High level conclusions

Fuzzers reach 97.71% of cyclomatic complexity.

Fuzzers reach 96.84% of all functions.

Fuzzers reach 98.69% code coverage.

Fuzzer fuzz_filecfg_malicious_sha1 is blocked:

The runtime code coverage of fuzz_filecfg_malicious_sha1 covers 26.85% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_filecfg_malicious_ja3 is blocked:

The runtime code coverage of fuzz_filecfg_malicious_ja3 covers 26.87% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_is_stun_tcp is blocked:

The runtime code coverage of fuzz_is_stun_tcp covers 29.80% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_filecfg_risk_domains is blocked:

The runtime code coverage of fuzz_filecfg_risk_domains covers 27.46% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_filecfg_categories is blocked:

The runtime code coverage of fuzz_filecfg_categories covers 26.85% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_dga is blocked:

The runtime code coverage of fuzz_dga covers 29.09% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_readerutils_parseprotolist is blocked:

The runtime code coverage of fuzz_readerutils_parseprotolist covers 27.80% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_filecfg_protocols is blocked:

The runtime code coverage of fuzz_filecfg_protocols covers 27.22% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

1779 / 1837

Cyclomatic complexity statically reachable by fuzzers

15108 / 15462

Runtime code coverage of functions

1813 / 1837

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_alg_bytestream

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	7	100.%
All colors	7	100

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

1

Reachable functions

6

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bytestream.c	1
/src/ndpi/src/lib/ndpi_main.c	4

Fuzzer: fuzz_ds_domain_classify

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	14	11.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	108	88.5%
All colors	122	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
13	13	1 : View List ['ndpi_realloc']	13	13	ndpi_bitmap64_set	call site: 00023	/src/ndpi/src/lib/ndpi_bitmap64.c:147
0	7	1 : View List ['binary_fuse16_free']	13	20	ndpi_bitmap64_set	call site: 00022	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	0	None	2	92	ndpi_bitmap64_compress	call site: 00038	/src/ndpi/src/lib/ndpi_bitmap64.c:79
0	0	None	0	108	binary_fuse16_populate	call site: 00075	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:651
0	0	None	0	102	ndpi_bitmap64_isset	call site: 00103	/src/ndpi/src/lib/ndpi_bitmap64.c:173
0	0	None	0	30	binary_fuse16_populate	call site: 00064	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:584
0	0	None	0	17	ndpi_bitmap64_free	call site: 00117	/src/ndpi/src/lib/ndpi_bitmap64.c:188
0	0	None	0	14	binary_fuse16_allocate	call site: 00042	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:505
0	0	None	0	2	ndpi_bitmap64_size	call site: 00114	/src/ndpi/src/lib/ndpi_bitmap64.c:204
0	0	None	0	0	ndpi_bitmap64_compress	call site: 00038	/src/ndpi/src/lib/ndpi_bitmap64.c:82
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00018	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	binary_fuse_max	call site: 00047	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:191

Runtime coverage analysis

Covered functions

44

Functions that are reachable but not covered

11

Reachable functions

55

Percentage of reachable functions covered

80.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_domain_classify.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_domain_classify.c	8
/src/ndpi/src/lib/ndpi_bitmap64.c	7
/src/ndpi/src/lib/ndpi_hash.c	1
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	16

Fuzzer: fuzz_alg_crc32_md5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	4.87%
gold	[1:9]	1	2.43%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	4.87%
lawngreen	50+	36	87.8%
All colors	41	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	16	ndpi_MD5Update	call site: 00013	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:142
0	0	None	0	16	ndpi_MD5Update	call site: 00013	/src/ndpi/src/lib/third_party/src/ndpi_md5.c:148
0	0	None	0	0	ndpi_popcount_init	call site: 00039	/src/ndpi/src/lib/ndpi_analyze.c:2034
0	0	None	0	0	ndpi_popcount_count	call site: 00040	/src/ndpi/src/lib/ndpi_analyze.c:2047
0	0	None	0	0	ndpi_free	call site: 00038	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

29

Functions that are reachable but not covered

1

Reachable functions

30

Percentage of reachable functions covered

96.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_crc32_md5.c	1
/src/ndpi/src/lib/ndpi_analyze.c	11
/src/ndpi/src/lib/ndpi_main.c	1
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/ndpi_hash.c	7
/src/ndpi/src/lib/third_party/src/hll/MurmurHash3.c	1
/src/ndpi/src/lib/ndpi_memory.c	2

Fuzzer: fuzz_alg_jitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	100.%
All colors	17	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

0

Reachable functions

15

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_jitter.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	3

Fuzzer: fuzz_ds_patricia

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	1.58%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.79%
greenyellow	[30:49]	1	0.79%
lawngreen	50+	122	96.8%
All colors	126	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	60	ndpi_patricia_remove	call site: 00077	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:896
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00120	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:336
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00028	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00041	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:279
0	0	None	0	0	ndpi_prefix_tochar	call site: 00076	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:70
0	0	None	0	0	ndpi_Ref_Prefix	call site: 00024	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:265

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

2

Reachable functions

46

Percentage of reachable functions covered

95.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_patricia.cpp	3
/src/ndpi/fuzz/fuzz_common_code.c	2
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	18
/src/ndpi/src/lib/ndpi_memory.c	3
/src/ndpi/src/lib/ndpi_main.c	9

Fuzzer: fuzz_alg_hll

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	2.94%
gold	[1:9]	1	2.94%
yellow	[10:29]	1	2.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	31	91.1%
All colors	34	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00032	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

26

Functions that are reachable but not covered

2

Reachable functions

28

Percentage of reachable functions covered

92.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hll.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	6
/src/ndpi/src/lib/third_party/src/hll/hll.c	7
/src/ndpi/src/lib/third_party/src/hll/MurmurHash3.c	1

Fuzzer: fuzz_serialization

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	3.42%
gold	[1:9]	2	0.42%
yellow	[10:29]	3	0.64%
greenyellow	[30:49]	2	0.42%
lawngreen	50+	444	95.0%
All colors	467	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	113	2 : View List ['ndpi_serialize_uint32_int64', 'atoi']	2	113	ndpi_serialize_binary_int64	call site: 00229	/src/ndpi/src/lib/ndpi_serializer.c:1540
2	111	2 : View List ['atoi', 'ndpi_serialize_uint32_uint64']	2	111	ndpi_serialize_binary_uint64	call site: 00212	/src/ndpi/src/lib/ndpi_serializer.c:1763
2	92	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	92	ndpi_serialize_binary_binary	call site: 00171	/src/ndpi/src/lib/ndpi_serializer.c:2076
2	90	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	90	ndpi_serialize_binary_float	call site: 00246	/src/ndpi/src/lib/ndpi_serializer.c:1848
2	75	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	75	ndpi_serialize_binary_boolean	call site: 00281	/src/ndpi/src/lib/ndpi_serializer.c:2161
0	52	1 : View List ['ndpi_deserialize_value_uint32']	0	52	ndpi_deserialize_value_uint64	call site: 00400	/src/ndpi/src/lib/ndpi_serializer.c:2787
0	52	1 : View List ['ndpi_deserialize_value_int32']	0	52	ndpi_deserialize_value_int64	call site: 00423	/src/ndpi/src/lib/ndpi_serializer.c:2872
0	0	None	0	54	ndpi_serialize_raw_record	call site: 00333	/src/ndpi/src/lib/ndpi_serializer.c:626
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00016	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_serializer_set_buffer_len	call site: 00355	/src/ndpi/src/lib/ndpi_serializer.c:390
0	0	None	0	0	ndpi_serializer_get_header	call site: 00353	/src/ndpi/src/lib/ndpi_serializer.c:408
0	0	None	0	0	ndpi_serialize_uint32_uint32	call site: 00032	/src/ndpi/src/lib/ndpi_serializer.c:849

Runtime coverage analysis

Covered functions

116

Functions that are reachable but not covered

10

Reachable functions

126

Percentage of reachable functions covered

92.06%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_serialization.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_serializer.c	101
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_alg_bins

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	5	6.25%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	75	93.7%
All colors	80	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

6

Reachable functions

31

Percentage of reachable functions covered

80.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_bins.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_gcrypt_aes

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	3	11.5%
yellow	[10:29]	6	23.0%
greenyellow	[30:49]	1	3.84%
lawngreen	50+	16	61.5%
All colors	26	100

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

5

Reachable functions

21

Percentage of reachable functions covered

76.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_aes.cpp	1
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	8
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7

Fuzzer: fuzz_gcrypt_cipher

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	24	40.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	9	15.2%
greenyellow	[30:49]	4	6.77%
lawngreen	50+	22	37.2%
All colors	59	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
73	73	1 : View List ['mbedtls_gcm_update']	73	73	mbedtls_cipher_update	call site: 00035	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:245
66	66	1 : View List ['mbedtls_gcm_starts']	66	66	mbedtls_cipher_set_iv	call site: 00022	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:171
4	4	2 : View List ['mbedtls_internal_aes_decrypt', 'mbedtls_internal_aes_encrypt']	4	4	mbedtls_aes_crypt_ecb	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:506
0	0	None	66	66	mbedtls_cipher_set_iv	call site: 00022	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:158
0	0	None	0	2	mbedtls_aes_setkey_dec	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:302
0	0	None	0	2	mbedtls_aes_setkey_dec	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:308
0	0	None	0	0	mbedtls_cipher_get_block_size	call site: 00035	/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h:576
0	0	None	0	0	mbedtls_aes_setkey_enc	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:208
0	0	None	0	0	aes_gen_tables	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:71
0	0	None	0	0	mbedtls_aesni_has_support	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
0	0	None	0	0	mbedtls_cipher_setkey	call site: 00019	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:136
0	0	None	0	0	mbedtls_cipher_set_iv	call site: 00022	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:151

Runtime coverage analysis

Covered functions

36

Functions that are reachable but not covered

12

Reachable functions

40

Percentage of reachable functions covered

70.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_cipher.cpp	1
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	10
/src/ndpi/fuzz/../src/lib/third_party/include/gcrypt/cipher.h	8
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	8
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	1
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1

