High level conclusions

Fuzzers reach 95.30% of cyclomatic complexity.

Fuzzers reach 93.19% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1465/1572

Cyclomatic complexity statically reachable by fuzzers

13289/13944

Runtime code coverage of functions

1483 / 1572

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: /src/ndpi/conftest.cpp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	100.%
All colors	1	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
88	88	1 : View List ['ndpi_payload_analyzer']	88	3144	packet_processing	call site: 00000	/src/ndpi/fuzz/../example/reader_util.c:1567
8	8	2 : View List ['ntohs', 'memcmp']	20	845	ndpi_search_worldofwarcraft	call site: 00000	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['fclose', 'strstr', 'getline', 'fopen', 'free']	8	8	mbedtls_aesni_has_support	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:6341
4	4	2 : View List ['perror', 'fclose']	4	4	bufferToFile	call site: 00000	/src/ndpi/fuzz/fuzz_ndpi_reader.c:38
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	133	5 : View List ['strncpy', 'ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer']	2	133	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2818
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['atoi', 'ndpi_serialize_uint32_uint64']	2	106	ndpi_serialize_binary_uint64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	2	85	ndpi_serialize_binary_uint32	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1612
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	85	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1809

Runtime coverage analysis

Covered functions

1486

Functions that are reachable but not covered

0

Reachable functions

1

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/conftest.cpp	1

Fuzzer: fuzz_libinjection

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	2.83%
gold	[1:9]	4	1.88%
yellow	[10:29]	2	0.94%
greenyellow	[30:49]	1	0.47%
lawngreen	50+	199	93.8%
All colors	212	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	183	1 : View List ['h5_state_tag_name']	0	183	h5_state_tag_open	call site: 00106	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:204
0	180	1 : View List ['h5_state_data']	0	180	h5_state_tag_open	call site: 00106	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:209
0	0	None	2	280	libinjection_sqli_fold	call site: 00062	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:1614
0	0	None	0	4	h5_state_tag_name	call site: 00114	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:273
0	0	None	0	0	h5_state_comment	call site: 00182	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:742
0	0	None	0	0	h5_state_comment	call site: 00183	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:772
0	0	None	0	0	libinjection_sqli_tokenize	call site: 00035	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:1213
0	0	None	0	0	libinjection_sqli_not_whitelist	call site: 00014	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:2137
0	0	None	0	0	flag2delim	call site: 00037	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:89
0	0	None	0	0	libinjection_is_xss	call site: 00206	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:495
0	0	None	0	0	is_black_url	call site: 00201	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:400
0	0	None	0	0	is_black_url	call site: 00203	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:408

Runtime coverage analysis

Covered functions

93

Functions that are reachable but not covered

7

Reachable functions

70

Percentage of reachable functions covered

90.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_libinjection.c	1
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	24
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27

Fuzzer: fuzz_process_packet

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	534	12.0%
gold	[1:9]	1721	38.9%
yellow	[10:29]	201	4.54%
greenyellow	[30:49]	106	2.39%
lawngreen	50+	1858	42.0%
All colors	4420	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
840	840	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	840	840	ndpi_check_zmq	call site: 02959	/src/ndpi/src/lib/protocols/zeromq.c:46
621	621	2 : View List ['memcmp', 'ndpi_int_usenet_add_connection']	621	626	ndpi_search_usenet_tcp	call site: 02202	/src/ndpi/src/lib/protocols/usenet.c:72
562	562	2 : View List ['ndpi_int_mail_pop_add_connection', 'popInitExtraPacketProcessing']	562	562	ndpi_search_mail_pop_tcp	call site: 02147	/src/ndpi/src/lib/protocols/mail_pop.c:205
382	382	1 : View List ['ndpi_process_extra_packet']	382	382	ndpi_internal_detection_process_packet	call site: 03739	/src/ndpi/src/lib/ndpi_main.c:6689
337	337	4 : View List ['ndpi_int_ftp_data_add_connection', 'ndpi_match_file_header', 'ndpi_match_ftp_data_port', 'ndpi_match_ftp_data_directory']	337	342	ndpi_check_ftp_data	call site: 02932	/src/ndpi/src/lib/protocols/ftp_data.c:235
235	235	1 : View List ['ndpi_int_telnet_add_connection']	235	235	ndpi_search_telnet_tcp	call site: 02500	/src/ndpi/src/lib/protocols/telnet.c:192
231	434	4 : View List ['ndpi_ftp_control_check_response', 'ndpi_set_detected_protocol', 'ndpi_int_ftp_control_add_connection', 'switch_extra_dissection_to_tls']	231	434	ndpi_check_ftp_control	call site: 02841	/src/ndpi/src/lib/protocols/ftp_control.c:609
205	210	2 : View List ['ndpi_exclude_protocol', 'ndpi_int_z3950_add_connection']	205	210	ndpi_search_z3950	call site: 03527	/src/ndpi/src/lib/protocols/z3950.c:106
205	205	1 : View List ['ndpi_int_edonkey_add_connection']	205	346	ndpi_check_edonkey	call site: 01949	/src/ndpi/src/lib/protocols/edonkey.c:169
205	205	1 : View List ['ndpi_int_dropbox_add_connection']	205	205	ndpi_check_dropbox	call site: 02736	/src/ndpi/src/lib/protocols/dropbox.c:52
205	205	1 : View List ['ndpi_int_dropbox_add_connection']	205	205	ndpi_check_dropbox	call site: 02737	/src/ndpi/src/lib/protocols/dropbox.c:60
205	205	1 : View List ['ndpi_int_eaq_add_connection']	205	205	ndpi_search_eaq	call site: 03258	/src/ndpi/src/lib/protocols/eaq.c:67

