High level conclusions

Fuzzers reach 96.71% of cyclomatic complexity.

Fuzzers reach 94.77% of all functions.

Fuzzers reach 96.27% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

1525 / 1609

Cyclomatic complexity statically reachable by fuzzers

13770 / 14237

Runtime code coverage of functions

1549 / 1609

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: /src/ndpi/conftest.cpp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	100.%
All colors	1	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ntohs', 'memcmp']	20	949	ndpi_search_worldofwarcraft	call site: 00000	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['strstr', 'fopen', 'getline', 'fclose', 'free']	8	8	mbedtls_aesni_has_support	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:6506
4	4	2 : View List ['perror', 'fclose']	4	4	bufferToFile	call site: 00000	/src/ndpi/fuzz/fuzz_ndpi_reader.c:40
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	143	5 : View List ['ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer', 'strncpy']	2	143	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2837
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['ndpi_serialize_uint32_uint64', 'atoi']	2	106	ndpi_serialize_binary_uint64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	2	85	ndpi_serialize_binary_uint32	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1612
2	85	2 : View List ['ndpi_serialize_uint32_float', 'atoi']	2	85	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1809
2	70	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	70	ndpi_serialize_binary_boolean	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2122

Runtime coverage analysis

Covered functions

1552

Functions that are reachable but not covered

0

Reachable functions

1

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/conftest.cpp	1

Fuzzer: fuzz_libinjection

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5	2.21%
gold	[1:9]	4	1.76%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	217	96.0%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	177	1 : View List ['h5_state_tag_name']	0	177	h5_state_tag_open	call site: 00119	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:204
0	174	1 : View List ['h5_state_data']	0	174	h5_state_tag_open	call site: 00119	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:209
0	0	None	0	4	h5_state_tag_name	call site: 00127	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:273
0	0	None	0	0	h5_state_comment	call site: 00195	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:760
0	0	None	0	0	h5_state_comment	call site: 00196	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:790
0	0	None	0	0	libinjection_sqli_tokenize	call site: 00034	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:1222
0	0	None	0	0	libinjection_sqli_not_whitelist	call site: 00013	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:2146
0	0	None	0	0	flag2delim	call site: 00036	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:89
0	0	None	0	0	is_black_url	call site: 00214	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:400
0	0	None	0	0	is_black_url	call site: 00216	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:408
0	0	None	0	0	html_decode_char_at	call site: 00213	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:63

Runtime coverage analysis

Covered functions

93

Functions that are reachable but not covered

6

Reachable functions

69

Percentage of reachable functions covered

91.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_libinjection.c	1
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	24
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27

Fuzzer: fuzz_alg_bytestream

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	7	100.%
All colors	7	100

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

1

Reachable functions

6

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bytestream.c	1
/src/ndpi/src/lib/ndpi_main.c	4

Fuzzer: fuzz_ds_tree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	43	100.%
All colors	43	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:119
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:124
0	0	None	0	0	ndpi_tfind	call site: 00010	/src/ndpi/src/lib/ndpi_utils.c:222

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

25

Percentage of reachable functions covered

96.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_tree.cpp	4
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_utils.c	7

Fuzzer: fuzz_ds_libcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	1	2.04%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	48	97.9%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	15	cache_add	call site: 00027	/src/ndpi/src/lib/third_party/src/libcache.c:204
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00013	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

22

Percentage of reachable functions covered

95.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_libcache.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/libcache.c	9

Fuzzer: fuzz_serialization

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	3.42%
gold	[1:9]	2	0.42%
yellow	[10:29]	2	0.42%
greenyellow	[30:49]	4	0.85%
lawngreen	50+	443	94.8%
All colors	467	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00229	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['ndpi_serialize_uint32_uint64', 'atoi']	2	106	ndpi_serialize_binary_uint64	call site: 00212	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00171	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['ndpi_serialize_uint32_float', 'atoi']	2	85	ndpi_serialize_binary_float	call site: 00246	/src/ndpi/src/lib/ndpi_serializer.c:1809
2	70	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	70	ndpi_serialize_binary_boolean	call site: 00281	/src/ndpi/src/lib/ndpi_serializer.c:2122
0	52	1 : View List ['ndpi_deserialize_value_uint32']	0	52	ndpi_deserialize_value_uint64	call site: 00400	/src/ndpi/src/lib/ndpi_serializer.c:2746
0	52	1 : View List ['ndpi_deserialize_value_int32']	0	52	ndpi_deserialize_value_int64	call site: 00423	/src/ndpi/src/lib/ndpi_serializer.c:2831
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00016	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_serializer_set_buffer_len	call site: 00355	/src/ndpi/src/lib/ndpi_serializer.c:381
0	0	None	0	0	ndpi_serializer_get_header	call site: 00353	/src/ndpi/src/lib/ndpi_serializer.c:399
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00031	/src/ndpi/src/lib/ndpi_serializer.c:810
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00032	/src/ndpi/src/lib/ndpi_serializer.c:819

