High level conclusions

Fuzzers reach 63.55% of cyclomatic complexity.

Fuzzers reach 57.37% of all functions.

Fuzzer snmp_parse_trap_fuzzer is blocked:

The runtime code coverage of snmp_parse_trap_fuzzer covers 20.21% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_parse_fuzzer is blocked:

The runtime code coverage of snmp_parse_fuzzer covers 21.90% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_parse_oid_fuzzer is blocked:

The runtime code coverage of snmp_parse_oid_fuzzer covers 26.95% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_transport_fuzzer is blocked:

The runtime code coverage of snmp_transport_fuzzer covers 22.58% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer read_objid_fuzzer is blocked:

The runtime code coverage of read_objid_fuzzer covers 25.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_scoped_pdu_parse_fuzzer is blocked:

The runtime code coverage of snmp_scoped_pdu_parse_fuzzer covers 27.27% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_mib_fuzzer is blocked:

The runtime code coverage of snmp_mib_fuzzer covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

1319 / 2299

Cyclomatic complexity statically reachable by fuzzers

13076 / 20575

Runtime code coverage of functions

897 / 2299

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: parse_octet_hint_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	24	75.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	7	21.8%
lawngreen	50+	1	3.12%
All colors	32	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
24	7	parse_hints_ctor	call site: 00007	parse_hints_parse

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

9

Reachable functions

13

Percentage of reachable functions covered

30.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/parse_octet_hint_fuzzer.c	1
snmplib/mib.c	6

Fuzzer: snmp_mib_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	932	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	932	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
931	0	EP	call site: 00000	read_mib

Runtime coverage analysis

Covered functions

1

Functions that are reachable but not covered

123

Reachable functions

123

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_mib_fuzzer.c	1
snmplib/parse.c	66
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/snmp_debug.c	4
snmplib/mib.c	4
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1

Fuzzer: snmp_print_var_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1079	76.6%
gold	[1:9]	101	7.17%
yellow	[10:29]	40	2.84%
greenyellow	[30:49]	22	1.56%
lawngreen	50+	166	11.7%
All colors	1408	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	358	strlcpy	call site: 00358	parse_compliance
86	189	module_name	call site: 00189	parse_imports
67	113	print_error	call site: 00113	do_linkup
48	1314	sprint_realloc_integer	call site: 01314	netsnmp_sprint_realloc_objid_tree
38	954	snmp_set_detail	call site: 00954	parse_octet_hint
19	93	snmp_log	call site: 00093	parse
19	338	print_module_not_found	call site: 00338	read_module_replacements
18	312	netsnmp_ds_set_string	call site: 00312	netsnmp_set_mib_directory
15	1054	sprint_realloc_by_type	call site: 01054	sprint_realloc_asciistring
11	81	init_tree_roots	call site: 00081	read_from_file
10	1036	_get_realloc_symbol	call site: 01036	_get_realloc_symbol_octet_string
9	944	_add_strings_to_oid	call site: 00944	find_tree_node

Runtime coverage analysis

Covered functions

83

Functions that are reachable but not covered

108

Reachable functions

184

Percentage of reachable functions covered

41.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_print_var_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	5
snmplib/default_store.c	5
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/mib.c	49
snmplib/parse.c	64
snmplib/tools.c	3
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5

Fuzzer: snmp_pdu_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	432	61.8%
gold	[1:9]	4	0.57%
yellow	[10:29]	23	3.29%
greenyellow	[30:49]	14	2.00%
lawngreen	50+	226	32.3%
All colors	699	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
185	92	asn_parse_objid	call site: 00092	sprint_realloc_objid
157	278	snmp_log	call site: 00278	netsnmp_sprint_realloc_objid_tree
22	61	asn_parse_objid	call site: 00061	debugmsg
7	454	asn_parse_string	call site: 00454	debugmsg
5	24	snmp_pdu_parse	call site: 00024	debugmsg
5	35	log_handler_stdouterr	call site: 00035	sprintf_stamp
3	566	snmp_pdu_parse	call site: 00566	_asn_size_err
3	587	asn_parse_unsigned_int64	call site: 00587	debugmsg
3	591	snmp_pdu_parse	call site: 00591	_asn_size_err
3	609	snmp_pdu_parse	call site: 00609	_asn_size_err
3	629	snmp_pdu_parse	call site: 00629	_asn_size_err
3	651	asn_parse_signed_int64	call site: 00651	debugmsg

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

75

Reachable functions

115

Percentage of reachable functions covered

34.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_pdu_parse_fuzzer.c	1
snmplib/snmp_api.c	10
snmplib/asn1.c	18
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	8
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/mib.c	30
snmplib/tools.c	3
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp.c	1
snmplib/snmp_client.c	1
snmplib/snmp_secmod.c	1

Fuzzer: snmp_scoped_pdu_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	95	70.8%
gold	[1:9]	13	9.70%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	1.49%
lawngreen	50+	24	17.9%
All colors	134	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
50	57	asn_parse_string	call site: 00057	debugmsg_hex
22	27	snmpv3_scopedPDU_parse	call site: 00027	debugmsg
14	110	snmpv3_scopedPDU_parse	call site: 00110	asn_parse_string
3	126	snmp_free_pdu	call site: 00126	snmp_log
2	53	snmpv3_scopedPDU_parse	call site: 00053	snmp_log
2	131	snmp_free_pdu	call site: 00131	snmp_free_var
1	4	asn_parse_sequence	call site: 00004	snmp_set_detail
1	13	asn_parse_nlength	call site: 00013	snmp_set_detail

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

40

Reachable functions

55

Percentage of reachable functions covered

27.27%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c	1
snmplib/snmp_api.c	7
snmplib/asn1.c	8
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	7
snmplib/snmp_logging.c	6
snmplib/default_store.c	2
snmplib/mib.c	4
snmplib/tools.c	2
snmplib/snmp_secmod.c	1