Runtime coverage analysis

Covered functions

1123

Functions that are reachable but not covered

135

Reachable functions

1218

Percentage of reachable functions covered

88.92%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_process_packet.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	125
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	53
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	33
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1807	47.8%
gold	[1:9]	413	10.9%
yellow	[10:29]	1290	34.1%
greenyellow	[30:49]	67	1.77%
lawngreen	50+	200	5.29%
All colors	3777	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2000	2145	5 : View List ['ntohs', 'ndpi_int_tls_add_connection', 'ndpi_looks_like_tls', 'processTLSBlock', 'ndpi_set_risk']	2000	2145	ndpi_search_tls_tcp	call site: 01792	/src/ndpi/src/lib/protocols/tls.c:1010
1576	2573	8 : View List ['fcgi_parse_params', 'ndpi_match_host_subprotocol', 'ndpi_set_risk', 'ntohs', 'strlen', 'ndpi_int_fastcgi_add_connection', 'ndpi_check_dga_name', 'ndpi_is_valid_hostname']	1576	2583	ndpi_search_fastcgi	call site: 03673	/src/ndpi/src/lib/protocols/fastcgi.c:176
1544	1544	1 : View List ['ndpi_search_tls_udp']	1544	1544	ndpi_search_tls_wrapper	call site: 01526	/src/ndpi/src/lib/protocols/tls.c:2668
1435	1440	2 : View List ['ndpi_exclude_protocol', 'ndpi_int_mqtt_add_connection']	1435	1440	ndpi_search_mqtt	call site: 03283	/src/ndpi/src/lib/protocols/mqtt.c:118
1435	1435	1 : View List ['ndpi_int_tvuplayer_add_connection']	1435	1440	ndpi_search_tvuplayer	call site: 02316	/src/ndpi/src/lib/protocols/tvuplayer.c:69
1230	1230	1 : View List ['ndpi_int_postgres_add_connection']	1238	1243	ndpi_search_postgres_tcp	call site: 02543	/src/ndpi/src/lib/protocols/postgres.c:44
840	840	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	840	840	ndpi_check_zmq	call site: 02966	/src/ndpi/src/lib/protocols/zeromq.c:46
665	665	3 : View List ['ndpi_check_steam_udp1', 'ndpi_check_steam_udp2', 'ndpi_check_steam_udp3']	665	670	ndpi_search_steam	call site: 02440	/src/ndpi/src/lib/protocols/steam.c:260
550	655	3 : View List ['ndpi_parse_packet_line_info', 'ndpi_add_connection_as_bittorrent', 'memcmp']	550	655	ndpi_int_search_bittorrent_tcp_zero	call site: 03449	/src/ndpi/src/lib/protocols/bittorrent.c:393
420	425	5 : View List ['htons', 'htonl', 'ntohl', 'ndpi_exclude_protocol', 'ndpi_int_afp_add_connection']	420	425	ndpi_search_afp	call site: 02692	/src/ndpi/src/lib/protocols/afp.c:53
412	412	2 : View List ['ntohl', 'ndpi_int_alicloud_add_connection']	412	417	ndpi_search_alicloud	call site: 03628	/src/ndpi/src/lib/protocols/alicloud.c:50
411	411	2 : View List ['ntohs', 'ndpi_int_netbios_add_connection']	411	416	ndpi_search_netbios	call site: 02658	/src/ndpi/src/lib/protocols/netbios.c:393