Runtime coverage analysis

Covered functions

116

Functions that are reachable but not covered

11

Reachable functions

127

Percentage of reachable functions covered

91.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_serialization.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_serializer.c	101
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_bins

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11	12.0%
gold	[1:9]	4	4.39%
yellow	[10:29]	1	1.09%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	75	82.4%
All colors	91	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	177	ndpi_cluster_bins	call site: 00064	/src/ndpi/src/lib/ndpi_analyze.c:739
0	0	None	2	151	ndpi_cluster_bins	call site: 00070	/src/ndpi/src/lib/ndpi_analyze.c:766
0	0	None	0	112	ndpi_cluster_bins	call site: 00072	/src/ndpi/src/lib/ndpi_analyze.c:782
0	0	None	0	112	ndpi_cluster_bins	call site: 00077	/src/ndpi/src/lib/ndpi_analyze.c:801
0	0	None	0	112	ndpi_cluster_bins	call site: 00079	/src/ndpi/src/lib/ndpi_analyze.c:814
0	0	None	0	112	ndpi_cluster_bins	call site: 00081	/src/ndpi/src/lib/ndpi_analyze.c:834
0	0	None	0	112	ndpi_cluster_bins	call site: 00082	/src/ndpi/src/lib/ndpi_analyze.c:859
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

7

Reachable functions

32

Percentage of reachable functions covered

78.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bins.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_ses_des

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	10	25.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	74.3%
All colors	39	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00012	/src/ndpi/src/lib/ndpi_analyze.c:1037
0	0	None	0	24	ndpi_ses_fitting	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1398
0	0	None	0	24	ndpi_ses_fitting	call site: 00018	/src/ndpi/src/lib/ndpi_analyze.c:1410
0	0	None	0	24	ndpi_ses_fitting	call site: 00020	/src/ndpi/src/lib/ndpi_analyze.c:1424
0	0	None	0	24	ndpi_des_fitting	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1546
0	0	None	0	24	ndpi_des_fitting	call site: 00027	/src/ndpi/src/lib/ndpi_analyze.c:1558
0	0	None	0	24	ndpi_des_fitting	call site: 00029	/src/ndpi/src/lib/ndpi_analyze.c:1572
0	0	None	0	11	ndpi_ses_init	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1300
0	0	None	0	11	ndpi_des_init	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1443
0	0	None	0	0	ndpi_ses_fitting	call site: 00021	/src/ndpi/src/lib/ndpi_analyze.c:1429
0	0	None	0	0	ndpi_des_fitting	call site: 00030	/src/ndpi/src/lib/ndpi_analyze.c:1578
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

3

Reachable functions

24

Percentage of reachable functions covered

87.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_ses_des.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_analyze.c	10