Fuzzer: read_objid_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	880	89.2%
gold	[1:9]	64	6.49%
yellow	[10:29]	2	0.20%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	40	4.05%
All colors	986	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	334	strlcpy	call site: 00334	parse_compliance
93	158	find_tree_node	call site: 00158	parse_imports
67	89	print_error	call site: 00089	do_linkup
38	930	snmp_set_detail	call site: 00930	parse_octet_hint
19	69	snmp_log	call site: 00069	parse
19	314	print_module_not_found	call site: 00314	read_module_replacements
18	288	netsnmp_ds_set_string	call site: 00288	netsnmp_set_mib_directory
13	916	_add_strings_to_oid	call site: 00916	find_tree_node
11	57	init_tree_roots	call site: 00057	read_from_file
5	17	which_module	call site: 00017	debugmsg
5	28	log_handler_stdouterr	call site: 00028	sprintf_stamp
5	278	netsnmp_set_mib_directory	call site: 00278	debugmsgtoken

Runtime coverage analysis

Covered functions

34

Functions that are reachable but not covered

99

Reachable functions

132

Percentage of reachable functions covered

25.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/read_objid_fuzzer.c	1
snmplib/mib.c	15
snmplib/parse.c	63
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1

Fuzzer: snmp_transport_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1240	78.4%
gold	[1:9]	50	3.16%
yellow	[10:29]	26	1.64%
greenyellow	[30:49]	13	0.82%
lawngreen	50+	252	15.9%
All colors	1581	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
666	205	netsnmp_tlsbase_ctor	call site: 00205	netsnmp_certs_load
360	960	netsnmp_tdomain_dump	call site: 00960	sprint_realloc_objid
22	925	netsnmp_alias_ctor	call site: 00925	copy_nword
21	1336	netsnmp_ipv6_fmtaddr	call site: 01336	netsnmp_gethostbyaddr
19	75	config_vlog	call site: 00075	copy_nword
18	126	init_snmp_transport	call site: 00126	netsnmp_transport_filter_add
15	56	netsnmp_ds_register_config	call site: 00056	netsnmp_ds_parse_boolean
11	1407	netsnmp_getaddrinfo	call site: 01407	debugmsgtoken
10	101	skip_white_const	call site: 00101	netsnmp_ds_handle_config
8	116	init_snmp_transport	call site: 00116	netsnmp_ds_set_int
6	168	netsnmp_tlsbase_ctor	call site: 00168	copy_nword
5	4	netsnmp_ds_set_string	call site: 00004	debugmsg

Runtime coverage analysis

Covered functions

71

Functions that are reachable but not covered

240

Reachable functions

310

Percentage of reachable functions covered

22.58%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_transport_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	4
snmplib/default_store.c	9
snmplib/snmp_debug.c	5
snmplib/snmp_logging.c	6
snmplib/snmp_transport.c	11
snmplib/read_config.c	15
snmplib/strlcpy.c	1
snmplib/container.c	9
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/callback.c	5
snmplib/cert_util.c	40
snmplib/tools.c	6
snmplib/system.c	4
snmplib/snmp_enum.c	8
snmplib/dir_utils.c	3
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/snmp_api.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	3
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	6
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	2
snmplib/mib.c	30
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/transports/snmpIPv6BaseDomain.c	7
snmplib/transports/snmpIPBaseDomain.c	2

Fuzzer: snmp_e2e_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4531	76.5%
gold	[1:9]	761	12.8%
yellow	[10:29]	111	1.87%
greenyellow	[30:49]	39	0.65%
lawngreen	50+	475	8.02%
All colors	5917	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1249	4557	_snmp_parse	call site: 04557	snmp_sess_send
576	1983	print_module_not_found	call site: 01983	read_module_replacements
131	2961	snmp_set_detail	call site: 02961	usm_set_user_password
130	1795	read_module_internal	call site: 01795	read_from_file
102	420	_get_cert_container	call site: 00420	netsnmp_directory_container_read_some
97	3726	netsnmp_parse_args	call site: 03726	netsnmp_container_init_list
93	1059	sprint_realloc_hexstring	call site: 01059	sprint_realloc_bitstring
84	1588	init_snmp_logging	call site: 01588	snmp_log_options
83	1235	netsnmp_sprint_realloc_objid_tree	call site: 01235	sprint_realloc_counter64
79	523	se_find_slist_ptr	call site: 00523	_add_certfile
66	667	_netsnmp_release_trustcerts	call site: 00667	_find_partner
65	3406	read_config	call site: 03406	read_config

Runtime coverage analysis

Covered functions

314

Functions that are reachable but not covered

487

Reachable functions

782

Percentage of reachable functions covered

37.72%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_e2e_fuzzer.c	2
snmplib/snmp_parse_args.c	3
snmplib/snmp_api.c	78
snmplib/parse.c	72
snmplib/snmp_debug.c	18
snmplib/snmp_logging.c	26
snmplib/default_store.c	11
snmplib/mib.c	42
snmplib/snmp_transport.c	20
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	7
snmplib/cert_util.c	44
snmplib/tools.c	11
snmplib/system.c	3
snmplib/snmp_enum.c	13
snmplib/dir_utils.c	3
snmplib/container.c	19
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	10
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	24
snmplib/lcd_time.c	4
snmplib/scapi.c	13
snmplib/snmp_secmod.c	4
snmplib/snmpusm.c	26
snmplib/keytools.c	5
snmplib/snmptsm.c	1
snmplib/snmpksm.c	2
snmplib/snmp_alarm.c	11
snmplib/vacm.c	1
snmplib/large_fd_set.c	9
snmplib/asn1.c	51
snmplib/snmp.c	4
snmplib/snmp_auth.c	1
snmplib/snmp_client.c	10

Fuzzer: snmp_config_mem_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	888	84.9%
gold	[1:9]	69	6.60%
yellow	[10:29]	6	0.57%
greenyellow	[30:49]	3	0.28%
lawngreen	50+	79	7.55%
All colors	1045	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	374	strlcpy	call site: 00374	parse_compliance
93	198	find_tree_node	call site: 00198	parse_imports
67	129	print_error	call site: 00129	do_linkup
38	970	snmp_set_detail	call site: 00970	parse_octet_hint
30	98	init_tree_roots	call site: 00098	read_from_file
19	354	print_module_not_found	call site: 00354	read_module_replacements
18	328	netsnmp_ds_set_string	call site: 00328	netsnmp_set_mib_directory
13	956	_add_strings_to_oid	call site: 00956	find_tree_node
6	48	read_config_read_octet_string_const	call site: 00048	debugmsgtoken
5	5	copy_nword_const	call site: 00005	debugmsg
5	16	log_handler_stdouterr	call site: 00016	sprintf_stamp
5	318	netsnmp_set_mib_directory	call site: 00318	debugmsgtoken