Runtime coverage analysis

Covered functions

618

Functions that are reachable but not covered

554

Reachable functions

1169

Percentage of reachable functions covered

52.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_config.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	87
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	36
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	21
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/tcp_udp.c	2

Fuzzer: fuzz_alg_bytestream

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	7	100.%
All colors	7	100

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

1

Reachable functions

6

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bytestream.c	1
/src/ndpi/src/lib/ndpi_main.c	4

Fuzzer: fuzz_alg_crc32_md5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	10.5%
gold	[1:9]	1	5.26%
yellow	[10:29]	2	10.5%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	14	73.6%
All colors	19	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:142
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:148

Runtime coverage analysis

Covered functions

12

Functions that are reachable but not covered

0

Reachable functions

12

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_crc32_md5.c	1
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/ndpi_main.c	1
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6

Fuzzer: fuzz_alg_ses_des

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	10	27.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	27	72.9%
All colors	37	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00012	/src/ndpi/src/lib/ndpi_analyze.c:1033
0	0	None	0	24	ndpi_ses_fitting	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1372
0	0	None	0	24	ndpi_ses_fitting	call site: 00018	/src/ndpi/src/lib/ndpi_analyze.c:1384
0	0	None	0	24	ndpi_ses_fitting	call site: 00020	/src/ndpi/src/lib/ndpi_analyze.c:1398
0	0	None	0	24	ndpi_des_fitting	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1512
0	0	None	0	24	ndpi_des_fitting	call site: 00027	/src/ndpi/src/lib/ndpi_analyze.c:1524
0	0	None	0	24	ndpi_des_fitting	call site: 00029	/src/ndpi/src/lib/ndpi_analyze.c:1538
0	0	None	0	11	ndpi_ses_init	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1282
0	0	None	0	11	ndpi_des_init	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1417
0	0	None	0	0	ndpi_ses_fitting	call site: 00021	/src/ndpi/src/lib/ndpi_analyze.c:1403
0	0	None	0	0	ndpi_des_fitting	call site: 00030	/src/ndpi/src/lib/ndpi_analyze.c:1544
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

19

Functions that are reachable but not covered

3

Reachable functions

22

Percentage of reachable functions covered

86.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_ses_des.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_analyze.c	8

Fuzzer: fuzz_community_id

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.92%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	1.92%
greenyellow	[30:49]	1	1.92%
lawngreen	50+	49	94.2%
All colors	52	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	4	SHA1Update	call site: 00028	/src/ndpi/src/lib/third_party/src/ndpi_sha1.c:195
0	0	None	0	0	ndpi_community_id_buf_copy	call site: 00018	/src/ndpi/src/lib/ndpi_community_id.c:70
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00038	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

5

Reachable functions

30

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_community_id.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_community_id.c	9
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/ndpi_utils.c	1

Fuzzer: fuzz_tls_certificate

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2198	58.9%
gold	[1:9]	1308	35.0%
yellow	[10:29]	10	0.26%
greenyellow	[30:49]	20	0.53%
lawngreen	50+	194	5.20%
All colors	3730	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00237	/src/ndpi/src/lib/ndpi_main.c:2920
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01599	/src/ndpi/src/lib/protocols/tls.c:141
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00124	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01034	/src/ndpi/src/lib/ndpi_main.c:6341
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00191	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00206	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00248	/src/ndpi/src/lib/ndpi_main.c:567
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3693
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3727
0	5	1 : View List ['ndpi_free']	0	5	ndpi_free_flow_data	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:5286
0	0	None	1050	5287	ndpi_init_detection_module	call site: 00005	/src/ndpi/src/lib/ndpi_main.c:2728
0	0	None	1050	1454	ndpi_init_detection_module	call site: 00088	/src/ndpi/src/lib/ndpi_main.c:2815

