High level conclusions

Fuzzers reach 63.29% of cyclomatic complexity.

Fuzzers reach 57.27% of all functions.

Fuzzer snmp_scoped_pdu_parse_fuzzer is blocked:

The runtime code coverage of snmp_scoped_pdu_parse_fuzzer covers 27.27% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_transport_fuzzer is blocked:

The runtime code coverage of snmp_transport_fuzzer covers 22.58% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_parse_trap_fuzzer is blocked:

The runtime code coverage of snmp_parse_trap_fuzzer covers 20.21% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_parse_fuzzer is blocked:

The runtime code coverage of snmp_parse_fuzzer covers 21.90% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_parse_oid_fuzzer is blocked:

The runtime code coverage of snmp_parse_oid_fuzzer covers 27.65% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer snmp_mib_fuzzer is blocked:

The runtime code coverage of snmp_mib_fuzzer covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer read_objid_fuzzer is blocked:

The runtime code coverage of read_objid_fuzzer covers 25.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Reachability and coverage overview

Functions statically reachable by fuzzers

1323 / 2310

Cyclomatic complexity statically reachable by fuzzers

13096 / 20692

Runtime code coverage of functions

916 / 2310

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: read_objid_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	880	89.2%
gold	[1:9]	64	6.49%
yellow	[10:29]	2	0.20%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	40	4.05%
All colors	986	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	334	strlcpy	call site: 00334	parse_compliance
93	158	find_tree_node	call site: 00158	parse_imports
67	89	print_error	call site: 00089	do_linkup
38	930	snmp_set_detail	call site: 00930	parse_octet_hint
19	69	snmp_log	call site: 00069	parse
19	314	print_module_not_found	call site: 00314	read_module_replacements
18	288	netsnmp_ds_set_string	call site: 00288	netsnmp_set_mib_directory
13	916	_add_strings_to_oid	call site: 00916	find_tree_node
11	57	init_tree_roots	call site: 00057	read_from_file
5	17	which_module	call site: 00017	debugmsg
5	28	log_handler_stdouterr	call site: 00028	sprintf_stamp
5	278	netsnmp_set_mib_directory	call site: 00278	debugmsgtoken

Runtime coverage analysis

Covered functions

34

Functions that are reachable but not covered

99

Reachable functions

132

Percentage of reachable functions covered

25.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/read_objid_fuzzer.c	1
snmplib/mib.c	15
snmplib/parse.c	63
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1

Fuzzer: snmp_mib_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	932	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	932	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
931	0	EP	call site: 00000	read_mib

Runtime coverage analysis

Covered functions

1

Functions that are reachable but not covered

123

Reachable functions

123

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_mib_fuzzer.c	1
snmplib/parse.c	66
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/snmp_debug.c	4
snmplib/mib.c	4
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1

Fuzzer: snmp_parse_oid_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	890	87.5%
gold	[1:9]	64	6.29%
yellow	[10:29]	3	0.29%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	59	5.80%
All colors	1017	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	345	strlcpy	call site: 00345	parse_compliance
93	169	find_tree_node	call site: 00169	parse_imports
67	100	print_error	call site: 00100	do_linkup
38	941	snmp_set_detail	call site: 00941	parse_octet_hint
19	80	snmp_log	call site: 00080	parse
19	325	print_module_not_found	call site: 00325	read_module_replacements
18	299	netsnmp_ds_set_string	call site: 00299	netsnmp_set_mib_directory
13	927	_add_strings_to_oid	call site: 00927	find_tree_node
11	68	init_tree_roots	call site: 00068	read_from_file
8	4	snmp_parse_oid	call site: 00004	debugmsgtoken
5	18	log_handler_stdouterr	call site: 00018	sprintf_stamp
5	289	netsnmp_set_mib_directory	call site: 00289	debugmsgtoken

Runtime coverage analysis

Covered functions

40

Functions that are reachable but not covered

102

Reachable functions

141

Percentage of reachable functions covered

27.66%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_oid_fuzzer.c	1
snmplib/mib.c	19
snmplib/default_store.c	4
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/parse.c	65
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1

Fuzzer: snmp_print_var_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1079	76.6%
gold	[1:9]	106	7.52%
yellow	[10:29]	40	2.84%
greenyellow	[30:49]	21	1.49%
lawngreen	50+	162	11.5%
All colors	1408	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	358	strlcpy	call site: 00358	parse_compliance
86	189	module_name	call site: 00189	parse_imports
67	113	print_error	call site: 00113	do_linkup
48	1314	sprint_realloc_integer	call site: 01314	netsnmp_sprint_realloc_objid_tree
38	954	snmp_set_detail	call site: 00954	parse_octet_hint
19	93	snmp_log	call site: 00093	parse
19	338	print_module_not_found	call site: 00338	read_module_replacements
18	312	netsnmp_ds_set_string	call site: 00312	netsnmp_set_mib_directory
15	1054	sprint_realloc_by_type	call site: 01054	sprint_realloc_asciistring
11	81	init_tree_roots	call site: 00081	read_from_file
10	1036	_get_realloc_symbol	call site: 01036	_get_realloc_symbol_octet_string
9	944	_add_strings_to_oid	call site: 00944	find_tree_node

Runtime coverage analysis

Covered functions

83

Functions that are reachable but not covered

108

Reachable functions

184

Percentage of reachable functions covered

41.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_print_var_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	5
snmplib/default_store.c	5
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/mib.c	49
snmplib/parse.c	64
snmplib/tools.c	3
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5

Fuzzer: snmp_config_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	899	73.4%
gold	[1:9]	73	5.96%
yellow	[10:29]	3	0.24%
greenyellow	[30:49]	2	0.16%
lawngreen	50+	247	20.1%
All colors	1224	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
524	439	parse	call site: 00439	parse_compliance
138	215	parse	call site: 00215	parse_imports
32	405	netsnmp_read_module	call site: 00405	read_module_replacements
26	375	netsnmp_ds_set_string	call site: 00375	netsnmp_set_mib_directory
19	1003	config_vlog	call site: 01003	copy_nword
17	45	register_mib_handlers	call site: 00045	debugmsgtoken
17	354	netsnmp_getenv	call site: 00354	netsnmp_set_mib_directory
16	64	register_mib_handlers	call site: 00064	debugmsgtoken
16	984	netsnmp_ds_register_premib	call site: 00984	netsnmp_ds_parse_boolean
12	111	print_error	call site: 00111	debugmsgtoken
8	125	get_token	call site: 00125	netsnmp_ds_get_boolean
7	964	parse	call site: 00964	debugmsgtoken

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

106

Reachable functions

162

Percentage of reachable functions covered

34.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_config_fuzzer.c	1
snmplib/mib.c	8
snmplib/read_config.c	21
snmplib/default_store.c	9
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/parse.c	64
snmplib/tools.c	2
snmplib/strlcat.c	1

