High level conclusions

Fuzzers reach 96.75% of cyclomatic complexity.

Fuzzers reach 94.83% of all functions.

Fuzzers reach 96.31% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

1543 / 1627

Cyclomatic complexity statically reachable by fuzzers

13935 / 14402

Runtime code coverage of functions

1567 / 1627

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: /src/ndpi/conftest.cpp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	100.%
All colors	1	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['memcmp', 'ntohs']	20	1013	ndpi_search_worldofwarcraft	call site: 00000	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['free', 'fclose', 'getline', 'strstr', 'fopen']	8	8	mbedtls_aesni_has_support	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:6562
4	4	2 : View List ['perror', 'fclose']	4	4	bufferToFile	call site: 00000	/src/ndpi/fuzz/fuzz_ndpi_reader.c:40
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	143	5 : View List ['ndpi_term_serializer', 'ndpi_serializer_get_buffer', 'ndpi_init_serializer', 'ndpi_serialize_uint32_string', 'strncpy']	2	143	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2839
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['ndpi_serialize_uint32_uint64', 'atoi']	2	106	ndpi_serialize_binary_uint64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	2	85	ndpi_serialize_binary_uint32	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1612
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	85	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1809
2	70	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	70	ndpi_serialize_binary_boolean	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2122

Runtime coverage analysis

Covered functions

1570

Functions that are reachable but not covered

0

Reachable functions

1

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/conftest.cpp	1

Fuzzer: fuzz_libinjection

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5	2.21%
gold	[1:9]	4	1.76%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	217	96.0%
All colors	226	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	177	1 : View List ['h5_state_tag_name']	0	177	h5_state_tag_open	call site: 00119	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:204
0	174	1 : View List ['h5_state_data']	0	174	h5_state_tag_open	call site: 00119	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:209
0	0	None	0	4	h5_state_tag_name	call site: 00127	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:273
0	0	None	0	0	h5_state_comment	call site: 00195	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:760
0	0	None	0	0	h5_state_comment	call site: 00196	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:790
0	0	None	0	0	libinjection_sqli_tokenize	call site: 00034	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:1222
0	0	None	0	0	libinjection_sqli_not_whitelist	call site: 00013	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:2146
0	0	None	0	0	flag2delim	call site: 00036	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:89
0	0	None	0	0	is_black_url	call site: 00214	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:400
0	0	None	0	0	is_black_url	call site: 00216	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:408
0	0	None	0	0	html_decode_char_at	call site: 00213	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:63

Runtime coverage analysis

Covered functions

93

Functions that are reachable but not covered

6

Reachable functions

69

Percentage of reachable functions covered

91.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_libinjection.c	1
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	24
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27

Fuzzer: fuzz_ds_libcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	1	2.04%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	48	97.9%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	15	cache_add	call site: 00027	/src/ndpi/src/lib/third_party/src/libcache.c:204
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00013	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

22

Percentage of reachable functions covered

95.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_libcache.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/libcache.c	9

Fuzzer: fuzz_community_id

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.92%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	1.92%
greenyellow	[30:49]	1	1.92%
lawngreen	50+	49	94.2%
All colors	52	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	4	SHA1Update	call site: 00028	/src/ndpi/src/lib/third_party/src/ndpi_sha1.c:195
0	0	None	0	0	ndpi_community_id_buf_copy	call site: 00018	/src/ndpi/src/lib/ndpi_community_id.c:70
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00038	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

5

Reachable functions

30

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_community_id.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_community_id.c	9
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/ndpi_utils.c	1