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

101

Reachable functions

150

Percentage of reachable functions covered

32.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_config_mem_fuzzer.c	1
snmplib/read_config.c	11
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/mib.c	15
snmplib/parse.c	63
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1
snmplib/int64.c	5

Fuzzer: snmp_parse_oid_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	891	87.6%
gold	[1:9]	64	6.29%
yellow	[10:29]	2	0.19%
greenyellow	[30:49]	2	0.19%
lawngreen	50+	58	5.70%
All colors	1017	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	345	strlcpy	call site: 00345	parse_compliance
93	169	find_tree_node	call site: 00169	parse_imports
67	100	print_error	call site: 00100	do_linkup
38	941	snmp_set_detail	call site: 00941	parse_octet_hint
19	80	snmp_log	call site: 00080	parse
19	325	print_module_not_found	call site: 00325	read_module_replacements
18	299	netsnmp_ds_set_string	call site: 00299	netsnmp_set_mib_directory
13	927	_add_strings_to_oid	call site: 00927	find_tree_node
11	68	init_tree_roots	call site: 00068	read_from_file
8	4	snmp_parse_oid	call site: 00004	debugmsgtoken
5	18	log_handler_stdouterr	call site: 00018	sprintf_stamp
5	289	netsnmp_set_mib_directory	call site: 00289	debugmsgtoken

Runtime coverage analysis

Covered functions

39

Functions that are reachable but not covered

103

Reachable functions

141

Percentage of reachable functions covered

26.95%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_oid_fuzzer.c	1
snmplib/mib.c	19
snmplib/default_store.c	4
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/parse.c	65
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1

Fuzzer: snmp_api_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1968	54.8%
gold	[1:9]	110	3.06%
yellow	[10:29]	83	2.31%
greenyellow	[30:49]	80	2.22%
lawngreen	50+	1350	37.5%
All colors	3591	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
593	1147	print_module_not_found	call site: 01147	read_module_replacements
327	305	find_tree_node	call site: 00305	_get_realloc_symbol
192	3220	snmp_pdu_realloc_rbuild	call site: 03220	snmpv3_packet_build
146	938	print_error	call site: 00938	parse_imports
81	2676	snmpv3_parse	call site: 02676	snmp_pdu_parse
68	3496	_snmp_build	call site: 03496	snmp_build
65	2788	_snmp_parse	call site: 02788	snmp_sess_send
51	1748	_add_strings_to_oid	call site: 01748	parse_octet_hint
45	2860	_snmp_build	call site: 02860	snmpv3_packet_realloc_rbuild
44	3175	snmp_pdu_realloc_rbuild	call site: 03175	asn_realloc_rbuild_objid
30	901	init_tree_roots	call site: 00901	read_from_file
24	2761	_snmp_parse	call site: 02761	snmp_call_callbacks

Runtime coverage analysis

Covered functions

161

Functions that are reachable but not covered

191

Reachable functions

348

Percentage of reachable functions covered

45.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_api_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	7
agent/mibgroup/agentx/protocol.c	11
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	7
snmplib/default_store.c	5
snmplib/mib.c	50
snmplib/tools.c	8
snmplib/snmp_client.c	11
snmplib/parse.c	66
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	9
snmplib/snmp_api.c	44
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/asn1.c	50
snmplib/snmp.c	4
snmplib/snmp_secmod.c	1
snmplib/snmp_auth.c	1
snmplib/callback.c	4
snmplib/snmpv3.c	3
snmplib/snmp_enum.c	4
snmplib/snmp_transport.c	2

Fuzzer: snmp_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1657	79.6%
gold	[1:9]	13	0.62%
yellow	[10:29]	19	0.91%
greenyellow	[30:49]	10	0.48%
lawngreen	50+	381	18.3%
All colors	2080	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1128	950	_snmp_parse	call site: 00950	snmp_sess_send
336	302	asn_parse_objid	call site: 00302	sprint_realloc_objid
55	223	snmpv3_parse	call site: 00223	snmp_pdu_parse
27	850	snmp_free_var	call site: 00850	snmp_pdu_parse
22	81	asn_parse_int	call site: 00081	debugmsg
12	187	asn_parse_string	call site: 00187	debugmsg
11	890	snmp_get_next_transid	call site: 00890	snmp_parse_version
5	4	snmpv3_parse	call site: 00004	debugmsg
5	15	log_handler_stdouterr	call site: 00015	sprintf_stamp
5	913	_snmp_parse	call site: 00913	debugmsgtoken
3	726	snmp_pdu_parse	call site: 00726	_asn_size_err
3	747	asn_parse_unsigned_int64	call site: 00747	debugmsg

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

164

Reachable functions

210

Percentage of reachable functions covered

21.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_fuzzer.c	1
snmplib/snmp_api.c	39
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/asn1.c	50
snmplib/strlcpy.c	1
snmplib/mib.c	30
snmplib/tools.c	4
snmplib/snmp_secmod.c	1
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp.c	4
snmplib/snmp_client.c	10
snmplib/snmp_auth.c	1
snmplib/callback.c	4
snmplib/snmpv3.c	2
snmplib/snmp_enum.c	4
snmplib/snmp_transport.c	2