Fuzzer: fuzz_libinjection

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	0.45%
gold	[1:9]	4	1.80%
yellow	[10:29]	2	0.90%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	215	96.8%
All colors	222	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	174	1 : View List ['h5_state_data']	0	174	h5_state_tag_open	call site: 00116	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:209
0	0	None	0	0	libinjection_sqli_tokenize	call site: 00033	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:1222
0	0	None	0	0	libinjection_sqli_not_whitelist	call site: 00012	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:2146
0	0	None	0	0	libinjection_is_sqli	call site: 00027	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:2262
0	0	None	0	0	flag2delim	call site: 00035	/src/ndpi/src/lib/third_party/src/libinjection_sqli.c:89
0	0	None	0	0	is_black_url	call site: 00210	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:404
0	0	None	0	0	is_black_url	call site: 00212	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:412
0	0	None	0	0	html_decode_char_at	call site: 00209	/src/ndpi/src/lib/third_party/src/libinjection_xss.c:63

Runtime coverage analysis

Covered functions

94

Functions that are reachable but not covered

7

Reachable functions

71

Percentage of reachable functions covered

90.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_libinjection.c	1
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	25
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27

Fuzzer: fuzz_filecfg_protocols

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2601	60.3%
gold	[1:9]	12	0.27%
yellow	[10:29]	2	0.04%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1692	39.2%
All colors	4308	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
20	20	1 : View List ['ndpi_hash_free']	20	305	ndpi_exit_detection_module	call site: 00216	/src/ndpi/src/lib/ndpi_main.c:3947
10	10	1 : View List ['cache_free']	106	751	ndpi_exit_detection_module	call site: 00169	/src/ndpi/src/lib/ndpi_main.c:3885
7	7	1 : View List ['ndpi_lru_free_cache']	47	692	ndpi_exit_detection_module	call site: 00184	/src/ndpi/src/lib/ndpi_main.c:3909
6	6	1 : View List ['atoi']	12	176	ndpi_load_ip_category	call site: 01261	/src/ndpi/src/lib/ndpi_main.c:7439
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01265	/src/ndpi/src/lib/ndpi_main.c:7451
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00293	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	13	1 : View List ['ndpi_realloc']	0	13	ndpi_bitmap64_set	call site: 01281	/src/ndpi/src/lib/ndpi_bitmap64.c:147
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01329	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	0	20	ndpi_bitmap64_set	call site: 01280	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00332	/src/ndpi/src/lib/ndpi_main.c:578
0	0	None	4628	10997	ndpi_init_detection_module	call site: 00012	/src/ndpi/src/lib/ndpi_main.c:3141
0	0	None	4539	10674	ndpi_init_detection_module	call site: 00034	/src/ndpi/src/lib/ndpi_main.c:3163

Runtime coverage analysis

Covered functions

337

Functions that are reachable but not covered

901

Reachable functions

1238

Percentage of reachable functions covered

27.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_filecfg_protocols.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	25
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_readerutils_parseprotolist

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2487	57.2%
gold	[1:9]	7	0.16%
yellow	[10:29]	3	0.06%
greenyellow	[30:49]	5	0.11%
lawngreen	50+	1840	42.3%
All colors	4342	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
20	20	1 : View List ['ndpi_hash_free']	20	305	ndpi_exit_detection_module	call site: 00218	/src/ndpi/src/lib/ndpi_main.c:3947
13	13	1 : View List ['ndpi_realloc']	13	13	ndpi_bitmap64_set	call site: 01283	/src/ndpi/src/lib/ndpi_bitmap64.c:147
10	10	1 : View List ['cache_free']	50	751	ndpi_exit_detection_module	call site: 00171	/src/ndpi/src/lib/ndpi_main.c:3885
6	6	1 : View List ['atoi']	12	176	ndpi_load_ip_category	call site: 01263	/src/ndpi/src/lib/ndpi_main.c:7439
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01267	/src/ndpi/src/lib/ndpi_main.c:7451
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00295	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01331	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	13	20	ndpi_bitmap64_set	call site: 01282	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00334	/src/ndpi/src/lib/ndpi_main.c:578
0	0	None	40	441	ndpi_exit_detection_module	call site: 00204	/src/ndpi/src/lib/ndpi_main.c:3937
0	0	None	40	325	ndpi_exit_detection_module	call site: 00217	/src/ndpi/src/lib/ndpi_main.c:3944
0	0	None	16	180	ndpi_load_ip_category	call site: 01261	/src/ndpi/src/lib/ndpi_main.c:7428

Runtime coverage analysis

Covered functions

345

Functions that are reachable but not covered

896

Reachable functions

1241

Percentage of reachable functions covered

27.8%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_readerutils_parseprotolist.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	2
/src/ndpi/src/lib/ndpi_main.c	94
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_community_id

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.92%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	1.92%
greenyellow	[30:49]	1	1.92%
lawngreen	50+	49	94.2%
All colors	52	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	4	SHA1Update	call site: 00028	/src/ndpi/src/lib/third_party/src/ndpi_sha1.c:195
0	0	None	0	0	ndpi_community_id_buf_copy	call site: 00018	/src/ndpi/src/lib/ndpi_community_id.c:70
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00038	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

5

Reachable functions

30

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_community_id.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_community_id.c	9
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/ndpi_utils.c	1

Fuzzer: fuzz_alg_hw_rsi_outliers_da

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	2.12%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	4.25%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	88	93.6%
All colors	94	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00016	/src/ndpi/src/lib/ndpi_analyze.c:1059
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00012	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

46

Functions that are reachable but not covered

4

Reachable functions

50

Percentage of reachable functions covered

92.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_hw_rsi_outliers_da.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	33

Fuzzer: fuzz_dga

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2524	56.5%
gold	[1:9]	1721	38.5%
yellow	[10:29]	33	0.73%
greenyellow	[30:49]	6	0.13%
lawngreen	50+	183	4.09%
All colors	4467	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00314	/src/ndpi/src/lib/ndpi_main.c:3428
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00271	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00014	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00212	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	7	1 : View List ['binary_fuse16_free']	7	20	ndpi_bitmap64_set	call site: 00360	/src/ndpi/src/lib/ndpi_bitmap64.c:137
7	7	1 : View List ['binary_fuse16_free']	7	7	ndpi_bitmap64_compress	call site: 01463	/src/ndpi/src/lib/ndpi_bitmap64.c:113
0	32	2 : View List ['ndpi_free', 'ndpi_patricia_destroy']	0	32	ndpi_init_detection_module	call site: 00008	/src/ndpi/src/lib/ndpi_main.c:3154
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00286	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01492	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00426	/src/ndpi/src/lib/ndpi_main.c:578
0	5	1 : View List ['ndpi_free']	0	5	ndpi_bitmap64_alloc	call site: 00355	/src/ndpi/src/lib/ndpi_bitmap64.c:52
0	5	1 : View List ['ndpi_free']	0	5	ndpi_add_host_risk_mask	call site: 00414	/src/ndpi/src/lib/ndpi_main.c:4268

Runtime coverage analysis

Covered functions

368

Functions that are reachable but not covered

897

Reachable functions

1265

Percentage of reachable functions covered

29.09%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_dga.c	2
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	110
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_filecfg_categories

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2601	60.3%
gold	[1:9]	11	0.25%
yellow	[10:29]	4	0.09%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1692	39.2%
All colors	4308	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
20	20	1 : View List ['ndpi_hash_free']	20	305	ndpi_exit_detection_module	call site: 00216	/src/ndpi/src/lib/ndpi_main.c:3947
10	10	1 : View List ['cache_free']	106	751	ndpi_exit_detection_module	call site: 00169	/src/ndpi/src/lib/ndpi_main.c:3885
7	7	1 : View List ['ndpi_lru_free_cache']	47	692	ndpi_exit_detection_module	call site: 00184	/src/ndpi/src/lib/ndpi_main.c:3909
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01265	/src/ndpi/src/lib/ndpi_main.c:7451
0	20	1 : View List ['ndpi_Ref_Prefix']	0	20	ndpi_patricia_lookup	call site: 00050	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:771
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00293	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01329	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	0	20	ndpi_bitmap64_set	call site: 01280	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00332	/src/ndpi/src/lib/ndpi_main.c:578
0	0	None	4628	10997	ndpi_init_detection_module	call site: 00012	/src/ndpi/src/lib/ndpi_main.c:3141
0	0	None	4539	10674	ndpi_init_detection_module	call site: 00034	/src/ndpi/src/lib/ndpi_main.c:3163
0	0	None	4450	10497	ndpi_init_detection_module	call site: 00064	/src/ndpi/src/lib/ndpi_main.c:3167

Runtime coverage analysis

Covered functions

330

Functions that are reachable but not covered

899

Reachable functions

1229

Percentage of reachable functions covered

26.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_filecfg_categories.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	25
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_alg_ses_des

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	6.45%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	29	93.5%
All colors	31	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	4	6	ndpi_normal_cdf_inverse	call site: 00012	/src/ndpi/src/lib/ndpi_analyze.c:1059
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00024	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

2

Reachable functions

23

Percentage of reachable functions covered

91.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_alg_ses_des.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_analyze.c	10

Fuzzer: fuzz_ds_ahocorasick

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	2.47%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	118	97.5%
All colors	121	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	2	73	ndpi_match_string	call site: 00093	/src/ndpi/src/lib/ndpi_main.c:3746
0	0	None	0	126	ac_automata_add	call site: 00032	/src/ndpi/src/lib/third_party/src/ahocorasick.c:237
0	0	None	0	36	ac_automata_search	call site: 00086	/src/ndpi/src/lib/third_party/src/ahocorasick.c:467
0	0	None	0	10	ac_automata_release	call site: 00114	/src/ndpi/src/lib/third_party/src/ahocorasick.c:588
0	0	None	0	4	dump_node_header	call site: 00000	/src/ndpi/src/lib/third_party/src/ahocorasick.c:637
0	0	None	0	2	ac_automata_walk	call site: 00079	/src/ndpi/src/lib/third_party/src/ahocorasick.c:322
0	0	None	0	2	ac_automata_walk	call site: 00080	/src/ndpi/src/lib/third_party/src/ahocorasick.c:338
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00018	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_strdup	call site: 00027	/src/ndpi/src/lib/ndpi_memory.c:108
0	0	None	0	0	ac_automata_add	call site: 00032	/src/ndpi/src/lib/third_party/src/ahocorasick.c:243
0	0	None	0	0	node_create_next	call site: 00039	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1003