Fuzzer: snmp_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1654	79.6%
gold	[1:9]	14	0.67%
yellow	[10:29]	19	0.91%
greenyellow	[30:49]	19	0.91%
lawngreen	50+	371	17.8%
All colors	2077	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1125	950	_snmp_parse	call site: 00950	snmp_sess_send
336	302	asn_parse_objid	call site: 00302	sprint_realloc_objid
55	223	snmpv3_parse	call site: 00223	snmp_pdu_parse
27	850	snmp_free_var	call site: 00850	snmp_pdu_parse
22	81	asn_parse_int	call site: 00081	debugmsg
12	187	asn_parse_string	call site: 00187	debugmsg
11	890	snmp_get_next_transid	call site: 00890	snmp_parse_version
5	4	snmpv3_parse	call site: 00004	debugmsg
5	15	log_handler_stdouterr	call site: 00015	sprintf_stamp
5	913	_snmp_parse	call site: 00913	debugmsgtoken
3	726	snmp_pdu_parse	call site: 00726	_asn_size_err
3	747	asn_parse_unsigned_int64	call site: 00747	debugmsg

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

164

Reachable functions

210

Percentage of reachable functions covered

21.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_fuzzer.c	1
snmplib/snmp_api.c	39
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/asn1.c	50
snmplib/strlcpy.c	1
snmplib/mib.c	30
snmplib/tools.c	4
snmplib/snmp_secmod.c	1
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp.c	4
snmplib/snmp_client.c	10
snmplib/snmp_auth.c	1
snmplib/callback.c	4
snmplib/snmpv3.c	2
snmplib/snmp_enum.c	4
snmplib/snmp_transport.c	2

Fuzzer: snmp_parse_args_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2225	56.6%
gold	[1:9]	732	18.6%
yellow	[10:29]	116	2.95%
greenyellow	[30:49]	47	1.19%
lawngreen	50+	807	20.5%
All colors	3927	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
359	964	netsnmp_tdomain_dump	call site: 00964	sprint_realloc_objid
280	2199	parse_objectid	call site: 02199	parse_compliance
138	737	netsnmp_certs_load	call site: 00737	netsnmp_cert_load_x509
102	422	_get_cert_container	call site: 00422	netsnmp_directory_container_read_some
82	2090	parse_ranges	call site: 02090	merge_parse_objectid
79	525	se_find_slist_ptr	call site: 00525	_add_certfile
66	669	_netsnmp_release_trustcerts	call site: 00669	_find_partner
65	3408	read_config	call site: 03408	read_config
59	1834	get_tc_index	call site: 01834	do_subtree
53	605	snmp_realloc	call site: 00605	_add_cert
50	339	CONTAINER_CLEAR	call site: 00339	netsnmp_directory_container_read_some
48	3866	LLVMFuzzerTestOneInput	call site: 03866	snmp_sess_close

Runtime coverage analysis

Covered functions

343

Functions that are reachable but not covered

315

Reachable functions

640

Percentage of reachable functions covered

50.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_args_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	5
snmplib/snmp_parse_args.c	3
snmplib/snmp_api.c	26
snmplib/parse.c	72
snmplib/snmp_debug.c	13
snmplib/snmp_logging.c	26
snmplib/default_store.c	11
snmplib/mib.c	42
snmplib/snmp_transport.c	15
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	7
snmplib/cert_util.c	44
snmplib/tools.c	10
snmplib/system.c	3
snmplib/snmp_enum.c	13
snmplib/dir_utils.c	3
snmplib/container.c	18
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	10
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	23
snmplib/lcd_time.c	4
snmplib/scapi.c	13
snmplib/snmp_secmod.c	4
snmplib/snmpusm.c	20
snmplib/keytools.c	5
snmplib/snmptsm.c	1
snmplib/snmpksm.c	2
snmplib/snmp_alarm.c	11
snmplib/vacm.c	1

Fuzzer: snmp_parse_trap_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1447	94.8%
gold	[1:9]	2	0.13%
yellow	[10:29]	39	2.55%
greenyellow	[30:49]	1	0.06%
lawngreen	50+	37	2.42%
All colors	1526	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1033	475	snmp_sess_async_send	call site: 00475	_sess_async_send
361	41	snmp_input	call site: 00041	sprint_realloc_objid
13	418	netsnmp_get_traphandler	call site: 00418	debugmsgtoken
8	434	netsnmp_get_traphandler	call site: 00434	netsnmp_trapd_check_auth
6	1512	snmp_error	call site: 01512	strlcpy
5	9	snmp_input	call site: 00009	debugmsg
5	20	log_handler_stdouterr	call site: 00020	sprintf_stamp
3	455	snmp_free_pdu	call site: 00455	snmp_log
3	1521	snmp_input	call site: 01521	snmp_log
2	33	snmp_input	call site: 00033	snmp_log
2	468	snmp_clone_var	call site: 00468	snmp_log
1	15	snmp_vlog	call site: 00015	snmp_log_string

Runtime coverage analysis

Covered functions

39

Functions that are reachable but not covered

150

Reachable functions

188

Percentage of reachable functions covered

20.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_trap_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	4
apps/snmptrapd_handlers.c	2
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/snmp_api.c	34
snmplib/mib.c	30
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/tools.c	4
snmplib/int64.c	5
apps/snmptrapd_auth.c	1
snmplib/snmp_client.c	9
snmplib/snmp_secmod.c	1
snmplib/snmpv3.c	1
snmplib/snmp_enum.c	4
snmplib/asn1.c	34
snmplib/snmp.c	3
snmplib/strlcpy.c	1
snmplib/snmp_transport.c	2

Fuzzer: parse_octet_hint_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	24	75.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	7	21.8%
lawngreen	50+	1	3.12%
All colors	32	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
24	7	parse_hints_ctor	call site: 00007	parse_hints_parse

Runtime coverage analysis

Covered functions

5

Functions that are reachable but not covered

9

Reachable functions

13

Percentage of reachable functions covered

30.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/parse_octet_hint_fuzzer.c	1
snmplib/mib.c	6

Fuzzer: snmp_pdu_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	432	61.8%
gold	[1:9]	4	0.57%
yellow	[10:29]	22	3.14%
greenyellow	[30:49]	7	1.00%
lawngreen	50+	234	33.4%
All colors	699	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
185	92	asn_parse_objid	call site: 00092	sprint_realloc_objid
157	278	snmp_log	call site: 00278	netsnmp_sprint_realloc_objid_tree
22	61	asn_parse_objid	call site: 00061	debugmsg
7	454	asn_parse_string	call site: 00454	debugmsg
5	24	snmp_pdu_parse	call site: 00024	debugmsg
5	35	log_handler_stdouterr	call site: 00035	sprintf_stamp
3	566	snmp_pdu_parse	call site: 00566	_asn_size_err
3	587	asn_parse_unsigned_int64	call site: 00587	debugmsg
3	591	snmp_pdu_parse	call site: 00591	_asn_size_err
3	609	snmp_pdu_parse	call site: 00609	_asn_size_err
3	629	snmp_pdu_parse	call site: 00629	_asn_size_err
3	651	asn_parse_signed_int64	call site: 00651	debugmsg

