High level conclusions

Fuzzers reach 52.25% code coverage.

Fuzzers reach 39.16% of cyclomatic complexity.

Fuzzers reach 37.65% of all functions.

Fuzzer json-c-json-c-0.17-20230812/fuzz/tokener_parse_ex_fuzzer.cc is blocked:

The runtime code coverage of json-c-json-c-0.17-20230812/fuzz/tokener_parse_ex_fuzzer.cc covers 0.909% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_alg_memmem is blocked:

The runtime code coverage of fuzz_alg_memmem covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_binaryfusefilter is blocked:

The runtime code coverage of fuzz_binaryfusefilter covers 18.60% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_gcrypt_cipher is blocked:

The runtime code coverage of fuzz_gcrypt_cipher covers 18.75% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

1555 / 4130

Cyclomatic complexity statically reachable by fuzzers

7388 / 18862

Runtime code coverage of functions

2158 / 4130

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_alg_shoco

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	23	100.%
All colors	23	100

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

5

Reachable functions

13

Percentage of reachable functions covered

61.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_shoco.cpp	9
ndpilib/third_partyshoco.c	9
ndpilib/ndpi_utils.c	2

Fuzzer: fuzz_ds_patricia

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	68	24.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.36%
greenyellow	[30:49]	1	0.36%
lawngreen	50+	205	74.5%
All colors	275	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
15	220	ndpi_patricia_search_best2	call site: 00220	fprintf
9	153	ndpi_patricia_search_exact	call site: 00153	fprintf
6	51	ndpi_patricia_lookup	call site: 00051	fprintf
6	64	ndpi_patricia_lookup	call site: 00064	fprintf
4	29	LLVMFuzzerTestOneInput	call site: 00029	fprintf
3	46	ndpi_patricia_lookup	call site: 00046	fprintf
2	59	ndpi_patricia_lookup	call site: 00059	fprintf
2	71	ndpi_patricia_lookup	call site: 00071	fprintf
2	80	ndpi_patricia_lookup	call site: 00080	fprintf
2	84	ndpi_patricia_lookup	call site: 00084	fprintf
2	95	ndpi_patricia_lookup	call site: 00095	fprintf
2	168	ndpi_patricia_search_exact	call site: 00168	fprintf

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

23

Reachable functions

59

Percentage of reachable functions covered

61.02%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_patricia.cpp	28
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/third_partyndpi_patricia.c	25
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_main.c	2

Fuzzer: fuzz_ds_ptree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	55	29.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	0.53%
lawngreen	50+	130	69.8%
All colors	186	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
15	68	ndpi_patricia_search_best2	call site: 00068	fprintf
6	109	ndpi_patricia_lookup	call site: 00109	fprintf
6	122	ndpi_patricia_lookup	call site: 00122	fprintf
4	63	ndpi_patricia_search_best2	call site: 00063	fprintf
2	20	ndpi_DeleteEntry	call site: 00020
2	87	ndpi_patricia_search_best2	call site: 00087	fprintf
2	90	ndpi_ptree_insert	call site: 00090	fprintf
2	102	ndpi_New_Prefix2	call site: 00102	ndpi_calloc
2	105	ndpi_patricia_lookup	call site: 00105	fprintf
2	117	ndpi_patricia_lookup	call site: 00117	fprintf
2	129	ndpi_patricia_lookup	call site: 00129	fprintf
2	138	ndpi_patricia_lookup	call site: 00138	fprintf

Runtime coverage analysis

Covered functions

37

Functions that are reachable but not covered

37

Reachable functions

70

Percentage of reachable functions covered

47.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_ptree.cpp	16
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_main.c	24
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	5

Fuzzer: fuzz_alg_bins

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	20	14.7%
gold	[1:9]	4	2.94%
yellow	[10:29]	1	0.73%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	111	81.6%
All colors	136	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
5	124	ndpi_cluster_bins	call site: 00124	printf
3	26	ndpi_bin_similarity	call site: 00026	ndpi_get_bin_value
3	120	ndpi_cluster_bins	call site: 00120	ndpi_print_bin
2	111	ndpi_cluster_bins	call site: 00111	ndpi_print_bin
2	114	ndpi_cluster_bins	call site: 00114	printf
1	6	LLVMFuzzerTestOneInput	call site: 00006
1	11	ndpi_init_bin	call site: 00011
1	39	ndpi_clone_bin	call site: 00039
1	75	ndpi_snprintf	call site: 00075
1	104	ndpi_cluster_bins	call site: 00104	printf

Runtime coverage analysis

Covered functions

25

Functions that are reachable but not covered

25

Reachable functions

46

Percentage of reachable functions covered

45.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_bins.cpp	21
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_analyze.c	20
ndpilib/ndpi_utils.c	5

Fuzzer: fuzz_tls_certificate

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	577	18.5%
gold	[1:9]	2045	65.7%
yellow	[10:29]	47	1.51%
greenyellow	[30:49]	19	0.61%
lawngreen	50+	420	13.5%
All colors	3108	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
61	2685	processCertificateElements	call site: 02685	strptime
42	30	ndpi_patricia_destroy	call site: 00030	ndpi_exit_detection_module
33	98	ndpi_domain_classify_free	call site: 00098	ac_automata_release
27	2936	ndpi_lru_add_to_cache	call site: 02936	ndpi_set_risk
26	3081	ndpi_free_flow_data	call site: 03081
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
17	3046	ndpi_free_flow_data	call site: 03046
16	76	ac_automata_walk	call site: 00076	ac_automata_release
15	2858	ndpi_patricia_search_best2	call site: 02858	fprintf
10	2768	processCertificateElements	call site: 02768	ndpi_set_risk
9	1618	node_resize_mp	call site: 01618	node_resize_mp
9	2975	proto_stack_update	call site: 02975	ookla_add_to_cache

Runtime coverage analysis

Covered functions

468

Functions that are reachable but not covered

159

Reachable functions

607

Percentage of reachable functions covered

73.81%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_tls_certificate.c	7
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	444
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	49
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	9
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	36
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	1
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	1
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	1
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	1
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/third_partystrptime.c	7

Fuzzer: fuzz_is_stun_tcp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1483	37.1%
gold	[1:9]	2092	52.3%
yellow	[10:29]	49	1.22%
greenyellow	[30:49]	17	0.42%
lawngreen	50+	354	8.86%
All colors	3995	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
977	2964	ndpi_search_dtls	call site: 02964	ndpi_search_tls_tcp
84	2813	ndpi_set_detected_protocol	call site: 02813	ndpi_handle_risk_exceptions
42	30	ndpi_patricia_destroy	call site: 00030	ndpi_exit_detection_module
33	98	ndpi_domain_classify_free	call site: 00098	ac_automata_release
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
16	76	ac_automata_walk	call site: 00076	ac_automata_release
15	2898	ndpi_reconcile_protocols	call site: 02898	ndpi_set_risk
10	2769	ndpi_int_stun_add_connection	call site: 02769
9	1618	node_resize_mp	call site: 01618	node_resize_mp
7	1371	ndpi_load_categories_dir	call site: 01371	readdir_r
7	2740	ndpi_lru_find_cache	call site: 02740	ndpi_get_current_time
6	3	ndpi_init_detection_module	call site: 00003	set_ndpi_debug_function

Runtime coverage analysis

Covered functions

456

Functions that are reachable but not covered

293

Reachable functions

728

Percentage of reachable functions covered

59.75%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_is_stun_tcp.c	3
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	459
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	53
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	20
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	2
ndpilib/ndpi_bitmap.c	4
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	108
ndpilib/protocols/rtp.c	5
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	52
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	1
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	1
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	9
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	1
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	8
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/ndpi_serializer.c	2
ndpilib/third_partyndpi_md5.c	6
ndpi/windowsndpi_define.h	1
ndpilib/third_partyndpi_sha256.c	8
ndpilib/third_partyndpi_sha1.c	10
ndpilib/third_partystrptime.c	7
ndpilib/ndpi_analyze.c	3

Fuzzer: fuzz_ds_cmsketch

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	19.3%
gold	[1:9]	1	3.22%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	24	77.4%
All colors	31	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	14	ndpi_cm_sketch_init	call site: 00014	printf
1	10	ndpi_cm_sketch_init	call site: 00010
1	17	ndpi_cm_sketch_init	call site: 00017
1	20	ndpi_cm_sketch_add	call site: 00020	printf
1	24	ndpi_cm_sketch_count	call site: 00024	printf

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

13

Reachable functions

26

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_cmsketch.cpp	9
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_analyze.c	7
ndpi/tests/performance/gcrypt.c	3