Runtime coverage analysis

Covered functions

68

Functions that are reachable but not covered

7

Reachable functions

75

Percentage of reachable functions covered

90.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ahocorasick.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_main.c	10
/src/ndpi/src/lib/third_party/src/ahocorasick.c	30
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	1

Fuzzer: fuzz_gcrypt_light

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	19	12.5%
gold	[1:9]	2	1.31%
yellow	[10:29]	4	2.63%
greenyellow	[30:49]	4	2.63%
lawngreen	50+	123	80.9%
All colors	152	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4	4	2 : View List ['mbedtls_internal_aes_decrypt', 'mbedtls_internal_aes_encrypt']	4	4	mbedtls_aes_crypt_ecb	call site: 00093	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:506
3	3	1 : View List ['xorbytes3e']	3	3	gcm_mask	call site: 00074	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:440
2	30	3 : View List ['__bswap_64', 'xorbytes', 'gcm_mult']	2	96	mbedtls_gcm_starts	call site: 00100	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:309
0	73	1 : View List ['mbedtls_gcm_update']	0	73	mbedtls_cipher_update	call site: 00065	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:245
0	0	None	4	43	mbedtls_gcm_finish	call site: 00114	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:556
0	0	None	4	4	gcm_mult	call site: 00067	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:237
0	0	None	0	205	mbedtls_gcm_update	call site: 00067	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:492
0	0	None	0	114	_gcry_cipher_crypt	call site: 00091	/src/ndpi/src/lib/third_party/src/gcrypt_light.c:331
0	0	None	0	31	mbedtls_gcm_update_ad	call site: 00107	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:379
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00035	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	mbedtls_cipher_get_block_size	call site: 00065	/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h:576
0	0	None	0	0	mbedtls_aes_setkey_enc	call site: 00050	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:208

Runtime coverage analysis

Covered functions

73

Functions that are reachable but not covered

12

Reachable functions

82

Percentage of reachable functions covered

85.37%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_light.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	23
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	15
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	7
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1

Fuzzer: fuzz_quic_get_crypto_data

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2214	49.5%
gold	[1:9]	1725	38.6%
yellow	[10:29]	36	0.80%
greenyellow	[30:49]	8	0.17%
lawngreen	50+	484	10.8%
All colors	4467	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00314	/src/ndpi/src/lib/ndpi_main.c:3428
80	80	1 : View List ['ndpi_check_ipv6_exception']	80	80	ndpi_handle_risk_exceptions	call site: 01554	/src/ndpi/src/lib/ndpi_utils.c:2484
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00271	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01820	/src/ndpi/src/lib/ndpi_main.c:9584
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00014	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00212	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	7	1 : View List ['binary_fuse16_free']	7	20	ndpi_bitmap64_set	call site: 00360	/src/ndpi/src/lib/ndpi_bitmap64.c:137
7	7	1 : View List ['binary_fuse16_free']	7	7	ndpi_bitmap64_compress	call site: 01463	/src/ndpi/src/lib/ndpi_bitmap64.c:113
2	13	3 : View List ['ndpi_get_current_time', 'make_msteams_key', 'ndpi_lru_add_to_cache']	2	69	ndpi_reconcile_protocols	call site: 01593	/src/ndpi/src/lib/ndpi_main.c:7080
2	2	1 : View List ['ndpi_quick_hash']	2	2	make_msteams_key	call site: 01574	/src/ndpi/src/lib/ndpi_main.c:6909
2	2	1 : View List ['__uint16_identity']	2	2	gquic_get_u16	call site: 03733	/src/ndpi/src/lib/protocols/quic.c:285
0	32	2 : View List ['ndpi_free', 'ndpi_patricia_destroy']	0	32	ndpi_init_detection_module	call site: 00008	/src/ndpi/src/lib/ndpi_main.c:3154

Runtime coverage analysis

Covered functions

456

Functions that are reachable but not covered

810

Reachable functions

1266

Percentage of reachable functions covered

36.02%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_quic_get_crypto_data.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	110
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_filecfg_risk_domains

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2606	60.4%
gold	[1:9]	11	0.25%
yellow	[10:29]	2	0.04%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1689	39.2%
All colors	4308	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
20	20	1 : View List ['ndpi_hash_free']	20	305	ndpi_exit_detection_module	call site: 00216	/src/ndpi/src/lib/ndpi_main.c:3947
13	13	1 : View List ['ndpi_realloc']	13	13	ndpi_bitmap64_set	call site: 01281	/src/ndpi/src/lib/ndpi_bitmap64.c:147
10	10	1 : View List ['cache_free']	106	751	ndpi_exit_detection_module	call site: 00169	/src/ndpi/src/lib/ndpi_main.c:3885
7	7	1 : View List ['ndpi_lru_free_cache']	47	692	ndpi_exit_detection_module	call site: 00184	/src/ndpi/src/lib/ndpi_main.c:3909
6	6	1 : View List ['atoi']	12	176	ndpi_load_ip_category	call site: 01261	/src/ndpi/src/lib/ndpi_main.c:7439
3	3	1 : View List ['ndpi_fill_prefix_v6']	3	75	add_to_ptree	call site: 00036	/src/ndpi/src/lib/ndpi_main.c:2645
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01265	/src/ndpi/src/lib/ndpi_main.c:7451
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01329	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	13	20	ndpi_bitmap64_set	call site: 01280	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00332	/src/ndpi/src/lib/ndpi_main.c:578
0	0	None	4628	10997	ndpi_init_detection_module	call site: 00012	/src/ndpi/src/lib/ndpi_main.c:3141
0	0	None	4539	10674	ndpi_init_detection_module	call site: 00034	/src/ndpi/src/lib/ndpi_main.c:3163

Runtime coverage analysis

Covered functions

340

Functions that are reachable but not covered

898

Reachable functions

1238

Percentage of reachable functions covered

27.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_filecfg_risk_domains.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	25
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_gcrypt_gcm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8	12.1%
gold	[1:9]	4	6.06%
yellow	[10:29]	4	6.06%
greenyellow	[30:49]	2	3.03%
lawngreen	50+	48	72.7%
All colors	66	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	2	1 : View List ['mbedtls_internal_aes_decrypt']	2	2	mbedtls_aes_crypt_ecb	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aes.c:511
0	73	1 : View List ['mbedtls_gcm_update']	0	73	mbedtls_cipher_update	call site: 00009	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:245
0	0	None	4	43	mbedtls_gcm_finish	call site: 00052	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:556
0	0	None	0	205	mbedtls_gcm_update	call site: 00011	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:492
0	0	None	0	31	mbedtls_gcm_update_ad	call site: 00045	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:379
0	0	None	0	0	mbedtls_cipher_get_block_size	call site: 00009	/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h:576
0	0	None	0	0	mbedtls_cipher_setkey	call site: 00006	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:111
0	0	None	0	0	mbedtls_cipher_setkey	call site: 00006	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:127
0	0	None	0	0	mbedtls_cipher_update	call site: 00008	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:234
0	0	None	0	0	mbedtls_cipher_update	call site: 00009	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:240
0	0	None	0	0	mbedtls_cipher_update	call site: 00009	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:247
0	0	None	0	0	mbedtls_cipher_update	call site: 00009	/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c:252

Runtime coverage analysis

Covered functions

36

Functions that are reachable but not covered

8

Reachable functions

31

Percentage of reachable functions covered

74.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_gcrypt_gcm.cpp	1
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	16
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	3
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	2

Fuzzer: fuzz_ds_hash

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	4.54%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	21	95.4%
All colors	22	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	5	1 : View List ['ndpi_free']	0	5	ndpi_hash_add_entry	call site: 00014	/src/ndpi/src/lib/ndpi_utils.c:2316
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

1

Reachable functions

17

Percentage of reachable functions covered

94.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_hash.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_utils.c	4

Fuzzer: fuzz_ndpi_reader_alloc_fail

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	425	8.15%
gold	[1:9]	1983	38.0%
yellow	[10:29]	304	5.83%
greenyellow	[30:49]	142	2.72%
lawngreen	50+	2357	45.2%
All colors	5211	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
251	251	1 : View List ['ndpi_int_kcp_add_connection']	251	251	ndpi_search_kcp	call site: 04310	/src/ndpi/src/lib/protocols/kcp.c:86
171	171	1 : View List ['ndpi_payload_analyzer']	179	3686	packet_processing	call site: 04504	/src/ndpi/fuzz/../example/reader_util.c:1623
165	176	3 : View List ['ndpi_exit_detection_module', 'ndpi_free', 'ndpi_calloc']	165	176	ndpi_workflow_init	call site: 04350	/src/ndpi/fuzz/../example/reader_util.c:503
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00326	/src/ndpi/src/lib/ndpi_main.c:3428
90	90	2 : View List ['ndpi_serialize_uint32_uint32', 'atoi']	90	90	ndpi_serialize_binary_uint32	call site: 04701	/src/ndpi/src/lib/ndpi_serializer.c:1651
90	90	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	90	90	ndpi_serialize_binary_float	call site: 04821	/src/ndpi/src/lib/ndpi_serializer.c:1848
54	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_serialize_csv_pre', 'ndpi_extend_serializer_buffer']	56	56	ndpi_serialize_string_string_len	call site: 04728	/src/ndpi/src/lib/ndpi_serializer.c:2101
37	37	3 : View List ['strlen', 'ndpi_serialize_csv_pre', 'ndpi_serializer_header_string']	56	56	ndpi_serialize_binary_uint32	call site: 04693	/src/ndpi/src/lib/ndpi_serializer.c:1621
19	19	1 : View List ['ndpi_extend_serializer_buffer']	76	97	ndpi_serialize_uint32_binary	call site: 04568	/src/ndpi/src/lib/ndpi_serializer.c:1291
19	19	1 : View List ['ndpi_extend_serializer_buffer']	64	88	ndpi_serialize_binary_raw	call site: 04737	/src/ndpi/src/lib/ndpi_serializer.c:2019
19	19	1 : View List ['ndpi_extend_serializer_buffer']	61	82	ndpi_serialize_binary_float	call site: 04823	/src/ndpi/src/lib/ndpi_serializer.c:1862
19	19	1 : View List ['ndpi_extend_serializer_buffer']	44	65	ndpi_serialize_binary_uint32	call site: 04703	/src/ndpi/src/lib/ndpi_serializer.c:1663