Fuzzer: fuzz_process_packet

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	598	13.2%
gold	[1:9]	1764	39.0%
yellow	[10:29]	187	4.14%
greenyellow	[30:49]	122	2.70%
lawngreen	50+	1843	40.8%
All colors	4514	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
944	944	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	944	944	ndpi_check_zmq	call site: 03016	/src/ndpi/src/lib/protocols/zeromq.c:46
699	699	2 : View List ['memcmp', 'ndpi_int_usenet_add_connection']	699	704	ndpi_search_usenet_tcp	call site: 02256	/src/ndpi/src/lib/protocols/usenet.c:72
612	612	2 : View List ['popInitExtraPacketProcessing', 'ndpi_int_mail_pop_add_connection']	612	612	ndpi_search_mail_pop_tcp	call site: 02196	/src/ndpi/src/lib/protocols/mail_pop.c:205
398	398	1 : View List ['ndpi_process_extra_packet']	398	398	ndpi_internal_detection_process_packet	call site: 03815	/src/ndpi/src/lib/ndpi_main.c:6857
363	363	4 : View List ['ndpi_match_ftp_data_port', 'ndpi_int_ftp_data_add_connection', 'ndpi_match_ftp_data_directory', 'ndpi_match_file_header']	363	368	ndpi_check_ftp_data	call site: 02991	/src/ndpi/src/lib/protocols/ftp_data.c:235
261	261	1 : View List ['ndpi_int_telnet_add_connection']	261	261	ndpi_search_telnet_tcp	call site: 02551	/src/ndpi/src/lib/protocols/telnet.c:192
257	486	4 : View List ['switch_extra_dissection_to_tls', 'ndpi_ftp_control_check_response', 'ndpi_set_detected_protocol', 'ndpi_int_ftp_control_add_connection']	257	486	ndpi_check_ftp_control	call site: 02894	/src/ndpi/src/lib/protocols/ftp_control.c:607
231	236	2 : View List ['ndpi_exclude_protocol', 'ndpi_int_z3950_add_connection']	231	236	ndpi_search_z3950	call site: 03589	/src/ndpi/src/lib/protocols/z3950.c:106
231	231	1 : View List ['ndpi_int_edonkey_add_connection']	231	372	ndpi_check_edonkey	call site: 01999	/src/ndpi/src/lib/protocols/edonkey.c:169
231	231	1 : View List ['ndpi_int_eaq_add_connection']	231	231	ndpi_search_eaq	call site: 03309	/src/ndpi/src/lib/protocols/eaq.c:67
231	231	1 : View List ['ndpi_int_memcached_add_connection']	231	231	ndpi_search_memcached	call site: 03538	/src/ndpi/src/lib/protocols/memcached.c:169
231	231	1 : View List ['ndpi_int_rsh_add_connection']	231	231	ndpi_search_rsh	call site: 03636	/src/ndpi/src/lib/protocols/rsh.c:50

Runtime coverage analysis

Covered functions

1149

Functions that are reachable but not covered

135

Reachable functions

1243

Percentage of reachable functions covered

89.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_process_packet.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	123
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	53
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	37
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ndpi_reader_alloc_fail

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	387	8.15%
gold	[1:9]	1608	33.9%
yellow	[10:29]	205	4.32%
greenyellow	[30:49]	125	2.63%
lawngreen	50+	2418	50.9%
All colors	4743	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
171	171	1 : View List ['ndpi_payload_analyzer']	179	3320	packet_processing	call site: 04007	/src/ndpi/fuzz/../example/reader_util.c:1605
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00254	/src/ndpi/src/lib/ndpi_main.c:2962
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04257	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['ndpi_serialize_uint32_float', 'atoi']	85	85	ndpi_serialize_binary_float	call site: 04354	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serializer_header_string', 'strlen', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_binary_uint32	call site: 04252	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_string_string_len	call site: 04226	/src/ndpi/src/lib/ndpi_serializer.c:2062
16	16	1 : View List ['mbedtls_aesni_setkey_enc']	16	16	mbedtls_aes_setkey_enc	call site: 03161	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:200
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00139	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
8	8	2 : View List ['ntohs', 'memcmp']	20	949	ndpi_search_worldofwarcraft	call site: 02602	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['strstr', 'fopen', 'getline', 'fclose', 'free']	8	8	mbedtls_aesni_has_support	call site: 03162	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
7	143	5 : View List ['ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04105	/src/ndpi/src/lib/ndpi_utils.c:2837
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01077	/src/ndpi/src/lib/ndpi_main.c:6506

Runtime coverage analysis

Covered functions

1267

Functions that are reachable but not covered

109

Reachable functions

1335

Percentage of reachable functions covered

91.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/fuzz_common_code.c	5
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	103
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	62
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_alg_crc32_md5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	10.5%
gold	[1:9]	1	5.26%
yellow	[10:29]	2	10.5%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	14	73.6%
All colors	19	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:142
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:148