Fuzzer: fuzz_process_packet

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	631	13.7%
gold	[1:9]	1781	38.7%
yellow	[10:29]	246	5.35%
greenyellow	[30:49]	99	2.15%
lawngreen	50+	1841	40.0%
All colors	4598	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1667	1667	1 : View List ['switch_to_tls']	1667	1667	ndpi_int_check_stun	call site: 01926	/src/ndpi/src/lib/protocols/stun.c:305
1008	1008	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	1008	1008	ndpi_check_zmq	call site: 03063	/src/ndpi/src/lib/protocols/zeromq.c:46
747	747	2 : View List ['memcmp', 'ndpi_int_usenet_add_connection']	747	752	ndpi_search_usenet_tcp	call site: 02304	/src/ndpi/src/lib/protocols/usenet.c:72
644	644	2 : View List ['popInitExtraPacketProcessing', 'ndpi_int_mail_pop_add_connection']	644	644	ndpi_search_mail_pop_tcp	call site: 02244	/src/ndpi/src/lib/protocols/mail_pop.c:205
398	398	1 : View List ['ndpi_process_extra_packet']	398	398	ndpi_internal_detection_process_packet	call site: 03893	/src/ndpi/src/lib/ndpi_main.c:6913
379	379	4 : View List ['ndpi_match_file_header', 'ndpi_match_ftp_data_directory', 'ndpi_int_ftp_data_add_connection', 'ndpi_match_ftp_data_port']	379	384	ndpi_check_ftp_data	call site: 03037	/src/ndpi/src/lib/protocols/ftp_data.c:235
277	277	1 : View List ['ndpi_int_telnet_add_connection']	277	277	ndpi_search_telnet_tcp	call site: 02596	/src/ndpi/src/lib/protocols/telnet.c:192
273	518	4 : View List ['ndpi_int_ftp_control_add_connection', 'ndpi_ftp_control_check_response', 'switch_extra_dissection_to_tls', 'ndpi_set_detected_protocol']	273	518	ndpi_check_ftp_control	call site: 02940	/src/ndpi/src/lib/protocols/ftp_control.c:607
247	252	2 : View List ['ndpi_int_z3950_add_connection', 'ndpi_exclude_protocol']	247	252	ndpi_search_z3950	call site: 03640	/src/ndpi/src/lib/protocols/z3950.c:106
247	247	1 : View List ['ndpi_int_edonkey_add_connection']	247	388	ndpi_check_edonkey	call site: 02044	/src/ndpi/src/lib/protocols/edonkey.c:169
247	247	1 : View List ['ndpi_int_eaq_add_connection']	247	247	ndpi_search_eaq	call site: 03366	/src/ndpi/src/lib/protocols/eaq.c:66
247	247	1 : View List ['ndpi_int_memcached_add_connection']	247	247	ndpi_search_memcached	call site: 03589	/src/ndpi/src/lib/protocols/memcached.c:169

Runtime coverage analysis

Covered functions

1162

Functions that are reachable but not covered

138

Reachable functions

1259

Percentage of reachable functions covered

89.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_process_packet.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	127
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	54
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	37
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	7
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_quic_get_crypto_data

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2110	54.2%
gold	[1:9]	1349	34.7%
yellow	[10:29]	13	0.33%
greenyellow	[30:49]	3	0.07%
lawngreen	50+	412	10.5%
All colors	3887	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00243	/src/ndpi/src/lib/ndpi_main.c:2976
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01356	/src/ndpi/src/lib/ndpi_main.c:8759
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01667	/src/ndpi/src/lib/protocols/tls.c:145
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00128	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01064	/src/ndpi/src/lib/ndpi_main.c:6562
2	13	3 : View List ['make_msteams_key', 'ndpi_get_current_time', 'ndpi_lru_add_to_cache']	2	200	ndpi_reconcile_protocols	call site: 01135	/src/ndpi/src/lib/ndpi_main.c:6204
2	2	1 : View List ['ndpi_quick_hash']	2	2	make_msteams_key	call site: 01116	/src/ndpi/src/lib/ndpi_main.c:6041
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00197	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00212	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00254	/src/ndpi/src/lib/ndpi_main.c:576
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3766
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3800

Runtime coverage analysis

Covered functions

385

Functions that are reachable but not covered

714

Reachable functions

1099

Percentage of reachable functions covered

35.03%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_quic_get_crypto_data.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	87
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	34
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10