Fuzzer: snmp_parse_args_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2218	56.5%
gold	[1:9]	733	18.6%
yellow	[10:29]	124	3.16%
greenyellow	[30:49]	40	1.01%
lawngreen	50+	809	20.6%
All colors	3924	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	967	netsnmp_tdomain_dump	call site: 00967	sprint_realloc_objid
280	2203	parse_objectid	call site: 02203	parse_compliance
138	737	netsnmp_certs_load	call site: 00737	netsnmp_cert_load_x509
102	422	_get_cert_container	call site: 00422	netsnmp_directory_container_read_some
82	2094	parse_ranges	call site: 02094	merge_parse_objectid
79	525	se_find_slist_ptr	call site: 00525	_add_certfile
66	669	_netsnmp_release_trustcerts	call site: 00669	_find_partner
65	3409	read_config	call site: 03409	read_config
59	1838	get_tc_index	call site: 01838	do_subtree
53	605	snmp_realloc	call site: 00605	_add_cert
50	339	CONTAINER_CLEAR	call site: 00339	netsnmp_directory_container_read_some
46	3865	LLVMFuzzerTestOneInput	call site: 03865	snmp_sess_close

Runtime coverage analysis

Covered functions

343

Functions that are reachable but not covered

315

Reachable functions

640

Percentage of reachable functions covered

50.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_args_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	5
snmplib/snmp_parse_args.c	3
snmplib/snmp_api.c	26
snmplib/parse.c	72
snmplib/snmp_debug.c	13
snmplib/snmp_logging.c	26
snmplib/default_store.c	11
snmplib/mib.c	42
snmplib/snmp_transport.c	15
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	7
snmplib/cert_util.c	44
snmplib/tools.c	10
snmplib/system.c	3
snmplib/snmp_enum.c	13
snmplib/dir_utils.c	3
snmplib/container.c	18
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	10
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	23
snmplib/lcd_time.c	4
snmplib/scapi.c	13
snmplib/snmp_secmod.c	4
snmplib/snmpusm.c	20
snmplib/keytools.c	5
snmplib/snmptsm.c	1
snmplib/snmpksm.c	2
snmplib/snmp_alarm.c	11
snmplib/vacm.c	1

Fuzzer: snmp_parse_trap2_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4544	77.2%
gold	[1:9]	199	3.38%
yellow	[10:29]	120	2.04%
greenyellow	[30:49]	1	0.01%
lawngreen	50+	1017	17.2%
All colors	5881	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1042	4600	_snmp_parse	call site: 04600	snmp_sess_send
576	1903	print_module_not_found	call site: 01903	read_module_replacements
359	965	netsnmp_tdomain_dump	call site: 00965	sprint_realloc_objid
144	4245	snmp_pdu_parse	call site: 04245	snmp_parse_var_op
138	735	netsnmp_certs_load	call site: 00735	netsnmp_cert_load_x509
137	2881	snmp_set_detail	call site: 02881	usm_set_user_password
133	523	se_find_slist_ptr	call site: 00523	_add_certfile
102	420	_get_cert_container	call site: 00420	netsnmp_directory_container_read_some
95	5657	_sess_process_packet_parse_pdu	call site: 05657	_sess_process_packet
94	3306	read_premib_configs	call site: 03306	read_configs_optional
84	1508	init_snmp_logging	call site: 01508	snmp_log_options
66	667	_netsnmp_release_trustcerts	call site: 00667	_find_partner

Runtime coverage analysis

Covered functions

375

Functions that are reachable but not covered

487

Reachable functions

807

Percentage of reachable functions covered

39.65%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_trap2_fuzzer.c	2
snmplib/default_store.c	11
snmplib/snmp_debug.c	19
snmplib/snmp_logging.c	27
snmplib/snmp_api.c	84
snmplib/parse.c	73
snmplib/mib.c	41
snmplib/snmp_transport.c	26
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	8
snmplib/cert_util.c	44
snmplib/tools.c	9
snmplib/system.c	3
snmplib/snmp_enum.c	15
snmplib/dir_utils.c	3
snmplib/container.c	21
snmplib/file_utils.c	5
snmplib/data_list.c	5
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	14
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	22
snmplib/lcd_time.c	5
snmplib/scapi.c	13
snmplib/snmp_secmod.c	7
snmplib/snmpusm.c	21
snmplib/keytools.c	5
snmplib/snmptsm.c	2
snmplib/snmpksm.c	3
snmplib/snmp_alarm.c	12
snmplib/vacm.c	1
snmplib/large_fd_set.c	11
snmplib/asn1.c	51
snmplib/snmp.c	4
snmplib/snmp_auth.c	1
snmplib/snmp_client.c	11

Fuzzer: snmp_config_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	899	73.4%
gold	[1:9]	73	5.96%
yellow	[10:29]	3	0.24%
greenyellow	[30:49]	2	0.16%
lawngreen	50+	247	20.1%
All colors	1224	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
524	439	parse	call site: 00439	parse_compliance
138	215	parse	call site: 00215	parse_imports
32	405	netsnmp_read_module	call site: 00405	read_module_replacements
26	375	netsnmp_ds_set_string	call site: 00375	netsnmp_set_mib_directory
19	1003	config_vlog	call site: 01003	copy_nword
17	45	register_mib_handlers	call site: 00045	debugmsgtoken
17	354	netsnmp_getenv	call site: 00354	netsnmp_set_mib_directory
16	64	register_mib_handlers	call site: 00064	debugmsgtoken
16	984	netsnmp_ds_register_premib	call site: 00984	netsnmp_ds_parse_boolean
12	111	print_error	call site: 00111	debugmsgtoken
8	125	get_token	call site: 00125	netsnmp_ds_get_boolean
7	964	parse	call site: 00964	debugmsgtoken

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

106

Reachable functions

162

Percentage of reachable functions covered

34.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_config_fuzzer.c	1
snmplib/mib.c	8
snmplib/read_config.c	21
snmplib/default_store.c	9
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/parse.c	64
snmplib/tools.c	2
snmplib/strlcat.c	1