Fuzzer: fuzz_ds_bitmap

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	23	25.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	67	74.4%
All colors	90	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	42	ndpi_bitmap_serialize	call site: 00042
1	5	LLVMFuzzerTestOneInput	call site: 00005
1	10	LLVMFuzzerTestOneInput	call site: 00010
1	16	LLVMFuzzerTestOneInput	call site: 00016
1	20	LLVMFuzzerTestOneInput	call site: 00020
1	25	LLVMFuzzerTestOneInput	call site: 00025
1	30	LLVMFuzzerTestOneInput	call site: 00030
1	33	LLVMFuzzerTestOneInput	call site: 00033
1	36	LLVMFuzzerTestOneInput	call site: 00036
1	39	LLVMFuzzerTestOneInput	call site: 00039
1	46	LLVMFuzzerTestOneInput	call site: 00046
1	49	LLVMFuzzerTestOneInput	call site: 00049

Runtime coverage analysis

Covered functions

345

Functions that are reachable but not covered

24

Reachable functions

76

Percentage of reachable functions covered

68.42%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_bitmap.cpp	25
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_bitmap.c	43
ndpi/tests/performance/gcrypt.c	2

Fuzzer: fuzz_filecfg_categories

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	131	8.90%
gold	[1:9]	12	0.81%
yellow	[10:29]	5	0.33%
greenyellow	[30:49]	1	0.06%
lawngreen	50+	1322	89.8%
All colors	1471	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
21	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
6	1371	ndpi_patricia_lookup	call site: 01371	fprintf
6	1384	ndpi_patricia_lookup	call site: 01384	fprintf
5	1313	ndpi_set_config	call site: 01313	ndpi_str_endswith
5	1424	ndpi_encode_domain	call site: 01424	ndpi_hash_find_entry
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	81	node_release	call site: 00081	acho_free
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
4	1350	add_to_ptree	call site: 01350	fprintf
4	1464	ndpi_hash_add_entry	call site: 01464	ndpi_hash_add_entry

Runtime coverage analysis

Covered functions

83

Functions that are reachable but not covered

77

Reachable functions

146

Percentage of reachable functions covered

47.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_categories.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	70
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	16
ndpilib/ndpi_utils.c	25
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	12
ndpilib/ndpi_domain_classify.c	7
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	3
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	3
ndpilib/third_partyshoco.c	8

Fuzzer: fuzz_community_id

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11	6.91%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	1.25%
lawngreen	50+	146	91.8%
All colors	159	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
8	129	ndpi_base64_encode	call site: 00129	printf
1	12	LLVMFuzzerTestOneInput	call site: 00012
1	119	SHA1Transform	call site: 00119	SHA1Transform
1	139	ndpi_community_id_finalize_and_compute_hash	call site: 00139

Runtime coverage analysis

Covered functions

24

Functions that are reachable but not covered

27

Reachable functions

48

Percentage of reachable functions covered

43.75%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_community_id.cpp	12
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_community_id.c	20
ndpilib/third_partyndpi_sha1.c	10
ndpilib/ndpi_utils.c	1

Fuzzer: fuzz_filecfg_risk_domains

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	93	6.68%
gold	[1:9]	8	0.57%
yellow	[10:29]	7	0.50%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1284	92.2%
All colors	1392	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
21	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
5	1311	ndpi_set_config	call site: 01311	ndpi_str_endswith
4	22	ndpi_patricia_destroy	call site: 00022	ndpi_Deref_Prefix
4	27	ndpi_DeleteEntry	call site: 00027
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	91	ndpi_exit_detection_module	call site: 00091	ndpi_hash_free
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
2	87	ac_automata_release	call site: 00087	acho_free
2	96	ndpi_hash_free	call site: 00096	ndpi_hash_free
2	108	ndpi_exit_detection_module	call site: 00108

Runtime coverage analysis

Covered functions

92

Functions that are reachable but not covered

71

Reachable functions

139

Percentage of reachable functions covered

48.92%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_risk_domains.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	65
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	7
ndpilib/ndpi_utils.c	12
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	33
ndpilib/ndpi_domain_classify.c	4
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	6

Fuzzer: fuzz_alg_crc32_md5

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	1.45%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	0.72%
lawngreen	50+	134	97.8%
All colors	137	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	108	LLVMFuzzerTestOneInput	call site: 00108
1	118	LLVMFuzzerTestOneInput	call site: 00118

Runtime coverage analysis

Covered functions

30

Functions that are reachable but not covered

16

Reachable functions

46

Percentage of reachable functions covered

65.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_crc32_md5.c	27
ndpilib/ndpi_analyze.c	3
ndpilib/ndpi_main.c	3
ndpilib/third_partyndpi_md5.c	6
ndpilib/ndpi_hash.c	3
ndpilib/third_partyhll/MurmurHash3.c	1
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_utils.c	5

Fuzzer: fuzz_alg_ranking

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	5.76%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	49	94.2%
All colors	52	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	10	ndpi_init_ranking	call site: 00010
1	29	ndpi_print_ranking	call site: 00029	fprintf
1	39	ndpi_term_ranking	call site: 00039

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

20

Reachable functions

33

Percentage of reachable functions covered

39.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_ranking.cpp	15
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_analyze.c	11
ndpi/tests/performance/gcrypt.c	2

Fuzzer: fuzz_filecfg_malicious_ja4

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	90	6.69%
gold	[1:9]	8	0.59%
yellow	[10:29]	7	0.52%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1239	92.1%
All colors	1344	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
21	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
5	1311	ndpi_set_config	call site: 01311	ndpi_str_endswith
4	22	ndpi_patricia_destroy	call site: 00022	ndpi_Deref_Prefix
4	27	ndpi_DeleteEntry	call site: 00027
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	81	node_release	call site: 00081	acho_free
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
3	76	ac_automata_walk	call site: 00076
3	87	ac_automata_release	call site: 00087	ac_automata_release
2	96	ndpi_hash_free	call site: 00096	ndpi_hash_free

Runtime coverage analysis

Covered functions

64

Functions that are reachable but not covered

65

Reachable functions

114

Percentage of reachable functions covered

42.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_malicious_ja4.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	59
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	7
ndpilib/ndpi_utils.c	16
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	12
ndpilib/ndpi_domain_classify.c	4
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	3
ndpilib/ndpi_config.c	6

Fuzzer: fuzz_ds_libcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	4.28%
gold	[1:9]	1	1.42%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	66	94.2%
All colors	70	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	7	cache_new	call site: 00007
1	10	cache_new	call site: 00010
1	25	cache_add	call site: 00025

Runtime coverage analysis

Covered functions

21

Functions that are reachable but not covered

17

Reachable functions

33

Percentage of reachable functions covered

48.48%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_libcache.cpp	14
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/third_partylibcache.c	9
ndpi/tests/performance/gcrypt.c	3

Fuzzer: fuzz_ds_bitmap64_fuse

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	13.3%
gold	[1:9]	7	5.83%
yellow	[10:29]	1	0.83%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	96	80.0%
All colors	120	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	64	binary_fuse16_populate	call site: 00064	binary_fuse_rng_splitmix64
3	21	binary_fuse_calculate_segment_length	call site: 00021
3	28	binary_fuse_calculate_size_factor	call site: 00028	binary_fuse_max
1	6	ndpi_bitmap64_fuse_alloc	call site: 00006
1	8	ndpi_bitmap64_fuse_alloc	call site: 00008
1	10	ndpi_bitmap64_fuse_alloc	call site: 00010
1	15	ndpi_bitmap64_fuse_compress	call site: 00015	printf
1	37	binary_fuse_rng_splitmix64	call site: 00037	UINT64_C
1	59	binary_fuse_murmur64	call site: 00059	UINT64_C

Runtime coverage analysis

Covered functions

37

Functions that are reachable but not covered

19

Reachable functions

50

Percentage of reachable functions covered

62.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_bitmap64_fuse.cpp	10
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_bitmap64_fuse.c	13
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_party/include/binaryfusefilter.h	19
ndpilib/ndpi_memory.c	3

Fuzzer: fuzz_ds_ahocorasick

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	9.62%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	169	90.3%
All colors	187	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	52	xmemchr	call site: 00052	DETECTNULL
2	182	ac_automata_release	call site: 00182	acho_free
1	9	ac_automata_init	call site: 00009
1	13	ac_automata_init	call site: 00013
1	16	LLVMFuzzerTestOneInput	call site: 00016	ac_automata_init
1	37	ndpi_strdup	call site: 00037
1	57	xmemchr	call site: 00057
1	88	node_resize_mp	call site: 00088
1	95	LLVMFuzzerTestOneInput	call site: 00095
1	111	ac_automata_walk	call site: 00111
1	123	LLVMFuzzerTestOneInput	call site: 00123	printf
1	128	node_findbs_next	call site: 00128	node_findbs_next

Runtime coverage analysis

Covered functions

70

Functions that are reachable but not covered

33

Reachable functions

81

Percentage of reachable functions covered

59.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_ahocorasick.cpp	31
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/third_partyahocorasick.c	42
ndpilib/ndpi_main.c	12
ndpilib/ndpi_memory.c	3
ndpi/tests/performance/gcrypt.c	2