Fuzzer: fuzz_serialization

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	3.42%
gold	[1:9]	2	0.42%
yellow	[10:29]	1	0.21%
greenyellow	[30:49]	5	1.07%
lawngreen	50+	443	94.8%
All colors	467	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	108	2 : View List ['atoi', 'ndpi_serialize_uint32_int64']	2	108	ndpi_serialize_binary_int64	call site: 00229	/src/ndpi/src/lib/ndpi_serializer.c:1501
2	106	2 : View List ['ndpi_serialize_uint32_uint64', 'atoi']	2	106	ndpi_serialize_binary_uint64	call site: 00212	/src/ndpi/src/lib/ndpi_serializer.c:1724
2	87	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	87	ndpi_serialize_binary_binary	call site: 00171	/src/ndpi/src/lib/ndpi_serializer.c:2037
2	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	85	ndpi_serialize_binary_float	call site: 00246	/src/ndpi/src/lib/ndpi_serializer.c:1809
2	70	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	70	ndpi_serialize_binary_boolean	call site: 00281	/src/ndpi/src/lib/ndpi_serializer.c:2122
0	52	1 : View List ['ndpi_deserialize_value_uint32']	0	52	ndpi_deserialize_value_uint64	call site: 00400	/src/ndpi/src/lib/ndpi_serializer.c:2746
0	52	1 : View List ['ndpi_deserialize_value_int32']	0	52	ndpi_deserialize_value_int64	call site: 00423	/src/ndpi/src/lib/ndpi_serializer.c:2831
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00016	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_serializer_set_buffer_len	call site: 00355	/src/ndpi/src/lib/ndpi_serializer.c:381
0	0	None	0	0	ndpi_serializer_get_header	call site: 00353	/src/ndpi/src/lib/ndpi_serializer.c:399
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00031	/src/ndpi/src/lib/ndpi_serializer.c:810
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00032	/src/ndpi/src/lib/ndpi_serializer.c:819

Runtime coverage analysis

Covered functions

116

Functions that are reachable but not covered

11

Reachable functions

127

Percentage of reachable functions covered

91.34%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_serialization.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_serializer.c	101
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	844	21.1%
gold	[1:9]	319	8.00%
yellow	[10:29]	210	5.26%
greenyellow	[30:49]	71	1.78%
lawngreen	50+	2542	63.7%
All colors	3986	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1667	1667	1 : View List ['switch_to_tls']	1667	1667	ndpi_int_check_stun	call site: 01933	/src/ndpi/src/lib/protocols/stun.c:305
1008	1008	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	1008	1008	ndpi_check_zmq	call site: 03070	/src/ndpi/src/lib/protocols/zeromq.c:46
747	747	2 : View List ['memcmp', 'ndpi_int_usenet_add_connection']	747	752	ndpi_search_usenet_tcp	call site: 02311	/src/ndpi/src/lib/protocols/usenet.c:72
644	644	2 : View List ['popInitExtraPacketProcessing', 'ndpi_int_mail_pop_add_connection']	644	644	ndpi_search_mail_pop_tcp	call site: 02251	/src/ndpi/src/lib/protocols/mail_pop.c:205
398	398	1 : View List ['ndpi_process_extra_packet']	398	398	ndpi_internal_detection_process_packet	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:6913
325	325	1 : View List ['ndpi_int_softether_add_connection']	325	325	ndpi_search_softether	call site: 03762	/src/ndpi/src/lib/protocols/softether.c:319
277	277	1 : View List ['ndpi_int_telnet_add_connection']	277	277	ndpi_search_telnet_tcp	call site: 02603	/src/ndpi/src/lib/protocols/telnet.c:192
273	518	4 : View List ['ndpi_int_ftp_control_add_connection', 'ndpi_ftp_control_check_response', 'switch_extra_dissection_to_tls', 'ndpi_set_detected_protocol']	273	518	ndpi_check_ftp_control	call site: 02947	/src/ndpi/src/lib/protocols/ftp_control.c:607
249	410	4 : View List ['memcmp', 'ndpi_int_rdp_add_connection', 'ndpi_exclude_protocol', 'ndpi_set_risk']	249	410	ndpi_search_rdp	call site: 01922	/src/ndpi/src/lib/protocols/rdp.c:81
249	249	2 : View List ['ntohl', 'ndpi_int_nfs_add_connection']	249	254	ndpi_search_nfs	call site: 02614	/src/ndpi/src/lib/protocols/nfs.c:70
249	249	2 : View List ['memcmp', 'ndpi_int_spotify_add_connection']	249	254	ndpi_check_spotify	call site: 02841	/src/ndpi/src/lib/protocols/spotify.c:47
249	249	2 : View List ['strncpy', 'ndpi_int_discord_add_connection']	249	249	ndpi_search_discord	call site: 03770	/src/ndpi/src/lib/protocols/discord.c:61