Runtime coverage analysis

Covered functions

41

Functions that are reachable but not covered

75

Reachable functions

115

Percentage of reachable functions covered

34.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_pdu_parse_fuzzer.c	1
snmplib/snmp_api.c	10
snmplib/asn1.c	18
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	8
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/mib.c	30
snmplib/tools.c	3
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp.c	1
snmplib/snmp_client.c	1
snmplib/snmp_secmod.c	1

Fuzzer: snmp_transport_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1238	78.4%
gold	[1:9]	56	3.54%
yellow	[10:29]	25	1.58%
greenyellow	[30:49]	12	0.76%
lawngreen	50+	247	15.6%
All colors	1578	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
666	205	netsnmp_tlsbase_ctor	call site: 00205	netsnmp_certs_load
360	957	netsnmp_tdomain_dump	call site: 00957	sprint_realloc_objid
22	924	netsnmp_alias_ctor	call site: 00924	copy_nword
21	1335	netsnmp_ipv6_fmtaddr	call site: 01335	netsnmp_gethostbyaddr
19	75	config_vlog	call site: 00075	copy_nword
18	126	init_snmp_transport	call site: 00126	netsnmp_transport_filter_add
15	56	netsnmp_ds_register_config	call site: 00056	netsnmp_ds_parse_boolean
11	1406	netsnmp_getaddrinfo	call site: 01406	debugmsgtoken
10	101	skip_white_const	call site: 00101	netsnmp_ds_handle_config
8	116	init_snmp_transport	call site: 00116	netsnmp_ds_set_int
6	168	netsnmp_tlsbase_ctor	call site: 00168	copy_nword
5	4	netsnmp_ds_set_string	call site: 00004	debugmsg

Runtime coverage analysis

Covered functions

71

Functions that are reachable but not covered

240

Reachable functions

310

Percentage of reachable functions covered

22.58%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_transport_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	4
snmplib/default_store.c	9
snmplib/snmp_debug.c	5
snmplib/snmp_logging.c	6
snmplib/snmp_transport.c	11
snmplib/read_config.c	15
snmplib/strlcpy.c	1
snmplib/container.c	9
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/callback.c	5
snmplib/cert_util.c	40
snmplib/tools.c	6
snmplib/system.c	4
snmplib/snmp_enum.c	8
snmplib/dir_utils.c	3
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/snmp_api.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	3
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	6
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	2
snmplib/mib.c	30
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/transports/snmpIPv6BaseDomain.c	7
snmplib/transports/snmpIPBaseDomain.c	2

Fuzzer: snmp_api_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1964	54.7%
gold	[1:9]	109	3.03%
yellow	[10:29]	100	2.78%
greenyellow	[30:49]	97	2.70%
lawngreen	50+	1318	36.7%
All colors	3588	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
593	1147	print_module_not_found	call site: 01147	read_module_replacements
327	305	find_tree_node	call site: 00305	_get_realloc_symbol
191	3218	snmp_pdu_realloc_rbuild	call site: 03218	snmpv3_packet_build
146	938	print_error	call site: 00938	parse_imports
81	2676	snmpv3_parse	call site: 02676	snmp_pdu_parse
68	3493	_snmp_build	call site: 03493	snmp_build
65	2788	_snmp_parse	call site: 02788	snmp_sess_send
51	1748	_add_strings_to_oid	call site: 01748	parse_octet_hint
45	2860	_snmp_build	call site: 02860	snmpv3_packet_realloc_rbuild
45	3172	snmp_pdu_realloc_rbuild	call site: 03172	asn_realloc_rbuild_objid
30	901	init_tree_roots	call site: 00901	read_from_file
24	2761	_snmp_parse	call site: 02761	snmp_call_callbacks

Runtime coverage analysis

Covered functions

161

Functions that are reachable but not covered

191

Reachable functions

348

Percentage of reachable functions covered

45.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_api_fuzzer.c	1
testing/fuzzing/ada_fuzz_header.h	7
agent/mibgroup/agentx/protocol.c	11
snmplib/snmp_debug.c	10
snmplib/snmp_logging.c	7
snmplib/default_store.c	5
snmplib/mib.c	50
snmplib/tools.c	8
snmplib/snmp_client.c	11
snmplib/parse.c	66
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	9
snmplib/snmp_api.c	44
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/asn1.c	50
snmplib/snmp.c	4
snmplib/snmp_secmod.c	1
snmplib/snmp_auth.c	1
snmplib/callback.c	4
snmplib/snmpv3.c	3
snmplib/snmp_enum.c	4
snmplib/snmp_transport.c	2

Fuzzer: snmp_e2e_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4666	78.9%
gold	[1:9]	737	12.4%
yellow	[10:29]	76	1.28%
greenyellow	[30:49]	24	0.40%
lawngreen	50+	408	6.90%
All colors	5911	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1245	4555	_snmp_parse	call site: 04555	snmp_sess_send
576	1979	print_module_not_found	call site: 01979	read_module_replacements
163	1056	sprint_realloc_hexstring	call site: 01056	sprint_realloc_bitstring
134	2955	snmp_set_detail	call site: 02955	usm_set_user_password
130	1791	read_module_internal	call site: 01791	read_from_file
102	420	_get_cert_container	call site: 00420	netsnmp_directory_container_read_some
98	3726	netsnmp_parse_args	call site: 03726	netsnmp_container_init_list
95	5810	_sess_process_packet_parse_pdu	call site: 05810	_sess_process_packet
84	1584	init_snmp_logging	call site: 01584	snmp_log_options
83	1232	netsnmp_sprint_realloc_objid_tree	call site: 01232	sprint_realloc_counter64
79	523	se_find_slist_ptr	call site: 00523	_add_certfile
66	667	_netsnmp_release_trustcerts	call site: 00667	_find_partner

