 36.31% ['matio_fuzzer']
ReadNextStructField 446 119 26.68% ['matio_fuzzer']
ReadNextCell 340 117 34.41% ['matio_fuzzer']
Mat_VarRead73 271 88 32.47% ['matio_fuzzer']
DataType2H5T 31 7 22.58% ['matio_fuzzer']
Mat_H5ReadDims 65 30 46.15% ['matio_fuzzer']
Mat_H5ReadDatasetInfo 120 61 50.83% ['matio_fuzzer']
Mat_H5ReadFieldNames 59 28 47.45% ['matio_fuzzer']
Mat_H5ReadGroupInfo 241 53 21.99% ['matio_fuzzer']
ReadCompressedSingleData 43 11 25.58% ['matio_fuzzer']
inflate 612 283 46.24% ['matio_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/hdf5/src/H5Dvirtual.c [] []
/src/hdf5/src/H5UC.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Pmcpl.c [] []
/src/hdf5/src/H5Pdxpl.c [] []
/src/hdf5/src/H5Gcache.c [] []
/src/matio/src/mat4.c ['matio_fuzzer'] []
/src/hdf5/src/H5VM.c [] []
/src/hdf5/src/H5Tfixed.c [] []
/src/hdf5/src/H5Pocpl.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Ctag.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Zscaleoffset.c [] []
/src/hdf5/src/H5FD.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dearray.c [] []
/src/hdf5/src/H5Ztrans.c [] []
/src/hdf5/src/H5Oalloc.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5HFbtree2.c ['matio_fuzzer'] []
/src/hdf5/src/H5Oname.c [] []
/src/hdf5/src/H5Tref.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Oshmesg.c [] []
/src/hdf5/src/H5HGcache.c [] []
/src/hdf5/src/H5E.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5O.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tconv_array.c [] []
/src/hdf5/src/H5Tarray.c [] []
/src/hdf5/src/H5Pdcpl.c [] []
/src/hdf5/src/H5Defl.c [] []
/src/hdf5/src/H5Fsuper.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FO.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FDstdio.c [] []
/src/hdf5/src/H5L.c ['matio_fuzzer'] ['matio_fuzzer']
/src/matio/src/inflate.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5ESlist.c [] []
/src/hdf5/src/H5FAint.c [] []
/src/hdf5/src/H5B2hdr.c ['matio_fuzzer'] []
/src/hdf5/src/H5FScache.c [] []
/src/hdf5/src/H5HFhdr.c ['matio_fuzzer'] []
/src/hdf5/src/H5HFhuge.c ['matio_fuzzer'] []
/src/hdf5/src/H5Ounknown.c [] []
/src/hdf5/src/H5FAhdr.c [] []
/src/hdf5/src/H5VLnative_blob.c [] []
/src/hdf5/src/H5FDsec2.c [] []
/src/hdf5/src/H5PLpath.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5SMbtree2.c [] []
/src/hdf5/src/H5Tconv_reference.c [] []
/src/hdf5/src/H5PLint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5B2.c ['matio_fuzzer'] []
/src/hdf5/src/H5Clog_json.c [] []
/src/hdf5/src/H5Olinfo.c [] []
/src/zlib/inflate.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Cepoch.c [] []
/src/hdf5/src/H5HFiblock.c ['matio_fuzzer'] []
/src/hdf5/src/H5RS.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dbtree.c [] []
/src/hdf5/src/H5Dnone.c [] []
/src/hdf5/src/H5Gloc.c [] []
/src/hdf5/src/H5Oattr.c [] []
/src/matio/src/mat.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FDmulti.c [] []
/src/hdf5/src/H5HLcache.c [] []
/src/hdf5/src/H5FDlog.c [] []
/src/hdf5/src/H5Dlayout.c [] []
/src/hdf5/src/H5HLint.c [] []
/src/hdf5/src/H5Dscatgath.c [] []
/src/hdf5/src/H5FA.c [] []
/src/hdf5/src/H5Eint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5VL.c [] []
/src/hdf5/src/H5VLnative_attr.c [] []
/src/hdf5/src/H5Tconv_bitfield.c [] []
/src/zlib/inftrees.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5CX.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5EAdblock.c [] []