Runtime coverage analysis

Covered functions

1041

Functions that are reachable but not covered

206

Reachable functions

1236

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_config.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	8
/src/ndpi/src/lib/ndpi_main.c	93
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/ndpi_geoip.c	4
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	31
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	21
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/tcp_udp.c	2
/src/ndpi/src/lib/ndpi_classify.c	1

Fuzzer: fuzz_ds_patricia

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	1.58%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.79%
greenyellow	[30:49]	3	2.38%
lawngreen	50+	120	95.2%
All colors	126	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	60	ndpi_patricia_remove	call site: 00077	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:899
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00120	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00019	/src/ndpi/src/lib/ndpi_main.c:2228
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00056	/src/ndpi/src/lib/ndpi_main.c:2240
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00028	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00041	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77
0	0	None	0	0	ndpi_Ref_Prefix	call site: 00024	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:268
0	0	None	0	0	ndpi_New_Prefix2	call site: 00026	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:228

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

2

Reachable functions

46

Percentage of reachable functions covered

95.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_patricia.cpp	3
/src/ndpi/fuzz/fuzz_common_code.c	2
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	18
/src/ndpi/src/lib/ndpi_memory.c	3
/src/ndpi/src/lib/ndpi_main.c	9

Fuzzer: fuzz_alg_bins

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11	12.0%
gold	[1:9]	5	5.49%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	75	82.4%
All colors	91	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	177	ndpi_cluster_bins	call site: 00064	/src/ndpi/src/lib/ndpi_analyze.c:739
0	0	None	2	151	ndpi_cluster_bins	call site: 00070	/src/ndpi/src/lib/ndpi_analyze.c:766
0	0	None	0	112	ndpi_cluster_bins	call site: 00072	/src/ndpi/src/lib/ndpi_analyze.c:782
0	0	None	0	112	ndpi_cluster_bins	call site: 00077	/src/ndpi/src/lib/ndpi_analyze.c:801
0	0	None	0	112	ndpi_cluster_bins	call site: 00079	/src/ndpi/src/lib/ndpi_analyze.c:814
0	0	None	0	112	ndpi_cluster_bins	call site: 00081	/src/ndpi/src/lib/ndpi_analyze.c:834
0	0	None	0	112	ndpi_cluster_bins	call site: 00082	/src/ndpi/src/lib/ndpi_analyze.c:859
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

7

Reachable functions

32

Percentage of reachable functions covered

78.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bins.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_crc32_md5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	10.5%
gold	[1:9]	1	5.26%
yellow	[10:29]	2	10.5%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	14	73.6%
All colors	19	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:142
0	0	None	0	16	ndpi_MD5Update	call site: 00007	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:148

Runtime coverage analysis

Covered functions

12

Functions that are reachable but not covered

0

Reachable functions

12

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_crc32_md5.c	1
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/ndpi_main.c	1
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6