Fuzzer: agentx_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	579	39.3%
gold	[1:9]	9	0.61%
yellow	[10:29]	40	2.71%
greenyellow	[30:49]	68	4.62%
lawngreen	50+	775	52.6%
All colors	1471	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
337	294	agentx_parse_oid	call site: 00294	sprint_realloc_objid
22	6	agentx_parse_header	call site: 00006	debugmsg
17	49	snmp_realloc	call site: 00049	debugmsg
10	195	agentx_parse_string	call site: 00195	debugmsg
8	655	snmp_set_var_value	call site: 00655	snmp_log
8	1257	agentx_realloc_build_varbind	call site: 01257	debug_indent_add
7	1379	agentx_realloc_build_varbind	call site: 01379	debugmsgtoken
6	648	snmp_varlist_add_variable	call site: 00648	snmp_log
6	1306	agentx_realloc_build_float	call site: 01306	debug_indent_add
6	1330	agentx_realloc_build_double	call site: 01330	debug_indent_add
6	1355	agentx_realloc_build_varbind	call site: 01355	debug_indent_add
6	1371	agentx_realloc_build_varbind	call site: 01371	debug_indent_add

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

88

Reachable functions

129

Percentage of reachable functions covered

31.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/agentx_parse_fuzzer.c	1
agent/mibgroup/agentx/protocol.c	22
snmplib/snmp_debug.c	8
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/mib.c	30
snmplib/tools.c	2
snmplib/snmp_client.c	4
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_api.c	11
snmplib/strlcpy.c	1
snmplib/snmp_secmod.c	1
snmplib/snmpusm.c	1
snmplib/container.c	2

Fuzzer: snmp_parse_trap_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1449	94.8%
gold	[1:9]	2	0.13%
yellow	[10:29]	40	2.61%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	37	2.42%
All colors	1528	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1035	475	snmp_sess_async_send	call site: 00475	_sess_async_send
361	41	snmp_input	call site: 00041	sprint_realloc_objid
13	418	netsnmp_get_traphandler	call site: 00418	debugmsgtoken
8	434	netsnmp_get_traphandler	call site: 00434	netsnmp_trapd_check_auth
6	1514	snmp_error	call site: 01514	strlcpy
5	9	snmp_input	call site: 00009	debugmsg
5	20	log_handler_stdouterr	call site: 00020	sprintf_stamp
3	455	snmp_free_pdu	call site: 00455	snmp_log
3	1523	snmp_input	call site: 01523	snmp_log
2	33	snmp_input	call site: 00033	snmp_log
2	468	snmp_clone_var	call site: 00468	snmp_log
1	15	snmp_vlog	call site: 00015	snmp_log_string

Runtime coverage analysis

Covered functions

39

Functions that are reachable but not covered

150

Reachable functions

188

Percentage of reachable functions covered

20.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_trap_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	4
apps/snmptrapd_handlers.c	2
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/snmp_api.c	34
snmplib/mib.c	30
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/tools.c	4
snmplib/int64.c	5
apps/snmptrapd_auth.c	1
snmplib/snmp_client.c	9
snmplib/snmp_secmod.c	1
snmplib/snmpv3.c	1
snmplib/snmp_enum.c	4
snmplib/asn1.c	34
snmplib/snmp.c	3
snmplib/strlcpy.c	1
snmplib/snmp_transport.c	2

Fuzzer: snmp_agent_e2e_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8311	74.8%
gold	[1:9]	125	1.12%
yellow	[10:29]	106	0.95%
greenyellow	[30:49]	52	0.46%
lawngreen	50+	2506	22.5%
All colors	11100	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1154	7457	init_agent	call site: 07457	subagent_init
970	5032	_asn_size_err	call site: 05032	send_enterprise_trap_vars
436	6635	read_objid	call site: 06635	netsnmp_register_table_data_set
354	8971	snmp_pdu_parse	call site: 08971	agentx_synch_input
252	81	find_tree_node	call site: 00081	_get_realloc_symbol
232	1179	_get_cert_container	call site: 01179	_add_certfile
232	9327	snmp_unregister_callback	call site: 09327	subagent_shutdown
177	4342	read_configs	call site: 04342	init_snmp
139	10539	init_vacm_conf	call site: 10539	vacm_in_view
136	1490	netsnmp_certs_load	call site: 01490	netsnmp_cert_load_x509
106	10736	init_master_agent	call site: 10736	real_init_master
104	4835	_copy_pdu_vars	call site: 04835	send_trap_to_sess