Runtime coverage analysis

Covered functions

299

Functions that are reachable but not covered

502

Reachable functions

783

Percentage of reachable functions covered

35.89%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_e2e_fuzzer.c	2
snmplib/snmp_parse_args.c	3
snmplib/snmp_api.c	79
snmplib/parse.c	72
snmplib/snmp_debug.c	18
snmplib/snmp_logging.c	26
snmplib/default_store.c	11
snmplib/mib.c	42
snmplib/snmp_transport.c	21
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	7
snmplib/cert_util.c	44
snmplib/tools.c	11
snmplib/system.c	3
snmplib/snmp_enum.c	13
snmplib/dir_utils.c	3
snmplib/container.c	19
snmplib/file_utils.c	5
snmplib/data_list.c	4
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	10
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	24
snmplib/lcd_time.c	4
snmplib/scapi.c	13
snmplib/snmp_secmod.c	4
snmplib/snmpusm.c	26
snmplib/keytools.c	5
snmplib/snmptsm.c	1
snmplib/snmpksm.c	2
snmplib/snmp_alarm.c	11
snmplib/vacm.c	1
snmplib/large_fd_set.c	8
snmplib/asn1.c	51
snmplib/snmp.c	4
snmplib/snmp_auth.c	1
snmplib/snmp_client.c	10

Fuzzer: snmp_agent_e2e_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8266	74.8%
gold	[1:9]	118	1.06%
yellow	[10:29]	113	1.02%
greenyellow	[30:49]	55	0.49%
lawngreen	50+	2495	22.5%
All colors	11047	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1111	7413	init_agent	call site: 07413	subagent_init
970	5028	_asn_size_err	call site: 05028	send_enterprise_trap_vars
420	6625	read_objid	call site: 06625	netsnmp_register_table_data_set
409	8880	snmp_pdu_parse	call site: 08880	agentx_synch_input
252	81	find_tree_node	call site: 00081	_get_realloc_symbol
233	9293	snmp_unregister_callback	call site: 09293	subagent_shutdown
232	1179	_get_cert_container	call site: 01179	_add_certfile
179	4343	read_configs	call site: 04343	init_snmp
136	1490	netsnmp_certs_load	call site: 01490	netsnmp_cert_load_x509
127	10511	init_vacm_conf	call site: 10511	vacm_in_view
104	4831	_copy_pdu_vars	call site: 04831	send_trap_to_sess
102	10694	init_master_agent	call site: 10694	real_init_master

Runtime coverage analysis

Covered functions

600

Functions that are reachable but not covered

886

Reachable functions

1444

Percentage of reachable functions covered

38.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_agent_e2e_fuzzer.c	3
testing/fuzzing/ada_fuzz_header.h	4
agent/snmp_vars.c	6
snmplib/snmp_logging.c	28
snmplib/default_store.c	12
agent/snmp_agent.c	60
snmplib/tools.c	16
snmplib/snmp_debug.c	21
agent/kernel.c	2
agent/agent_registry.c	39
snmplib/snmp_api.c	100
agent/helpers/null.c	3
agent/agent_handler.c	27
snmplib/mib.c	68
snmplib/parse.c	76
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	9
agent/helpers/bulk_to_next.c	4
snmplib/snmp_enum.c	15
snmplib/snmp_client.c	21
snmplib/callback.c	10
agent/agent_read_config.c	8
snmplib/read_config.c	54
snmplib/strlcpy.c	1
agent/agent_trap.c	27
snmplib/snmp_transport.c	31
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	10
snmplib/cert_util.c	74
snmplib/system.c	8
snmplib/dir_utils.c	3
snmplib/container.c	23
snmplib/file_utils.c	5
snmplib/data_list.c	8
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	6
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	10
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	7
snmplib/snmp_service.c	14
snmplib/strlcat.c	1
snmplib/snmp_secmod.c	7
snmplib/snmpusm.c	34
snmplib/snmp_parse_args.c	2
snmplib/snmp_version.c	1
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/snmpv3.c	24
snmplib/lcd_time.c	5
snmplib/scapi.c	15
snmplib/keytools.c	5
snmplib/snmptsm.c	2
snmplib/snmpksm.c	3
snmplib/snmp_alarm.c	15
snmplib/vacm.c	22
snmplib/transports/snmpCallbackDomain.c	9
snmplib/asn1.c	51
snmplib/snmp.c	4
agent/helpers/all_helpers.c	1
agent/helpers/debug_handler.c	4
agent/helpers/serialize.c	3
agent/helpers/read_only.c	3
agent/helpers/table_dataset.c	24
agent/helpers/table_data.c	15
agent/helpers/table.c	13
snmplib/oid_stash.c	7
agent/helpers/row_merge.c	5
agent/helpers/stash_cache.c	10
agent/helpers/cache_handler.c	15
agent/helpers/stash_to_next.c	2
agent/agent_sysORTable.c	10
agent/mibgroup/agentx/agentx_config.c	8
agent/mibgroup/agentx/subagent.c	20
agent/mibgroup/agentx/protocol.c	23
agent/mibgroup/agentx/client.c	9
snmplib/large_fd_set.c	9
snmplib/snmp_auth.c	1
agent/mibgroup/smux/smux.c	5
agent/mibgroup/snmpv3/usmConf.c	1
agent/mibgroup/utilities/iquery.c	7
agent/mibgroup/mibII/vacm_conf.c	29
agent/mibgroup/agentx/master.c	4
agent/mibgroup/agentx/master_admin.c	1
agent/agent_index.c	1
snmplib/transports/snmpIPv4BaseDomain.c	3
snmplib/transports/snmpIPBaseDomain.c	2

Fuzzer: snmp_scoped_pdu_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	95	70.8%
gold	[1:9]	13	9.70%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	1.49%
lawngreen	50+	24	17.9%
All colors	134	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
50	57	asn_parse_string	call site: 00057	debugmsg_hex
22	27	snmpv3_scopedPDU_parse	call site: 00027	debugmsg
14	110	snmpv3_scopedPDU_parse	call site: 00110	asn_parse_string
3	126	snmp_free_pdu	call site: 00126	snmp_log
2	53	snmpv3_scopedPDU_parse	call site: 00053	snmp_log
2	131	snmp_free_pdu	call site: 00131	snmp_free_var
1	4	asn_parse_sequence	call site: 00004	snmp_set_detail
1	13	asn_parse_nlength	call site: 00013	snmp_set_detail

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

40

Reachable functions

55

Percentage of reachable functions covered

27.27%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c	1
snmplib/snmp_api.c	7
snmplib/asn1.c	8
snmplib/strlcpy.c	1
snmplib/snmp_debug.c	7
snmplib/snmp_logging.c	6
snmplib/default_store.c	2
snmplib/mib.c	4
snmplib/tools.c	2
snmplib/snmp_secmod.c	1