Runtime coverage analysis

Covered functions

1446

Functions that are reachable but not covered

119

Reachable functions

1523

Percentage of reachable functions covered

92.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	12
/src/ndpi/src/lib/ndpi_main.c	101
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	63
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	60
/src/ndpi/src/lib/ndpi_serializer.c	39
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ds_cmsketch

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	1	4.76%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	20	95.2%
All colors	21	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

0

Reachable functions

17

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_cmsketch.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/ndpi_utils.c	1

Fuzzer: fuzz_ds_ptree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	1.25%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	1.25%
lawngreen	50+	78	97.5%
All colors	80	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	108	ndpi_patricia_lookup	call site: 00049	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:656
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00018	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:321
0	0	None	0	20	ndpi_Clear_Patricia	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:336
0	0	None	0	0	ndpi_fill_prefix_v4	call site: 00042	/src/ndpi/src/lib/ndpi_main.c:2386
0	0	None	0	0	ndpi_fill_prefix_v6	call site: 00041	/src/ndpi/src/lib/ndpi_main.c:2399
0	0	None	0	0	ndpi_get_ip_string	call site: 00035	/src/ndpi/src/lib/ndpi_main.c:8799
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00023	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_patricia_search_best2	call site: 00044	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:548
0	0	None	0	0	ndpi_patricia_lookup	call site: 00060	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:771
0	0	None	0	0	ndpi_Deref_Prefix	call site: 00019	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:279
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:70
0	0	None	0	0	ndpi_prefix_tochar	call site: 00047	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:76

Runtime coverage analysis

Covered functions

35

Functions that are reachable but not covered

7

Reachable functions

42

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_ptree.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/ndpi_main.c	9
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/ndpi_utils.c	2

Fuzzer: fuzz_binaryfusefilter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	2.36%
gold	[1:9]	0	0.0%
yellow	[10:29]	12	9.44%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	112	88.1%
All colors	127	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	14	binary_fuse16_allocate(unsignedint,binary_fuse16_s*)	call site: 00000	/src/ndpi/fuzz/./../src/lib/third_party/include/binaryfusefilter.h:505
0	0	None	0	11	binary_fuse8_allocate(unsignedint,binary_fuse8_s*)	call site: 00000	/src/ndpi/fuzz/./../src/lib/third_party/include/binaryfusefilter.h:215
0	0	None	0	0	binary_fuse_max(double,double)	call site: 00000	/src/ndpi/fuzz/./../src/lib/third_party/include/binaryfusefilter.h:191
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00029	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

34

Functions that are reachable but not covered

1

Reachable functions

57

Percentage of reachable functions covered

98.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_binaryfusefilter.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/fuzz/./../src/lib/third_party/include/binaryfusefilter.h	22

Fuzzer: fuzz_is_stun_tcp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2503	56.0%
gold	[1:9]	1724	38.6%
yellow	[10:29]	33	0.73%
greenyellow	[30:49]	6	0.13%
lawngreen	50+	197	4.41%
All colors	4463	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1840	2089	4 : View List ['switch_to_tls', 'reset_detected_protocol', 'ndpi_set_detected_protocol', 'change_category']	1840	2093	stun_search_again	call site: 02384	/src/ndpi/src/lib/protocols/stun.c:424
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00314	/src/ndpi/src/lib/ndpi_main.c:3428
138	138	1 : View List ['ndpi_handle_risk_exceptions']	306	413	ndpi_reconcile_protocols	call site: 01543	/src/ndpi/src/lib/ndpi_main.c:7007
26	26	2 : View List ['ntohs', 'ndpi_reconcile_msteams_call_udp_port']	26	26	ndpi_reconcile_msteams_call_udp	call site: 01598	/src/ndpi/src/lib/ndpi_main.c:6986
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00271	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
18	31	4 : View List ['ndpi_lru_find_cache', 'ndpi_get_current_time', 'make_msteams_key', 'ndpi_lru_add_to_cache']	42	87	ndpi_reconcile_protocols	call site: 01592	/src/ndpi/src/lib/ndpi_main.c:7077
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00014	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00212	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	7	1 : View List ['binary_fuse16_free']	7	20	ndpi_bitmap64_set	call site: 00360	/src/ndpi/src/lib/ndpi_bitmap64.c:137
7	7	1 : View List ['binary_fuse16_free']	7	7	ndpi_bitmap64_compress	call site: 01463	/src/ndpi/src/lib/ndpi_bitmap64.c:113
2	2	1 : View List ['ndpi_quick_hash']	4	4	get_stun_lru_key	call site: 02397	/src/ndpi/src/lib/protocols/stun.c:519
2	2	1 : View List ['ndpi_quick_hash']	4	4	get_stun_lru_key	call site: 02400	/src/ndpi/src/lib/protocols/stun.c:524

Runtime coverage analysis

Covered functions

377

Functions that are reachable but not covered

888

Reachable functions

1265

Percentage of reachable functions covered

29.8%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_is_stun.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	110
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: /src/ndpi/conftest.cpp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	100.%
All colors	1	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ntohs', 'memcmp']	20	1029	ndpi_search_worldofwarcraft	call site: 00000	/src/ndpi/src/lib/protocols/world_of_warcraft.c:138
8	8	5 : View List ['fopen', 'free', 'strstr', 'getline', 'fclose']	8	8	mbedtls_aesni_has_support	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c:68
2	449	2 : View List ['ntohs', 'ndpi_int_netbios_add_connection']	2	454	ndpi_search_netbios	call site: 00000	/src/ndpi/src/lib/protocols/netbios.c:398
2	150	5 : View List ['ndpi_term_serializer', 'ndpi_serialize_uint32_string', 'strncpy', 'ndpi_init_serializer', 'ndpi_serializer_get_buffer']	2	150	ndpi_get_flow_risk_info	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2884
2	113	2 : View List ['ndpi_serialize_uint32_int64', 'atoi']	2	113	ndpi_serialize_binary_int64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1540
2	111	2 : View List ['atoi', 'ndpi_serialize_uint32_uint64']	2	111	ndpi_serialize_binary_uint64	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1763
2	92	2 : View List ['atoi', 'ndpi_serialize_uint32_binary']	2	92	ndpi_serialize_binary_binary	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2076
2	90	2 : View List ['ndpi_serialize_uint32_uint32', 'atoi']	2	90	ndpi_serialize_binary_uint32	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1651
2	90	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	2	90	ndpi_serialize_binary_float	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1848
2	75	2 : View List ['atoi', 'ndpi_serialize_uint32_boolean']	2	75	ndpi_serialize_binary_boolean	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:2161
2	37	3 : View List ['strlen', 'ndpi_serialize_csv_pre', 'ndpi_serializer_header_string']	2	56	ndpi_serialize_binary_uint32	call site: 00000	/src/ndpi/src/lib/ndpi_serializer.c:1621
2	30	3 : View List ['__bswap_64', 'xorbytes', 'gcm_mult']	2	96	mbedtls_gcm_starts	call site: 00000	/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c:309

Runtime coverage analysis

Covered functions

1818

Functions that are reachable but not covered

0

Reachable functions

1

Percentage of reachable functions covered

100.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/conftest.cpp	1

Fuzzer: fuzz_ndpi_reader_payload_analyzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	494	9.47%
gold	[1:9]	2010	38.5%
yellow	[10:29]	311	5.96%
greenyellow	[30:49]	108	2.07%
lawngreen	50+	2293	43.9%
All colors	5216	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
251	251	1 : View List ['ndpi_int_warcraft3_add_connection']	251	251	ndpi_search_warcraft3	call site: 03049	/src/ndpi/src/lib/protocols/warcraft3.c:83
251	251	1 : View List ['ndpi_int_xbox_add_connection']	251	251	ndpi_search_xbox	call site: 02870	/src/ndpi/src/lib/protocols/xbox.c:75
174	174	1 : View List ['h5_state_bogus_comment2']	174	174	h5_state_tag_open	call site: 04927	/src/ndpi/src/lib/third_party/src/libinjection_html5.c:197
165	176	3 : View List ['ndpi_exit_detection_module', 'ndpi_free', 'ndpi_calloc']	165	176	ndpi_workflow_init	call site: 04350	/src/ndpi/fuzz/../example/reader_util.c:503
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00326	/src/ndpi/src/lib/ndpi_main.c:3428
90	90	2 : View List ['ndpi_serialize_uint32_uint32', 'atoi']	90	90	ndpi_serialize_binary_uint32	call site: 04701	/src/ndpi/src/lib/ndpi_serializer.c:1651
90	90	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	90	90	ndpi_serialize_binary_float	call site: 04821	/src/ndpi/src/lib/ndpi_serializer.c:1848
54	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_serialize_csv_pre', 'ndpi_extend_serializer_buffer']	56	56	ndpi_serialize_string_string_len	call site: 04728	/src/ndpi/src/lib/ndpi_serializer.c:2101
37	37	3 : View List ['strlen', 'ndpi_serialize_csv_pre', 'ndpi_serializer_header_string']	56	56	ndpi_serialize_binary_uint32	call site: 04693	/src/ndpi/src/lib/ndpi_serializer.c:1621
19	19	1 : View List ['ndpi_extend_serializer_buffer']	76	97	ndpi_serialize_uint32_binary	call site: 04568	/src/ndpi/src/lib/ndpi_serializer.c:1291
19	19	1 : View List ['ndpi_extend_serializer_buffer']	64	88	ndpi_serialize_binary_raw	call site: 04737	/src/ndpi/src/lib/ndpi_serializer.c:2019
19	19	1 : View List ['ndpi_extend_serializer_buffer']	61	82	ndpi_serialize_binary_float	call site: 04823	/src/ndpi/src/lib/ndpi_serializer.c:1862