Fuzzer: fuzz_ds_hash

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	6.52%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	43	93.4%
All colors	46	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	8	ndpi_hash_init	call site: 00008
1	17	ndpi_hash_add_entry	call site: 00017
1	19	ndpi_hash_add_entry	call site: 00019

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

18

Reachable functions

30

Percentage of reachable functions covered

40.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_hash.cpp	13
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_utils.c	7
ndpi/tests/performance/gcrypt.c	3

Fuzzer: fuzz_ndpi_reader_pl7m_64k

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	709	15.8%
gold	[1:9]	2136	47.7%
yellow	[10:29]	94	2.10%
greenyellow	[30:49]	37	0.82%
lawngreen	50+	1494	33.4%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1734

Functions that are reachable but not covered

226

Reachable functions

864

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_64k.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_alg_strnstr

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	10.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	17	89.4%
All colors	19	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	4	LLVMFuzzerTestOneInput	call site: 00004

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

7

Reachable functions

12

Percentage of reachable functions covered

41.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_strnstr.cpp	8
ndpi/tests/performance/strnstr.cpp	2
ndpilib/ndpi_utils.c	2

Fuzzer: fuzz_serialization

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	18	3.16%
gold	[1:9]	2	0.35%
yellow	[10:29]	3	0.52%
greenyellow	[30:49]	3	0.52%
lawngreen	50+	543	95.4%
All colors	569	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3	181	ndpi_serialize_binary_uint32	call site: 00181	ndpi_serializer_header_string
3	310	ndpi_serialize_binary_double	call site: 00310	ndpi_serialize_single_string
2	126	ndpi_serialize_uint32_double	call site: 00126	ndpi_serialize_key_uint32
1	12	ndpi_init_serializer_buffer	call site: 00012
1	16	ndpi_term_serializer	call site: 00016
1	22	ndpi_snprintf	call site: 00022
1	469	ndpi_deserialize_key_string	call site: 00469
1	479	ndpi_deserialize_key_uint32	call site: 00479
1	481	ndpi_deserialize_key_uint32	call site: 00481
1	499	ndpi_deserialize_value_uint64	call site: 00499	ndpi_deserialize_value_uint32
1	512	ndpi_deserialize_value_int32	call site: 00512
1	514	ndpi_deserialize_value_int32	call site: 00514

Runtime coverage analysis

Covered functions

115

Functions that are reachable but not covered

32

Reachable functions

143

Percentage of reachable functions covered

77.62%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_serialization.cpp	67
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_serializer.c	86
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_utils.c	5
ndpilib/ndpi_memory.c	3

Fuzzer: fuzz_alg_bytestream

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1	14.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	85.7%
All colors	7	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	5	ntohs_ndpi_bytestream_to_number	call site: 00005

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

1

Reachable functions

6

Percentage of reachable functions covered

83.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_bytestream.c	4
ndpilib/ndpi_main.c	3

Fuzzer: fuzz_process_packet

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	539	14.4%
gold	[1:9]	2171	58.0%
yellow	[10:29]	113	3.01%
greenyellow	[30:49]	37	0.98%
lawngreen	50+	882	23.5%
All colors	3742	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
42	30	ndpi_patricia_destroy	call site: 00030	ndpi_exit_detection_module
33	98	ndpi_domain_classify_free	call site: 00098	ac_automata_release
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
16	76	ac_automata_walk	call site: 00076	ac_automata_release
15	2827	ndpi_patricia_search_best2	call site: 02827	fprintf
14	3311	ndpi_serialize_binary_uint32	call site: 03311	ndpi_serialize_uint32_uint32
14	3400	ndpi_serialize_binary_float	call site: 03400	ndpi_serialize_uint32_float
11	3268	ndpi_serialize_uint32_binary	call site: 03268	ndpi_serialize_key_uint32
10	3007	ndpi_internal_detection_giveup	call site: 03007	internal_giveup
10	3140	ndpi_internal_detection_process_packet	call site: 03140	fully_enc_heuristic
9	1618	node_resize_mp	call site: 01618	node_resize_mp
9	2948	ookla_search_into_cache	call site: 02948	ndpi_set_detected_protocol

Runtime coverage analysis

Covered functions

1496

Functions that are reachable but not covered

176

Reachable functions

740

Percentage of reachable functions covered

76.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_process_packet.c	9
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	514
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	103
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	9
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/ndpi_serializer.c	40
ndpilib/third_partyndpi_sha256.c	8
ndpilib/ndpi_analyze.c	2

Fuzzer: fuzz_filecfg_protocols

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	125	7.75%
gold	[1:9]	11	0.68%
yellow	[10:29]	4	0.24%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1471	91.3%
All colors	1611	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
11	121	ndpi_exit_detection_module	call site: 00121	ndpi_term_address_cache
7	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
7	1480	node_resize_mp	call site: 01480	node_resize_mp
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
6	1391	ndpi_patricia_lookup	call site: 01391	fprintf
6	1404	ndpi_patricia_lookup	call site: 01404	fprintf
5	1311	ndpi_set_config	call site: 01311	ndpi_str_endswith
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
4	1370	add_to_ptree	call site: 01370	fprintf
4	1530	ndpi_handle_rule	call site: 01530	NDPI_LOG_ERR

Runtime coverage analysis

Covered functions

101

Functions that are reachable but not covered

96

Reachable functions

182

Percentage of reachable functions covered

47.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_protocols.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	101
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	16
ndpilib/ndpi_utils.c	17
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	32
ndpilib/ndpi_domain_classify.c	4
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	6

Fuzzer: fuzz_gcrypt_cipher

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	60	37.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.62%
greenyellow	[30:49]	21	13.2%
lawngreen	50+	77	48.4%
All colors	159	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
23	91	mbedtls_cipher_update	call site: 00091	mbedtls_gcm_update
18	66	mbedtls_cipher_set_iv	call site: 00066	mbedtls_gcm_starts
8	121	mbedtls_cipher_finish	call site: 00121	mbedtls_cipher_get_iv_size
5	147	LLVMFuzzerTestOneInput	call site: 00147
1	30	LLVMFuzzerTestOneInput	call site: 00030	MBEDTLS_INTERNAL_VALIDATE_RET
1	32	LLVMFuzzerTestOneInput	call site: 00032	MBEDTLS_INTERNAL_VALIDATE_RET
1	34	LLVMFuzzerTestOneInput	call site: 00034	MBEDTLS_INTERNAL_VALIDATE_RET
1	36	LLVMFuzzerTestOneInput	call site: 00036	MBEDTLS_INTERNAL_VALIDATE_RET
1	38	LLVMFuzzerTestOneInput	call site: 00038	MBEDTLS_INTERNAL_VALIDATE_RET
1	40	LLVMFuzzerTestOneInput	call site: 00040	MBEDTLS_INTERNAL_VALIDATE_RET

Runtime coverage analysis

Covered functions

43

Functions that are reachable but not covered

52

Reachable functions

64

Percentage of reachable functions covered

18.75%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_gcrypt_cipher.cpp	39
ndpilib/third_partygcrypt/cipher.c	19
ndpilib/third_party/include/gcrypt/cipher.h	1
ndpilib/third_partygcrypt/gcm.c	13

Fuzzer: fuzz_ds_domain_classify

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	19	13.5%
gold	[1:9]	8	5.71%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	0.71%
lawngreen	50+	112	80.0%
All colors	140	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	1	LLVMFuzzerTestOneInput	call site: 00001	set_ndpi_debug_function
3	80	ndpi_encode_domain	call site: 00080	fprintf
2	86	ndpi_domain_classify_add	call site: 00086	ndpi_hash_add_entry
2	111	ndpi_domain_classify_hostname	call site: 00111	ndpi_hash_find_entry
2	129	ndpi_domain_classify_hostname	call site: 00129	ndpi_hash_find_entry
1	7	ndpi_load_domain_suffixes	call site: 00007	ndpi_hash_free
1	10	ndpi_hash_free	call site: 00010
1	15	ndpi_hash_init	call site: 00015
1	23	ndpi_hash_add_entry	call site: 00023
1	31	ndpi_load_domain_suffixes	call site: 00031	NDPI_LOG_ERR
1	57	ndpi_get_host_domain_suffix	call site: 00057

Runtime coverage analysis

Covered functions

32

Functions that are reachable but not covered

35

Reachable functions

63

Percentage of reachable functions covered

44.44%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_domain_classify.cpp	17
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_main.c	1
ndpilib/ndpi_domains.c	17
ndpilib/ndpi_utils.c	17
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_domain_classify.c	17
ndpilib/third_partyshoco.c	8