Fuzzer: snmp_parse_trap2_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4284	72.9%
gold	[1:9]	160	2.72%
yellow	[10:29]	295	5.02%
greenyellow	[30:49]	766	13.0%
lawngreen	50+	365	6.21%
All colors	5870	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
576	1901	print_module_not_found	call site: 01901	read_module_replacements
381	5116	snmpv3_packet_realloc_rbuild	call site: 05116	snmpv3_packet_build
359	962	netsnmp_tdomain_dump	call site: 00962	sprint_realloc_objid
201	4192	snmp_pdu_parse	call site: 04192	snmp_parse_var_op
138	735	netsnmp_certs_load	call site: 00735	netsnmp_cert_load_x509
133	523	se_find_slist_ptr	call site: 00523	_add_certfile
118	2877	snmp_set_detail	call site: 02877	usm_extend_user_kul
102	420	_get_cert_container	call site: 00420	netsnmp_directory_container_read_some
97	5499	snmpv3_build	call site: 05499	snmp_build
95	5649	_sess_process_packet_parse_pdu	call site: 05649	_sess_process_packet
94	3305	read_premib_configs	call site: 03305	read_configs_optional
84	1506	init_snmp_logging	call site: 01506	snmp_log_options

Runtime coverage analysis

Covered functions

429

Functions that are reachable but not covered

449

Reachable functions

808

Percentage of reachable functions covered

44.43%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_parse_trap2_fuzzer.c	2
snmplib/default_store.c	11
snmplib/snmp_debug.c	19
snmplib/snmp_logging.c	27
snmplib/snmp_api.c	85
snmplib/parse.c	73
snmplib/mib.c	41
snmplib/snmp_transport.c	27
snmplib/transports/snmpTLSBaseDomain.c	5
snmplib/snmp_openssl.c	9
snmplib/read_config.c	45
snmplib/strlcpy.c	1
snmplib/callback.c	8
snmplib/cert_util.c	44
snmplib/tools.c	9
snmplib/system.c	3
snmplib/snmp_enum.c	15
snmplib/dir_utils.c	3
snmplib/container.c	21
snmplib/file_utils.c	5
snmplib/data_list.c	5
snmplib/transports/snmpTLSTCPDomain.c	1
snmplib/transports/snmpDTLSUDPDomain.c	1
snmplib/transports/snmpUDPsharedDomain.c	1
snmplib/transports/snmpSTDDomain.c	1
snmplib/transports/snmpIPXDomain.c	1
snmplib/transports/snmpAAL5PVCDomain.c	1
snmplib/transports/snmpUDPIPv6Domain.c	1
snmplib/transports/snmpTCPIPv6Domain.c	1
snmplib/transports/snmpUDPDomain.c	1
snmplib/transports/snmpTCPDomain.c	1
snmplib/transports/snmpAliasDomain.c	3
snmplib/transports/snmpUnixDomain.c	1
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_service.c	14
snmplib/container_binary_array.c	22
snmplib/container_list_ssll.c	1
snmplib/container_null.c	2
snmplib/strlcat.c	1
snmplib/snmpv3.c	22
snmplib/lcd_time.c	5
snmplib/scapi.c	13
snmplib/snmp_secmod.c	7
snmplib/snmpusm.c	21
snmplib/keytools.c	5
snmplib/snmptsm.c	2
snmplib/snmpksm.c	3
snmplib/snmp_alarm.c	12
snmplib/vacm.c	1
snmplib/large_fd_set.c	10
snmplib/asn1.c	51
snmplib/snmp.c	4
snmplib/snmp_auth.c	1
snmplib/snmp_client.c	11

Fuzzer: snmp_config_mem_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	888	84.9%
gold	[1:9]	69	6.60%
yellow	[10:29]	7	0.66%
greenyellow	[30:49]	2	0.19%
lawngreen	50+	79	7.55%
All colors	1045	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
574	374	strlcpy	call site: 00374	parse_compliance
93	198	find_tree_node	call site: 00198	parse_imports
67	129	print_error	call site: 00129	do_linkup
38	970	snmp_set_detail	call site: 00970	parse_octet_hint
30	98	init_tree_roots	call site: 00098	read_from_file
19	354	print_module_not_found	call site: 00354	read_module_replacements
18	328	netsnmp_ds_set_string	call site: 00328	netsnmp_set_mib_directory
13	956	_add_strings_to_oid	call site: 00956	find_tree_node
6	48	read_config_read_octet_string_const	call site: 00048	debugmsgtoken
5	5	copy_nword_const	call site: 00005	debugmsg
5	16	log_handler_stdouterr	call site: 00016	sprintf_stamp
5	318	netsnmp_set_mib_directory	call site: 00318	debugmsgtoken

Runtime coverage analysis

Covered functions

50

Functions that are reachable but not covered

101

Reachable functions

150

Percentage of reachable functions covered

32.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/snmp_config_mem_fuzzer.c	1
snmplib/read_config.c	11
snmplib/snmp_debug.c	4
snmplib/snmp_logging.c	7
snmplib/default_store.c	4
snmplib/mib.c	15
snmplib/parse.c	63
snmplib/tools.c	1
snmplib/strlcpy.c	1
snmplib/strlcat.c	1
snmplib/snmp_api.c	1
snmplib/int64.c	5

Fuzzer: agentx_parse_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	579	39.3%
gold	[1:9]	8	0.54%
yellow	[10:29]	41	2.78%
greenyellow	[30:49]	74	5.03%
lawngreen	50+	769	52.2%
All colors	1471	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
337	294	agentx_parse_oid	call site: 00294	sprint_realloc_objid
22	6	agentx_parse_header	call site: 00006	debugmsg
17	49	snmp_realloc	call site: 00049	debugmsg
10	195	agentx_parse_string	call site: 00195	debugmsg
8	655	snmp_set_var_value	call site: 00655	snmp_log
8	1257	agentx_realloc_build_varbind	call site: 01257	debug_indent_add
7	1379	agentx_realloc_build_varbind	call site: 01379	debugmsgtoken
6	648	snmp_varlist_add_variable	call site: 00648	snmp_log
6	1306	agentx_realloc_build_float	call site: 01306	debug_indent_add
6	1330	agentx_realloc_build_double	call site: 01330	debug_indent_add
6	1355	agentx_realloc_build_varbind	call site: 01355	debug_indent_add
6	1371	agentx_realloc_build_varbind	call site: 01371	debug_indent_add