/src/matio/src/./read_data_impl.h ['matio_fuzzer'] []
/src/hdf5/src/H5Sselect.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FDspace.c ['matio_fuzzer'] []
/src/hdf5/src/H5Plapl.c [] []
/src/hdf5/src/H5Fspace.c ['matio_fuzzer'] []
/src/hdf5/src/H5Tconv_float.c [] []
/src/hdf5/src/H5FSint.c [] []
/src/hdf5/src/H5Fsfile.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5HLdblk.c [] []
/src/hdf5/src/H5Tconv_compound.c [] []
/src/hdf5/src/H5EAstat.c [] []
/src/hdf5/src/H5Abtree2.c [] []
/src/hdf5/src/H5Rint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5EAhdr.c [] []
/src/matio/src/mat5.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Pencdec.c [] []
/src/hdf5/src/H5Pfcpl.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FDfamily.c [] []
/src/hdf5/src/H5Ffake.c ['matio_fuzzer'] []
/src/hdf5/src/H5Omessage.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Torder.c [] []
/src/hdf5/src/H5Tfields.c ['matio_fuzzer'] []
/src/hdf5/src/H5B2test.c [] []
/src/hdf5/src/H5EAdblkpage.c [] []
/src/hdf5/src/H5A.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Clog.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Fint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Gint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Sall.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5AC.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tconv.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tvlen.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5timer.c ['matio_fuzzer'] []
/src/hdf5/src/H5HFstat.c [] []
/src/hdf5/src/H5Pocpypl.c [] []
/src/hdf5/src/H5B2int.c ['matio_fuzzer'] []
/src/hdf5/src/H5Fsuper_cache.c [] []
/src/hdf5/src/H5B2stat.c [] []
/src/hdf5/src/H5Dfill.c [] []
/src/hdf5/src/H5Odtype.c [] []
/src/hdf5/src/H5Ostab.c [] []
/src/hdf5/src/H5Toffset.c [] []
/src/hdf5/src/H5Gtraverse.c [] []
/src/hdf5/src/H5Osdspace.c [] []
/src/hdf5/src/H5FDsplitter.c [] []
/src/hdf5/src/H5.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5MF.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5M.c [] []
/src/zlib/deflate.c [] []
/src/hdf5/src/H5Tenum.c [] []
/src/hdf5/src/H5Plcpl.c [] []
/src/hdf5/src/H5B2cache.c [] []
/src/hdf5/src/H5Bcache.c [] []
/src/hdf5/src/H5FSstat.c ['matio_fuzzer'] []
/src/hdf5/src/H5EAtest.c [] []
/src/hdf5/src/H5Shyper.c [] []
/src/hdf5/src/H5Fefc.c ['matio_fuzzer'] []
/src/hdf5/src/H5HG.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tconv_vlen.c [] []
/src/hdf5/src/H5VLnative.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5VLnative_dataset.c [] []
/src/hdf5/src/H5Orefcount.c [] []
/src/hdf5/src/H5Doh.c [] []
/src/hdf5/src/H5Gstab.c [] []
/src/hdf5/src/H5HFman.c ['matio_fuzzer'] []
/src/hdf5/src/H5Zdeflate.c [] []
/src/hdf5/src/H5Oshared.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Gnode.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Pfapl.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5trace.c [] []
/src/hdf5/src/H5Olayout.c [] []
/src/hdf5/src/H5Aint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5HLprfx.c [] []
/src/hdf5/src/H5Tconv_integer.c [] []
/src/hdf5/src/H5Goh.c [] []
/src/hdf5/src/H5Tconv_string.c [] []
/src/hdf5/src/H5FSsection.c ['matio_fuzzer'] []
/src/hdf5/src/H5Odrvinfo.c [] []
/src/hdf5/src/H5ESevent.c [] []