Fuzzer: fuzz_ds_filter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	9	18.3%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	40	81.6%
All colors	49	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	35	ndpi_bitmap_serialize	call site: 00035
1	6	ndpi_filter_alloc	call site: 00006
1	12	ndpi_filter_add	call site: 00012
1	23	ndpi_filter_contains	call site: 00023
1	32	ndpi_filter_size	call site: 00032
1	39	ndpi_filter_size	call site: 00039
1	42	ndpi_filter_cardinality	call site: 00042
1	46	ndpi_filter_free	call site: 00046

Runtime coverage analysis

Covered functions

171

Functions that are reachable but not covered

13

Reachable functions

44

Percentage of reachable functions covered

70.45%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_filter.cpp	13
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_filter.c	10
ndpilib/ndpi_bitmap.c	15
ndpi/tests/performance/gcrypt.c	2

Fuzzer: fuzz_ndpi_reader

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	709	15.8%
gold	[1:9]	2137	47.8%
yellow	[10:29]	94	2.10%
greenyellow	[30:49]	41	0.91%
lawngreen	50+	1489	33.3%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
33	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1734

Functions that are reachable but not covered

227

Reachable functions

864

Percentage of reachable functions covered

73.73%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ds_tree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	5.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	38	95.0%
All colors	40	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	7	LLVMFuzzerTestOneInput	call site: 00007
1	14	LLVMFuzzerTestOneInput	call site: 00014

Runtime coverage analysis

Covered functions

20

Functions that are reachable but not covered

8

Reachable functions

22

Percentage of reachable functions covered

63.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_tree.cpp	12
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_utils.c	4

Fuzzer: fuzz_alg_hw_rsi_outliers_da

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11	8.20%
gold	[1:9]	0	0.0%
yellow	[10:29]	4	2.98%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	119	88.8%
All colors	134	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	61	LLVMFuzzerTestOneInput	call site: 00061	printf
3	25	ndpi_hw_init	call site: 00025
1	7	LLVMFuzzerTestOneInput	call site: 00007
1	11	LLVMFuzzerTestOneInput	call site: 00011
1	32	ndpi_hw_init	call site: 00032
1	59	ndpi_hw_add_value	call site: 00059	printf

Runtime coverage analysis

Covered functions

47

Functions that are reachable but not covered

19

Reachable functions

62

Percentage of reachable functions covered

69.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_hw_rsi_outliers_da.cpp	39
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_analyze.c	26

Fuzzer: fuzz_ndpi_reader_pl7m_simplest_internal

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	706	15.7%
gold	[1:9]	2096	46.8%
yellow	[10:29]	113	2.52%
greenyellow	[30:49]	46	1.02%
lawngreen	50+	1509	33.7%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1736

Functions that are reachable but not covered

226

Reachable functions

864

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_simplest_internal.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_alg_quick_encryption

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	16	15.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	2	1.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	85	82.5%
All colors	103	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
10	71	InvMixColumns	call site: 00071
2	57	ndpi_quick_decrypt	call site: 00057
1	9	ndpi_quick_encrypt	call site: 00009
1	41	ndpi_base64_encode	call site: 00041
1	43	ndpi_quick_encrypt	call site: 00043
1	54	ndpi_base64_decode	call site: 00054

Runtime coverage analysis

Covered functions

32

Functions that are reachable but not covered

19

Reachable functions

47

Percentage of reachable functions covered

59.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_quick_encryption.cpp	10
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_utils.c	13
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyaes.c	16

Fuzzer: fuzz_ds_btree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	21	19.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	86	80.3%
All colors	107	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
8	38	manhattan_dist	call site: 00038	recursive_build
6	64	query_depth_first	call site: 00064	query_depth_first
4	1	LLVMFuzzerTestOneInput	call site: 00001	fuzz_set_alloc_callbacks_and_seed
1	8	LLVMFuzzerTestOneInput	call site: 00008
1	29	btree_init	call site: 00029
1	85	nheap_get_arrays	call site: 00085

Runtime coverage analysis

Covered functions

28

Functions that are reachable but not covered

24

Reachable functions

52

Percentage of reachable functions covered

53.85%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_btree.cpp	12
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_analyze.c	4
ndpilib/third_partyball.c	28

Fuzzer: fuzz_alg_jitter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4	18.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	18	81.8%
All colors	22	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	6	LLVMFuzzerTestOneInput	call site: 00006
1	11	ndpi_jitter_init	call site: 00011
1	15	ndpi_jitter_add_value	call site: 00015	printf
1	19	ndpi_jitter_free	call site: 00019

Runtime coverage analysis

Covered functions

15

Functions that are reachable but not covered

13

Reachable functions

24

Percentage of reachable functions covered

45.83%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_jitter.cpp	10
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_analyze.c	5

Fuzzer: fuzz_gcrypt_light

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	87	24.7%
gold	[1:9]	3	0.85%
yellow	[10:29]	3	0.85%
greenyellow	[30:49]	6	1.70%
lawngreen	50+	252	71.7%
All colors	351	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
32	210	mbedtls_aes_crypt_ecb	call site: 00210	mbedtls_internal_aes_encrypt
19	121	mbedtls_aesni_setkey_enc	call site: 00121	MBEDTLS_GET_UINT32_LE
6	37	sha256_write_byte_block	call site: 00037	SIG1
6	257	mbedtls_gcm_starts	call site: 00257	gcm_mult
5	183	mbedtls_gcm_update	call site: 00183
3	170	gcm_mult	call site: 00170	gcm_mask
2	96	mbedtls_aesni_has_support	call site: 00096
2	176	gcm_mask	call site: 00176	gcm_mult
2	202	_gcry_cipher_crypt	call site: 00202	ndpi_malloc
2	266	mbedtls_gcm_update_ad	call site: 00266	gcm_mult
1	15	gcry_md_open	call site: 00015
1	56	gcry_md_close	call site: 00056

Runtime coverage analysis

Covered functions

73

Functions that are reachable but not covered

58

Reachable functions

124

Percentage of reachable functions covered

53.23%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_gcrypt_light.cpp	31
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/third_partygcrypt_light.c	21
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partygcrypt/digest.c	5
ndpilib/third_partyndpi_sha256.c	6
ndpilib/third_partygcrypt/aes.c	22
ndpilib/third_partygcrypt/gcm.c	23
ndpilib/third_partygcrypt/aesni.c	11
ndpilib/third_partygcrypt/cipher.c	8
ndpilib/third_party/include/gcrypt/cipher.h	1

Fuzzer: fuzz_filecfg_malicious_sha1

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	15.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	34	85.0%
All colors	40	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	5	LLVMFuzzerTestOneInput	call site: 00005	set_ndpi_debug_function
1	24	ndpi_hash_add_entry	call site: 00024
1	26	ndpi_hash_add_entry	call site: 00026

Runtime coverage analysis

Covered functions

17

Functions that are reachable but not covered

20

Reachable functions

33

Percentage of reachable functions covered

39.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_malicious_sha1.c	9
ndpi/fuzz/fuzz_common_code.c	4
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_main.c	8
ndpilib/ndpi_utils.c	7

Fuzzer: fuzz_libinjection

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	69	34.1%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	133	65.8%
All colors	202	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
69	33	syntax_merge_words	call site: 00033	ndpi_Ref_Prefix

Runtime coverage analysis

Covered functions

94

Functions that are reachable but not covered

10

Reachable functions

42

Percentage of reachable functions covered

76.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_libinjection.c	6
ndpilib/third_partylibinjection_sqli.c	28
ndpilib/third_partyndpi_patricia.c	14
ndpi/tests/performance/gcrypt.c	2
ndpilib/third_partylibinjection_xss.c	10
ndpilib/third_partylibinjection_html5.c	2

Fuzzer: fuzz_filecfg_category

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	137	9.32%
gold	[1:9]	10	0.68%
yellow	[10:29]	8	0.54%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1314	89.4%
All colors	1469	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
21	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
6	1369	ndpi_patricia_lookup	call site: 01369	fprintf
6	1382	ndpi_patricia_lookup	call site: 01382	fprintf
5	1311	ndpi_set_config	call site: 01311	ndpi_str_endswith
5	1422	ndpi_encode_domain	call site: 01422	ndpi_hash_find_entry
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	81	node_release	call site: 00081	acho_free
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
4	1348	add_to_ptree	call site: 01348	fprintf
4	1462	ndpi_hash_add_entry	call site: 01462	ndpi_hash_add_entry

Runtime coverage analysis

Covered functions

81

Functions that are reachable but not covered

77

Reachable functions

143

Percentage of reachable functions covered

46.15%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_category.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	69
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	16
ndpilib/ndpi_utils.c	24
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	12
ndpilib/ndpi_domain_classify.c	7
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	3
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	3
ndpilib/third_partyshoco.c	8