Runtime coverage analysis

Covered functions

42

Functions that are reachable but not covered

88

Reachable functions

129

Percentage of reachable functions covered

31.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testing/fuzzing/agentx_parse_fuzzer.c	1
agent/mibgroup/agentx/protocol.c	22
snmplib/snmp_debug.c	8
snmplib/snmp_logging.c	6
snmplib/default_store.c	3
snmplib/mib.c	30
snmplib/tools.c	2
snmplib/snmp_client.c	4
snmplib/parse.c	4
snmplib/../include/net-snmp/library/tools.h	1
snmplib/int64.c	5
snmplib/snmp_api.c	11
snmplib/strlcpy.c	1
snmplib/snmp_secmod.c	1
snmplib/snmpusm.c	1
snmplib/container.c	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
netsnmp_dtlsudp_close	/src/net-snmp/snmplib/transports/snmpDTLSUDPDomain.c	1	['N/A']	18	0	493	97	27	259	0	1386	767
snmptrapd_parse_traphandle	/src/net-snmp/apps/snmptrapd_handlers.c	2	['N/A', 'N/A']	13	0	263	48	15	237	1	2632	476
usm_secmod_process_in_msg	/src/net-snmp/snmplib/snmpusm.c	1	['N/A']	18	0	80	6	3	159	0	1364	370
netsnmp_udpshared_create_tspec	/src/net-snmp/snmplib/transports/snmpUDPsharedDomain.c	1	['N/A']	17	0	82	16	6	132	0	756	368
smux_accept	/src/net-snmp/agent/mibgroup/smux/smux.c	1	['int']	33	0	392	73	21	315	0	3331	351
handle_master_agentx_packet	/src/net-snmp/agent/mibgroup/agentx/master_admin.c	5	['int', 'N/A', 'int', 'N/A', 'N/A']	36	0	498	77	15	822	0	8722	223
usm_secmod_rgenerate_out_msg	/src/net-snmp/snmplib/snmpusm.c	1	['N/A']	18	0	82	6	3	145	0	1219	196

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1520 / 2310

Cyclomatic complexity statically reachable by fuzzers

15645 / 20692

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

testing/fuzzing/read_objid_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'init_tree_roots', 'which_module']

testing/fuzzing/snmp_mib_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

testing/fuzzing/snmp_parse_oid_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'init_tree_roots', 'snmp_parse_oid']

testing/fuzzing/snmp_print_var_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'module_name', 'print_error', 'sprint_realloc_integer', 'snmp_set_detail', 'snmp_log', 'print_module_not_found', 'netsnmp_ds_set_string', 'sprint_realloc_by_type', 'init_tree_roots']

testing/fuzzing/snmp_config_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parse', 'netsnmp_read_module', 'netsnmp_ds_set_string', 'config_vlog', 'register_mib_handlers', 'netsnmp_getenv', 'netsnmp_ds_register_premib', 'print_error']

testing/fuzzing/snmp_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['_snmp_parse', 'asn_parse_objid', 'snmpv3_parse', 'snmp_free_var', 'asn_parse_int', 'asn_parse_string', 'snmp_get_next_transid', 'log_handler_stdouterr']

testing/fuzzing/snmp_parse_args_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['netsnmp_tdomain_dump', 'parse_objectid', 'netsnmp_certs_load', '_get_cert_container', 'parse_ranges', 'se_find_slist_ptr', '_netsnmp_release_trustcerts', 'read_config', 'get_tc_index', 'snmp_realloc']

testing/fuzzing/snmp_parse_trap_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['snmp_sess_async_send', 'snmp_input', 'netsnmp_get_traphandler', 'snmp_error', 'log_handler_stdouterr', 'snmp_free_pdu']

testing/fuzzing/parse_octet_hint_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parse_hints_ctor']

testing/fuzzing/snmp_pdu_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['asn_parse_objid', 'snmp_log', 'asn_parse_string', 'snmp_pdu_parse', 'log_handler_stdouterr', 'asn_parse_unsigned_int64']

testing/fuzzing/snmp_transport_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['netsnmp_tlsbase_ctor', 'netsnmp_tdomain_dump', 'netsnmp_alias_ctor', 'netsnmp_ipv6_fmtaddr', 'config_vlog', 'init_snmp_transport', 'netsnmp_ds_register_config', 'netsnmp_getaddrinfo', 'skip_white_const']

testing/fuzzing/snmp_api_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['print_module_not_found', 'find_tree_node', 'snmp_pdu_realloc_rbuild', 'print_error', 'snmpv3_parse', '_snmp_build', '_snmp_parse', '_add_strings_to_oid']

testing/fuzzing/snmp_e2e_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['_snmp_parse', 'print_module_not_found', 'sprint_realloc_hexstring', 'snmp_set_detail', 'read_module_internal', '_get_cert_container', 'netsnmp_parse_args', '_sess_process_packet_parse_pdu', 'init_snmp_logging', 'netsnmp_sprint_realloc_objid_tree']

testing/fuzzing/snmp_agent_e2e_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['init_agent', '_asn_size_err', 'read_objid', 'snmp_pdu_parse', 'find_tree_node', 'snmp_unregister_callback', '_get_cert_container', 'read_configs', 'netsnmp_certs_load', 'init_vacm_conf']

testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['asn_parse_string', 'snmpv3_scopedPDU_parse', 'snmp_free_pdu', 'asn_parse_sequence', 'asn_parse_nlength']

testing/fuzzing/snmp_parse_trap2_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['print_module_not_found', 'snmpv3_packet_realloc_rbuild', 'netsnmp_tdomain_dump', 'snmp_pdu_parse', 'netsnmp_certs_load', 'se_find_slist_ptr', 'snmp_set_detail', '_get_cert_container', 'snmpv3_build', '_sess_process_packet_parse_pdu']

testing/fuzzing/snmp_config_mem_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['strlcpy', 'find_tree_node', 'print_error', 'snmp_set_detail', 'init_tree_roots', 'print_module_not_found', 'netsnmp_ds_set_string', '_add_strings_to_oid', 'read_config_read_octet_string_const', 'copy_nword_const']