/src/hdf5/src/H5P.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5SL.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tnative.c [] []
/src/hdf5/src/H5Rdeprec.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5S.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Cimage.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5MM.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tprecis.c [] []
/src/matio/src/io.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Cint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/zlib/zutil.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5EAsblock.c [] []
/src/hdf5/src/H5MFsection.c ['matio_fuzzer'] []
/src/hdf5/src/H5Tinit_float.c [] []
/src/hdf5/src/H5Cquery.c ['matio_fuzzer'] []
/src/hdf5/src/H5HL.c [] []
/src/hdf5/src/H5ACproxy_entry.c ['matio_fuzzer'] []
/src/hdf5/src/H5Gbtree2.c [] []
/src/hdf5/src/./H5Oshared.h [] []
/src/hdf5/src/H5Pfmpl.c [] []
/src/hdf5/src/H5Fmount.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Ofsinfo.c [] []
/src/hdf5/src/H5Tcompound.c ['matio_fuzzer'] []
/src/hdf5/src/H5Znbit.c [] []
/src/hdf5/src/H5VLnative_link.c [] []
/src/hdf5/src/H5FS.c ['matio_fuzzer'] []
/src/hdf5/src/H5Tconv_enum.c [] []
/src/hdf5/src/H5B.c [] []
/src/hdf5/src/H5T.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Pmapl.c [] []
/src/hdf5/src/H5FAstat.c [] []
/src/hdf5/src/H5Iint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Ocache.c [] []
/src/zlib/adler32.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Oflush.c [] []
/src/hdf5/src/H5Ocont.c [] []
/src/hdf5/src/H5FDint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Olink.c [] []
/src/hdf5/src/H5SMcache.c [] []
/src/hdf5/src/H5Ocache_image.c [] []
/src/hdf5/src/H5Z.c ['matio_fuzzer'] ['matio_fuzzer']
/src/zlib/inffast.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Odbg.c [] []
/src/hdf5/src/H5HFcache.c [] []
/src/hdf5/src/H5VLnative_introspect.c [] []
/src/hdf5/src/H5VLpassthru.c [] []
/src/matio/src/./safe-math.h ['matio_fuzzer'] []
/src/hdf5/src/H5Gent.c [] []
/src/hdf5/src/H5EAcache.c [] []
/src/hdf5/src/H5Glink.c [] []
/src/hdf5/src/H5Dsingle.c [] []
/src/hdf5/src/H5HFsection.c ['matio_fuzzer'] []
/src/hdf5/src/H5F.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Lint.c [] []
/src/hdf5/src/H5Gobj.c [] []
/src/hdf5/src/H5Tbit.c [] []
/src/hdf5/src/H5B2internal.c ['matio_fuzzer'] []
/src/hdf5/src/H5VLnative_datatype.c [] []
/src/hdf5/src/H5FDcore.c [] []
/src/hdf5/src/H5Pgcpl.c [] []
/src/zlib/trees.c [] []
/src/hdf5/src/H5HF.c ['matio_fuzzer'] []
/src/hdf5/src/H5Gcompact.c [] []
/src/hdf5/src/H5Ocopy.c [] []
/src/hdf5/src/H5VLdyn_ops.c [] []
/src/hdf5/src/H5Gname.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FAdblkpage.c [] []
/src/hdf5/src/H5FAdblock.c [] []
/src/hdf5/src/H5FL.c ['matio_fuzzer'] ['matio_fuzzer']
/src/matio/src/mat73.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5FDperform.c [] []
/src/hdf5/src/H5Pstrcpl.c [] []
/src/hdf5/src/H5Omtime.c [] []
/src/hdf5/src/H5Toh.c [] []
/src/hdf5/src/H5Bdbg.c [] []
/src/hdf5/src/H5Opline.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5VLnative_file.c [] []
/src/hdf5/src/H5PLplugin_cache.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Groot.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5SM.c ['matio_fuzzer'] []
/src/hdf5/src/H5Clog_trace.c [] []
/src/hdf5/src/H5HGquery.c [] []