Fuzzer: fuzz_ndpi_reader_alloc_fail

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	383	7.99%
gold	[1:9]	1627	33.9%
yellow	[10:29]	227	4.73%
greenyellow	[30:49]	125	2.60%
lawngreen	50+	2431	50.7%
All colors	4793	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
171	171	1 : View List ['ndpi_payload_analyzer']	179	3352	packet_processing	call site: 04079	/src/ndpi/fuzz/../example/reader_util.c:1604
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00255	/src/ndpi/src/lib/ndpi_main.c:2976
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04274	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	85	85	ndpi_serialize_binary_float	call site: 04402	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'strlen']	37	56	ndpi_serialize_binary_uint32	call site: 04266	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer']	37	56	ndpi_serialize_string_string_len	call site: 04323	/src/ndpi/src/lib/ndpi_serializer.c:2062
16	16	1 : View List ['mbedtls_aesni_setkey_enc']	16	16	mbedtls_aes_setkey_enc	call site: 03210	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:200
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00140	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
8	8	2 : View List ['memcmp', 'ntohs']	20	1013	ndpi_search_worldofwarcraft	call site: 02646	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
8	8	5 : View List ['free', 'fclose', 'getline', 'strstr', 'fopen']	8	8	mbedtls_aesni_has_support	call site: 03211	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
7	143	5 : View List ['ndpi_term_serializer', 'ndpi_serializer_get_buffer', 'ndpi_init_serializer', 'ndpi_serialize_uint32_string', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04143	/src/ndpi/src/lib/ndpi_utils.c:2839
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01084	/src/ndpi/src/lib/ndpi_main.c:6562

Runtime coverage analysis

Covered functions

1283

Functions that are reachable but not covered

109

Reachable functions

1351

Percentage of reachable functions covered

91.93%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/fuzz_common_code.c	5
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	100
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	60
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_tls_certificate

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2311	59.5%
gold	[1:9]	1351	34.7%
yellow	[10:29]	9	0.23%
greenyellow	[30:49]	14	0.36%
lawngreen	50+	199	5.12%
All colors	3884	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00243	/src/ndpi/src/lib/ndpi_main.c:2976
25	31	4 : View List ['make_msteams_key', 'ndpi_get_current_time', 'ndpi_lru_add_to_cache', 'ndpi_lru_find_cache']	25	218	ndpi_reconcile_protocols	call site: 01134	/src/ndpi/src/lib/ndpi_main.c:6201
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01356	/src/ndpi/src/lib/ndpi_main.c:8759
14	14	1 : View List ['ndpi_tls_refine_master_protocol']	14	14	__get_master	call site: 01667	/src/ndpi/src/lib/protocols/tls.c:145
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00128	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01064	/src/ndpi/src/lib/ndpi_main.c:6562
0	19	1 : View List ['node_release']	0	19	node_create_next	call site: 00197	/src/ndpi/src/lib/third_party/src/ahocorasick.c:992
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00212	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1044
0	5	1 : View List ['ndpi_free']	0	85	ndpi_handle_risk_exceptions	call site: 01149	/src/ndpi/src/lib/ndpi_utils.c:2421
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00254	/src/ndpi/src/lib/ndpi_main.c:576
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3766
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_trusted_issuer_dn	call site: 00000	/src/ndpi/src/lib/ndpi_main.c:3800

Runtime coverage analysis

Covered functions

342

Functions that are reachable but not covered

758

Reachable functions

1100

Percentage of reachable functions covered

31.09%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_tls_certificate.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	87
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	34
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	1
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10