Runtime coverage analysis

Covered functions

1444

Functions that are reachable but not covered

123

Reachable functions

1525

Percentage of reachable functions covered

91.93%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_analyze.c	12
/src/ndpi/src/lib/ndpi_main.c	101
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	63
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	60
/src/ndpi/src/lib/ndpi_serializer.c	39
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/src/lib/ndpi_classify.c	10
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ds_libcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	1	2.04%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	48	97.9%
All colors	49	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	15	cache_add	call site: 00027	/src/ndpi/src/lib/third_party/src/libcache.c:204
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00013	/src/ndpi/src/lib/ndpi_memory.c:80

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

22

Percentage of reachable functions covered

95.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_libcache.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/libcache.c	9

Fuzzer: fuzz_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1012	22.8%
gold	[1:9]	355	8.02%
yellow	[10:29]	203	4.59%
greenyellow	[30:49]	64	1.44%
lawngreen	50+	2787	63.0%
All colors	4421	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2093	2767	7 : View List ['ndpi_is_valid_hostname', 'ndpi_match_host_subprotocol', 'fcgi_parse_params', 'ndpi_int_fastcgi_add_connection', 'strlen', 'ndpi_set_risk', 'ndpi_check_dga_name']	2093	2767	ndpi_search_fastcgi	call site: 04064	/src/ndpi/src/lib/protocols/fastcgi.c:190
1024	1024	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	1024	1024	ndpi_check_zmq	call site: 03360	/src/ndpi/src/lib/protocols/zeromq.c:47
759	759	2 : View List ['ndpi_int_usenet_add_connection', 'memcmp']	759	764	ndpi_search_usenet_tcp	call site: 02588	/src/ndpi/src/lib/protocols/usenet.c:73
753	753	1 : View List ['ndpi_int_someip_add_connection']	753	753	ndpi_search_someip	call site: 03668	/src/ndpi/src/lib/protocols/someip.c:131
652	652	2 : View List ['ndpi_int_mail_pop_add_connection', 'popInitExtraPacketProcessing']	652	652	ndpi_search_mail_pop_tcp	call site: 02523	/src/ndpi/src/lib/protocols/mail_pop.c:203
504	504	2 : View List ['ndpi_int_alicloud_add_connection', 'ntohl']	504	509	ndpi_search_alicloud	call site: 04018	/src/ndpi/src/lib/protocols/alicloud.c:51
502	526	2 : View List ['ndpi_int_dropbox_add_connection', 'ndpi_strnstr']	502	531	ndpi_check_dropbox	call site: 03124	/src/ndpi/src/lib/protocols/dropbox.c:47
502	502	1 : View List ['ndpi_int_h323_add_connection']	502	512	ndpi_search_h323	call site: 03169	/src/ndpi/src/lib/protocols/h323.c:65
329	329	1 : View List ['ndpi_int_softether_add_connection']	329	329	ndpi_search_softether	call site: 04043	/src/ndpi/src/lib/protocols/softether.c:320
296	296	3 : View List ['ndpi_int_check_isakmp_v1', 'ndpi_int_ipsec_add_connection', 'ndpi_int_check_isakmp_v2']	296	296	ndpi_search_ipsec	call site: 03983	/src/ndpi/src/lib/protocols/ipsec.c:170
281	281	1 : View List ['ndpi_int_telnet_add_connection']	281	281	ndpi_search_telnet_tcp	call site: 02878	/src/ndpi/src/lib/protocols/telnet.c:193
277	526	4 : View List ['ndpi_ftp_control_check_response', 'ndpi_int_ftp_control_add_connection', 'ndpi_set_detected_protocol', 'switch_extra_dissection_to_tls']	277	526	ndpi_check_ftp_control	call site: 03242	/src/ndpi/src/lib/protocols/ftp_control.c:604

Runtime coverage analysis

Covered functions

1164

Functions that are reachable but not covered

263

Reachable functions

1415

Percentage of reachable functions covered

81.41%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_config.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	101
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	43
/src/ndpi/src/lib/third_party/src/ahocorasick.c	26
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	4
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	31
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	22
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/src/lib/protocols/tcp_udp.c	2
/src/ndpi/src/lib/ndpi_classify.c	1

Fuzzer: fuzz_filecfg_malicious_ja3

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2611	60.6%
gold	[1:9]	10	0.23%
yellow	[10:29]	4	0.09%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1683	39.0%
All colors	4308	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
13	13	1 : View List ['ndpi_realloc']	13	13	ndpi_bitmap64_set	call site: 01281	/src/ndpi/src/lib/ndpi_bitmap64.c:147
10	10	1 : View List ['cache_free']	66	751	ndpi_exit_detection_module	call site: 00169	/src/ndpi/src/lib/ndpi_main.c:3885
7	7	1 : View List ['ndpi_lru_free_cache']	7	692	ndpi_exit_detection_module	call site: 00184	/src/ndpi/src/lib/ndpi_main.c:3909
6	6	1 : View List ['atoi']	12	176	ndpi_load_ip_category	call site: 01261	/src/ndpi/src/lib/ndpi_main.c:7439
3	3	1 : View List ['ndpi_fill_prefix_v6']	3	75	add_to_ptree	call site: 00036	/src/ndpi/src/lib/ndpi_main.c:2645
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01265	/src/ndpi/src/lib/ndpi_main.c:7451
0	20	1 : View List ['ndpi_hash_free']	0	305	ndpi_exit_detection_module	call site: 00216	/src/ndpi/src/lib/ndpi_main.c:3947
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00293	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01329	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	13	20	ndpi_bitmap64_set	call site: 01280	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00332	/src/ndpi/src/lib/ndpi_main.c:578
0	5	1 : View List ['ndpi_free']	0	5	ndpi_hash_add_entry	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2316

Runtime coverage analysis

Covered functions

330

Functions that are reachable but not covered

898

Reachable functions

1228

Percentage of reachable functions covered

26.87%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_filecfg_malicious_ja3.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	25
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_readerutils_workflow

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1442	27.7%
gold	[1:9]	372	7.15%
yellow	[10:29]	183	3.51%
greenyellow	[30:49]	82	1.57%
lawngreen	50+	3122	60.0%
All colors	5201	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2804	2819	9 : View List ['is_version_with_tls', 'get_crypto_data', 'ndpi_exclude_protocol', 'get_clear_payload', 'eval_extra_processing', 'process_tls', 'is_version_with_encrypted_header', 'ndpi_free', 'process_chlo']	2804	2819	ndpi_search_quic	call site: 03419	/src/ndpi/src/lib/protocols/quic.c:1936
2093	2767	7 : View List ['ndpi_is_valid_hostname', 'ndpi_match_host_subprotocol', 'fcgi_parse_params', 'ndpi_int_fastcgi_add_connection', 'strlen', 'ndpi_set_risk', 'ndpi_check_dga_name']	2093	2767	ndpi_search_fastcgi	call site: 04077	/src/ndpi/src/lib/protocols/fastcgi.c:190
1836	1856	4 : View List ['switch_to_tls', 'reset_detected_protocol', 'is_dtls', 'change_category']	1836	2109	stun_search_again	call site: 02241	/src/ndpi/src/lib/protocols/stun.c:402
993	993	2 : View List ['smtpInitExtraPacketProcessing', 'ndpi_int_mail_smtp_add_connection']	993	993	ndpi_search_mail_smtp_tcp	call site: 02572	/src/ndpi/src/lib/protocols/mail_smtp.c:368
652	652	2 : View List ['ndpi_int_mail_pop_add_connection', 'popInitExtraPacketProcessing']	652	652	ndpi_search_mail_pop_tcp	call site: 02539	/src/ndpi/src/lib/protocols/mail_pop.c:203
506	506	3 : View List ['ndpi_int_activision_add_connection', 'ntohs', 'ntohl']	506	506	ndpi_search_activision	call site: 04060	/src/ndpi/src/lib/protocols/activision.c:69
502	526	2 : View List ['ndpi_int_dropbox_add_connection', 'ndpi_strnstr']	502	531	ndpi_check_dropbox	call site: 03138	/src/ndpi/src/lib/protocols/dropbox.c:47
502	502	1 : View List ['ndpi_int_h323_add_connection']	502	512	ndpi_search_h323	call site: 03182	/src/ndpi/src/lib/protocols/h323.c:65
502	502	1 : View List ['ndpi_int_tftp_add_connection']	502	502	ndpi_search_tftp	call site: 03074	/src/ndpi/src/lib/protocols/tftp.c:255
346	356	5 : View List ['strcmp', 'krb_strncpy_lower', 'krb_parse', 'ndpi_int_kerberos_add_connection', 'ndpi_free']	346	361	ndpi_search_kerberos	call site: 02971	/src/ndpi/src/lib/protocols/kerberos.c:398
329	329	1 : View List ['ndpi_int_softether_add_connection']	329	329	ndpi_search_softether	call site: 04056	/src/ndpi/src/lib/protocols/softether.c:320
322	322	4 : View List ['ntohs', 'natpmp_disable_extra_dissection', 'ndpi_int_natpmp_add_connection', 'ndpi_search_natpmp_extra']	322	322	ndpi_search_natpmp	call site: 04095	/src/ndpi/src/lib/protocols/natpmp.c:174

Runtime coverage analysis

Covered functions

1134

Functions that are reachable but not covered

377

Reachable functions

1487

Percentage of reachable functions covered

74.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_readerutils_workflow.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/fuzz/../example/reader_util.c	30
/src/ndpi/src/lib/ndpi_main.c	100
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	63
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	60
/src/ndpi/src/lib/ndpi_serializer.c	39
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	12
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_ndpi_reader