Runtime coverage analysis

Covered functions

598

Functions that are reachable but not covered

882

Reachable functions

1438

Percentage of reachable functions covered

38.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_agent_e2e_fuzzer.c	3
testing/fuzzing/ada_fuzz_header.h	4
agent/snmp_vars.c	6
snmplib/snmp_logging.c	28
snmplib/default_store.c	12
agent/snmp_agent.c	59
snmplib/tools.c	16
snmplib/snmp_debug.c	21
agent/kernel.c	2
agent/agent_registry.c	39
snmplib/snmp_api.c	98
agent/helpers/null.c	3
agent/agent_handler.c	27
snmplib/mib.c	68
snmplib/parse.c	76
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	9
agent/helpers/bulk_to_next.c	4
snmplib/snmp_enum.c	15
snmplib/snmp_client.c	21
snmplib/callback.c	10
agent/agent_read_config.c	8
snmplib/read_config.c	54
snmplib/strlcpy.c	1
agent/agent_trap.c	27
snmplib/snmp_transport.c	30
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	10
snmplib/cert_util.c	74
snmplib/system.c	8
snmplib/dir_utils.c	3
snmplib/container.c	23
snmplib/file_utils.c	5
snmplib/data_list.c	8
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	6
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	10
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	7
snmplib/snmp_service.c	14
snmplib/strlcat.c	1
snmplib/snmp_secmod.c	7
snmplib/snmpusm.c	34
snmplib/snmp_parse_args.c	2
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/snmpv3.c	24
snmplib/lcd_time.c	5
snmplib/scapi.c	15
snmplib/keytools.c	5
snmplib/snmptsm.c	2
snmplib/snmpksm.c	3
snmplib/snmp_alarm.c	15
snmplib/vacm.c	22
snmplib/transports/snmpCallbackDomain.c	9
snmplib/asn1.c	51
snmplib/snmp.c	4
agent/helpers/all_helpers.c	1
agent/helpers/debug_handler.c	4
agent/helpers/serialize.c	3
agent/helpers/read_only.c	3
agent/helpers/table_dataset.c	24
agent/helpers/table_data.c	15
agent/helpers/table.c	13
snmplib/oid_stash.c	7
agent/helpers/row_merge.c	5
agent/helpers/stash_cache.c	10
agent/helpers/cache_handler.c	15
agent/helpers/stash_to_next.c	2
agent/agent_sysORTable.c	10
agent/mibgroup/agentx/agentx_config.c	8
agent/mibgroup/agentx/subagent.c	20
agent/mibgroup/agentx/protocol.c	23
agent/mibgroup/agentx/client.c	9
snmplib/large_fd_set.c	10
snmplib/snmp_auth.c	1
agent/mibgroup/smux/smux.c	5
agent/mibgroup/snmpv3/usmConf.c	1
agent/mibgroup/utilities/iquery.c	7
agent/mibgroup/mibII/vacm_conf.c	29
agent/mibgroup/agentx/master.c	3
agent/mibgroup/agentx/master_admin.c	1
agent/agent_index.c	1
snmplib/transports/snmpIPv4BaseDomain.c	3
snmplib/transports/snmpIPBaseDomain.c	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
netsnmp_dtlsudp_close	/src/net-snmp/snmplib/transports/snmpDTLSUDPDomain.c	1	['N/A']	18	0	493	97	27	259	0	1384	765
snmptrapd_parse_traphandle	/src/net-snmp/apps/snmptrapd_handlers.c	2	['N/A', 'N/A']	13	0	263	48	15	237	1	2632	478
netsnmp_udpshared_create_tspec	/src/net-snmp/snmplib/transports/snmpUDPsharedDomain.c	1	['N/A']	17	0	82	16	6	131	0	753	370
usm_secmod_process_in_msg	/src/net-snmp/snmplib/snmpusm.c	1	['N/A']	18	0	80	6	3	159	0	1364	370
smux_accept	/src/net-snmp/agent/mibgroup/smux/smux.c	1	['int']	33	0	391	73	21	315	0	3331	351
handle_master_agentx_packet	/src/net-snmp/agent/mibgroup/agentx/master_admin.c	5	['int', 'N/A', 'int', 'N/A', 'N/A']	36	0	498	77	15	820	0	8714	223
usm_secmod_rgenerate_out_msg	/src/net-snmp/snmplib/snmpusm.c	1	['N/A']	18	0	82	6	3	144	0	1211	190

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1516 / 2299

Cyclomatic complexity statically reachable by fuzzers

15617 / 20575

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

testing/fuzzing/parse_octet_hint_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parse_hints_ctor']

testing/fuzzing/snmp_mib_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

testing/fuzzing/snmp_print_var_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'module_name', 'print_error', 'sprint_realloc_integer', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', 'sprint_realloc_by_type', 'init_tree_roots']

testing/fuzzing/snmp_pdu_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['asn_parse_objid', 'snmp_log', 'asn_parse_string', 'snmp_pdu_parse', 'log_handler_stdouterr', 'asn_parse_unsigned_int64']

testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['asn_parse_string', 'snmpv3_scopedPDU_parse', 'snmp_free_pdu', 'asn_parse_sequence', 'asn_parse_nlength']

testing/fuzzing/read_objid_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'init_tree_roots', 'which_module']

testing/fuzzing/snmp_transport_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['netsnmp_tlsbase_ctor', 'netsnmp_tdomain_dump', 'netsnmp_alias_ctor', 'netsnmp_ipv6_fmtaddr', 'config_vlog', 'init_snmp_transport', 'netsnmp_ds_register_config', 'netsnmp_getaddrinfo', 'skip_white_const']

testing/fuzzing/snmp_e2e_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['_snmp_parse', 'print_module_not_found', 'snmp_set_detail', 'read_module_internal', '_get_cert_container', 'netsnmp_parse_args', 'sprint_realloc_hexstring', 'init_snmp_logging', 'netsnmp_sprint_realloc_objid_tree', 'se_find_slist_ptr']

testing/fuzzing/snmp_config_mem_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'init_tree_roots', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'read_config_read_octet_string_const', 'copy_nword_const']

testing/fuzzing/snmp_parse_oid_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'init_tree_roots', 'snmp_parse_oid']

testing/fuzzing/snmp_api_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['print_module_not_found', 'find_tree_node', 'snmp_pdu_realloc_rbuild', 'print_error', 'snmpv3_parse', '_snmp_build', '_snmp_parse', '_add_strings_to_oid']

testing/fuzzing/snmp_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['_snmp_parse', 'asn_parse_objid', 'snmpv3_parse', 'snmp_free_var', 'asn_parse_int', 'asn_parse_string', 'snmp_get_next_transid', 'log_handler_stdouterr']

testing/fuzzing/snmp_parse_args_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['netsnmp_tdomain_dump', 'parse_objectid', 'netsnmp_certs_load', '_get_cert_container', 'parse_ranges', 'se_find_slist_ptr', '_netsnmp_release_trustcerts', 'read_config', 'get_tc_index', 'snmp_realloc']

testing/fuzzing/snmp_parse_trap2_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['_snmp_parse', 'print_module_not_found', 'netsnmp_tdomain_dump', 'snmp_pdu_parse', 'netsnmp_certs_load', 'snmp_set_detail', 'se_find_slist_ptr', '_get_cert_container', '_sess_process_packet_parse_pdu', 'read_premib_configs']

testing/fuzzing/snmp_config_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parse', 'netsnmp_read_module', 'netsnmp_ds_set_string', 'config_vlog', 'register_mib_handlers', 'netsnmp_getenv', 'netsnmp_ds_register_premib', 'print_error']

testing/fuzzing/agentx_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['agentx_parse_oid', 'agentx_parse_header', 'snmp_realloc', 'agentx_parse_string', 'snmp_set_var_value', 'agentx_realloc_build_varbind', 'snmp_varlist_add_variable', 'agentx_realloc_build_float', 'agentx_realloc_build_double']

testing/fuzzing/snmp_parse_trap_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['snmp_sess_async_send', 'snmp_input', 'netsnmp_get_traphandler', 'snmp_error', 'log_handler_stdouterr', 'snmp_free_pdu']