Runtime coverage analysis

Covered functions

12

Functions that are reachable but not covered

0

Reachable functions

12

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_crc32_md5.c	1
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/ndpi_main.c	1
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6

Fuzzer: fuzz_tls_certificate

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2254	59.2%
gold	[1:9]	1335	35.0%
yellow	[10:29]	9	0.23%
greenyellow	[30:49]	3	0.07%
lawngreen	50+	205	5.38%
All colors	3806	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00242	/src/ndpi/src/lib/ndpi_main.c:2962
25	31	4 : View List ['ndpi_lru_add_to_cache', 'make_msteams_key', 'ndpi_get_current_time', 'ndpi_lru_find_cache']	25	200	ndpi_reconcile_protocols	call site: 01129	/src/ndpi/src/lib/ndpi_main.c:6147
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01383	/src/ndpi/src/lib/ndpi_main.c:8702
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01654	/src/ndpi/src/lib/protocols/tls.c:143
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00127	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01057	/src/ndpi/src/lib/ndpi_main.c:6506
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00196	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00211	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	85	ndpi_handle_risk_exceptions	call site: 01139	/src/ndpi/src/lib/ndpi_utils.c:2419
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00253	/src/ndpi/src/lib/ndpi_main.c:571
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3748
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3782

Runtime coverage analysis

Covered functions

341

Functions that are reachable but not covered

743

Reachable functions

1084

Percentage of reachable functions covered

31.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_tls_certificate.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	84
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	34
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2

Fuzzer: fuzz_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	789	20.3%
gold	[1:9]	343	8.83%
yellow	[10:29]	153	3.93%
greenyellow	[30:49]	90	2.31%
lawngreen	50+	2509	64.5%
All colors	3884	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
944	944	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	944	944	ndpi_check_zmq	call site: 03023	/src/ndpi/src/lib/protocols/zeromq.c:46
699	699	2 : View List ['memcmp', 'ndpi_int_usenet_add_connection']	699	704	ndpi_search_usenet_tcp	call site: 02264	/src/ndpi/src/lib/protocols/usenet.c:72
693	693	1 : View List ['ndpi_int_someip_add_connection']	693	693	ndpi_search_someip	call site: 03345	/src/ndpi/src/lib/protocols/someip.c:152
612	612	2 : View List ['popInitExtraPacketProcessing', 'ndpi_int_mail_pop_add_connection']	612	612	ndpi_search_mail_pop_tcp	call site: 02204	/src/ndpi/src/lib/protocols/mail_pop.c:205
398	398	1 : View List ['ndpi_process_extra_packet']	398	398	ndpi_internal_detection_process_packet	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:6857
261	261	1 : View List ['ndpi_int_telnet_add_connection']	261	261	ndpi_search_telnet_tcp	call site: 02558	/src/ndpi/src/lib/protocols/telnet.c:192
257	486	4 : View List ['switch_extra_dissection_to_tls', 'ndpi_ftp_control_check_response', 'ndpi_set_detected_protocol', 'ndpi_int_ftp_control_add_connection']	257	486	ndpi_check_ftp_control	call site: 02901	/src/ndpi/src/lib/protocols/ftp_control.c:607
235	391	3 : View List ['ndpi_int_tftp_add_connection', 'ndpi_set_risk', 'ndpi_is_printable_buffer']	235	391	ndpi_search_tftp	call site: 02727	/src/ndpi/src/lib/protocols/tftp.c:88
233	394	4 : View List ['memcmp', 'ndpi_set_risk', 'ndpi_int_rdp_add_connection', 'ndpi_exclude_protocol']	233	394	ndpi_search_rdp	call site: 01891	/src/ndpi/src/lib/protocols/rdp.c:67
233	394	4 : View List ['memcmp', 'ndpi_set_risk', 'ndpi_int_rdp_add_connection', 'ndpi_exclude_protocol']	233	394	ndpi_search_rdp	call site: 01893	/src/ndpi/src/lib/protocols/rdp.c:81
233	257	4 : View List ['ndpi_int_mgcp_add_connection', 'ndpi_hostname_sni_set', 'strncmp', 'ndpi_strnstr']	233	262	ndpi_search_mgcp	call site: 02405	/src/ndpi/src/lib/protocols/mgcp.c:75
233	233	2 : View List ['ndpi_int_nfs_add_connection', 'ntohl']	233	238	ndpi_search_nfs	call site: 02570	/src/ndpi/src/lib/protocols/nfs.c:70