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	468	8.99%
gold	[1:9]	2005	38.5%
yellow	[10:29]	309	5.94%
greenyellow	[30:49]	127	2.44%
lawngreen	50+	2293	44.0%
All colors	5202	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
251	251	1 : View List ['ndpi_int_zmq_add_connection']	251	251	ndpi_check_zmq	call site: 03364	/src/ndpi/src/lib/protocols/zeromq.c:54
171	171	1 : View List ['ndpi_payload_analyzer']	179	3686	packet_processing	call site: 04495	/src/ndpi/fuzz/../example/reader_util.c:1623
165	176	3 : View List ['ndpi_exit_detection_module', 'ndpi_free', 'ndpi_calloc']	165	176	ndpi_workflow_init	call site: 04344	/src/ndpi/fuzz/../example/reader_util.c:503
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00320	/src/ndpi/src/lib/ndpi_main.c:3428
90	90	2 : View List ['ndpi_serialize_uint32_uint32', 'atoi']	90	90	ndpi_serialize_binary_uint32	call site: 04692	/src/ndpi/src/lib/ndpi_serializer.c:1651
90	90	2 : View List ['atoi', 'ndpi_serialize_uint32_float']	90	90	ndpi_serialize_binary_float	call site: 04812	/src/ndpi/src/lib/ndpi_serializer.c:1848
37	37	3 : View List ['strlen', 'ndpi_serialize_csv_pre', 'ndpi_serializer_header_string']	37	56	ndpi_serialize_binary_uint32	call site: 04684	/src/ndpi/src/lib/ndpi_serializer.c:1621
35	54	3 : View List ['ndpi_serializer_header_string', 'ndpi_serialize_csv_pre', 'ndpi_extend_serializer_buffer']	37	56	ndpi_serialize_string_string_len	call site: 04719	/src/ndpi/src/lib/ndpi_serializer.c:2101
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00277	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00020	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00218	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	150	5 : View List ['ndpi_term_serializer', 'ndpi_serialize_uint32_string', 'strncpy', 'ndpi_init_serializer', 'ndpi_serializer_get_buffer']	7	150	ndpi_get_flow_risk_info	call site: 04555	/src/ndpi/src/lib/ndpi_utils.c:2884

Runtime coverage analysis

Covered functions

1444

Functions that are reachable but not covered

116

Reachable functions

1518

Percentage of reachable functions covered

92.36%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ndpi_reader.c	1
/src/ndpi/fuzz/../example/reader_util.c	34
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_analyze.c	12
/src/ndpi/src/lib/ndpi_main.c	101
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	63
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	60
/src/ndpi/src/lib/ndpi_serializer.c	39
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_classify.c	9
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23

Fuzzer: fuzz_filecfg_malicious_sha1

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2611	60.6%
gold	[1:9]	10	0.23%
yellow	[10:29]	4	0.09%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1683	39.0%
All colors	4308	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
13	13	1 : View List ['ndpi_realloc']	13	13	ndpi_bitmap64_set	call site: 01281	/src/ndpi/src/lib/ndpi_bitmap64.c:147
10	10	1 : View List ['cache_free']	66	751	ndpi_exit_detection_module	call site: 00169	/src/ndpi/src/lib/ndpi_main.c:3885
7	7	1 : View List ['ndpi_lru_free_cache']	7	692	ndpi_exit_detection_module	call site: 00184	/src/ndpi/src/lib/ndpi_main.c:3909
6	6	1 : View List ['atoi']	12	176	ndpi_load_ip_category	call site: 01261	/src/ndpi/src/lib/ndpi_main.c:7439
3	3	1 : View List ['ndpi_fill_prefix_v6']	3	75	add_to_ptree	call site: 00036	/src/ndpi/src/lib/ndpi_main.c:2645
0	82	1 : View List ['add_to_ptree']	0	82	ndpi_load_ip_category	call site: 01265	/src/ndpi/src/lib/ndpi_main.c:7451
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00293	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061
0	10	3 : View List ['binary_fuse_mod3', 'binary_fuse_rng_splitmix64', 'binary_fuse_murmur64']	0	108	binary_fuse16_populate	call site: 01329	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:698
0	7	1 : View List ['binary_fuse16_free']	13	20	ndpi_bitmap64_set	call site: 01280	/src/ndpi/src/lib/ndpi_bitmap64.c:137
0	5	1 : View List ['ndpi_free']	0	54	ndpi_set_proto_defaults	call site: 00332	/src/ndpi/src/lib/ndpi_main.c:578
0	5	1 : View List ['ndpi_free']	0	5	ndpi_hash_add_entry	call site: 00000	/src/ndpi/src/lib/ndpi_utils.c:2316
0	0	None	4628	10997	ndpi_init_detection_module	call site: 00012	/src/ndpi/src/lib/ndpi_main.c:3141

Runtime coverage analysis

Covered functions

330

Functions that are reachable but not covered

899

Reachable functions

1229

Percentage of reachable functions covered

26.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_filecfg_malicious_sha1.c	1
/src/ndpi/fuzz/fuzz_common_code.c	7
/src/ndpi/src/lib/ndpi_memory.c	7
/src/ndpi/src/lib/ndpi_main.c	89
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	37
/src/ndpi/src/lib/third_party/src/ahocorasick.c	25
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_ds_bitmap64

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4	4.30%
gold	[1:9]	6	6.45%
yellow	[10:29]	1	1.07%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	82	88.1%
All colors	93	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	108	binary_fuse16_populate	call site: 00051	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:651
0	0	None	0	14	binary_fuse16_allocate	call site: 00018	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:505
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00013	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	binary_fuse_max	call site: 00023	/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h:191

Runtime coverage analysis

Covered functions

36

Functions that are reachable but not covered

2

Reachable functions

38

Percentage of reachable functions covered

94.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_bitmap64.cpp	1
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	7
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	16

Fuzzer: fuzz_is_stun_udp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2493	55.8%
gold	[1:9]	1735	38.8%
yellow	[10:29]	33	0.73%
greenyellow	[30:49]	6	0.13%
lawngreen	50+	196	4.39%
All colors	4463	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
3488	3509	4 : View List ['is_dtls', 'ndpi_free', 'ndpi_search_tls_memory', 'processTLSBlock']	3488	3788	ndpi_search_tls_udp	call site: 02006	/src/ndpi/src/lib/protocols/tls.c:1248
1792	1792	1 : View List ['ndpi_search_tls_tcp']	1792	1792	ndpi_search_tls_wrapper	call site: 02004	/src/ndpi/src/lib/protocols/tls.c:2880
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00314	/src/ndpi/src/lib/ndpi_main.c:3428
138	138	1 : View List ['ndpi_handle_risk_exceptions']	306	413	ndpi_reconcile_protocols	call site: 01543	/src/ndpi/src/lib/ndpi_main.c:7007
26	26	2 : View List ['ntohs', 'ndpi_reconcile_msteams_call_udp_port']	26	26	ndpi_reconcile_msteams_call_udp	call site: 01598	/src/ndpi/src/lib/ndpi_main.c:6986
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00271	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
18	31	4 : View List ['ndpi_lru_find_cache', 'ndpi_get_current_time', 'make_msteams_key', 'ndpi_lru_add_to_cache']	42	87	ndpi_reconcile_protocols	call site: 01592	/src/ndpi/src/lib/ndpi_main.c:7077
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00014	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00212	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	7	1 : View List ['binary_fuse16_free']	7	20	ndpi_bitmap64_set	call site: 00360	/src/ndpi/src/lib/ndpi_bitmap64.c:137
7	7	1 : View List ['binary_fuse16_free']	7	7	ndpi_bitmap64_compress	call site: 01463	/src/ndpi/src/lib/ndpi_bitmap64.c:113
2	2	1 : View List ['ndpi_quick_hash']	4	4	get_stun_lru_key	call site: 02397	/src/ndpi/src/lib/protocols/stun.c:519

Runtime coverage analysis

Covered functions

383

Functions that are reachable but not covered

882

Reachable functions

1265

Percentage of reachable functions covered

30.28%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_is_stun.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	110
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_tls_certificate

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2432	54.4%
gold	[1:9]	1724	38.6%
yellow	[10:29]	31	0.69%
greenyellow	[30:49]	7	0.15%
lawngreen	50+	270	6.04%
All colors	4464	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
165	165	1 : View List ['ndpi_exit_detection_module']	165	165	ndpi_init_detection_module	call site: 00314	/src/ndpi/src/lib/ndpi_main.c:3428
80	80	1 : View List ['ndpi_check_ipv6_exception']	80	80	ndpi_handle_risk_exceptions	call site: 01554	/src/ndpi/src/lib/ndpi_utils.c:2484
25	31	4 : View List ['ndpi_lru_find_cache', 'ndpi_get_current_time', 'make_msteams_key', 'ndpi_lru_add_to_cache']	25	87	ndpi_reconcile_protocols	call site: 01592	/src/ndpi/src/lib/ndpi_main.c:7077
19	19	1 : View List ['node_release']	19	19	node_create_next	call site: 00271	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1009
16	25	4 : View List ['ndpi_int_change_protocol', 'ndpi_lru_find_cache', 'ndpi_get_current_time', 'make_msteams_key']	16	63	ndpi_reconcile_protocols	call site: 01588	/src/ndpi/src/lib/ndpi_main.c:7058
14	14	1 : View List ['ookla_add_to_cache']	14	14	ndpi_match_hostname_protocol	call site: 01820	/src/ndpi/src/lib/ndpi_main.c:9584
13	20	2 : View List ['ndpi_Deref_Prefix', 'ndpi_DeleteEntry']	13	20	ndpi_Clear_Patricia	call site: 00014	/src/ndpi/src/lib/third_party/src/ndpi_patricia.c:324
12	12	1 : View List ['ndpi_bitmap64_free']	12	17	ndpi_domain_classify_free	call site: 00212	/src/ndpi/src/lib/ndpi_domain_classify.c:57
7	7	1 : View List ['binary_fuse16_free']	7	20	ndpi_bitmap64_set	call site: 00360	/src/ndpi/src/lib/ndpi_bitmap64.c:137
7	7	1 : View List ['binary_fuse16_free']	7	7	ndpi_bitmap64_compress	call site: 01463	/src/ndpi/src/lib/ndpi_bitmap64.c:113
0	32	2 : View List ['ndpi_free', 'ndpi_patricia_destroy']	0	32	ndpi_init_detection_module	call site: 00008	/src/ndpi/src/lib/ndpi_main.c:3154
0	18	1 : View List ['node_resize_mp']	0	18	node_register_matchstr	call site: 00286	/src/ndpi/src/lib/third_party/src/ahocorasick.c:1061