testing/fuzzing/snmp_agent_e2e_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['init_agent', '_asn_size_err', 'read_objid', 'snmp_pdu_parse', 'find_tree_node', '_get_cert_container', 'snmp_unregister_callback', 'read_configs', 'init_vacm_conf', 'netsnmp_certs_load']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
parse_octet_hint	87	20	22.98%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_agent_e2e_fuzzer', 'parse_octet_hint_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_octet_string	252	49	19.44%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_float	37	18	48.64%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_double	37	18	48.64%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_counter64	73	32	43.83%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_opaque	57	20	35.08%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_object_identifier	32	15	46.87%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_timeticks	39	20	51.28%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_integer	60	28	46.66%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_uinteger	55	25	45.45%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_gauge	38	15	39.47%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_bitstring	75	34	45.33%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
set_function	57	12	21.05%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
_get_realloc_symbol	357	48	13.44%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
_add_strings_to_oid	364	118	32.41%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
snmpv3_scopedPDU_parse	49	23	46.93%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_getaddrinfo	62	26	41.93%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_transport_fuzzer']
netsnmp_ipv6_fmtaddr	44	22	50.0%	['snmp_transport_fuzzer']
_certindexes_load	42	21	50.0%	['snmp_e2e_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']
_add_certdir	63	14	22.22%	['snmp_e2e_fuzzer', 'snmp_transport_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_large_fd_set_resize	39	21	53.84%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
_sess_read	216	66	30.55%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
_sess_copy	234	108	46.15%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
_sess_process_packet_parse_pdu	102	38	37.25%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
_sess_process_packet_handle_pdu	99	21	21.21%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
register_sec_mod	43	20	46.51%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']
usm_free_user	51	24	47.05%	['agentx_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']
usm_create_user_from_session	153	10	6.535%	['snmp_e2e_fuzzer']
usm_session_init	85	33	38.82%	['snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
setup_engineID	147	57	38.77%	['snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
asn_build_string	36	17	47.22%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
asn_realloc_rbuild_length	43	17	39.53%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
asn_realloc_rbuild_string	52	20	38.46%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
asn_realloc_rbuild_bitstring	53	19	35.84%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
snmp_pdu_realloc_rbuild	160	66	41.25%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
snmpv3_build	131	9	6.870%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
_check_range	37	10	27.02%	['snmp_api_fuzzer', 'snmp_agent_e2e_fuzzer']
snmp_set_var_value	176	94	53.40%	['agentx_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
_ssll_insert	44	23	52.27%	['snmp_parse_args_fuzzer']
generate_kul	32	11	34.37%	['snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_extend_kul	74	16	21.62%	['snmp_parse_trap2_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']
unregister_config_handler	56	22	39.28%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_sd_listen_fds	58	13	22.41%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
snmp_sess_select_info2_flags	86	32	37.20%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
usm_process_in_msg	267	49	18.35%	['snmp_parse_trap2_fuzzer']
usm_parse_security_parameters	117	55	47.00%	['snmp_parse_trap2_fuzzer']
usm_handle_report	37	6	16.21%	['snmp_parse_trap2_fuzzer']
netsnmp_sock_buffer_set	53	24	45.28%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_udpipv4base_transport_init	47	18	38.29%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_udpipv4base_transport_bind	49	19	38.77%	['snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
netsnmp_get_traphandler	39	15	38.46%	['snmp_parse_trap_fuzzer']
snmp_error	36	16	44.44%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap_fuzzer']
netsnmp_register_handler	54	18	33.33%	['snmp_agent_e2e_fuzzer']
netsnmp_call_handler	38	18	47.36%	['snmp_agent_e2e_fuzzer']
netsnmp_subtree_load	128	63	49.21%	['snmp_agent_e2e_fuzzer']
netsnmp_register_mib	126	68	53.96%	['snmp_agent_e2e_fuzzer']
in_a_view	35	5	14.28%	['snmp_agent_e2e_fuzzer']
vacm_parse_view	74	39	52.70%	['snmp_agent_e2e_fuzzer']
handle_snmp_packet	66	24	36.36%	['snmp_agent_e2e_fuzzer']
check_acm	48	26	54.16%	['snmp_agent_e2e_fuzzer']
check_getnext_results	56	10	17.85%	['snmp_agent_e2e_fuzzer']
handle_getnext_loop	62	15	24.19%	['snmp_agent_e2e_fuzzer']
netsnmp_handle_request	61	21	34.42%	['snmp_agent_e2e_fuzzer']
parse_objecttype	252	12	4.761%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_objectgroup	81	43	53.08%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_compliance	134	16	11.94%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_capabilities	183	17	9.289%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_moduleIdentity	81	28	34.56%	['read_objid_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_print_var_fuzzer']
_build_initial_pdu_packet	131	10	7.633%	['snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/net-snmp/testing/fuzzing/snmp_parse_oid_fuzzer.c	['snmp_parse_oid_fuzzer']	['snmp_parse_oid_fuzzer']
/src/net-snmp/snmplib/transports/snmpTLSTCPDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_alarm.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c	['snmp_scoped_pdu_parse_fuzzer']	['snmp_scoped_pdu_parse_fuzzer']
/src/net-snmp/snmplib/snmp_enum.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpUDPBaseDomain.c	[]	[]
/src/net-snmp/agent/snmp_agent.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPXDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/notification-log-mib/notification_log.c	[]	[]
/src/net-snmp/testing/fuzzing/snmp_config_mem_fuzzer.c	['snmp_config_mem_fuzzer']	['snmp_config_mem_fuzzer']
/src/net-snmp/agent/helpers/read_only.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/parse.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'read_objid_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpAliasDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/usr/include/openssl/x509.h	[]	[]
/src/net-snmp/snmplib/container_null.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/large_fd_set.c	['snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_version.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/agent/helpers/table_data.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/snmp_mib_fuzzer.c	['snmp_mib_fuzzer']	['snmp_mib_fuzzer']
/src/net-snmp/snmplib/snmpksm.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/client.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/snmp_parse_trap_fuzzer.c	['snmp_parse_trap_fuzzer']	['snmp_parse_trap_fuzzer']
/src/net-snmp/snmplib/oid_stash.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpDTLSUDPDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/stash_to_next.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/bulk_to_next.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/agent_read_config.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_client.c	['snmp_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/debug_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/tools.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpTCPBaseDomain.c	[]	[]