Fuzzer: fuzz_dga

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	331	12.0%
gold	[1:9]	2044	74.3%
yellow	[10:29]	46	1.67%
greenyellow	[30:49]	22	0.8%
lawngreen	50+	307	11.1%
All colors	2750	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
42	30	ndpi_patricia_destroy	call site: 00030	ndpi_exit_detection_module
33	98	ndpi_domain_classify_free	call site: 00098	ac_automata_release
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
16	76	ac_automata_walk	call site: 00076	ac_automata_release
9	1618	node_resize_mp	call site: 01618	node_resize_mp
7	1371	ndpi_load_categories_dir	call site: 01371	readdir_r
6	3	ndpi_init_detection_module	call site: 00003	set_ndpi_debug_function
6	1433	ndpi_patricia_lookup	call site: 01433	fprintf
6	1446	ndpi_patricia_lookup	call site: 01446	fprintf
5	1310	ndpi_set_config	call site: 01310	ndpi_str_endswith
5	1426	ndpi_New_Prefix2	call site: 01426	ndpi_calloc
4	19	ndpi_patricia_destroy	call site: 00019	ndpi_Deref_Prefix

Runtime coverage analysis

Covered functions

432

Functions that are reachable but not covered

138

Reachable functions

548

Percentage of reachable functions covered

74.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_dga.c	7
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	425
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	16
ndpilib/ndpi_utils.c	33
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	4
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	7
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	1
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	1
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	1
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	1
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	1
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5

Fuzzer: fuzz_alg_ses_des

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	15	28.3%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	38	71.6%
All colors	53	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3	13	ndpi_ses_init	call site: 00013
3	24	ndpi_ses_fitting	call site: 00024	printf
3	36	ndpi_des_fitting	call site: 00036	printf
1	7	LLVMFuzzerTestOneInput	call site: 00007
1	19	ndpi_normal_cdf_inverse	call site: 00019	printf
1	22	ndpi_ses_add_value	call site: 00022	printf
1	31	ndpi_des_init	call site: 00031	printf
1	34	ndpi_des_add_value	call site: 00034	printf
1	40	LLVMFuzzerTestOneInput	call site: 00040

Runtime coverage analysis

Covered functions

20

Functions that are reachable but not covered

15

Reachable functions

32

Percentage of reachable functions covered

53.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_ses_des.cpp	17
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_analyze.c	11

Fuzzer: fuzz_quic_get_crypto_data

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	612	17.7%
gold	[1:9]	2048	59.2%
yellow	[10:29]	57	1.64%
greenyellow	[30:49]	23	0.66%
lawngreen	50+	716	20.7%
All colors	3456	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
42	30	ndpi_patricia_destroy	call site: 00030	ndpi_exit_detection_module
33	98	ndpi_domain_classify_free	call site: 00098	ac_automata_release
26	2851	ndpi_lru_add_to_cache	call site: 02851	ndpi_set_risk
26	3226	processClientServerHello	call site: 03226	ndpi_cache_find_hostname_ip
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
22	3429	ndpi_free_flow_data	call site: 03429
17	3394	ndpi_free_flow_data	call site: 03394
16	76	ac_automata_walk	call site: 00076	ac_automata_release
15	2773	ndpi_patricia_search_best2	call site: 02773	fprintf
10	2837	ndpi_handle_risk_exceptions	call site: 02837	ndpi_check_ipv6_exception
9	1618	node_resize_mp	call site: 01618	node_resize_mp
9	2898	proto_stack_update	call site: 02898	ookla_add_to_cache

Runtime coverage analysis

Covered functions

514

Functions that are reachable but not covered

168

Reachable functions

661

Percentage of reachable functions covered

74.58%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_quic_get_crypto_data.c	10
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	460
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	50
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	20
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	2
ndpilib/ndpi_bitmap.c	4
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	51
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	7
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	1
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	1
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	41
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	1
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/ndpi_serializer.c	1
ndpi/windowsndpi_define.h	1
ndpilib/third_partyndpi_md5.c	6
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_binaryfusefilter

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	135	85.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	23	14.5%
All colors	158	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
54	27	LLVMFuzzerTestOneInput	call site: 00027	binary_fuse_rng_splitmix64
48	98	LLVMFuzzerTestOneInput	call site: 00098	binary_fuse_rng_splitmix64
17	9	LLVMFuzzerTestOneInput	call site: 00009	binary_fuse_calculate_size_factor
5	84	LLVMFuzzerTestOneInput	call site: 00084	binary_fuse_mix_split
4	93	LLVMFuzzerTestOneInput	call site: 00093	binary_fuse_calculate_size_factor
4	149	LLVMFuzzerTestOneInput	call site: 00149	binary_fuse_mix_split
1	6	LLVMFuzzerTestOneInput	call site: 00006
1	91	LLVMFuzzerTestOneInput	call site: 00091
1	155	LLVMFuzzerTestOneInput	call site: 00155

Runtime coverage analysis

Covered functions

34

Functions that are reachable but not covered

35

Reachable functions

43

Percentage of reachable functions covered

18.6%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_binaryfusefilter.cpp	13
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_party/include/binaryfusefilter.h	22

Fuzzer: fuzz_readerutils_workflow

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	751	18.2%
gold	[1:9]	123	2.99%
yellow	[10:29]	74	1.80%
greenyellow	[30:49]	35	0.85%
lawngreen	50+	3122	76.0%
All colors	4105	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
77	2663	packet_processing	call site: 02663	ndpi_classify
61	3990	process_ndpi_collected_info	call site: 03990	dump_flow_fingerprint
27	3781	ndpi_dpi2json	call site: 03781	ndpi_serialize_string_uint32
17	3913	ndpi_dpi2json	call site: 03913	ndpi_serialize_string_uint32
15	134	ndpi_exit_detection_module	call site: 00134	ndpi_hash_free
15	2947	ndpi_patricia_search_best2	call site: 02947	fprintf
15	3893	ndpi_dpi2json	call site: 03893	ndpi_serialize_string_uint32
14	3542	ndpi_is_number	call site: 03542	ndpi_serialize_uint32_uint32
13	3064	ndpi_internal_detection_giveup	call site: 03064	ndpi_set_detected_protocol
13	3828	ndpi_dpi2json	call site: 03828
11	3710	ndpi_serialize_binary_float	call site: 03710	ndpi_serialize_uint32_float
10	3260	ndpi_internal_detection_process_packet	call site: 03260	fully_enc_heuristic

Runtime coverage analysis

Covered functions

1425

Functions that are reachable but not covered

186

Reachable functions

796

Percentage of reachable functions covered

76.63%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_readerutils_workflow.cpp	22
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	473
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	118
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	120
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	17
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	2
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_domains.c	8
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	5
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	12
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_pl7m_simplest

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	704	15.7%
gold	[1:9]	2129	47.6%
yellow	[10:29]	97	2.17%
greenyellow	[30:49]	39	0.87%
lawngreen	50+	1501	33.5%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1735

Functions that are reachable but not covered

226

Reachable functions

864

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_simplest.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ds_address_cache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	5.71%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	1	0.95%
lawngreen	50+	98	93.3%
All colors	105	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	21	ndpi_init_address_cache	call site: 00021
1	25	ndpi_init_address_cache	call site: 00025
1	27	ndpi_init_address_cache	call site: 00027
1	89	LLVMFuzzerTestOneInput	call site: 00089	ndpi_filter_free
1	91	ndpi_filter_free	call site: 00091
1	95	ndpi_filter_alloc	call site: 00095

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

29

Reachable functions

60

Percentage of reachable functions covered

51.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_address_cache.cpp	21
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_cache.c	26
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_memory.c	3
ndpilib/ndpi_filter.c	2
ndpilib/ndpi_bitmap.c	4

Fuzzer: fuzz_alg_memmem

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	6.45%
gold	[1:9]	1	3.22%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	28	90.3%
All colors	31	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	19	LLVMFuzzerTestOneInput	call site: 00019

Runtime coverage analysis

Covered functions

4

Functions that are reachable but not covered

10

Reachable functions

14

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_memmem.cpp	9
ndpilib/ndpi_utils.c	5

Fuzzer: fuzz_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	483	10.7%
gold	[1:9]	96	2.13%
yellow	[10:29]	87	1.93%
greenyellow	[30:49]	31	0.68%
lawngreen	50+	3805	84.5%
All colors	4502	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
25	1608	ndpi_load_categories_dir	call site: 01608	_wopendir
20	4406	ndpi_free_flow_data	call site: 04406
19	4247	ndpi_serialize_uint32_binary	call site: 04247	ndpi_serializer_header_uint32
15	3255	ndpi_patricia_search_best2	call site: 03255	fprintf
13	1645	ndpi_load_categories_dir	call site: 01645	ndpi_load_category_file
12	3890	ndpi_lru_find_cache	call site: 03890	ndpi_set_risk
12	3953	ndpi_internal_detection_giveup	call site: 03953	ndpi_set_detected_protocol
11	3876	__lru_cache_unlock	call site: 03876	ndpi_reconcile_msteams_udp
10	3861	ndpi_handle_risk_exceptions	call site: 03861	ndpi_check_ipv6_exception
10	4007	ndpi_internal_detection_giveup	call site: 04007	internal_giveup
10	4357	LLVMFuzzerTestOneInput	call site: 04357	ndpi_min
9	3818	ndpi_compute_ndpi_flow_fingerprint	call site: 03818	ndpi_set_detected_protocol