/src/hdf5/src/H5VLcallback.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5VLint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dfarray.c [] []
/src/hdf5/src/H5MFaggr.c ['matio_fuzzer'] []
/src/hdf5/src/H5WB.c [] []
/src/hdf5/src/H5Fio.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Fquery.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5I.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5HFdblock.c ['matio_fuzzer'] []
/src/hdf5/src/H5Pdapl.c [] []
/src/matio/ossfuzz/./fuzzer_temp_file.h ['matio_fuzzer'] []
/src/hdf5/src/H5HFiter.c ['matio_fuzzer'] []
/src/hdf5/src/H5HFspace.c ['matio_fuzzer'] []
/src/hdf5/src/H5Pint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Lexternal.c [] []
/src/hdf5/src/H5Centry.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Ofill.c [] []
/src/hdf5/src/H5G.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5ESint.c [] []
/src/hdf5/src/H5Oint.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Tcommit.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5VLnative_object.c [] []
/src/hdf5/src/./H5VMprivate.h ['matio_fuzzer'] []
/src/hdf5/src/H5FAcache.c [] []
/src/hdf5/src/H5Adense.c [] []
/src/matio/ossfuzz/./matio_fuzzer.cpp ['matio_fuzzer'] []
/src/hdf5/src/H5Sdbg.c [] []
/src/hdf5/src/H5PB.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5C.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dbtree2.c [] []
/src/hdf5/src/H5checksum.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Gdense.c [] []
/src/hdf5/src/H5D.c ['matio_fuzzer'] ['matio_fuzzer']
/src/zlib/compress.c [] []
/src/matio/src/endian.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Zshuffle.c [] []
/src/hdf5/src/H5system.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Oefl.c [] []
/src/hdf5/src/H5Tdbg.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dcontig.c [] []
/src/hdf5/src/H5VLnative_group.c [] []
/src/hdf5/src/H5EA.c [] []
/src/hdf5/src/H5HFtiny.c ['matio_fuzzer'] []
/src/matio/src/read_data.c ['matio_fuzzer'] []
/src/hdf5/src/H5Oainfo.c [] []
/src/hdf5/src/H5Dchunk.c [] []
/src/matio/src/matvar_struct.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Dselect.c [] []
/src/hdf5/src/H5HFdtable.c ['matio_fuzzer'] []
/src/hdf5/src/H5Ochunk.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Spoint.c [] []
/src/hdf5/src/H5Tvisit.c ['matio_fuzzer'] []
/src/hdf5/src/H5B2leaf.c ['matio_fuzzer'] []
/src/hdf5/src/H5Fcwfs.c ['matio_fuzzer'] []
/src/matio/ossfuzz/./matio_wrap.h ['matio_fuzzer'] []
/src/hdf5/src/H5VLnative_token.c [] []
/src/hdf5/src/H5Dcompact.c [] []
/src/hdf5/src/H5FAtest.c [] []
/src/hdf5/src/H5Oginfo.c [] []
/src/hdf5/src/H5Obtreek.c [] []
/src/hdf5/src/H5Dio.c [] []
/src/hdf5/src/H5Faccum.c ['matio_fuzzer'] ['matio_fuzzer']
/src/hdf5/src/H5Ocopy_ref.c [] []
/src/hdf5/src/H5Cdbg.c [] []
/src/hdf5/src/H5Snone.c [] []
/src/hdf5/src/H5Cprefetched.c [] []
/src/hdf5/src/H5EAiblock.c [] []
/src/hdf5/src/H5Oattribute.c [] []
/src/hdf5/src/H5Zfletcher32.c [] []
/src/hdf5/src/H5SMmessage.c ['matio_fuzzer'] []
/src/zlib/crc32.c ['matio_fuzzer'] []
/src/hdf5/src/H5EAint.c [] []

Directories in report

Directory
/src/hdf5/src/./
/src/hdf5/src/
/src/zlib/
/src/matio/src/./
/src/matio/src/
/src/matio/ossfuzz/./

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
matio_fuzzer fuzzerLogFile-0-HIPj8Ypazn.data fuzzerLogFile-0-HIPj8Ypazn.data.yaml matio_fuzzer.covreport