Runtime coverage analysis

Covered functions

333

Functions that are reachable but not covered

725

Reachable functions

1058

Percentage of reachable functions covered

31.47%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_tls_certificate.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	84
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	33
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2

Fuzzer: fuzz_ds_ptree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	1.26%
lawngreen	50+	78	98.7%
All colors	79	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	108	ndpi_patricia_lookup	call site: 00048	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:659
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00018	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00041	/src/ndpi/src/lib/ndpi_main.c:2183
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00040	/src/ndpi/src/lib/ndpi_main.c:2198
0	0	None	0	0	ndpi_get_ip_string	call site: 00034	/src/ndpi/src/lib/ndpi_main.c:7775
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00023	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_patricia_search_best2	call site: 00043	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:551
0	0	None	0	0	ndpi_patricia_lookup	call site: 00059	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:774
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00046	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00046	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77

Runtime coverage analysis

Covered functions

35

Functions that are reachable but not covered

7

Reachable functions

42

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ptree.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_main.c	9
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_hw_rsi_outliers_da

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	2.66%
gold	[1:9]	2	2.66%
yellow	[10:29]	2	2.66%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	69	92.0%
All colors	75	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00014	/src/ndpi/src/lib/ndpi_analyze.c:1033
0	0	None	0	0	ndpi_hw_init	call site: 00013	/src/ndpi/src/lib/ndpi_analyze.c:1082
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00011	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

40

Functions that are reachable but not covered

4

Reachable functions

44

Percentage of reachable functions covered

90.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hw_rsi_outliers_da.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	27

Fuzzer: fuzz_ds_tree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	43	100.%
All colors	43	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:118
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:123
0	0	None	0	0	ndpi_tfind	call site: 00010	/src/ndpi/src/lib/ndpi_utils.c:221

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

25

Percentage of reachable functions covered

96.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_tree.cpp	4
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_utils.c	7

Fuzzer: fuzz_quic_get_crypto_data

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1997	53.4%
gold	[1:9]	1308	35.0%
yellow	[10:29]	16	0.42%
greenyellow	[30:49]	7	0.18%
lawngreen	50+	405	10.8%
All colors	3733	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00237	/src/ndpi/src/lib/ndpi_main.c:2920
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01599	/src/ndpi/src/lib/protocols/tls.c:141
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00124	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01034	/src/ndpi/src/lib/ndpi_main.c:6341
2	11	3 : View List ['ndpi_lru_add_to_cache', 'make_msteams_key', 'ndpi_get_current_time']	2	169	ndpi_reconcile_protocols	call site: 01192	/src/ndpi/src/lib/ndpi_main.c:5978
2	2	1 : View List ['ndpi_quick_hash']	2	2	make_msteams_key	call site: 01183	/src/ndpi/src/lib/ndpi_main.c:5914
2	2	1 : View List ['__uint16_identity']	2	2	gquic_get_u16	call site: 03197	/src/ndpi/src/lib/protocols/quic.c:243
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00191	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00206	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00248	/src/ndpi/src/lib/ndpi_main.c:567
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3693
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3727

Runtime coverage analysis

Covered functions

374

Functions that are reachable but not covered

683

Reachable functions

1057

Percentage of reachable functions covered

35.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_quic_get_crypto_data.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	84
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	33
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2

Fuzzer: fuzz_ds_ahocorasick

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	4.68%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	122	95.3%
All colors	128	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	80	ndpi_match_string	call site: 00098	/src/ndpi/src/lib/ndpi_main.c:3223
0	0	None	0	126	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:235
0	0	None	0	36	ac_automata_search	call site: 00089	/src/ndpi/src/lib/third_party/src/ahocorasick.c:454
0	0	None	0	36	ac_automata_search	call site: 00095	/src/ndpi/src/lib/third_party/src/ahocorasick.c:485
0	0	None	0	10	ac_automata_release	call site: 00121	/src/ndpi/src/lib/third_party/src/ahocorasick.c:571
0	0	None	0	4	dump_node_header	call site: 00000	/src/ndpi/src/lib/third_party/src/ahocorasick.c:620
0	0	None	0	2	ac_automata_walk	call site: 00082	/src/ndpi/src/lib/third_party/src/ahocorasick.c:309
0	0	None	0	2	ac_automata_walk	call site: 00083	/src/ndpi/src/lib/third_party/src/ahocorasick.c:325
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00021	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_strdup	call site: 00030	/src/ndpi/src/lib/ndpi_memory.c:108
0	0	None	0	0	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:241
0	0	None	0	0	ac_automata_search	call site: 00096	/src/ndpi/src/lib/third_party/src/ahocorasick.c:524