Runtime coverage analysis

Covered functions

1031

Functions that are reachable but not covered

198

Reachable functions

1218

Percentage of reachable functions covered

83.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_config.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	8
/src/ndpi/src/lib/ndpi_main.c	91
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	28
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	39
/src/ndpi/src/lib/ndpi_geoip.c	4
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	31
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	21
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/tcp_udp.c	2
/src/ndpi/src/lib/ndpi_classify.c	1

Fuzzer: fuzz_quic_get_crypto_data

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2048	53.7%
gold	[1:9]	1334	35.0%
yellow	[10:29]	16	0.42%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	410	10.7%
All colors	3809	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00242	/src/ndpi/src/lib/ndpi_main.c:2962
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01383	/src/ndpi/src/lib/ndpi_main.c:8702
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01654	/src/ndpi/src/lib/protocols/tls.c:143
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00127	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01057	/src/ndpi/src/lib/ndpi_main.c:6506
2	13	3 : View List ['ndpi_lru_add_to_cache', 'make_msteams_key', 'ndpi_get_current_time']	2	182	ndpi_reconcile_protocols	call site: 01130	/src/ndpi/src/lib/ndpi_main.c:6150
2	2	1 : View List ['ndpi_quick_hash']	2	2	make_msteams_key	call site: 01111	/src/ndpi/src/lib/ndpi_main.c:6021
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00196	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00211	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00253	/src/ndpi/src/lib/ndpi_main.c:571
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3748
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3782

Runtime coverage analysis

Covered functions

383

Functions that are reachable but not covered

700

Reachable functions

1083

Percentage of reachable functions covered

35.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_quic_get_crypto_data.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	84
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	34
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	5
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2

Fuzzer: fuzz_gcrypt_light

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	19	13.6%
gold	[1:9]	3	2.15%
yellow	[10:29]	5	3.59%
greenyellow	[30:49]	4	2.87%
lawngreen	50+	108	77.6%
All colors	139	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4	4	2 : View List ['mbedtls_internal_aes_decrypt', 'mbedtls_internal_aes_encrypt']	4	4	mbedtls_aes_crypt_ecb	call site: 00090	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:498
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00071	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	30	3 : View List ['xorbytes', '__bswap_64', 'gcm_mult']	2	96	mbedtls_gcm_starts	call site: 00095	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:309
0	73	1 : View List ['mbedtls_gcm_update']	0	73	mbedtls_cipher_update	call site: 00062	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:245
0	0	None	4	43	mbedtls_gcm_finish	call site: 00109	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:556
0	0	None	4	4	gcm_mult	call site: 00064	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:237
0	0	None	0	205	mbedtls_gcm_update	call site: 00064	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:492
0	0	None	0	104	_gcry_cipher_crypt	call site: 00088	/src/ndpi/src/lib/third_party/src/gcrypt_light.c:331
0	0	None	0	31	mbedtls_gcm_update_ad	call site: 00102	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:379
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00034	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	mbedtls_cipher_get_block_size	call site: 00062	/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h:576
0	0	None	0	0	mbedtls_aes_setkey_enc	call site: 00048	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:200

Runtime coverage analysis

Covered functions

72

Functions that are reachable but not covered

12

Reachable functions

81

Percentage of reachable functions covered

85.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_light.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	22
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1

Fuzzer: fuzz_ds_ptree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.25%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	1.25%
lawngreen	50+	78	97.5%
All colors	80	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	108	ndpi_patricia_lookup	call site: 00049	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:659
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00018	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00042	/src/ndpi/src/lib/ndpi_main.c:2214
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00041	/src/ndpi/src/lib/ndpi_main.c:2229
0	0	None	0	0	ndpi_get_ip_string	call site: 00035	/src/ndpi/src/lib/ndpi_main.c:7916
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00023	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_patricia_search_best2	call site: 00044	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:551
0	0	None	0	0	ndpi_patricia_lookup	call site: 00060	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:774
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77