/src/net-snmp/snmplib/snmpv3.c	['snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpSocketBaseDomain.c	[]	[]
/src/net-snmp/snmplib/callback.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_secmod.c	['snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/smux/smux.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/watcher.c	[]	[]
/src/net-snmp/testing/fuzzing/snmp_parse_args_fuzzer.c	['snmp_parse_args_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/snmplib/snmp_logging.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/vacm.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/master_admin.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpTCPIPv6Domain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/apps/snmptrapd_auth.c	['snmp_parse_trap_fuzzer']	[]
/usr/include/openssl/x509_vfy.h	[]	[]
/src/net-snmp/snmplib/transports/snmpAAL5PVCDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp.c	['snmp_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/null.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/old_api.c	[]	[]
/src/net-snmp/snmplib/snmpusm.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/agent_trap.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_api.c	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/strlcpy.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/table.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpUDPDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp-tc.c	[]	[]
/src/net-snmp/snmplib/snmp_parse_args.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer']
/src/net-snmp/agent/snmp_vars.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmptsm.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/kernel.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/dir_utils.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/../include/net-snmp/library/tools.h	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/snmp_parse_trap2_fuzzer.c	['snmp_parse_trap2_fuzzer']	['snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPBaseDomain.c	['snmp_transport_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/instance.c	[]	[]
/src/net-snmp/agent/helpers/all_helpers.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_transport.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpUnixDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/parse_octet_hint_fuzzer.c	['parse_octet_hint_fuzzer']	['parse_octet_hint_fuzzer']
/src/net-snmp/snmplib/scapi.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/subagent.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/fd_event_manager.c	[]	[]
/src/net-snmp/snmplib/system.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/snmpv3/usmConf.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/usr/include/openssl/x509v3.h	[]	[]
/src/net-snmp/snmplib/transports/snmpUDPIPv4BaseDomain.c	[]	[]
/src/net-snmp/testing/fuzzing/ada_fuzz_header.h	['snmp_print_var_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpSTDDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/keytools.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/agent/helpers/serialize.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/agentx_config.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/strlcat.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'read_objid_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_config_fuzzer']
/src/net-snmp/agent/agent_sysORTable.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_api_fuzzer.c	['snmp_api_fuzzer']	['snmp_api_fuzzer']
/src/net-snmp/snmplib/transports/snmpCallbackDomain.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/file_utils.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/data_list.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/mib.c	['parse_octet_hint_fuzzer', 'snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['parse_octet_hint_fuzzer', 'snmp_print_var_fuzzer', 'read_objid_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_pdu_parse_fuzzer.c	['snmp_pdu_parse_fuzzer']	['snmp_pdu_parse_fuzzer']
/src/net-snmp/snmplib/sd-daemon.c	[]	[]
/src/net-snmp/snmplib/cert_util.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/container.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/container_binary_array.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/scalar.c	[]	[]
/src/net-snmp/agent/agent_registry.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/protocol.c	['snmp_api_fuzzer', 'agentx_parse_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_api_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/snmplib/int64.c	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_api_fuzzer']
/src/net-snmp/snmplib/snmp_auth.c	['snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/master.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/agentx_parse_fuzzer.c	['agentx_parse_fuzzer']	['agentx_parse_fuzzer']
/src/net-snmp/agent/helpers/cache_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpTLSBaseDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_agent_e2e_fuzzer.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/utilities/iquery.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/stash_cache.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPv4BaseDomain.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/row_merge.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/agent_index.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpUDPsharedDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpUDPIPv6Domain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_service.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/lcd_time.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_config_fuzzer.c	['snmp_config_fuzzer']	['snmp_config_fuzzer']
/src/net-snmp/snmplib/read_config.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/apps/snmptrapd_handlers.c	['snmp_parse_trap_fuzzer']	['snmp_parse_trap_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_transport_fuzzer.c	['snmp_transport_fuzzer']	['snmp_transport_fuzzer']
/src/net-snmp/snmplib/asn1.c	['snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/table_dataset.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_print_var_fuzzer.c	['snmp_print_var_fuzzer']	['snmp_print_var_fuzzer']
/src/net-snmp/agent/agent_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/netsnmp_close_fds.c	[]	[]
/src/net-snmp/snmplib/snmp_debug.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPv6BaseDomain.c	['snmp_transport_fuzzer']	['snmp_transport_fuzzer']
/src/net-snmp/agent/mibgroup/mibII/vacm_conf.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpTCPDomain.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/default_store.c	['snmp_mib_fuzzer', 'snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'agentx_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_pdu_parse_fuzzer', 'read_objid_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/read_objid_fuzzer.c	['read_objid_fuzzer']	['read_objid_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_fuzzer.c	['snmp_parse_fuzzer']	['snmp_parse_fuzzer']
/src/net-snmp/snmplib/container_list_ssll.c	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/utilities/execute.c	[]	[]
/src/net-snmp/apps/snmptrapd_log.c	[]	[]
/src/net-snmp/snmplib/snmp_openssl.c	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_e2e_fuzzer.c	['snmp_e2e_fuzzer']	['snmp_e2e_fuzzer']

Directories in report

Directory
/src/net-snmp/agent/helpers/
/usr/include/openssl/
/src/net-snmp/agent/mibgroup/agentx/
/src/net-snmp/apps/
/src/net-snmp/agent/
/src/net-snmp/snmplib/
/src/net-snmp/agent/mibgroup/notification-log-mib/
/src/net-snmp/agent/mibgroup/smux/
/src/net-snmp/agent/mibgroup/mibII/
/src/net-snmp/agent/mibgroup/snmpv3/
/src/net-snmp/snmplib/transports/
/src/net-snmp/snmplib/../include/net-snmp/library/
/src/net-snmp/agent/mibgroup/utilities/
/src/net-snmp/testing/fuzzing/