Fuzzer: fuzz_gcrypt_light

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	19	13.6%
gold	[1:9]	3	2.15%
yellow	[10:29]	7	5.03%
greenyellow	[30:49]	2	1.43%
lawngreen	50+	108	77.6%
All colors	139	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4	4	2 : View List ['mbedtls_internal_aes_decrypt', 'mbedtls_internal_aes_encrypt']	4	4	mbedtls_aes_crypt_ecb	call site: 00090	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:498
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00071	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	30	3 : View List ['__bswap_64', 'xorbytes', 'gcm_mult']	2	96	mbedtls_gcm_starts	call site: 00095	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:309
0	73	1 : View List ['mbedtls_gcm_update']	0	73	mbedtls_cipher_update	call site: 00062	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:245
0	0	None	4	43	mbedtls_gcm_finish	call site: 00109	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:556
0	0	None	4	4	gcm_mult	call site: 00064	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:237
0	0	None	0	205	mbedtls_gcm_update	call site: 00064	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:492
0	0	None	0	104	_gcry_cipher_crypt	call site: 00088	/src/ndpi/src/lib/third_party/src/gcrypt_light.c:331
0	0	None	0	31	mbedtls_gcm_update_ad	call site: 00102	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:379
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00034	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	mbedtls_cipher_get_block_size	call site: 00062	/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h:576
0	0	None	0	0	mbedtls_aes_setkey_enc	call site: 00048	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:200

Runtime coverage analysis

Covered functions

72

Functions that are reachable but not covered

12

Reachable functions

81

Percentage of reachable functions covered

85.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_light.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	22
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1

Fuzzer: fuzz_alg_bytestream

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	7	100.%
All colors	7	100

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

1

Reachable functions

6

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bytestream.c	1
/src/ndpi/src/lib/ndpi_main.c	4

Fuzzer: fuzz_ds_ahocorasick

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	4.68%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	122	95.3%
All colors	128	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	80	ndpi_match_string	call site: 00098	/src/ndpi/src/lib/ndpi_main.c:3293
0	0	None	0	126	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:235
0	0	None	0	36	ac_automata_search	call site: 00089	/src/ndpi/src/lib/third_party/src/ahocorasick.c:454
0	0	None	0	36	ac_automata_search	call site: 00095	/src/ndpi/src/lib/third_party/src/ahocorasick.c:485
0	0	None	0	10	ac_automata_release	call site: 00121	/src/ndpi/src/lib/third_party/src/ahocorasick.c:571
0	0	None	0	4	dump_node_header	call site: 00000	/src/ndpi/src/lib/third_party/src/ahocorasick.c:620
0	0	None	0	2	ac_automata_walk	call site: 00082	/src/ndpi/src/lib/third_party/src/ahocorasick.c:309
0	0	None	0	2	ac_automata_walk	call site: 00083	/src/ndpi/src/lib/third_party/src/ahocorasick.c:325
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00021	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_strdup	call site: 00030	/src/ndpi/src/lib/ndpi_memory.c:108
0	0	None	0	0	ac_automata_add	call site: 00035	/src/ndpi/src/lib/third_party/src/ahocorasick.c:241
0	0	None	0	0	ac_automata_search	call site: 00096	/src/ndpi/src/lib/third_party/src/ahocorasick.c:524

Runtime coverage analysis

Covered functions

67

Functions that are reachable but not covered

10

Reachable functions

77

Percentage of reachable functions covered

87.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ahocorasick.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_main.c	10
/src/ndpi/src/lib/third_party/src/ahocorasick.c	29
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1

Fuzzer: fuzz_ds_tree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	43	100.%
All colors	43	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:119
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:124
0	0	None	0	0	ndpi_tfind	call site: 00010	/src/ndpi/src/lib/ndpi_utils.c:222

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

25

Percentage of reachable functions covered

96.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_tree.cpp	4
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_utils.c	7

Fuzzer: fuzz_ds_ptree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.25%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	1.25%
lawngreen	50+	78	97.5%
All colors	80	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	108	ndpi_patricia_lookup	call site: 00049	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:659
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00018	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:339
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00042	/src/ndpi/src/lib/ndpi_main.c:2228
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00041	/src/ndpi/src/lib/ndpi_main.c:2240
0	0	None	0	0	ndpi_get_ip_string	call site: 00035	/src/ndpi/src/lib/ndpi_main.c:7972
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00023	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_patricia_search_best2	call site: 00044	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:551
0	0	None	0	0	ndpi_patricia_lookup	call site: 00060	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:774
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:282
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:71
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:77