Runtime coverage analysis

Covered functions

1299

Functions that are reachable but not covered

198

Reachable functions

832

Percentage of reachable functions covered

76.2%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_config.cpp	144
ndpi/fuzz/fuzz_common_code.c	3
ndpilib/ndpi_main.c	542
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	77
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	14
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	8
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	18
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/ndpi_domains.c	17
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	1
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/third_partyndpi_sha256.c	8
ndpilib/ndpi_analyze.c	2
ndpilib/ndpi_serializer.c	26
ndpilib/protocols/tcp_udp.c	5
ndpilib/ndpi_classify.c	5
ndpilib/third_partywindows/gettimeofday.c	2

Fuzzer: fuzz_gcrypt_aes

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	2.32%
gold	[1:9]	5	3.87%
yellow	[10:29]	33	25.5%
greenyellow	[30:49]	1	0.77%
lawngreen	50+	87	67.4%
All colors	129	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	24	mbedtls_aesni_has_support	call site: 00024
1	18	aes_gen_tables	call site: 00018

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

35

Reachable functions

51

Percentage of reachable functions covered

31.37%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_gcrypt_aes.cpp	13
ndpilib/third_partygcrypt/aes.c	30
ndpilib/third_partygcrypt/aesni.c	12

Fuzzer: fuzz_ndpi_reader_pl7m_only_subclassification

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1040	23.2%
gold	[1:9]	2132	47.6%
yellow	[10:29]	80	1.78%
greenyellow	[30:49]	36	0.80%
lawngreen	50+	1182	26.4%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
33	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
28	3582	check_proto_on_non_std_port_risk	call site: 03582	ndpi_set_risk
27	4068	ndpi_multimedia_flowtype2str	call site: 04068	ndpi_serialize_string_float
26	4351	process_ndpi_collected_info	call site: 04351	serialize_monitoring_metadata
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
23	3657	ndpi_entropy	call site: 03657	ndpi_entropy2risk
21	1867	LLVMFuzzerTestOneInput	call site: 01867	ndpi_set_config
21	3996	ndpi_serialize_proto	call site: 03996	ndpi_serialize_risk_score

Runtime coverage analysis

Covered functions

1592

Functions that are reachable but not covered

258

Reachable functions

864

Percentage of reachable functions covered

70.14%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_only_subclassification.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_pl7m_randomize_ports

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	711	15.9%
gold	[1:9]	2140	47.8%
yellow	[10:29]	110	2.46%
greenyellow	[30:49]	40	0.89%
lawngreen	50+	1469	32.8%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1732

Functions that are reachable but not covered

226

Reachable functions

864

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_randomize_ports.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_pl7m_internal

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	707	15.8%
gold	[1:9]	2148	48.0%
yellow	[10:29]	80	1.78%
greenyellow	[30:49]	46	1.02%
lawngreen	50+	1489	33.3%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1736

Functions that are reachable but not covered

226

Reachable functions

864

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m_internal.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_payload_analyzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	630	14.0%
gold	[1:9]	2148	48.0%
yellow	[10:29]	96	2.14%
greenyellow	[30:49]	38	0.85%
lawngreen	50+	1558	34.8%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string
9	127	ndpi_free_addr_item	call site: 00127	ndpi_filter_free
9	1693	node_resize_mp	call site: 01693	node_resize_mp

Runtime coverage analysis

Covered functions

1747

Functions that are reachable but not covered

216

Reachable functions

864

Percentage of reachable functions covered

75.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_payload_analyzer.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_alloc_fail

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	655	14.6%
gold	[1:9]	2146	48.0%
yellow	[10:29]	105	2.34%
greenyellow	[30:49]	44	0.98%
lawngreen	50+	1520	34.0%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string
9	127	ndpi_free_addr_item	call site: 00127	ndpi_filter_free

Runtime coverage analysis

Covered functions

1742

Functions that are reachable but not covered

218

Reachable functions

864

Percentage of reachable functions covered

74.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_alloc_fail.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_ndpi_reader_pl7m

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	717	16.0%
gold	[1:9]	2144	47.9%
yellow	[10:29]	82	1.83%
greenyellow	[30:49]	45	1.00%
lawngreen	50+	1482	33.1%
All colors	4470	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
44	4425	LLVMFuzzerTestOneInput	call site: 04425	ndpi_update_params
35	35	ndpi_patricia_destroy	call site: 00035	ndpi_exit_detection_module
34	4378	process_ndpi_collected_info	call site: 04378	dump_flow_fingerprint
29	3024	packet_processing	call site: 03024	ndpi_payload_analyzer
25	1362	ndpi_load_categories_dir	call site: 01362	_wopendir
22	103	ndpi_domain_classify_free	call site: 00103	ac_automata_release
19	3723	ndpi_serialize_uint32_binary	call site: 03723	ndpi_serializer_header_uint32
16	81	ac_automata_walk	call site: 00081	ac_automata_release
15	3308	ndpi_patricia_search_best2	call site: 03308	fprintf
14	3903	ndpi_is_number	call site: 03903	ndpi_serialize_uint32_uint32
13	4071	ndpi_serialize_binary_float	call site: 04071	ndpi_serialize_uint32_float
10	3891	ndpi_serialize_string_uint32	call site: 03891	ndpi_serializer_header_string

Runtime coverage analysis

Covered functions

1734

Functions that are reachable but not covered

225

Reachable functions

864

Percentage of reachable functions covered

73.96%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ndpi_reader_pl7m.c	37
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	517
ndpi/tests/performance/gcrypt.c	3
ndpi/example/reader_util.c	119
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	123
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	12
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	10
ndpilib/ndpi_config.c	6
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/ndpi_fingerprint.c	13
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	1
ndpilib/protocols/rtp.c	1
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	1
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	2
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	2
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	5
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	4
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	7
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_analyze.c	7
ndpilib/ndpi_serializer.c	40
ndpilib/ndpi_classify.c	16
ndpilib/third_partyndpi_sha256.c	8

Fuzzer: fuzz_alg_hll

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4	9.09%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	40	90.9%
All colors	44	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	6	LLVMFuzzerTestOneInput	call site: 00006
1	11	hll_init	call site: 00011
1	26	hll_count	call site: 00026
1	41	hll_destroy	call site: 00041

Runtime coverage analysis

Covered functions

26

Functions that are reachable but not covered

15

Reachable functions

37

Percentage of reachable functions covered

59.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_alg_hll.cpp	15
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	3
ndpilib/ndpi_analyze.c	5
ndpilib/third_partyhll/hll.c	7
ndpilib/third_partyhll/MurmurHash3.c	1

Fuzzer: fuzz_ds_kdtree

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5	5.20%
gold	[1:9]	2	2.08%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	89	92.7%
All colors	96	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1	7	LLVMFuzzerTestOneInput	call site: 00007
1	10	LLVMFuzzerTestOneInput	call site: 00010
1	67	kd_nearest	call site: 00067	kd_res_free
1	73	LLVMFuzzerTestOneInput	call site: 00073	printf
1	87	clear_rec	call site: 00087

Runtime coverage analysis

Covered functions

38

Functions that are reachable but not covered

18

Reachable functions

53

Percentage of reachable functions covered

66.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_ds_kdtree.cpp	18
ndpi/fuzz/fuzz_common_code.c	3
ndpi/tests/performance/gcrypt.c	2
ndpilib/ndpi_analyze.c	9
ndpilib/third_partykdtree.c	20

Fuzzer: fuzz_filecfg_config

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	89	6.65%
gold	[1:9]	10	0.74%
yellow	[10:29]	6	0.44%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1233	92.1%
All colors	1338	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
21	111	ndpi_exit_detection_module	call site: 00111	ndpi_hash_free
17	47	ndpi_exit_detection_module	call site: 00047	cache_free
6	6	ndpi_init_detection_module	call site: 00006	set_ndpi_debug_function
4	22	ndpi_patricia_destroy	call site: 00022	ndpi_Deref_Prefix
4	27	ndpi_DeleteEntry	call site: 00027
4	68	ndpi_exit_detection_module	call site: 00068	ndpi_tdestroy_recurse
4	81	node_release	call site: 00081	acho_free
4	91	ndpi_exit_detection_module	call site: 00091	ndpi_hash_free
4	1279	init_string_based_protocols	call site: 01279	NDPI_LOG_ERR
3	76	ac_automata_walk	call site: 00076
3	87	ac_automata_release	call site: 00087	ac_automata_release
2	96	ndpi_hash_free	call site: 00096	ndpi_hash_free