testing/fuzzing/agentx_parse_fuzzer.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['agentx_parse_oid', 'agentx_parse_header', 'snmp_realloc', 'agentx_parse_string', 'snmp_set_var_value', 'agentx_realloc_build_varbind', 'snmp_varlist_add_variable', 'agentx_realloc_build_float', 'agentx_realloc_build_double']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
set_function	57	12	21.05%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
_add_strings_to_oid	364	118	32.41%	['snmp_config_mem_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_octet_string	252	49	19.44%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_float	37	18	48.64%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_double	37	18	48.64%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_counter64	73	32	43.83%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_opaque	57	20	35.08%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_object_identifier	32	15	46.87%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_timeticks	39	20	51.28%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_integer	60	28	46.66%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_uinteger	55	25	45.45%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_gauge	38	15	39.47%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
sprint_realloc_bitstring	75	34	45.33%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
_get_realloc_symbol	357	48	13.44%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'agentx_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_print_var_fuzzer']
register_sec_mod	43	20	46.51%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
_certindexes_load	42	21	50.0%	['snmp_agent_e2e_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_transport_fuzzer']
_add_certdir	63	14	22.22%	['snmp_agent_e2e_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_transport_fuzzer']
_ssll_insert	44	23	52.27%	['snmp_parse_args_fuzzer']
generate_kul	32	11	34.37%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer']
netsnmp_extend_kul	74	16	21.62%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer']
usm_free_user	51	24	47.05%	['snmp_agent_e2e_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer', 'snmp_e2e_fuzzer']
setup_engineID	147	57	38.77%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_args_fuzzer']
netsnmp_get_traphandler	39	15	38.46%	['snmp_parse_trap_fuzzer']
snmp_error	36	16	44.44%	['snmp_parse_trap_fuzzer', 'snmp_agent_e2e_fuzzer']
parse_octet_hint	87	20	22.98%	['snmp_config_mem_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_api_fuzzer', 'parse_octet_hint_fuzzer', 'snmp_print_var_fuzzer']
netsnmp_getaddrinfo	62	26	41.93%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_transport_fuzzer']
netsnmp_ipv6_fmtaddr	44	22	50.0%	['snmp_transport_fuzzer']
asn_build_string	36	17	47.22%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
asn_realloc_rbuild_length	43	17	39.53%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
asn_realloc_rbuild_string	52	20	38.46%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
asn_realloc_rbuild_bitstring	53	19	35.84%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
snmp_pdu_realloc_rbuild	160	66	41.25%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
snmpv3_build	131	47	35.87%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
_check_range	37	10	27.02%	['snmp_agent_e2e_fuzzer', 'snmp_api_fuzzer']
snmp_set_var_value	176	94	53.40%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_api_fuzzer', 'agentx_parse_fuzzer', 'snmp_e2e_fuzzer']
netsnmp_large_fd_set_resize	39	21	53.84%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
_sess_copy	234	108	46.15%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
__sess_read	210	59	28.09%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
_sess_process_packet_parse_pdu	102	37	36.27%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
usm_create_user_from_session	153	10	6.535%	['snmp_e2e_fuzzer']
usm_session_init	85	33	38.82%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
netsnmp_register_handler	54	18	33.33%	['snmp_agent_e2e_fuzzer']
netsnmp_call_handler	38	18	47.36%	['snmp_agent_e2e_fuzzer']
netsnmp_subtree_load	128	63	49.21%	['snmp_agent_e2e_fuzzer']
netsnmp_register_mib	126	68	53.96%	['snmp_agent_e2e_fuzzer']
in_a_view	35	5	14.28%	['snmp_agent_e2e_fuzzer']
vacm_parse_view	74	39	52.70%	['snmp_agent_e2e_fuzzer']
handle_snmp_packet	66	24	36.36%	['snmp_agent_e2e_fuzzer']
check_acm	48	26	54.16%	['snmp_agent_e2e_fuzzer']
check_getnext_results	56	10	17.85%	['snmp_agent_e2e_fuzzer']
handle_getnext_loop	62	15	24.19%	['snmp_agent_e2e_fuzzer']
netsnmp_handle_request	61	21	34.42%	['snmp_agent_e2e_fuzzer']
parse_objecttype	252	12	4.761%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_objectgroup	81	43	53.08%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_compliance	134	16	11.94%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_capabilities	183	17	9.289%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
parse_moduleIdentity	81	28	34.56%	['snmp_config_fuzzer', 'snmp_config_mem_fuzzer', 'snmp_mib_fuzzer', 'snmp_agent_e2e_fuzzer', 'read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer', 'snmp_print_var_fuzzer']
unregister_config_handler	56	22	39.28%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
netsnmp_sd_listen_fds	58	13	22.41%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
_build_initial_pdu_packet	131	58	44.27%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
netsnmp_sock_buffer_set	53	24	45.28%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
netsnmp_udpipv4base_transport_init	46	17	36.95%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
netsnmp_udpipv4base_transport_bind	51	19	37.25%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
netsnmp_udpipv4base_transport_with_source	47	25	53.19%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
snmpv3_scopedPDU_parse	49	23	46.93%	['snmp_scoped_pdu_parse_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_e2e_fuzzer']
snmp_sess_select_info2_flags	87	33	37.93%	['snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
_sess_async_send	117	35	29.91%	['snmp_agent_e2e_fuzzer', 'snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_e2e_fuzzer']
usm_rgenerate_out_msg	296	130	43.91%	['snmp_parse_trap2_fuzzer']
usm_process_in_msg	267	74	27.71%	['snmp_parse_trap2_fuzzer']
netsnmp_udpbase_send	51	22	43.13%	['snmp_parse_trap2_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/net-snmp/snmplib/snmp_alarm.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/mibII/vacm_conf.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/dir_utils.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	[]
/src/net-snmp/agent/helpers/table.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/snmp_agent_e2e_fuzzer.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/agent_registry.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/snmp_vars.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/utilities/execute.c	[]	[]
/src/net-snmp/snmplib/lcd_time.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/testing/fuzzing/read_objid_fuzzer.c	['read_objid_fuzzer']	['read_objid_fuzzer']
/src/net-snmp/snmplib/transports/snmpCallbackDomain.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpUDPDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/stash_to_next.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/read_config.c	['snmp_config_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']	['snmp_config_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/snmplib/container.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_debug.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/snmplib/fd_event_manager.c	[]	[]
/src/net-snmp/testing/fuzzing/snmp_scoped_pdu_parse_fuzzer.c	['snmp_scoped_pdu_parse_fuzzer']	['snmp_scoped_pdu_parse_fuzzer']
/src/net-snmp/snmplib/snmp.c	['snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/mib.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'parse_octet_hint_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_args_fuzzer', 'parse_octet_hint_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/snmplib/transports/snmpTLSTCPDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPv4BaseDomain.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_secmod.c	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/snmplib/transports/snmpSocketBaseDomain.c	[]	[]
/src/net-snmp/agent/helpers/table_dataset.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_mib_fuzzer.c	['snmp_mib_fuzzer']	['snmp_mib_fuzzer']
/src/net-snmp/snmplib/default_store.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/agent/kernel.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/file_utils.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpUDPIPv4BaseDomain.c	[]	[]
/src/net-snmp/agent/mibgroup/agentx/master_admin.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/strlcpy.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/agent/helpers/cache_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_oid_fuzzer.c	['snmp_parse_oid_fuzzer']	['snmp_parse_oid_fuzzer']