Runtime coverage analysis

Covered functions

35

Functions that are reachable but not covered

7

Reachable functions

42

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ptree.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_main.c	9
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_jitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	100.%
All colors	17	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

0

Reachable functions

15

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_jitter.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	3

Fuzzer: fuzz_alg_hll

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	2.94%
gold	[1:9]	1	2.94%
yellow	[10:29]	1	2.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	31	91.1%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

26

Functions that are reachable but not covered

2

Reachable functions

28

Percentage of reachable functions covered

92.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hll.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	6
/src/ndpi/src/lib/./third_party/src/hll/hll.c	7
/src/ndpi/src/lib/./third_party/src/hll/MurmurHash3.c	1

Fuzzer: fuzz_alg_ses_des

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	10	25.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	74.3%
All colors	39	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00012	/src/ndpi/src/lib/ndpi_analyze.c:1037
0	0	None	0	24	ndpi_ses_fitting	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1398
0	0	None	0	24	ndpi_ses_fitting	call site: 00018	/src/ndpi/src/lib/ndpi_analyze.c:1410
0	0	None	0	24	ndpi_ses_fitting	call site: 00020	/src/ndpi/src/lib/ndpi_analyze.c:1424
0	0	None	0	24	ndpi_des_fitting	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1546
0	0	None	0	24	ndpi_des_fitting	call site: 00027	/src/ndpi/src/lib/ndpi_analyze.c:1558
0	0	None	0	24	ndpi_des_fitting	call site: 00029	/src/ndpi/src/lib/ndpi_analyze.c:1572
0	0	None	0	11	ndpi_ses_init	call site: 00011	/src/ndpi/src/lib/ndpi_analyze.c:1300
0	0	None	0	11	ndpi_des_init	call site: 00024	/src/ndpi/src/lib/ndpi_analyze.c:1443
0	0	None	0	0	ndpi_ses_fitting	call site: 00021	/src/ndpi/src/lib/ndpi_analyze.c:1429
0	0	None	0	0	ndpi_des_fitting	call site: 00030	/src/ndpi/src/lib/ndpi_analyze.c:1578
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

3

Reachable functions

24

Percentage of reachable functions covered

87.5%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_ses_des.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_analyze.c	10

Fuzzer: fuzz_alg_hw_rsi_outliers_da

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	2.59%
gold	[1:9]	2	2.59%
yellow	[10:29]	1	1.29%
greenyellow	[30:49]	1	1.29%
lawngreen	50+	71	92.2%
All colors	77	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00014	/src/ndpi/src/lib/ndpi_analyze.c:1037
0	0	None	0	0	ndpi_hw_init	call site: 00013	/src/ndpi/src/lib/ndpi_analyze.c:1086
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00011	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

4

Reachable functions

45

Percentage of reachable functions covered

91.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hw_rsi_outliers_da.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	28

Fuzzer: fuzz_ndpi_reader_payload_analyzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	469	9.78%
gold	[1:9]	1671	34.8%
yellow	[10:29]	233	4.86%
greenyellow	[30:49]	130	2.71%
lawngreen	50+	2290	47.7%
All colors	4793	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
247	247	1 : View List ['ndpi_int_edonkey_add_connection']	247	252	ndpi_check_edonkey	call site: 02067	/src/ndpi/src/lib/protocols/edonkey.c:188
247	247	1 : View List ['ndpi_int_warcraft3_add_connection']	247	247	ndpi_search_warcraft3	call site: 02777	/src/ndpi/src/lib/protocols/warcraft3.c:82
174	174	1 : View List ['h5_state_bogus_comment2']	174	174	h5_state_tag_open	call site: 04516	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00255	/src/ndpi/src/lib/ndpi_main.c:2976
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04274	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	85	85	ndpi_serialize_binary_float	call site: 04402	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'strlen']	37	56	ndpi_serialize_binary_uint32	call site: 04266	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer']	37	56	ndpi_serialize_string_string_len	call site: 04323	/src/ndpi/src/lib/ndpi_serializer.c:2062
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00140	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
8	364	9 : View List ['__ctype_b_loc', 'ndpi_malloc', 'krb_parse', 'ntohl', 'ndpi_exclude_protocol', 'ndpi_free', 'krb_strncpy_lower', 'strcmp', 'ndpi_int_kerberos_add_connection']	8	364	ndpi_search_kerberos	call site: 02692	/src/ndpi/src/lib/protocols/kerberos.c:333
8	8	2 : View List ['memcmp', 'ntohs']	20	1013	ndpi_search_worldofwarcraft	call site: 02646	/src/ndpi/src/lib/protocols/world_of_warcraft.c:137
7	143	5 : View List ['ndpi_term_serializer', 'ndpi_serializer_get_buffer', 'ndpi_init_serializer', 'ndpi_serialize_uint32_string', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04143	/src/ndpi/src/lib/ndpi_utils.c:2839