Runtime coverage analysis

Covered functions

72

Functions that are reachable but not covered

61

Reachable functions

110

Percentage of reachable functions covered

44.55%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_filecfg_config.c	8
ndpi/fuzz/fuzz_common_code.c	4
ndpilib/ndpi_main.c	58
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	7
ndpilib/ndpi_utils.c	12
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	2
ndpilib/third_partyahocorasick.c	12
ndpilib/ndpi_domain_classify.c	4
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	1
ndpilib/ndpi_bitmap.c	2
ndpilib/ndpi_memory.c	3
ndpilib/ndpi_config.c	6

Fuzzer: fuzz_gcrypt_gcm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	17	10.1%
gold	[1:9]	6	3.59%
yellow	[10:29]	3	1.79%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	141	84.4%
All colors	167	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
5	70	mbedtls_gcm_update	call site: 00070
2	58	gcm_mult	call site: 00058	gcm_mask
2	86	mbedtls_aesni_has_support	call site: 00086
2	115	mbedtls_gcm_update_ad	call site: 00115	gcm_mult
1	37	mbedtls_cipher_setkey	call site: 00037
1	48	mbedtls_cipher_update	call site: 00048	mbedtls_gcm_update
1	61	gcm_mask	call site: 00061	mbedtls_platform_zeroize
1	64	gcm_mask	call site: 00064	gcm_mult
1	80	gcm_gen_table	call site: 00080
1	124	mbedtls_gcm_finish	call site: 00124	gcm_mult

Runtime coverage analysis

Covered functions

36

Functions that are reachable but not covered

32

Reachable functions

55

Percentage of reachable functions covered

41.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_gcrypt_gcm.cpp	18
ndpilib/third_partygcrypt/gcm.c	24
ndpilib/third_partygcrypt/cipher.c	8
ndpilib/third_party/include/gcrypt/cipher.h	1
ndpilib/third_partygcrypt/aesni.c	8

Fuzzer: ndpi/fuzz/fuzz_is_stun.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	649	16.2%
gold	[1:9]	2090	52.3%
yellow	[10:29]	90	2.25%
greenyellow	[30:49]	56	1.40%
lawngreen	50+	1110	27.7%
All colors	3995	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
61	3679	processCertificateElements	call site: 03679	strptime
25	1345	ndpi_load_categories_dir	call site: 01345	_wopendir
15	2850	ndpi_patricia_search_best2	call site: 02850	fprintf
11	108	ndpi_exit_detection_module	call site: 00108	ndpi_hash_free
11	3880	ookla_search_into_cache	call site: 03880	ndpi_set_detected_protocol
10	3762	processCertificateElements	call site: 03762	ndpi_set_risk
9	1618	node_resize_mp	call site: 01618	node_resize_mp
9	3358	ndpi_bitmap_isset	call site: 03358	ndpi_set_risk
7	54	ndpi_lru_free_cache	call site: 00054
7	1371	ndpi_load_categories_dir	call site: 01371	readdir_r
7	3145	processClientServerHello	call site: 03145	printf
7	3368	processClientServerHello	call site: 03368	printf