Runtime coverage analysis

Covered functions

35

Functions that are reachable but not covered

7

Reachable functions

42

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ptree.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_main.c	9
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_community_id

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.92%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	1.92%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	50	96.1%
All colors	52	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	4	SHA1Update	call site: 00028	/src/ndpi/src/lib/third_party/src/ndpi_sha1.c:195
0	0	None	0	0	ndpi_community_id_buf_copy	call site: 00018	/src/ndpi/src/lib/ndpi_community_id.c:70
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00038	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

5

Reachable functions

30

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_community_id.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_community_id.c	9
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/ndpi_utils.c	1

Fuzzer: fuzz_ds_ahocorasick

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	4.68%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	122	95.3%
All colors	128	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	80	ndpi_match_string	call site: 00098	/src/ndpi/src/lib/ndpi_main.c:3275
0	0	None	0	126	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:235
0	0	None	0	36	ac_automata_search	call site: 00089	/src/ndpi/src/lib/third_party/src/ahocorasick.c:454
0	0	None	0	36	ac_automata_search	call site: 00095	/src/ndpi/src/lib/third_party/src/ahocorasick.c:485
0	0	None	0	10	ac_automata_release	call site: 00121	/src/ndpi/src/lib/third_party/src/ahocorasick.c:571
0	0	None	0	4	dump_node_header	call site: 00000	/src/ndpi/src/lib/third_party/src/ahocorasick.c:620
0	0	None	0	2	ac_automata_walk	call site: 00082	/src/ndpi/src/lib/third_party/src/ahocorasick.c:309
0	0	None	0	2	ac_automata_walk	call site: 00083	/src/ndpi/src/lib/third_party/src/ahocorasick.c:325
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00021	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_strdup	call site: 00030	/src/ndpi/src/lib/ndpi_memory.c:108
0	0	None	0	0	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:241
0	0	None	0	0	ac_automata_search	call site: 00096	/src/ndpi/src/lib/third_party/src/ahocorasick.c:524

Runtime coverage analysis

Covered functions

67

Functions that are reachable but not covered

10

Reachable functions

77

Percentage of reachable functions covered

87.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ahocorasick.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_main.c	10
/src/ndpi/src/lib/third_party/src/ahocorasick.c	29
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1

Fuzzer: fuzz_ds_patricia

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	1.58%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.79%
greenyellow	[30:49]	2	1.58%
lawngreen	50+	121	96.0%
All colors	126	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	60	ndpi_patricia_remove	call site: 00077	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:899
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00120	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00019	/src/ndpi/src/lib/ndpi_main.c:2214
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00056	/src/ndpi/src/lib/ndpi_main.c:2229
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00028	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00041	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77
0	0	None	0	0	ndpi_Ref_Prefix	call site: 00024	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:268
0	0	None	0	0	ndpi_New_Prefix2	call site: 00026	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:228

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

2

Reachable functions

46

Percentage of reachable functions covered

95.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_patricia.cpp	3
/src/ndpi/fuzz/fuzz_common_code.c	2
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	18
/src/ndpi/src/lib/ndpi_memory.c	3
/src/ndpi/src/lib/ndpi_main.c	9

Fuzzer: fuzz_alg_hw_rsi_outliers_da

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	2.59%
gold	[1:9]	2	2.59%
yellow	[10:29]	1	1.29%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	72	93.5%
All colors	77	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00014	/src/ndpi/src/lib/ndpi_analyze.c:1037
0	0	None	0	0	ndpi_hw_init	call site: 00013	/src/ndpi/src/lib/ndpi_analyze.c:1086
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00011	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

4

Reachable functions

45

Percentage of reachable functions covered

91.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hw_rsi_outliers_da.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	28

Fuzzer: fuzz_alg_jitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	100.%
All colors	17	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

0

Reachable functions

15

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_jitter.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	3

Fuzzer: fuzz_alg_hll

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	2.94%
gold	[1:9]	1	2.94%
yellow	[10:29]	1	2.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	31	91.1%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

26

Functions that are reachable but not covered

2

Reachable functions

28

Percentage of reachable functions covered

92.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hll.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	6
/src/ndpi/src/lib/./third_party/src/hll/hll.c	7
/src/ndpi/src/lib/./third_party/src/hll/MurmurHash3.c	1