Runtime coverage analysis

Covered functions

1279

Functions that are reachable but not covered

113

Reachable functions

1351

Percentage of reachable functions covered

91.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/fuzz_common_code.c	5
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	100
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	60
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ndpi_reader

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	406	8.48%
gold	[1:9]	1645	34.3%
yellow	[10:29]	207	4.32%
greenyellow	[30:49]	106	2.21%
lawngreen	50+	2422	50.6%
All colors	4786	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
174	174	1 : View List ['h5_state_bogus_comment2']	174	174	h5_state_tag_open	call site: 04509	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
171	171	1 : View List ['ndpi_payload_analyzer']	179	3352	packet_processing	call site: 04072	/src/ndpi/fuzz/../example/reader_util.c:1604
150	150	1 : View List ['ndpi_exit_detection_module']	150	150	ndpi_init_detection_module	call site: 00249	/src/ndpi/src/lib/ndpi_main.c:2976
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_uint32']	85	85	ndpi_serialize_binary_uint32	call site: 04267	/src/ndpi/src/lib/ndpi_serializer.c:1612
85	85	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	85	85	ndpi_serialize_binary_float	call site: 04395	/src/ndpi/src/lib/ndpi_serializer.c:1809
37	37	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'strlen']	37	56	ndpi_serialize_binary_uint32	call site: 04259	/src/ndpi/src/lib/ndpi_serializer.c:1582
35	54	3 : View List ['ndpi_serialize_csv_pre', 'ndpi_serializer_header_string', 'ndpi_extend_serializer_buffer']	37	56	ndpi_serialize_string_string_len	call site: 04316	/src/ndpi/src/lib/ndpi_serializer.c:2062
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00134	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:327
7	143	5 : View List ['ndpi_term_serializer', 'ndpi_serializer_get_buffer', 'ndpi_init_serializer', 'ndpi_serialize_uint32_string', 'strncpy']	7	143	ndpi_get_flow_risk_info	call site: 04136	/src/ndpi/src/lib/ndpi_utils.c:2839
6	6	1 : View List ['atoi']	8	85	ndpi_load_ip_category	call site: 01078	/src/ndpi/src/lib/ndpi_main.c:6562
5	5	1 : View List ['ndpi_serialize_single_string']	5	5	ndpi_serialize_start_of_block_binary	call site: 04340	/src/ndpi/src/lib/ndpi_serializer.c:2281
4	10	4 : View List ['ndpi_reset_bin', 'plen2slot', 'ndpi_inc_bin', 'abs']	6	1844	process_ndpi_collected_info	call site: 04237	/src/ndpi/fuzz/../example/reader_util.c:1357

Runtime coverage analysis

Covered functions

1281

Functions that are reachable but not covered

107

Reachable functions

1347

Percentage of reachable functions covered

92.06%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	2
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_analyze.c	8
/src/ndpi/src/lib/ndpi_main.c	100
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	21
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	60
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	25
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	58
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	6
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	8
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	7
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	3
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	2
/src/ndpi/src/lib/protocols/openvpn.c	4
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	12
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	4
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23