Runtime coverage analysis

Covered functions

2506

Functions that are reachable but not covered

152

Reachable functions

728

Percentage of reachable functions covered

79.12%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
ndpi/fuzz/fuzz_is_stun.c	3
ndpi/fuzz/fuzz_common_code.c	11
ndpilib/ndpi_main.c	459
ndpi/tests/performance/gcrypt.c	3
ndpilib/third_partyndpi_patricia.c	20
ndpilib/ndpi_utils.c	53
ndpilib/third_partylibcache.c	1
ndpilib/ndpi_cache.c	20
ndpilib/third_partyahocorasick.c	41
ndpilib/ndpi_domain_classify.c	13
ndpilib/ndpi_geoip.c	2
ndpilib/ndpi_filter.c	2
ndpilib/ndpi_bitmap.c	4
ndpilib/ndpi_memory.c	6
ndpilib/ndpi_config.c	8
ndpilib/ndpi_domains.c	17
ndpilib/third_party/include/windows/dirent.h	19
ndpilib/third_partyshoco.c	8
ndpilib/protocols/http.c	1
ndpilib/protocols/blizzard.c	1
ndpilib/protocols/tls.c	108
ndpilib/protocols/rtp.c	5
ndpilib/protocols/rtsp.c	1
ndpilib/protocols/rdp.c	1
ndpilib/protocols/stun.c	52
ndpilib/protocols/sip.c	1
ndpilib/protocols/mudfish.c	1
ndpilib/protocols/imo.c	1
ndpilib/protocols/teredo.c	1
ndpilib/protocols/edonkey.c	1
ndpilib/protocols/gnutella.c	1
ndpilib/protocols/nats.c	1
ndpilib/protocols/socks45.c	1
ndpilib/protocols/irc.c	1
ndpilib/protocols/jabber.c	1
ndpilib/protocols/mail_pop.c	1
ndpilib/protocols/mail_imap.c	1
ndpilib/protocols/mail_smtp.c	1
ndpilib/protocols/usenet.c	1
ndpilib/protocols/dns.c	1
ndpilib/protocols/vmware.c	1
ndpilib/protocols/non_tcp_udp.c	1
ndpilib/protocols/iax.c	1
ndpilib/protocols/mgcp.c	1
ndpilib/protocols/zattoo.c	1
ndpilib/protocols/qq.c	1
ndpilib/protocols/ssh.c	1
ndpilib/protocols/vnc.c	1
ndpilib/protocols/vxlan.c	1
ndpilib/protocols/teamviewer.c	1
ndpilib/protocols/dhcp.c	1
ndpilib/protocols/steam.c	1
ndpilib/protocols/xbox.c	1
ndpilib/protocols/smb.c	1
ndpilib/protocols/mining.c	1
ndpilib/protocols/telnet.c	1
ndpilib/protocols/ntp.c	1
ndpilib/protocols/nfs.c	1
ndpilib/protocols/ssdp.c	1
ndpilib/protocols/postgres.c	1
ndpilib/protocols/mysql.c	1
ndpilib/protocols/bgp.c	1
ndpilib/protocols/snmp_proto.c	1
ndpilib/protocols/icecast.c	1
ndpilib/protocols/kerberos.c	1
ndpilib/protocols/syslog.c	1
ndpilib/protocols/netbios.c	1
ndpilib/protocols/ipp.c	1
ndpilib/protocols/ldap.c	1
ndpilib/protocols/xdmcp.c	1
ndpilib/protocols/tftp.c	1
ndpilib/protocols/mssql_tds.c	1
ndpilib/protocols/pptp.c	1
ndpilib/protocols/dhcpv6.c	1
ndpilib/protocols/afp.c	1
ndpilib/protocols/checkmk.c	1
ndpilib/protocols/cpha.c	1
ndpilib/protocols/nexon.c	1
ndpilib/protocols/dofus.c	1
ndpilib/protocols/crossfire.c	1
ndpilib/protocols/guildwars2.c	1
ndpilib/protocols/armagetron.c	1
ndpilib/protocols/dropbox.c	1
ndpilib/protocols/sonos.c	1
ndpilib/protocols/spotify.c	1
ndpilib/protocols/radius_proto.c	1
ndpilib/protocols/citrix.c	1
ndpilib/protocols/hcl_notes.c	1
ndpilib/protocols/gtp.c	1
ndpilib/protocols/hsrp.c	1
ndpilib/protocols/dcerpc.c	1
ndpilib/protocols/netflow.c	1
ndpilib/protocols/sflow.c	1
ndpilib/protocols/h323.c	1
ndpilib/protocols/openvpn.c	1
ndpilib/protocols/noe.c	1
ndpilib/protocols/ciscovpn.c	1
ndpilib/protocols/teamspeak.c	1
ndpilib/protocols/skinny.c	1
ndpilib/protocols/rsync.c	1
ndpilib/protocols/whoisdas.c	1
ndpilib/protocols/oracle.c	1
ndpilib/protocols/corba.c	1
ndpilib/protocols/rtmp.c	1
ndpilib/protocols/ftp_control.c	1
ndpilib/protocols/ftp_data.c	1
ndpilib/protocols/megaco.c	1
ndpilib/protocols/resp.c	1
ndpilib/protocols/zeromq.c	1
ndpilib/protocols/telegram.c	1
ndpilib/protocols/quic.c	9
ndpilib/protocols/diameter.c	1
ndpilib/protocols/apple_push.c	1
ndpilib/protocols/eaq.c	1
ndpilib/protocols/kakaotalk_voice.c	1
ndpilib/protocols/mikrotik.c	1
ndpilib/protocols/mpegts.c	1
ndpilib/protocols/ubntac2.c	1
ndpilib/protocols/coap.c	1
ndpilib/protocols/mqtt.c	1
ndpilib/protocols/someip.c	1
ndpilib/protocols/rx.c	1
ndpilib/protocols/git.c	1
ndpilib/protocols/drda.c	1
ndpilib/protocols/bjnp.c	1
ndpilib/protocols/smpp.c	1
ndpilib/protocols/tinc.c	1
ndpilib/protocols/fix.c	1
ndpilib/protocols/nintendo.c	1
ndpilib/protocols/modbus.c	1
ndpilib/protocols/capwap.c	1
ndpilib/protocols/zabbix.c	1
ndpilib/protocols/viber.c	1
ndpilib/protocols/bittorrent.c	1
ndpilib/protocols/whatsapp.c	1
ndpilib/protocols/ookla.c	8
ndpilib/protocols/amqp.c	1
ndpilib/protocols/steam_datagram_relay.c	1
ndpilib/protocols/lisp.c	1
ndpilib/protocols/ajp.c	1
ndpilib/protocols/memcached.c	1
ndpilib/protocols/nest_log_sink.c	1
ndpilib/protocols/wireguard.c	1
ndpilib/protocols/amazon_video.c	1
ndpilib/protocols/s7comm.c	1
ndpilib/protocols/iec60870-5-104.c	1
ndpilib/protocols/dnp3.c	1
ndpilib/protocols/websocket.c	1
ndpilib/protocols/soap.c	1
ndpilib/protocols/dnscrypt.c	1
ndpilib/protocols/mongodb.c	1
ndpilib/protocols/among_us.c	1
ndpilib/protocols/hpvirtgrp.c	1
ndpilib/protocols/genshin_impact.c	1
ndpilib/protocols/z3950.c	1
ndpilib/protocols/avast_securedns.c	1
ndpilib/protocols/cassandra.c	1
ndpilib/protocols/ethernet_ip.c	1
ndpilib/protocols/wsd.c	1
ndpilib/protocols/tocaboca.c	1
ndpilib/protocols/sd_rtn.c	1
ndpilib/protocols/raknet.c	1
ndpilib/protocols/xiaomi.c	1
ndpilib/protocols/mpegdash.c	1
ndpilib/protocols/rsh.c	1
ndpilib/protocols/ipsec.c	1
ndpilib/protocols/collectd.c	1
ndpilib/protocols/i3d.c	1
ndpilib/protocols/riotgames.c	1
ndpilib/protocols/ultrasurf.c	1
ndpilib/protocols/threema.c	1
ndpilib/protocols/alicloud.c	1
ndpilib/protocols/avast.c	1
ndpilib/protocols/softether.c	1
ndpilib/protocols/activision.c	1
ndpilib/protocols/discord.c	1
ndpilib/protocols/tivoconnect.c	1
ndpilib/protocols/kismet.c	1
ndpilib/protocols/fastcgi.c	1
ndpilib/protocols/natpmp.c	1
ndpilib/protocols/syncthing.c	1
ndpilib/protocols/crynet.c	1
ndpilib/protocols/line.c	1
ndpilib/protocols/munin.c	1
ndpilib/protocols/elastic_search.c	1
ndpilib/protocols/tuya_lp.c	1
ndpilib/protocols/tplink_shp.c	1
ndpilib/protocols/merakicloud.c	1
ndpilib/protocols/tailscale.c	1
ndpilib/protocols/source_engine.c	1
ndpilib/protocols/bacnet.c	1
ndpilib/protocols/oicq.c	1
ndpilib/protocols/hots.c	1
ndpilib/protocols/epicgames.c	1
ndpilib/protocols/bitcoin.c	1
ndpilib/protocols/thrift.c	1
ndpilib/protocols/slp.c	1
ndpilib/protocols/http2.c	1
ndpilib/protocols/haproxy.c	1
ndpilib/protocols/rmcp.c	1
ndpilib/protocols/can.c	1
ndpilib/protocols/protobuf.c	1
ndpilib/protocols/ethereum.c	1
ndpilib/protocols/ptpv2.c	1
ndpilib/protocols/hart-ip.c	1
ndpilib/protocols/rtps.c	1
ndpilib/protocols/opc-ua.c	1
ndpilib/protocols/fins.c	1
ndpilib/protocols/ethersio.c	1
ndpilib/protocols/beckhoff_ads.c	1
ndpilib/protocols/iso9506-1-mms.c	1
ndpilib/protocols/ieee-c37118.c	1
ndpilib/protocols/ethersbus.c	1
ndpilib/protocols/monero.c	1
ndpilib/protocols/profinet_io.c	1
ndpilib/protocols/hislip.c	1
ndpilib/protocols/uftp.c	1
ndpilib/protocols/openflow.c	1
ndpilib/protocols/json-rpc.c	1
ndpilib/protocols/kafka.c	1
ndpilib/protocols/nomachine.c	1
ndpilib/protocols/iec62056.c	1
ndpilib/protocols/hl7.c	1
ndpilib/protocols/dicom.c	1
ndpilib/protocols/ceph.c	1
ndpilib/protocols/roughtime.c	1
ndpilib/protocols/kcp.c	1
ndpilib/protocols/mumble.c	1
ndpilib/protocols/zoom.c	1
ndpilib/protocols/yojimbo.c	1
ndpilib/protocols/stomp.c	1
ndpilib/protocols/radmin.c	1
ndpilib/protocols/raft.c	1
ndpilib/protocols/cip.c	1
ndpilib/protocols/gearman.c	1
ndpilib/protocols/tencent_games.c	1
ndpilib/protocols/gaijin_entertainment.c	1
ndpilib/protocols/c1222.c	1
ndpilib/protocols/dlep.c	1
ndpilib/protocols/bfd.c	1
ndpilib/protocols/netease_games.c	1
ndpilib/protocols/path_of_exile.c	1
ndpilib/protocols/pfcp.c	1
ndpilib/protocols/flute.c	1
ndpilib/protocols/lol_wild_rift.c	1
ndpilib/protocols/teso.c	1
ndpilib/protocols/ldp.c	1
ndpilib/protocols/knxnet_ip.c	1
ndpilib/protocols/bfcp.c	1
ndpilib/protocols/iqiyi.c	1
ndpilib/protocols/egd.c	1
ndpilib/protocols/cod_mobile.c	1
ndpilib/protocols/zug.c	1
ndpilib/protocols/jrmi.c	1
ndpilib/protocols/ripe_atlas.c	1
ndpilib/protocols/cloudflare_warp.c	1
ndpilib/protocols/nano.c	1
ndpilib/protocols/openwire.c	1
ndpilib/protocols/cnp-ip.c	1
ndpilib/protocols/atg.c	1
ndpilib/protocols/trdp.c	1
ndpilib/protocols/lustre.c	1
ndpilib/protocols/dingtalk.c	1
ndpilib/protocols/paltalk.c	1
ndpilib/protocols/lagofast.c	1
ndpilib/protocols/gearup_booster.c	1
ndpilib/protocols/msdo.c	1
ndpilib/protocols/melsec.c	1
ndpilib/protocols/hamachi.c	1
ndpilib/protocols/glbp.c	1
ndpilib/protocols/easyweather.c	1
ndpilib/protocols/tristation.c	1
ndpilib/protocols/samsung_sdp.c	1
ndpilib/protocols/matter.c	1
ndpilib/ndpi_fingerprint.c	5
ndpilib/ndpi_serializer.c	2
ndpilib/third_partyndpi_md5.c	6
ndpi/windowsndpi_define.h	1
ndpilib/third_partyndpi_sha256.c	8
ndpilib/third_partyndpi_sha1.c	10
ndpilib/third_partystrptime.c	7
ndpilib/ndpi_analyze.c	3

Fuzzer: json-c-json-c-0.17-20230812/fuzz/tokener_parse_ex_fuzzer.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	261	97.7%
gold	[1:9]	2	0.74%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	4	1.49%
All colors	267	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
245	0	EP	call site: 00000	json_tokener_parse_ex
12	247	LLVMFuzzerTestOneInput	call site: 00247	json_object_to_json_string_ext
4	262	LLVMFuzzerTestOneInput	call site: 00262	json_tokener_reset

Runtime coverage analysis

Covered functions

2506

Functions that are reachable but not covered

109

Reachable functions

110

Percentage of reachable functions covered

0.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
json-c-json-c-0.17-20230812/fuzz/tokener_parse_ex_fuzzer.cc	8
json-c-json-c-0.17-20230812/json_tokener.c	47
json-c-json-c-0.17-20230812/printbuf.c	3
json-c-json-c-0.17-20230812/json_object.c	48
json-c-json-c-0.17-20230812/linkhash.c	8
json-c-json-c-0.17-20230812/arraylist.c	4
json-c-json-c-0.17-20230812/json_util.c	2
json-c-json-c-0.17-20230812/linkhash.h	1