Runtime coverage analysis

Covered functions

67

Functions that are reachable but not covered

10

Reachable functions

77

Percentage of reachable functions covered

87.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ahocorasick.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_main.c	10
/src/ndpi/src/lib/third_party/src/ahocorasick.c	29
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1

Fuzzer: fuzz_alg_bins

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11	12.0%
gold	[1:9]	4	4.39%
yellow	[10:29]	1	1.09%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	75	82.4%
All colors	91	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	177	ndpi_cluster_bins	call site: 00064	/src/ndpi/src/lib/ndpi_analyze.c:735
0	0	None	2	151	ndpi_cluster_bins	call site: 00070	/src/ndpi/src/lib/ndpi_analyze.c:762
0	0	None	0	112	ndpi_cluster_bins	call site: 00072	/src/ndpi/src/lib/ndpi_analyze.c:778
0	0	None	0	112	ndpi_cluster_bins	call site: 00077	/src/ndpi/src/lib/ndpi_analyze.c:797
0	0	None	0	112	ndpi_cluster_bins	call site: 00079	/src/ndpi/src/lib/ndpi_analyze.c:810
0	0	None	0	112	ndpi_cluster_bins	call site: 00081	/src/ndpi/src/lib/ndpi_analyze.c:830
0	0	None	0	112	ndpi_cluster_bins	call site: 00082	/src/ndpi/src/lib/ndpi_analyze.c:855
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

7

Reachable functions

32

Percentage of reachable functions covered

78.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bins.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_jitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	100.%
All colors	17	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

0

Reachable functions

15

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_jitter.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	3

Fuzzer: fuzz_ds_libcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	1	2.04%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	48	97.9%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	15	cache_add	call site: 00027	/src/ndpi/src/lib/third_party/src/libcache.c:204
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00013	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

22

Percentage of reachable functions covered

95.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_libcache.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/libcache.c	9

Fuzzer: fuzz_serialization

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	3.44%
gold	[1:9]	2	0.43%
yellow	[10:29]	2	0.43%
greenyellow	[30:49]	3	0.64%
lawngreen	50+	442	95.0%
All colors	465	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00227	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['atoi', 'ndpi_serialize_uint32_uint64']	2	106	ndpi_serialize_binary_uint64	call site: 00210	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00169	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	85	ndpi_serialize_binary_float	call site: 00244	/src/ndpi/src/lib/ndpi_serializer.c:1809
2	70	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	70	ndpi_serialize_binary_boolean	call site: 00279	/src/ndpi/src/lib/ndpi_serializer.c:2122
0	52	1 : View List ['ndpi_deserialize_value_uint32']	0	52	ndpi_deserialize_value_uint64	call site: 00398	/src/ndpi/src/lib/ndpi_serializer.c:2746
0	52	1 : View List ['ndpi_deserialize_value_int32']	0	52	ndpi_deserialize_value_int64	call site: 00421	/src/ndpi/src/lib/ndpi_serializer.c:2831
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_serializer_set_buffer_len	call site: 00353	/src/ndpi/src/lib/ndpi_serializer.c:381
0	0	None	0	0	ndpi_serializer_get_header	call site: 00351	/src/ndpi/src/lib/ndpi_serializer.c:399
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00029	/src/ndpi/src/lib/ndpi_serializer.c:810
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00030	/src/ndpi/src/lib/ndpi_serializer.c:819

Runtime coverage analysis

Covered functions

116

Functions that are reachable but not covered

11

Reachable functions

127

Percentage of reachable functions covered

91.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_serialization.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_serializer.c	101
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_ds_patricia

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	1.58%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.79%
greenyellow	[30:49]	2	1.58%
lawngreen	50+	121	96.0%
All colors	126	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	60	ndpi_patricia_remove	call site: 00077	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:899
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00120	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00019	/src/ndpi/src/lib/ndpi_main.c:2183
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00056	/src/ndpi/src/lib/ndpi_main.c:2198
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00028	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00041	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77
0	0	None	0	0	ndpi_Ref_Prefix	call site: 00024	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:268
0	0	None	0	0	ndpi_New_Prefix2	call site: 00026	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:228