Fuzzer: fuzz_ndpi_reader_payload_analyzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	471	9.93%
gold	[1:9]	1664	35.0%
yellow	[10:29]	251	5.29%
greenyellow	[30:49]	100	2.10%
lawngreen	50+	2257	47.5%
All colors	4743	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
231	231	1 : View List ['ndpi_int_edonkey_add_connection']	231	236	ndpi_check_edonkey	call site: 02022	/src/ndpi/src/lib/protocols/edonkey.c:188
231	231	1 : View List ['ndpi_int_xbox_add_connection']	231	231	ndpi_search_xbox	call site: 02540	/src/ndpi/src/lib/protocols/xbox.c:74
174	174	1 : View List ['h5_state_bogus_comment2']	174	174	h5_state_tag_open	call site: 04469	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00254	/src/ndpi/src/lib/ndpi_main.c:2962
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04257	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['ndpi_serialize_uint32_float', 'atoi']	85	85	ndpi_serialize_binary_float	call site: 04354	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serializer_header_string', 'strlen', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_binary_uint32	call site: 04252	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_string_string_len	call site: 04226	/src/ndpi/src/lib/ndpi_serializer.c:2062
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00139	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
8	348	9 : View List ['ndpi_int_kerberos_add_connection', 'ndpi_free', 'ndpi_malloc', '__ctype_b_loc', 'ntohl', 'strcmp', 'ndpi_exclude_protocol', 'krb_parse', 'krb_strncpy_lower']	8	348	ndpi_search_kerberos	call site: 02646	/src/ndpi/src/lib/protocols/kerberos.c:333
8	8	2 : View List ['ntohs', 'memcmp']	20	949	ndpi_search_worldofwarcraft	call site: 02602	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
7	143	5 : View List ['ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04105	/src/ndpi/src/lib/ndpi_utils.c:2837

Runtime coverage analysis

Covered functions

1263

Functions that are reachable but not covered

113

Reachable functions

1335

Percentage of reachable functions covered

91.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/fuzz_common_code.c	5
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	103
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	62
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ndpi_reader

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	376	7.93%
gold	[1:9]	1609	33.9%
yellow	[10:29]	192	4.05%
greenyellow	[30:49]	111	2.34%
lawngreen	50+	2448	51.6%
All colors	4736	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
174	174	1 : View List ['h5_state_bogus_comment2']	174	174	h5_state_tag_open	call site: 04462	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
171	171	1 : View List ['ndpi_payload_analyzer']	179	3320	packet_processing	call site: 04000	/src/ndpi/fuzz/../example/reader_util.c:1605
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00248	/src/ndpi/src/lib/ndpi_main.c:2962
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04250	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['ndpi_serialize_uint32_float', 'atoi']	85	85	ndpi_serialize_binary_float	call site: 04347	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serializer_header_string', 'strlen', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_binary_uint32	call site: 04245	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer', 'ndpi_serialize_csv_pre']	37	56	ndpi_serialize_string_string_len	call site: 04219	/src/ndpi/src/lib/ndpi_serializer.c:2062
13	20	2 : View List ['ndpi_DeleteEntry', 'ndpi_Deref_Prefix']	13	20	ndpi_Clear_Patricia	call site: 00133	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
7	143	5 : View List ['ndpi_serialize_uint32_string', 'ndpi_serializer_get_buffer', 'ndpi_term_serializer', 'ndpi_init_serializer', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04098	/src/ndpi/src/lib/ndpi_utils.c:2837
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01071	/src/ndpi/src/lib/ndpi_main.c:6506
5	5	1 : View List ['ndpi_serialize_single_string']	5	5	ndpi_serialize_start_of_block_binary	call site: 04295	/src/ndpi/src/lib/ndpi_serializer.c:2281
4	10	4 : View List ['abs', 'ndpi_reset_bin', 'ndpi_inc_bin', 'plen2slot']	6	1843	process_ndpi_collected_info	call site: 04198	/src/ndpi/fuzz/../example/reader_util.c:1359

Runtime coverage analysis

Covered functions

1267

Functions that are reachable but not covered

105

Reachable functions

1331

Percentage of reachable functions covered

92.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	103
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	62
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	23
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	55
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	6
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/hangout.c	4
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23