Runtime coverage analysis

Covered functions

405

Functions that are reachable but not covered

862

Reachable functions

1267

Percentage of reachable functions covered

31.97%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_tls_certificate.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	110
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	40
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	59
/src/ndpi/src/lib/ndpi_serializer.c	2
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	11
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	4
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3

Fuzzer: fuzz_ds_tree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	43	100.%
All colors	43	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	1 : View List ['free']	0	0	ndpi_free	call site: 00015	/src/ndpi/src/lib/ndpi_memory.c:80
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:122
0	0	None	0	0	ndpi_tsearch	call site: 00012	/src/ndpi/src/lib/ndpi_utils.c:127
0	0	None	0	0	ndpi_tfind	call site: 00010	/src/ndpi/src/lib/ndpi_utils.c:225

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

1

Reachable functions

25

Percentage of reachable functions covered

96.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_ds_tree.cpp	4
/src/ndpi/fuzz/fuzz_common_code.c	6
/src/ndpi/src/lib/ndpi_memory.c	4
/src/ndpi/src/lib/ndpi_utils.c	7

Fuzzer: fuzz_process_packet

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	671	12.9%
gold	[1:9]	2244	43.2%
yellow	[10:29]	256	4.92%
greenyellow	[30:49]	115	2.21%
lawngreen	50+	1907	36.7%
All colors	5193	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1836	2089	4 : View List ['switch_to_tls', 'reset_detected_protocol', 'ndpi_set_detected_protocol', 'change_category']	1836	2093	stun_search_again	call site: 02384	/src/ndpi/src/lib/protocols/stun.c:424
1024	1024	2 : View List ['memcmp', 'ndpi_int_zmq_add_connection']	1024	1024	ndpi_check_zmq	call site: 03515	/src/ndpi/src/lib/protocols/zeromq.c:47
759	759	2 : View List ['ndpi_int_usenet_add_connection', 'memcmp']	759	764	ndpi_search_usenet_tcp	call site: 02745	/src/ndpi/src/lib/protocols/usenet.c:73
652	652	2 : View List ['ndpi_int_mail_pop_add_connection', 'popInitExtraPacketProcessing']	652	652	ndpi_search_mail_pop_tcp	call site: 02680	/src/ndpi/src/lib/protocols/mail_pop.c:203
383	383	4 : View List ['ndpi_match_file_header', 'ndpi_match_ftp_data_port', 'ndpi_match_ftp_data_directory', 'ndpi_int_ftp_data_add_connection']	383	388	ndpi_check_ftp_data	call site: 03490	/src/ndpi/src/lib/protocols/ftp_data.c:236
281	281	1 : View List ['ndpi_int_telnet_add_connection']	281	281	ndpi_search_telnet_tcp	call site: 03033	/src/ndpi/src/lib/protocols/telnet.c:193
277	526	4 : View List ['ndpi_ftp_control_check_response', 'ndpi_int_ftp_control_add_connection', 'ndpi_set_detected_protocol', 'switch_extra_dissection_to_tls']	277	526	ndpi_check_ftp_control	call site: 03397	/src/ndpi/src/lib/protocols/ftp_control.c:604
271	271	1 : View List ['ndpi_process_extra_packet']	271	271	ndpi_internal_detection_process_packet	call site: 04475	/src/ndpi/src/lib/ndpi_main.c:7907
251	263	2 : View List ['ndpi_int_dropbox_add_connection', 'ndpi_strnstr']	251	268	ndpi_check_dropbox	call site: 03279	/src/ndpi/src/lib/protocols/dropbox.c:49
251	256	2 : View List ['ndpi_int_z3950_add_connection', 'ndpi_exclude_protocol']	251	256	ndpi_search_z3950	call site: 04061	/src/ndpi/src/lib/protocols/z3950.c:107
251	251	1 : View List ['ndpi_int_edonkey_add_connection']	251	392	ndpi_check_edonkey	call site: 02497	/src/ndpi/src/lib/protocols/edonkey.c:170
251	251	1 : View List ['ndpi_int_dropbox_add_connection']	251	251	ndpi_check_dropbox	call site: 03280	/src/ndpi/src/lib/protocols/dropbox.c:58