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

2

Reachable functions

46

Percentage of reachable functions covered

95.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_patricia.cpp	3
/src/ndpi/fuzz/fuzz_common_code.c	2
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	18
/src/ndpi/src/lib/ndpi_memory.c	3
/src/ndpi/src/lib/ndpi_main.c	9

Fuzzer: fuzz_alg_hll

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	2.94%
gold	[1:9]	1	2.94%
yellow	[10:29]	1	2.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	31	91.1%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

26

Functions that are reachable but not covered

2

Reachable functions

28

Percentage of reachable functions covered

92.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hll.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	6
/src/ndpi/src/lib/./third_party/src/hll/hll.c	7
/src/ndpi/src/lib/./third_party/src/hll/MurmurHash3.c	1

Fuzzer: fuzz_ndpi_reader_alloc_fail

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	380	8.48%
gold	[1:9]	1572	35.0%
yellow	[10:29]	202	4.50%
greenyellow	[30:49]	117	2.61%
lawngreen	50+	2208	49.2%
All colors	4479	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00249	/src/ndpi/src/lib/ndpi_main.c:2920
88	88	1 : View List ['ndpi_payload_analyzer']	88	3144	packet_processing	call site: 03876	/src/ndpi/fuzz/../example/reader_util.c:1567
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04078	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	85	85	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['strlen', 'ndpi_serializer_header_string', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_binary_uint32	call site: 04072	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_extend_serializer_buffer', 'ndpi_serializer_header_string', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_string_string_len	call site: 04028	/src/ndpi/src/lib/ndpi_serializer.c:2062
16	16	1 : View List ['mbedtls_aesni_setkey_enc']	16	16	mbedtls_aes_setkey_enc	call site: 03106	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:200
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00136	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
8	8	2 : View List ['ntohs', 'memcmp']	20	845	ndpi_search_worldofwarcraft	call site: 02548	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['fclose', 'strstr', 'getline', 'fopen', 'free']	8	8	mbedtls_aesni_has_support	call site: 03107	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
7	133	5 : View List ['strncpy', 'ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer']	7	133	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2818
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01053	/src/ndpi/src/lib/ndpi_main.c:6341

Runtime coverage analysis

Covered functions

1235

Functions that are reachable but not covered

108

Reachable functions

1303

Percentage of reachable functions covered

91.71%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/fuzz_common_code.c	5
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	30
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	51
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	31
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/ndpi_classify.c	8
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ndpi_reader

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	381	8.51%
gold	[1:9]	1553	34.7%
yellow	[10:29]	204	4.56%
greenyellow	[30:49]	125	2.79%
lawngreen	50+	2209	49.3%
All colors	4472	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
180	180	1 : View List ['h5_state_bogus_comment2']	180	180	h5_state_tag_open	call site: 04210	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00243	/src/ndpi/src/lib/ndpi_main.c:2920
88	88	1 : View List ['ndpi_payload_analyzer']	88	3144	packet_processing	call site: 03869	/src/ndpi/fuzz/../example/reader_util.c:1567
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04071	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	85	85	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['strlen', 'ndpi_serializer_header_string', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_binary_uint32	call site: 04065	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_extend_serializer_buffer', 'ndpi_serializer_header_string', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_string_string_len	call site: 04021	/src/ndpi/src/lib/ndpi_serializer.c:2062
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00130	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
7	133	5 : View List ['strncpy', 'ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer']	7	133	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2818
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01047	/src/ndpi/src/lib/ndpi_main.c:6341
5	5	1 : View List ['ndpi_serialize_single_string']	5	5	ndpi_serialize_start_of_block_binary	call site: 04104	/src/ndpi/src/lib/ndpi_serializer.c:2281
4	10	4 : View List ['ndpi_reset_bin', 'plen2slot', 'abs', 'ndpi_inc_bin']	6	1839	process_ndpi_collected_info	call site: 04007	/src/ndpi/fuzz/../example/reader_util.c:1336

Runtime coverage analysis

Covered functions

1231

Functions that are reachable but not covered

108

Reachable functions

1299

Percentage of reachable functions covered

91.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/../example/reader_util.c	30
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	51
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	25
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	31
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	10
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/ookla.c	2
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/ndpi_classify.c	8
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23