/src/net-snmp/agent/helpers/null.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_pdu_parse_fuzzer.c	['snmp_pdu_parse_fuzzer']	['snmp_pdu_parse_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPXDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/row_merge.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpTCPIPv6Domain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/transports/snmpUDPBaseDomain.c	[]	[]
/src/net-snmp/snmplib/transports/snmpUnixDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/client.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/snmp_openssl.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/keytools.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPBaseDomain.c	['snmp_transport_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_transport_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_args_fuzzer.c	['snmp_parse_args_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/snmplib/transports/snmpUDPsharedDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/utilities/iquery.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp-tc.c	[]	[]
/src/net-snmp/snmplib/container_list_ssll.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/testing/fuzzing/agentx_parse_fuzzer.c	['agentx_parse_fuzzer']	['agentx_parse_fuzzer']
/src/net-snmp/snmplib/transports/snmpAAL5PVCDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/notification-log-mib/notification_log.c	[]	[]
/src/net-snmp/snmplib/oid_stash.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/transports/snmpTCPDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/master.c	['snmp_agent_e2e_fuzzer']	[]
/usr/include/openssl/x509v3.h	[]	[]
/src/net-snmp/snmplib/container_binary_array.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/agent_trap.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_print_var_fuzzer.c	['snmp_print_var_fuzzer']	['snmp_print_var_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_e2e_fuzzer.c	['snmp_e2e_fuzzer']	['snmp_e2e_fuzzer']
/src/net-snmp/agent/helpers/scalar.c	[]	[]
/usr/include/openssl/x509_vfy.h	[]	[]
/src/net-snmp/snmplib/../include/net-snmp/library/tools.h	['snmp_print_var_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']	[]
/src/net-snmp/snmplib/snmp_transport.c	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/transports/snmpDTLSUDPDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/agent_read_config.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/subagent.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/testing/fuzzing/ada_fuzz_header.h	['snmp_print_var_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_print_var_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmpusm.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/snmplib/asn1.c	['snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_version.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_parse_args_fuzzer']
/src/net-snmp/snmplib/int64.c	['snmp_print_var_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['snmp_print_var_fuzzer', 'snmp_api_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/snmplib/large_fd_set.c	['snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/mibgroup/smux/smux.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/agent_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/transports/snmpAliasDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/apps/snmptrapd_auth.c	['snmp_parse_trap_fuzzer']	[]
/src/net-snmp/snmplib/tools.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']
/usr/include/openssl/x509.h	[]	[]
/src/net-snmp/agent/mibgroup/snmpv3/usmConf.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_fuzzer.c	['snmp_parse_fuzzer']	['snmp_parse_fuzzer']
/src/net-snmp/snmplib/transports/snmpIPv6BaseDomain.c	['snmp_transport_fuzzer']	['snmp_transport_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_trap2_fuzzer.c	['snmp_parse_trap2_fuzzer']	['snmp_parse_trap2_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_parse_trap_fuzzer.c	['snmp_parse_trap_fuzzer']	['snmp_parse_trap_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/agentx_config.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/parse_octet_hint_fuzzer.c	['parse_octet_hint_fuzzer']	['parse_octet_hint_fuzzer']
/src/net-snmp/snmplib/vacm.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/callback.c	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmpksm.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/snmp_agent.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/strlcat.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']	['snmp_print_var_fuzzer', 'snmp_config_fuzzer']
/src/net-snmp/agent/helpers/bulk_to_next.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/sd-daemon.c	[]	[]
/src/net-snmp/snmplib/snmp_api.c	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/snmplib/snmptsm.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/system.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/agent_index.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/snmplib/snmp_service.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_config_fuzzer.c	['snmp_config_fuzzer']	['snmp_config_fuzzer']
/src/net-snmp/snmplib/snmp_auth.c	['snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/old_api.c	[]	[]
/src/net-snmp/agent/helpers/instance.c	[]	[]
/src/net-snmp/snmplib/transports/snmpTLSBaseDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/watcher.c	[]	[]
/src/net-snmp/snmplib/transports/snmpTCPBaseDomain.c	[]	[]
/src/net-snmp/agent/agent_sysORTable.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/parse.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_transport_fuzzer.c	['snmp_transport_fuzzer']	['snmp_transport_fuzzer']
/src/net-snmp/agent/mibgroup/agentx/protocol.c	['snmp_api_fuzzer', 'snmp_agent_e2e_fuzzer', 'agentx_parse_fuzzer']	['snmp_api_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/agent/helpers/all_helpers.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/snmp_logging.c	['read_objid_fuzzer', 'snmp_mib_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_scoped_pdu_parse_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer', 'agentx_parse_fuzzer']	['read_objid_fuzzer', 'snmp_parse_oid_fuzzer', 'snmp_print_var_fuzzer', 'snmp_config_fuzzer', 'snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'snmp_config_mem_fuzzer']
/src/net-snmp/snmplib/snmpv3.c	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/serialize.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_config_mem_fuzzer.c	['snmp_config_mem_fuzzer']	['snmp_config_mem_fuzzer']
/src/net-snmp/snmplib/transports/snmpSTDDomain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/container_null.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/cert_util.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_enum.c	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_transport_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_fuzzer', 'snmp_parse_args_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/agent/helpers/debug_handler.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/helpers/table_data.c	['snmp_agent_e2e_fuzzer']	[]
/src/net-snmp/agent/helpers/stash_cache.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/agent/netsnmp_close_fds.c	[]	[]
/src/net-snmp/agent/helpers/read_only.c	['snmp_agent_e2e_fuzzer']	['snmp_agent_e2e_fuzzer']
/src/net-snmp/snmplib/data_list.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_parse_args.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer']
/src/net-snmp/apps/snmptrapd_handlers.c	['snmp_parse_trap_fuzzer']	['snmp_parse_trap_fuzzer']
/src/net-snmp/apps/snmptrapd_log.c	[]	[]
/src/net-snmp/snmplib/transports/snmpUDPIPv6Domain.c	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_transport_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']
/src/net-snmp/snmplib/snmp_client.c	['snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']	['snmp_parse_fuzzer', 'snmp_parse_trap_fuzzer', 'snmp_pdu_parse_fuzzer', 'snmp_api_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer', 'agentx_parse_fuzzer']
/src/net-snmp/testing/fuzzing/snmp_api_fuzzer.c	['snmp_api_fuzzer']	['snmp_api_fuzzer']
/src/net-snmp/snmplib/scapi.c	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']	['snmp_parse_args_fuzzer', 'snmp_e2e_fuzzer', 'snmp_agent_e2e_fuzzer', 'snmp_parse_trap2_fuzzer']

Directories in report

Directory
/src/net-snmp/agent/
/src/net-snmp/snmplib/transports/
/src/net-snmp/snmplib/
/src/net-snmp/agent/mibgroup/smux/
/src/net-snmp/snmplib/../include/net-snmp/library/
/src/net-snmp/agent/mibgroup/notification-log-mib/
/src/net-snmp/agent/helpers/
/src/net-snmp/agent/mibgroup/mibII/
/src/net-snmp/agent/mibgroup/utilities/
/src/net-snmp/apps/
/src/net-snmp/agent/mibgroup/snmpv3/
/src/net-snmp/testing/fuzzing/
/src/net-snmp/agent/mibgroup/agentx/
/usr/include/openssl/