Runtime coverage analysis

Covered functions

1309

Functions that are reachable but not covered

166

Reachable functions

1433

Percentage of reachable functions covered

88.42%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/ndpi/fuzz/fuzz_process_packet.c	1
/src/ndpi/fuzz/fuzz_common_code.c	1
/src/ndpi/src/lib/ndpi_main.c	151
/src/ndpi/src/lib/ndpi_memory.c	5
/src/ndpi/src/lib/third_party/src/gcrypt_light.c	20
/src/ndpi/src/lib/third_party/src/ndpi_patricia.c	11
/src/ndpi/src/lib/third_party/src/libcache.c	8
/src/ndpi/src/lib/ndpi_utils.c	60
/src/ndpi/src/lib/third_party/src/ahocorasick.c	27
/src/ndpi/src/lib/ndpi_domain_classify.c	6
/src/ndpi/src/lib/ndpi_bitmap64.c	6
/src/ndpi/src/lib/./third_party/include/binaryfusefilter.h	15
/src/ndpi/src/lib/ndpi_geoip.c	1
/usr/include/x86_64-linux-gnu/bits/uintn-identity.h	3
/src/ndpi/src/lib/ndpi_hash.c	2
/src/ndpi/src/lib/protocols/http.c	28
/src/ndpi/src/lib/protocols/ookla.c	5
/src/ndpi/src/lib/protocols/starcraft.c	5
/src/ndpi/src/lib/protocols/tls.c	27
/src/ndpi/src/lib/third_party/src/ndpi_md5.c	6
/src/ndpi/src/lib/protocols/quic.c	60
/src/ndpi/src/lib/ndpi_serializer.c	38
/src/ndpi/src/lib/third_party/src/ndpi_sha1.c	4
/src/ndpi/src/lib/protocols/rtp.c	8
/src/ndpi/src/lib/protocols/rtsp.c	3
/src/ndpi/src/lib/protocols/rdp.c	3
/src/ndpi/src/lib/protocols/stun.c	12
/src/ndpi/src/lib/protocols/sip.c	4
/src/ndpi/src/lib/protocols/imo.c	3
/src/ndpi/src/lib/protocols/teredo.c	2
/src/ndpi/src/lib/protocols/edonkey.c	5
/src/ndpi/src/lib/protocols/gnutella.c	3
/src/ndpi/src/lib/protocols/nats.c	2
/src/ndpi/src/lib/protocols/socks45.c	5
/src/ndpi/src/lib/protocols/irc.c	8
/src/ndpi/src/lib/protocols/jabber.c	4
/src/ndpi/src/lib/protocols/mail_pop.c	6
/src/ndpi/src/lib/protocols/mail_imap.c	3
/src/ndpi/src/lib/protocols/mail_smtp.c	6
/src/ndpi/src/lib/protocols/usenet.c	3
/src/ndpi/src/lib/protocols/dns.c	13
/src/ndpi/src/lib/protocols/vmware.c	2
/src/ndpi/src/lib/protocols/non_tcp_udp.c	2
/src/ndpi/src/lib/protocols/tvuplayer.c	3
/src/ndpi/src/lib/protocols/ppstream.c	3
/src/ndpi/src/lib/protocols/iax.c	4
/src/ndpi/src/lib/protocols/mgcp.c	3
/src/ndpi/src/lib/protocols/zattoo.c	3
/src/ndpi/src/lib/protocols/qq.c	3
/src/ndpi/src/lib/protocols/ssh.c	8
/src/ndpi/src/lib/protocols/vnc.c	2
/src/ndpi/src/lib/protocols/vxlan.c	3
/src/ndpi/src/lib/protocols/teamviewer.c	3
/src/ndpi/src/lib/protocols/dhcp.c	4
/src/ndpi/src/lib/protocols/steam.c	9
/src/ndpi/src/lib/protocols/halflife2_and_mods.c	3
/src/ndpi/src/lib/protocols/xbox.c	3
/src/ndpi/src/lib/protocols/smb.c	2
/src/ndpi/src/lib/protocols/mining.c	4
/src/ndpi/src/lib/protocols/telnet.c	5
/src/ndpi/src/lib/protocols/ntp.c	3
/src/ndpi/src/lib/protocols/nfs.c	3
/src/ndpi/src/lib/protocols/ssdp.c	4
/src/ndpi/src/lib/protocols/world_of_warcraft.c	4
/src/ndpi/src/lib/protocols/postgres.c	3
/src/ndpi/src/lib/protocols/mysql.c	2
/src/ndpi/src/lib/protocols/bgp.c	2
/src/ndpi/src/lib/protocols/snmp_proto.c	4
/src/ndpi/src/lib/protocols/kontiki.c	3
/src/ndpi/src/lib/protocols/icecast.c	3
/src/ndpi/src/lib/protocols/kerberos.c	11
/src/ndpi/src/lib/protocols/syslog.c	3
/src/ndpi/src/lib/protocols/netbios.c	6
/src/ndpi/src/lib/protocols/ipp.c	3
/src/ndpi/src/lib/protocols/ldap.c	3
/src/ndpi/src/lib/protocols/warcraft3.c	3
/src/ndpi/src/lib/protocols/xdmcp.c	3
/src/ndpi/src/lib/protocols/tftp.c	6
/src/ndpi/src/lib/protocols/mssql_tds.c	3
/src/ndpi/src/lib/protocols/pptp.c	3
/src/ndpi/src/lib/protocols/dhcpv6.c	3
/src/ndpi/src/lib/protocols/afp.c	3
/src/ndpi/src/lib/protocols/checkmk.c	3
/src/ndpi/src/lib/protocols/cpha.c	2
/src/ndpi/src/lib/protocols/maplestory.c	3
/src/ndpi/src/lib/protocols/dofus.c	3
/src/ndpi/src/lib/protocols/world_of_kung_fu.c	3
/src/ndpi/src/lib/protocols/crossfire.c	3
/src/ndpi/src/lib/protocols/guildwars.c	3
/src/ndpi/src/lib/protocols/armagetron.c	3
/src/ndpi/src/lib/protocols/dropbox.c	4
/src/ndpi/src/lib/protocols/spotify.c	4
/src/ndpi/src/lib/protocols/radius.c	3
/src/ndpi/src/lib/protocols/citrix.c	3
/src/ndpi/src/lib/protocols/lotus_notes.c	3
/src/ndpi/src/lib/protocols/gtp.c	3
/src/ndpi/src/lib/protocols/hsrp.c	2
/src/ndpi/src/lib/protocols/dcerpc.c	4
/src/ndpi/src/lib/protocols/netflow.c	2
/src/ndpi/src/lib/protocols/sflow.c	2
/src/ndpi/src/lib/protocols/h323.c	3
/src/ndpi/src/lib/protocols/openvpn.c	6
/src/ndpi/src/lib/protocols/noe.c	3
/src/ndpi/src/lib/protocols/ciscovpn.c	3
/src/ndpi/src/lib/protocols/teamspeak.c	3
/src/ndpi/src/lib/protocols/skinny.c	5
/src/ndpi/src/lib/protocols/rtcp.c	3
/src/ndpi/src/lib/protocols/rsync.c	3
/src/ndpi/src/lib/protocols/whoisdas.c	2
/src/ndpi/src/lib/protocols/oracle.c	3
/src/ndpi/src/lib/protocols/corba.c	3
/src/ndpi/src/lib/protocols/rtmp.c	4
/src/ndpi/src/lib/protocols/ftp_control.c	6
/src/ndpi/src/lib/protocols/ftp_data.c	7
/src/ndpi/src/lib/protocols/megaco.c	2
/src/ndpi/src/lib/protocols/redis_net.c	4
/src/ndpi/src/lib/protocols/vhua.c	4
/src/ndpi/src/lib/protocols/zeromq.c	4
/src/ndpi/src/lib/protocols/telegram.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/digest.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/aes.c	4
/src/ndpi/src/lib/third_party/src/gcrypt/gcm.c	10
/src/ndpi/src/lib/third_party/src/gcrypt/aesni.c	6
/src/ndpi/src/lib/third_party/src/gcrypt/cipher.c	4
/src/ndpi/src/lib/third_party/include/gcrypt/cipher.h	1
/usr/include/x86_64-linux-gnu/bits/byteswap.h	1
/src/ndpi/src/lib/protocols/diameter.c	3
/src/ndpi/src/lib/protocols/apple_push.c	4
/src/ndpi/src/lib/protocols/eaq.c	3
/src/ndpi/src/lib/protocols/kakaotalk_voice.c	2
/src/ndpi/src/lib/protocols/mpegts.c	2
/src/ndpi/src/lib/protocols/ubntac2.c	3
/src/ndpi/src/lib/protocols/coap.c	4
/src/ndpi/src/lib/protocols/mqtt.c	4
/src/ndpi/src/lib/protocols/someip.c	4
/src/ndpi/src/lib/protocols/rx.c	3
/src/ndpi/src/lib/protocols/git.c	2
/src/ndpi/src/lib/protocols/drda.c	2
/src/ndpi/src/lib/protocols/bjnp.c	4
/src/ndpi/src/lib/protocols/smpp.c	4
/src/ndpi/src/lib/protocols/tinc.c	3
/src/ndpi/src/lib/protocols/fix.c	2
/src/ndpi/src/lib/protocols/nintendo.c	3
/src/ndpi/src/lib/protocols/modbus.c	2
/src/ndpi/src/lib/protocols/capwap.c	5
/src/ndpi/src/lib/protocols/zabbix.c	3
/src/ndpi/src/lib/protocols/viber.c	3
/src/ndpi/src/lib/protocols/skype.c	4
/src/ndpi/src/lib/protocols/bittorrent.c	13
/src/ndpi/src/lib/protocols/whatsapp.c	4
/src/ndpi/src/lib/protocols/amqp.c	3
/src/ndpi/src/lib/protocols/csgo.c	2
/src/ndpi/src/lib/protocols/lisp.c	4
/src/ndpi/src/lib/protocols/ajp.c	4
/src/ndpi/src/lib/protocols/memcached.c	3
/src/ndpi/src/lib/protocols/nest_log_sink.c	2
/src/ndpi/src/lib/protocols/wireguard.c	2
/src/ndpi/src/lib/protocols/amazon_video.c	3
/src/ndpi/src/lib/protocols/s7comm.c	2
/src/ndpi/src/lib/protocols/iec60870-5-104.c	2
/src/ndpi/src/lib/protocols/dnp3.c	2
/src/ndpi/src/lib/protocols/websocket.c	4
/src/ndpi/src/lib/protocols/soap.c	3
/src/ndpi/src/lib/protocols/dnscrypt.c	3
/src/ndpi/src/lib/protocols/mongodb.c	4
/src/ndpi/src/lib/protocols/among_us.c	3
/src/ndpi/src/lib/protocols/hpvirtgrp.c	3
/src/ndpi/src/lib/protocols/genshin_impact.c	3
/src/ndpi/src/lib/protocols/z3950.c	4
/src/ndpi/src/lib/protocols/avast_securedns.c	3
/src/ndpi/src/lib/protocols/cassandra.c	5
/src/ndpi/src/lib/protocols/ethernet_ip.c	3
/src/ndpi/src/lib/protocols/wsd.c	2
/src/ndpi/src/lib/protocols/tocaboca.c	3
/src/ndpi/src/lib/protocols/sd_rtn.c	4
/src/ndpi/src/lib/protocols/raknet.c	6
/src/ndpi/src/lib/protocols/xiaomi.c	3
/src/ndpi/src/lib/protocols/mpegdash.c	3
/src/ndpi/src/lib/protocols/rsh.c	3
/src/ndpi/src/lib/protocols/ipsec.c	6
/src/ndpi/src/lib/protocols/collectd.c	7
/src/ndpi/src/lib/protocols/i3d.c	3
/src/ndpi/src/lib/protocols/riotgames.c	3
/src/ndpi/src/lib/protocols/ultrasurf.c	3
/src/ndpi/src/lib/protocols/threema.c	3
/src/ndpi/src/lib/protocols/alicloud.c	3
/src/ndpi/src/lib/protocols/avast.c	3
/src/ndpi/src/lib/protocols/softether.c	9
/src/ndpi/src/lib/protocols/activision.c	3
/src/ndpi/src/lib/protocols/discord.c	3
/src/ndpi/src/lib/protocols/tivoconnect.c	4
/src/ndpi/src/lib/protocols/kismet.c	3
/src/ndpi/src/lib/protocols/fastcgi.c	5
/src/ndpi/src/lib/protocols/natpmp.c	7
/src/ndpi/src/lib/protocols/syncthing.c	3
/src/ndpi/src/lib/protocols/crynet.c	3
/src/ndpi/src/lib/protocols/line.c	3
/src/ndpi/src/lib/protocols/munin.c	3
/src/ndpi/src/lib/protocols/elastic_search.c	3
/src/ndpi/src/lib/protocols/tuya_lp.c	3
/src/ndpi/src/lib/protocols/tplink_shp.c	3
/src/ndpi/src/lib/protocols/merakicloud.c	3
/src/ndpi/src/lib/protocols/tailscale.c	2
/src/ndpi/src/lib/protocols/source_engine.c	3
/src/ndpi/src/lib/protocols/bacnet.c	3
/src/ndpi/src/lib/protocols/oicq.c	3
/src/ndpi/src/lib/protocols/hots.c	3
/src/ndpi/src/lib/protocols/epicgames.c	3
/src/ndpi/src/lib/protocols/bitcoin.c	2
/src/ndpi/src/lib/protocols/thrift.c	10
/src/ndpi/src/lib/protocols/slp.c	9
/src/ndpi/src/lib/protocols/http2.c	3
/src/ndpi/src/lib/protocols/haproxy.c	3
/src/ndpi/src/lib/protocols/rmcp.c	3
/src/ndpi/src/lib/protocols/can.c	3
/src/ndpi/src/lib/protocols/protobuf.c	5
/src/ndpi/src/lib/protocols/ethereum.c	7
/src/ndpi/src/lib/protocols/ptpv2.c	3
/src/ndpi/src/lib/protocols/hart-ip.c	3
/src/ndpi/src/lib/protocols/rtps.c	2
/src/ndpi/src/lib/protocols/opc-ua.c	3
/src/ndpi/src/lib/protocols/fins.c	3
/src/ndpi/src/lib/protocols/ethersio.c	3
/src/ndpi/src/lib/protocols/beckhoff_ads.c	3
/src/ndpi/src/lib/protocols/iso9506-1-mms.c	3
/src/ndpi/src/lib/protocols/ieee-c37118.c	3
/src/ndpi/src/lib/ndpi_analyze.c	6
/src/ndpi/src/lib/protocols/ethersbus.c	3
/src/ndpi/src/lib/protocols/monero.c	3
/src/ndpi/src/lib/protocols/profinet_io.c	3
/src/ndpi/src/lib/protocols/hislip.c	3
/src/ndpi/src/lib/protocols/uftp.c	3
/src/ndpi/src/lib/protocols/openflow.c	3
/src/ndpi/src/lib/protocols/json-rpc.c	2
/src/ndpi/src/lib/protocols/kafka.c	2
/src/ndpi/src/lib/protocols/nomachine.c	3
/src/ndpi/src/lib/protocols/iec62056.c	3
/src/ndpi/src/lib/protocols/hl7.c	2
/src/ndpi/src/lib/protocols/ceph.c	2
/src/ndpi/src/lib/protocols/roughtime.c	3
/src/ndpi/src/lib/protocols/kcp.c	3
/src/ndpi/src/lib/third_party/src/libinjection_xss.c	8
/src/ndpi/src/lib/third_party/src/libinjection_html5.c	27
/src/ndpi/src/lib/third_party/src/libinjection_sqli.c	23